$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json) Hash identifier: Hsx2Nb/XQRuSuMycIAewikweB0JpyHPB3zukHOS0roc= Subject key identifier: 2E:B4:15:E8:3A:8C:8A:43:49:02:7D:64:7B:1D:BB:90:C0:87:72:31 Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft Manifest number: CE Signing time: Sun 19 May 2024 06:12:28 +0000 Manifest this update: Sun 19 May 2024 06:12:28 +0000 Manifest next update: Sun 26 May 2024 06:12:28 +0000 Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: Jqj1ci3y/Ia1zvtUdIbc9WLpf+RdL315aZoEofPNLmE=) 2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: X1glrT5f9w7YDV8Emvf/OQc19tME85EguXsv6m5Ss3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Validity Not Before: May 19 06:12:28 2024 GMT Not After : May 26 06:12:28 2024 GMT Subject: CN=6649984c-1346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:36:3c:e0:10:31:ad:55:f4:b0:c9:03:9a: eb:2d:ff:dc:c3:30:95:45:a1:2a:21:9f:11:db:f9: 13:d3:ce:80:18:90:91:b6:01:9e:b2:f5:af:4e:95: 5d:3d:99:5d:8d:fe:0e:7e:45:c9:de:a2:dc:44:9c: 65:08:df:b8:26:98:5f:97:73:bb:b2:62:b0:97:6b: 60:a0:38:1c:e0:3e:af:ed:04:1d:6d:62:23:58:b5: 63:0b:93:36:b8:db:40:2d:36:04:87:c4:bf:df:49: aa:0b:a1:9a:e6:89:d2:10:54:98:96:56:16:2c:0d: 0a:ca:cb:2d:5a:83:f9:36:7a:ae:56:9d:c6:1a:20: c4:20:c6:8f:b1:8b:6e:41:77:49:e9:f0:c9:ba:f5: e3:fa:95:e9:f3:6f:61:b2:d5:ce:2b:0c:37:b2:93: e8:03:02:b8:40:19:b1:a1:e5:93:62:c9:28:ed:d8: 15:2d:2a:4a:42:36:f5:c7:55:64:db:10:1d:cf:a7: 82:e3:90:de:46:e9:fd:12:02:e7:b5:44:19:4d:24: ee:8c:32:a7:88:55:21:cb:1e:96:78:bb:2d:f5:8d: 0a:a2:67:da:ab:1c:d0:29:3f:c7:7f:59:89:e2:41: fa:e2:47:b3:f2:33:46:d4:81:91:45:06:a9:fa:11: f3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B4:15:E8:3A:8C:8A:43:49:02:7D:64:7B:1D:BB:90:C0:87:72:31 X509v3 Authority Key Identifier: keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:5a:d7:ff:a9:bf:bc:ca:fa:08:69:d6:6c:b0:78:09:23:2a: 40:25:f0:5a:fc:a8:0b:41:13:1c:9c:7f:5f:13:c3:65:fa:75: 5f:c3:19:f4:18:11:24:8c:c1:7f:ec:01:51:58:b7:34:2a:2e: a3:69:3f:20:4b:fa:5a:c0:3b:7d:69:0e:a1:87:eb:5b:75:7a: 68:5e:a6:27:c1:b1:b8:c8:76:35:8a:e1:3b:53:cf:c5:50:96: 99:38:d4:52:1c:1d:c8:3f:1e:a6:52:16:de:95:42:ef:19:c1: 00:cf:55:bb:71:5b:65:7f:df:4a:3b:4a:e7:08:7e:b8:c2:e2: 2b:b3:5d:5f:70:df:2d:0c:22:b9:84:54:53:c5:cd:44:04:24: 90:29:06:b4:82:38:1f:d2:c0:30:28:66:38:3b:11:33:65:76: 74:77:2b:58:01:05:a4:59:5b:b6:1a:59:bc:20:7d:10:44:73: be:77:57:42:69:89:e7:6b:d0:6d:57:91:85:eb:06:2f:d6:2c: 69:cb:f7:03:f0:5c:f8:88:7a:a5:a5:b6:dd:32:38:04:bd:32: 94:47:70:54:37:ce:e7:e5:9b:9e:04:ae:db:39:d4:1a:71:4f: 69:3e:ed:d4:d7:aa:b8:d7:b3:5f:d8:79:34:20:e9:7d:72:52: f9:48:d5:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB M0EyODNFQjMwHhcNMjQwNTE5MDYxMjI4WhcNMjQwNTI2MDYxMjI4WjAYMRYwFAYD VQQDEw02NjQ5OTg0Yy0xMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoo2POAQMa1V9LDJA5rrLf/cwzCVRaEqIZ8R2/kT086AGJCRtgGesvWvTpVd PZldjf4OfkXJ3qLcRJxlCN+4Jphfl3O7smKwl2tgoDgc4D6v7QQdbWIjWLVjC5M2 uNtALTYEh8S/30mqC6Ga5onSEFSYllYWLA0KysstWoP5NnquVp3GGiDEIMaPsYtu QXdJ6fDJuvXj+pXp829hstXOKww3spPoAwK4QBmxoeWTYsko7dgVLSpKQjb1x1Vk 2xAdz6eC45DeRun9EgLntUQZTSTujDKniFUhyx6WeLst9Y0KomfaqxzQKT/Hf1mJ 4kH64kez8jNG1IGRRQap+hHzfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC60Feg6 jIpDSQJ9ZHsdu5DAh3IxMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB V09MNWxQUDlGSEdqb29Qck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADWtf/qb+8yvoIadZssHgJIypAJfBa/KgLQRMcnH9fE8Nl+nVfwxn0 GBEkjMF/7AFRWLc0Ki6jaT8gS/pawDt9aQ6hh+tbdXpoXqYnwbG4yHY1iuE7U8/F UJaZONRSHB3IPx6mUhbelULvGcEAz1W7cVtlf99KO0rnCH64wuIrs11fcN8tDCK5 hFRTxc1EBCSQKQa0gjgf0sAwKGY4OxEzZXZ0dytYAQWkWVu2Glm8IH0QRHO+d1dC aYnna9BtV5GF6wYv1ixpy/cD8Fz4iHqlpbbdMjgEvTKUR3BUN87n5ZueBK7bOdQa cU9pPu3U16q417Nf2Hk0IOl9clL5SNXH -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org