$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json) Hash identifier: 7nmz7AvHpX2NH8OYRHb/HvVyjCO4DuDIrFvaBgqRBro= Subject key identifier: 12:B6:7D:64:8A:1F:53:FD:2A:6B:E0:A1:7B:A7:51:09:E2:C3:83:D7 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft Manifest number: 0274 Signing time: Fri 31 May 2024 04:21:23 +0000 Manifest this update: Fri 31 May 2024 04:21:23 +0000 Manifest next update: Fri 07 Jun 2024 04:21:23 +0000 Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: bC8jrp7BYx5fc8StxVGbZGhesun5gFJKGJCEr1Wf6RI=) 2: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: SFDD7nQaHtPhgjEbna4DrdxMkFPaixPmcuVySfzUZD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: May 31 04:21:23 2024 GMT Not After : Jun 7 04:21:23 2024 GMT Subject: CN=66595043-2001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:02:9d:57:00:a9:1e:86:65:f5:a3:03:83: 12:e3:5a:8e:8e:8d:b8:79:35:9a:46:83:60:f5:7c: 44:89:af:67:77:c0:07:ae:b1:72:0d:de:e8:9f:f9: 0b:6b:b8:38:8a:3e:eb:52:d7:d0:6d:7a:b1:bc:fc: 3d:09:31:94:ee:62:b9:e4:84:8b:42:6c:88:3c:c9: a0:b4:5c:ac:15:27:1c:d2:71:97:31:9d:eb:e9:7f: 34:29:f5:3f:6c:d0:fe:c0:b5:a7:84:1f:cd:31:fb: 3b:80:77:a5:81:a1:79:0a:2c:7f:5a:ec:0e:cd:e9: 73:64:85:db:08:ee:63:28:10:e9:02:5a:dd:0e:09: 99:67:56:68:ae:15:e8:40:ab:d0:d1:d0:4f:13:c6: c3:97:59:94:8d:72:0f:97:51:fe:40:f5:3e:b6:81: be:64:fe:b6:0b:e8:51:80:77:9d:85:80:c6:d6:e7: a0:ce:49:99:79:ba:ec:35:7d:28:bb:42:7c:6c:ef: 6d:c7:c0:ac:a6:31:17:d1:ac:d4:66:af:b5:eb:1c: 05:1f:98:0d:ab:dc:0d:6f:2d:e7:a2:b3:ee:d6:d6: f9:74:3d:d9:58:b9:11:95:a7:b1:cc:7f:d8:7c:98: a5:8a:69:e4:c7:c5:94:d2:98:c5:02:fb:64:37:ef: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B6:7D:64:8A:1F:53:FD:2A:6B:E0:A1:7B:A7:51:09:E2:C3:83:D7 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1b:a5:c2:47:c0:2d:ea:4e:4d:18:1c:f2:ec:6b:2c:84:96: c8:9f:e3:bf:db:4e:b1:be:f5:c6:07:19:5b:ea:27:a2:78:c3: 2c:0f:47:63:5c:a6:74:60:af:71:44:d1:ce:18:eb:02:b5:7a: 33:32:82:b7:d9:a9:a9:51:a8:03:36:0f:3d:5f:3f:48:7f:43: 24:2b:47:0d:f3:f5:0d:05:23:3c:d4:98:0f:42:b0:73:c4:fb: 25:53:46:4c:94:81:d5:c4:91:22:78:93:d3:76:f9:33:34:0a: 7b:f5:3a:9a:b5:21:2a:73:83:06:1c:12:f7:ce:26:d7:bf:0b: 6e:39:f5:86:33:cf:07:c5:51:4b:50:7c:dc:24:a8:ef:05:9b: 43:b6:8a:e6:4b:8f:1f:c6:37:7e:a7:15:52:39:de:be:e4:ef: 6d:24:f5:66:1d:c8:1f:50:88:10:38:bf:57:7f:9e:fd:0a:68: a7:61:6a:7a:04:d5:7d:c5:92:69:16:79:4c:cd:14:14:73:0e: 9e:82:f0:02:bc:bf:e5:19:28:72:dd:61:16:c4:da:e6:bb:27: fa:aa:61:74:e9:48:be:32:a8:e0:ad:3a:fb:49:e8:d8:c8:5e: 82:49:da:a1:5b:7b:cc:d6:ff:c9:1b:f5:77:ac:af:9f:ef:ba: 75:a9:b5:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjQwNTMxMDQyMTIzWhcNMjQwNjA3MDQyMTIzWjAYMRYwFAYD VQQDEw02NjU5NTA0My0yMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2UCnVcAqR6GZfWjA4MS41qOjo24eTWaRoNg9XxEia9nd8AHrrFyDd7on/kL a7g4ij7rUtfQbXqxvPw9CTGU7mK55ISLQmyIPMmgtFysFScc0nGXMZ3r6X80KfU/ bND+wLWnhB/NMfs7gHelgaF5Cix/WuwOzelzZIXbCO5jKBDpAlrdDgmZZ1ZorhXo QKvQ0dBPE8bDl1mUjXIPl1H+QPU+toG+ZP62C+hRgHedhYDG1uegzkmZebrsNX0o u0J8bO9tx8CspjEX0azUZq+16xwFH5gNq9wNby3norPu1tb5dD3ZWLkRlaexzH/Y fJilimnkx8WU0pjFAvtkN+8BvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBK2fWSK H1P9KmvgoXunUQniw4PXMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEU1NS83RDMyQTc0RUM2MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0 RXdFeDE0Z3BjTDhXTGREV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuG6XCR8At6k5NGBzy7GsshJbIn+O/206xvvXGBxlb6ieieMMsD0dj XKZ0YK9xRNHOGOsCtXozMoK32ampUagDNg89Xz9If0MkK0cN8/UNBSM81JgPQrBz xPslU0ZMlIHVxJEieJPTdvkzNAp79TqatSEqc4MGHBL3zibXvwtuOfWGM88HxVFL UHzcJKjvBZtDtormS48fxjd+pxVSOd6+5O9tJPVmHcgfUIgQOL9Xf579CminYWp6 BNV9xZJpFnlMzRQUcw6egvACvL/lGShy3WEWxNrmuyf6qmF06Ui+MqjgrTr7SejY yF6CSdqhW3vM1v/JG/V3rK+f77p1qbV8 -----END CERTIFICATE-----Generated at Fri May 31 04:53:58 2024 by rpki-client on console-fra.rpki-client.org