$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json) Hash identifier: q9Isr1UjH+WBvbuxcCLN6/QlFH0EUgApAAhOnv6h+SM= Subject key identifier: AA:02:6F:F4:39:88:F2:9D:EC:34:75:80:5F:A9:2A:04:3B:CE:61:D6 Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft Manifest number: C5 Signing time: Fri 31 May 2024 07:08:07 +0000 Manifest this update: Fri 31 May 2024 07:08:06 +0000 Manifest next update: Fri 07 Jun 2024 07:08:06 +0000 Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: RfAKBnYdaBAfFxCmF/BIPRvpb74PsFJd7sqHvuOCmNo=) 2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: njuB7hJQ60BQw/nGmHlQPAo11VYWgVEP9FYZsEsvOz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Validity Not Before: May 31 07:08:06 2024 GMT Not After : Jun 7 07:08:06 2024 GMT Subject: CN=66597757-c4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:76:be:8f:b0:95:a0:66:df:47:50:b4:7a: 4a:75:3e:d7:50:59:9c:29:99:b2:a9:48:78:55:17: 2a:e3:db:33:e5:99:53:2b:00:8d:b0:a1:df:10:4e: 7a:c5:be:2a:41:03:19:f5:a8:3f:ed:38:1d:bc:5b: 92:c4:89:6b:3d:e7:4c:ac:45:55:8d:6d:9c:6e:9b: eb:fa:b7:29:29:4f:7b:a9:05:46:4d:c3:aa:e8:11: 11:fe:32:36:6a:73:8a:1d:33:ce:f8:44:8f:b3:e8: 3c:dc:7c:a5:20:81:10:29:5e:34:da:ce:5f:f1:45: 12:7d:fc:63:b0:5f:c5:e5:44:b9:2a:73:e6:5e:a1: c5:30:08:cf:67:d4:4b:a1:8a:f3:93:ad:f7:ad:3d: 2d:da:30:56:48:a6:ae:f7:5e:d5:d3:ba:c6:bf:c2: 4f:47:97:2f:fe:06:db:af:7c:6d:b8:dc:30:5f:00: 29:39:a7:36:ce:6c:c8:cf:c7:8c:d4:7b:9d:1b:23: 9f:11:1f:e4:66:06:cb:ef:2a:56:59:2d:b4:3d:94: 7d:8f:75:3b:ac:e5:fb:41:97:1c:02:87:10:e1:d7: 1d:0f:a8:db:e4:30:6c:92:74:4a:fe:5e:25:fc:27: 08:81:37:de:b4:8f:4d:a1:f2:51:5a:3b:4d:96:81: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:02:6F:F4:39:88:F2:9D:EC:34:75:80:5F:A9:2A:04:3B:CE:61:D6 X509v3 Authority Key Identifier: keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:d8:25:80:cf:ca:e3:31:dd:c8:19:7d:c3:22:54:78:9f:85: eb:e8:8f:44:c0:ca:2d:8a:b6:ae:3c:95:e5:6a:e8:aa:8f:8e: 4f:a0:9f:a2:f4:d1:8e:dc:68:db:2f:5f:30:9b:db:0d:7f:83: 92:99:ee:c9:74:cb:37:b7:85:dc:1c:88:47:13:83:77:9c:ff: c8:94:a9:bc:24:a0:a3:a1:1b:f5:6a:40:a0:9a:dc:f0:15:92: e0:5a:bb:26:2b:3a:4e:19:e7:e7:6c:42:57:17:e5:dc:4d:43: ac:43:2d:e2:37:c7:f6:83:f3:af:b7:c0:c7:c1:11:80:72:70: 39:48:1c:2e:20:0f:5e:cf:c8:fc:63:b8:ef:73:4a:d4:80:a6: 48:b3:d5:38:01:87:40:86:ee:60:b0:0b:cd:65:74:28:92:6f: 2a:50:57:9c:7b:a6:f9:ee:76:aa:98:56:d7:45:08:41:55:6e: 04:db:a4:46:1f:62:e9:69:3a:48:73:9d:40:48:54:56:5b:16: 69:85:4b:e6:94:4d:71:29:6d:06:26:38:58:b1:c0:fc:3f:87: 5b:cd:cf:a9:b0:fe:ab:92:d1:82:07:c3:5e:57:85:70:57:bc: be:7a:43:9b:07:2e:60:54:c9:26:fe:43:36:f0:b6:d0:ae:12: 6a:58:62:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJCOERBQUIxRDdE ODg3MEUzNzMwHhcNMjQwNTMxMDcwODA2WhcNMjQwNjA3MDcwODA2WjAYMRYwFAYD VQQDEw02NjU5Nzc1Ny1jNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bJ2vo+wlaBm30dQtHpKdT7XUFmcKZmyqUh4VRcq49sz5ZlTKwCNsKHfEE56 xb4qQQMZ9ag/7TgdvFuSxIlrPedMrEVVjW2cbpvr+rcpKU97qQVGTcOq6BER/jI2 anOKHTPO+ESPs+g83HylIIEQKV402s5f8UUSffxjsF/F5US5KnPmXqHFMAjPZ9RL oYrzk633rT0t2jBWSKau917V07rGv8JPR5cv/gbbr3xtuNwwXwApOac2zmzIz8eM 1HudGyOfER/kZgbL7ypWWS20PZR9j3U7rOX7QZccAocQ4dcdD6jb5DBsknRK/l4l /CcIgTfetI9NofJRWjtNloGCTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoCb/Q5 iPKd7DR1gF+pKgQ7zmHWMB8GA1UdIwQYMBaAFDqlrKVcezXj+SK7uNqrHX2IcONz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTUzMy80MDI5OTc4QUY4 N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05lUDVJcnU0MnFzZGZZaHc0 M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xV3NwVng3TmVQNUlydTQycXNkZllodzQzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05l UDVJcnU0MnFzZGZZaHc0M00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDY2CWAz8rjMd3IGX3DIlR4n4Xr6I9EwMotirauPJXlauiqj45PoJ+i 9NGO3GjbL18wm9sNf4OSme7JdMs3t4XcHIhHE4N3nP/IlKm8JKCjoRv1akCgmtzw FZLgWrsmKzpOGefnbEJXF+XcTUOsQy3iN8f2g/Ovt8DHwRGAcnA5SBwuIA9ez8j8 Y7jvc0rUgKZIs9U4AYdAhu5gsAvNZXQokm8qUFece6b57naqmFbXRQhBVW4E26RG H2LpaTpIc51ASFRWWxZphUvmlE1xKW0GJjhYscD8P4dbzc+psP6rktGCB8NeV4Vw V7y+ekObBy5gVMkm/kM28LbQrhJqWGJK -----END CERTIFICATE-----Generated at Fri May 31 10:01:44 2024 by rpki-client on console-ams.rpki-client.org