$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json) Hash identifier: rTiKNpDOe/m3fRgznFvCTZwwqS3S8l66w2xqfpPfYeM= Subject key identifier: B3:C8:62:DE:47:EB:05:28:FF:8E:DC:CF:52:76:BA:6B:A9:5A:7A:0C Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Certificate serial: 125E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft Manifest number: 2252 Signing time: Sat 18 May 2024 17:39:19 +0000 Manifest this update: Sat 18 May 2024 17:39:18 +0000 Manifest next update: Sat 25 May 2024 17:39:18 +0000 Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: Q7dD9Z8/I/nPhcGIS67OirSAjGMoJg7jS/Eafxa2hsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4702 (0x125e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Validity Not Before: May 18 17:39:18 2024 GMT Not After : May 25 17:39:18 2024 GMT Subject: CN=6648e7c7-600b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fb:14:5a:14:42:f8:09:3f:c1:bf:ba:c6:a1: fa:5c:83:07:e8:41:ae:26:01:81:06:a7:0c:3d:2e: 1b:3c:18:cc:12:c7:ae:c1:99:be:51:1b:ce:83:c3: b8:b5:6d:42:ba:33:5f:63:f7:8f:13:81:f2:47:be: a3:a4:5a:32:8b:e2:55:2f:8b:32:bd:c7:ca:ff:d2: e6:b9:28:d4:a9:81:ec:b4:18:83:84:83:fe:e2:87: 47:b7:d0:8c:32:9d:f9:4f:1e:f5:38:aa:fc:f8:20: ac:98:0b:4e:7a:83:62:55:90:e4:87:05:ce:68:e1: fc:2e:cb:e2:da:e2:12:05:7d:cc:ab:a6:62:97:9e: 44:e8:76:b4:b9:89:14:20:d8:d7:ec:ff:0b:2a:13: 27:0e:6d:b7:1b:a0:b2:43:54:f4:f1:d1:ad:36:a0: f0:a5:fa:13:83:19:5a:d1:48:a6:c4:54:dc:27:88: 70:92:f1:7d:66:ea:47:4c:63:14:fd:96:7f:61:00: fb:7e:0b:5a:b6:14:47:af:c4:95:52:59:32:d0:55: 78:43:26:9b:17:fa:c1:bc:40:dd:63:72:7b:ad:bf: 2c:9f:ea:2c:b7:65:e9:dd:5f:27:9b:f5:28:78:81: c8:38:0e:f6:d4:3a:e3:de:ca:69:b7:d9:33:da:1d: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:62:DE:47:EB:05:28:FF:8E:DC:CF:52:76:BA:6B:A9:5A:7A:0C X509v3 Authority Key Identifier: keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:62:de:e3:b8:44:21:c6:a3:f7:c9:65:a6:56:9c:f2:f0:2c: de:5c:ab:3b:b4:4a:b5:e6:b5:12:52:6b:8b:ec:fa:eb:0d:95: 30:a8:63:b0:ae:f7:80:04:ec:ab:6c:40:a3:d6:92:e6:ee:f7: bb:bf:39:f0:13:03:9e:7a:4a:5d:dd:80:8e:a0:77:8d:9d:95: fd:7b:1b:48:bf:de:66:8b:eb:62:59:94:62:13:d5:14:10:57: bd:a0:30:3f:0e:bc:e5:a1:1a:28:87:70:81:86:c0:09:13:b9: a6:13:61:a7:e2:da:54:89:42:f1:ce:01:d8:b7:fd:4c:10:5a: 91:a1:cf:4f:9c:bb:35:b4:2a:f3:ca:ed:43:99:a5:fd:04:bb: b3:e1:dd:db:48:6e:5f:49:7a:43:40:18:d9:20:1d:d9:48:b4: ba:c2:0e:48:4a:b9:8b:01:dc:78:ad:ca:dc:ef:44:8b:72:e4: c5:3a:6b:04:90:22:ac:1f:68:a9:48:9a:9a:03:8c:1b:76:52: 45:97:a5:8e:bb:c1:01:10:26:ef:cd:f0:87:fc:51:96:64:56: 09:76:c7:ca:4b:9c:a6:38:88:d9:3f:3c:bb:be:f6:83:36:f3: d9:4f:4c:44:b7:63:a5:6e:fd:88:07:9e:23:28:ef:45:74:9e: e5:ff:38:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4 NTI2MEZGMDcwHhcNMjQwNTE4MTczOTE4WhcNMjQwNTI1MTczOTE4WjAYMRYwFAYD VQQDEw02NjQ4ZTdjNy02MDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/sUWhRC+Ak/wb+6xqH6XIMH6EGuJgGBBqcMPS4bPBjMEseuwZm+URvOg8O4 tW1CujNfY/ePE4HyR76jpFoyi+JVL4syvcfK/9LmuSjUqYHstBiDhIP+4odHt9CM Mp35Tx71OKr8+CCsmAtOeoNiVZDkhwXOaOH8Lsvi2uISBX3Mq6Zil55E6Ha0uYkU INjX7P8LKhMnDm23G6CyQ1T08dGtNqDwpfoTgxla0UimxFTcJ4hwkvF9ZupHTGMU /ZZ/YQD7fgtathRHr8SVUlky0FV4QyabF/rBvEDdY3J7rb8sn+ost2Xp3V8nm/Uo eIHIOA721Drj3sppt9kz2h166wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPIYt5H 6wUo/47cz1J2umupWnoMMB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw T2poRlJMWkVBUmlGSmdfd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeYt7juEQhxqP3yWWmVpzy8CzeXKs7tEq15rUSUmuL7PrrDZUwqGOw rveABOyrbECj1pLm7ve7vznwEwOeekpd3YCOoHeNnZX9extIv95mi+tiWZRiE9UU EFe9oDA/DrzloRooh3CBhsAJE7mmE2Gn4tpUiULxzgHYt/1MEFqRoc9PnLs1tCrz yu1DmaX9BLuz4d3bSG5fSXpDQBjZIB3ZSLS6wg5ISrmLAdx4rcrc70SLcuTFOmsE kCKsH2ipSJqaA4wbdlJFl6WOu8EBECbvzfCH/FGWZFYJdsfKS5ymOIjZPzy7vvaD NvPZT0xEt2Olbv2IB54jKO9FdJ7l/zjX -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org