$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: gvpxMSkq2Y+UF/r0tuxTlDUWV91zZ/QH6A08i0P4eLE= Subject key identifier: 35:F4:B3:8A:7D:4A:AB:39:3D:1A:47:2B:EA:2A:74:66:F8:63:23:A8 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0BA9 Signing time: Sat 18 May 2024 19:25:38 +0000 Manifest this update: Sat 18 May 2024 19:25:37 +0000 Manifest next update: Sat 25 May 2024 19:25:37 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: N+40nmmuSw/WgH34jjTMyWpM45wWzcpOMGROg8cs0ac=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: a6Xwc4IgmpEHrW4twM+UR9anddZ08NYax5VtnbtXTkI=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: Gy8EKBzby7TbA7bANPsKrh8185xtB8FfvgQKdW33eec=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: ZMkvn8M/+ZjeMYlcx5BpRn45pEDyzj9iUfMiESTYCg8=) 5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: Y0Xjy0NkWka/3Qez2EmWXAAasDaGl97FsPDAHdKjWqE=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0DoL/2IpHaxAw9TImjiB81cUOFzWeL1Jqh3GctUyL3w=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: dMeU+VWkNLHSsE/YjflyFx6fuE/Tkj6eZEDgHPwyvpw=) 8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /x4gISDdQ58Cm6cZRirKRBC5irA+dN86MCQWeCpo8e4=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: l0LcGN3bLpC6egx6E1ErrRqx4ZIHX8gGWW4UD/kKTdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: May 18 19:25:37 2024 GMT Not After : May 25 19:25:37 2024 GMT Subject: CN=664900b1-ab66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d3:2a:03:a9:ed:fe:26:dc:a9:d2:41:cc:39: 66:54:f5:33:c1:15:6c:5f:61:c2:bd:fd:0f:74:c0: 40:48:f8:14:df:95:6e:8a:ab:4f:26:ac:2f:5a:f5: 92:27:f9:b1:18:63:d0:3a:a2:a0:45:a1:b9:82:7e: 12:7c:8f:c5:51:40:9d:cb:f0:25:49:93:d1:8a:ad: f4:bf:dc:4d:05:6f:d7:50:57:f6:0c:b3:40:48:80: b3:67:b3:56:4e:60:6c:28:f3:fd:81:13:e8:3f:a2: 2f:37:cd:84:d7:f9:50:0f:36:f8:86:40:74:91:ca: 4c:fb:3d:8f:21:05:58:a2:fe:d4:33:9f:7c:8e:fd: 22:79:9c:46:a2:09:af:b5:04:dd:c2:32:5c:77:1e: d2:fa:13:ff:f2:1a:60:e2:ab:3b:e7:3c:f6:2c:14: cc:b1:c1:84:e6:04:16:db:81:df:81:25:fc:d1:26: 7d:fd:29:82:64:b6:7a:2e:2f:90:17:a5:e2:a9:e4: ff:9d:fb:bc:7b:68:0e:e1:2a:9c:f6:69:83:68:a4: d4:30:e0:85:31:d0:4c:32:23:cb:08:57:f7:c9:0a: 4e:70:32:bd:0a:b3:4d:25:f6:95:11:92:41:3b:11: 55:ee:39:cb:a5:a1:c7:a1:e8:8c:c6:73:59:42:16: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F4:B3:8A:7D:4A:AB:39:3D:1A:47:2B:EA:2A:74:66:F8:63:23:A8 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:e3:b0:c0:c3:ae:40:39:8d:07:11:a2:b1:e2:45:a9:5e:8e: 95:fb:0c:c1:9f:c5:f0:77:27:d1:ff:27:f5:c3:e3:91:30:3a: cf:4a:0a:0e:2b:da:14:42:a6:2f:4e:ac:12:57:e5:80:8a:2a: f7:67:2e:9b:e4:e4:5d:56:c0:b5:ff:59:db:c1:ca:6c:b3:cc: 66:4a:c4:10:5d:d9:62:fd:26:22:c7:70:e0:b3:4f:b0:e1:e4: bb:6b:79:9c:81:c1:e7:9c:95:a5:90:c3:a5:37:e1:c2:1d:d7: 2a:de:2d:6b:cc:f4:36:03:78:93:e8:70:3a:f2:0f:c7:eb:0d: 38:ba:d6:49:33:ae:20:2d:f8:95:cc:9a:e3:9c:17:33:36:b2: 80:4c:72:76:82:e1:30:d4:67:8a:71:b1:a3:72:1e:0e:12:ba: c2:5e:36:9d:d7:50:ec:0b:6a:f9:70:7f:64:4b:ef:4b:cf:b9: d3:59:01:0c:91:6b:8d:a4:48:9a:07:83:cd:ba:92:6c:68:f8: 4d:1a:a0:5b:85:96:57:0e:b9:67:34:da:ae:e1:bd:a6:e2:2d: 30:43:7d:46:fd:c7:46:7f:f5:77:04:1a:24:d4:14:f3:45:05: c3:0c:1e:d0:24:1e:98:bb:2e:cd:45:34:64:4c:dc:66:60:a0: 2f:7e:28:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjQwNTE4MTkyNTM3WhcNMjQwNTI1MTkyNTM3WjAYMRYwFAYD VQQDEw02NjQ5MDBiMS1hYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NMqA6nt/ibcqdJBzDlmVPUzwRVsX2HCvf0PdMBASPgU35VuiqtPJqwvWvWS J/mxGGPQOqKgRaG5gn4SfI/FUUCdy/AlSZPRiq30v9xNBW/XUFf2DLNASICzZ7NW TmBsKPP9gRPoP6IvN82E1/lQDzb4hkB0kcpM+z2PIQVYov7UM598jv0ieZxGogmv tQTdwjJcdx7S+hP/8hpg4qs75zz2LBTMscGE5gQW24HfgSX80SZ9/SmCZLZ6Li+Q F6XiqeT/nfu8e2gO4Sqc9mmDaKTUMOCFMdBMMiPLCFf3yQpOcDK9CrNNJfaVEZJB OxFV7jnLpaHHoeiMxnNZQha3UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDX0s4p9 Sqs5PRpHK+oqdGb4YyOoMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl47DAw65AOY0HEaKx4kWpXo6V+wzBn8XwdyfR/yf1w+ORMDrPSgoO K9oUQqYvTqwSV+WAiir3Zy6b5ORdVsC1/1nbwcpss8xmSsQQXdli/SYix3Dgs0+w 4eS7a3mcgcHnnJWlkMOlN+HCHdcq3i1rzPQ2A3iT6HA68g/H6w04utZJM64gLfiV zJrjnBczNrKATHJ2guEw1GeKcbGjch4OErrCXjad11DsC2r5cH9kS+9Lz7nTWQEM kWuNpEiaB4PNupJsaPhNGqBbhZZXDrlnNNqu4b2m4i0wQ31G/cdGf/V3BBok1BTz RQXDDB7QJB6Yuy7NRTRkTNxmYKAvfigM -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org