$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json) Hash identifier: 9wpF9Gulu8vTLpQGF0PVfwv0jBPtQ+AQlOHDvQk7IAk= Subject key identifier: C0:26:00:BE:72:BB:82:7A:BA:16:54:DE:3C:E1:15:EA:D0:36:29:45 Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft Manifest number: B5 Signing time: Fri 31 May 2024 07:20:29 +0000 Manifest this update: Fri 31 May 2024 07:20:28 +0000 Manifest next update: Fri 07 Jun 2024 07:20:28 +0000 Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: xgNO1tjgP5fyn0w/oozqhhn4kRJI4eRUlLgLD9W2aTk=) 2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: YBTJyFDQVecrTFPkPy4W2Dd55PMCXx4820zaNKR8/1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Validity Not Before: May 31 07:20:28 2024 GMT Not After : Jun 7 07:20:28 2024 GMT Subject: CN=66597a3c-6ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:c8:eb:d1:9e:33:80:7e:63:21:37:6a:4f: 65:ab:29:3c:70:64:90:13:49:e8:87:30:63:4b:a7: 75:ed:73:e0:49:a7:38:41:37:b1:0d:da:e0:97:ac: 5b:e5:6f:ca:db:c0:b2:3a:55:44:b6:b9:ce:ca:f3: 74:2f:2d:80:5f:40:8e:21:32:aa:6c:d8:02:bf:85: 79:9e:5b:5c:9d:1d:ca:50:4f:fc:2c:29:ef:30:47: 24:48:b1:63:18:14:5c:a6:ee:53:1b:ac:75:b1:2d: a5:51:7c:40:64:c2:bb:96:a7:7d:e8:ef:ae:f6:cb: c7:ed:99:d0:6f:fc:7c:e0:9e:b2:3b:43:74:6e:86: b3:e9:66:f1:2f:3c:86:b9:a1:87:08:80:b3:57:1d: a0:74:96:07:67:7e:9b:71:ab:2d:f4:23:5d:a1:84: 9b:49:ab:a1:a3:15:4c:83:1d:9d:40:19:a4:93:46: da:b9:b7:86:46:0b:48:dc:f3:81:0d:1a:14:01:47: ad:1b:27:76:dc:00:ba:d4:aa:86:be:e4:f8:dc:48: 26:55:eb:5e:2e:ab:6e:1c:35:d5:05:06:b6:d5:8a: f1:a1:6a:3b:2c:62:de:58:13:e3:61:1a:4e:c2:94: b9:b1:ef:33:e5:fd:5b:8f:3c:bb:00:5b:f4:c6:67: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:26:00:BE:72:BB:82:7A:BA:16:54:DE:3C:E1:15:EA:D0:36:29:45 X509v3 Authority Key Identifier: keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:db:61:63:d7:44:f2:07:1e:d7:1f:fb:6a:f8:47:dc:0b:2f: 49:16:ca:96:47:3f:ca:fd:1c:b5:2b:eb:6a:b0:cd:cb:58:fc: 10:d1:a8:fc:ea:a5:cf:be:24:8b:8b:36:ae:46:50:d5:57:74: 94:3a:4e:1f:43:9f:83:e0:c2:fc:2c:7e:d5:bc:b9:63:7b:b7: 24:53:2c:40:8a:e2:f7:03:b1:66:4e:fe:66:8f:e6:53:65:8e: 8e:b7:31:b9:2f:34:2d:7d:74:a7:a5:87:66:6a:15:d1:73:05: 1c:6c:e9:af:0d:81:e7:33:b0:a5:61:8a:ae:d9:62:44:07:da: 7e:62:3b:3d:ac:65:8d:56:7d:93:da:4c:58:67:86:99:19:f3: 80:a6:d7:49:22:53:43:df:da:d8:73:76:93:90:cb:56:5e:07: 41:49:59:58:7c:5f:a5:4b:12:1b:de:aa:45:10:78:9e:2d:62: 6d:f7:82:00:16:96:93:58:e4:46:66:70:01:64:28:c8:c0:07: 31:8f:24:82:ed:47:65:08:41:a3:ea:05:41:60:4a:7d:8c:f9: ac:d9:94:89:7a:70:9a:6e:c6:dc:50:58:86:6a:dc:4a:9e:b5: 56:74:c5:f2:45:a4:44:dc:e6:c2:12:16:d6:82:be:56:0f:94: 57:5a:c5:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG ODBFNTJGREYwHhcNMjQwNTMxMDcyMDI4WhcNMjQwNjA3MDcyMDI4WjAYMRYwFAYD VQQDEw02NjU5N2EzYy02ZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9bI69GeM4B+YyE3ak9lqyk8cGSQE0nohzBjS6d17XPgSac4QTexDdrgl6xb 5W/K28CyOlVEtrnOyvN0Ly2AX0COITKqbNgCv4V5nltcnR3KUE/8LCnvMEckSLFj GBRcpu5TG6x1sS2lUXxAZMK7lqd96O+u9svH7ZnQb/x84J6yO0N0boaz6WbxLzyG uaGHCICzVx2gdJYHZ36bcast9CNdoYSbSauhoxVMgx2dQBmkk0baubeGRgtI3POB DRoUAUetGyd23AC61KqGvuT43EgmVeteLqtuHDXVBQa21YrxoWo7LGLeWBPjYRpO wpS5se8z5f1bjzy7AFv0xmdXcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAmAL5y u4J6uhZU3jzhFerQNilFMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09o TDNVak5uTG9yR2Y0RGxMOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe22Fj10TyBx7XH/tq+EfcCy9JFsqWRz/K/Ry1K+tqsM3LWPwQ0aj8 6qXPviSLizauRlDVV3SUOk4fQ5+D4ML8LH7VvLlje7ckUyxAiuL3A7FmTv5mj+ZT ZY6OtzG5LzQtfXSnpYdmahXRcwUcbOmvDYHnM7ClYYqu2WJEB9p+Yjs9rGWNVn2T 2kxYZ4aZGfOAptdJIlND39rYc3aTkMtWXgdBSVlYfF+lSxIb3qpFEHieLWJt94IA FpaTWORGZnABZCjIwAcxjySC7UdlCEGj6gVBYEp9jPms2ZSJenCabsbcUFiGatxK nrVWdMXyRaRE3ObCEhbWgr5WD5RXWsUb -----END CERTIFICATE-----Generated at Fri May 31 10:01:45 2024 by rpki-client on console-ams.rpki-client.org