$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft File: C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json) Hash identifier: dMfwakAeQ508rjwWA+sVHxcMjf/WDq2ifZ+VkJcT3Y0= Subject key identifier: A2:A9:BE:6B:3D:5B:64:30:63:C7:73:C9:22:06:1F:4E:4A:4C:B3:8E Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 Certificate issuer: /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft Manifest number: 0719 Signing time: Sat 18 May 2024 22:32:14 +0000 Manifest this update: Sat 18 May 2024 22:32:13 +0000 Manifest next update: Sat 25 May 2024 22:32:13 +0000 Files and hashes: 1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: z+yRt8KKYDHPruLt4O96uxJrjiBaJpnzuRbaheeJAdk=) 2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: TizNCB08Tww8J4ZnwB76IDVDoCZsxRkKX6i8pfbGq7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Validity Not Before: May 18 22:32:13 2024 GMT Not After : May 25 22:32:13 2024 GMT Subject: CN=66492c6e-4c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:f4:56:e1:9c:66:7f:d3:a7:3a:d6:28:b5: 24:5d:d1:da:f0:6f:c8:84:d0:c2:47:b0:8c:f9:9e: fd:29:d0:b3:71:fc:14:33:ee:60:ca:4f:b8:d3:78: 82:6c:4b:38:bf:36:3f:a7:1f:5e:cb:5b:b4:f8:ca: 0f:0a:46:ce:66:fd:f4:d2:58:19:96:3c:0a:66:9b: 0c:9d:2e:0b:ed:84:cf:82:f6:86:22:8c:46:e9:06: ce:4c:78:51:cb:00:e6:ad:af:61:85:37:2d:4d:3d: c0:fb:1f:d2:22:4a:bb:50:1e:d0:54:c0:d2:60:77: 11:70:35:8c:8b:c5:63:24:7d:fb:75:55:eb:45:29: 31:f5:3c:01:50:ac:ba:d5:e0:63:4e:0e:bd:6b:ff: eb:b9:3b:50:7f:67:00:c6:17:0a:40:e1:a9:60:28: c2:aa:d3:a2:84:99:52:5c:7e:41:8a:33:82:9f:c2: bc:18:e1:0e:20:0c:54:cc:d3:a4:29:7d:88:ba:54: 0a:cd:ae:54:4e:ee:3e:1e:7e:a5:ed:2a:87:93:90: 63:a9:05:a8:dc:f4:67:06:8a:22:26:1e:1b:3f:b2: c6:59:e9:07:f6:88:6d:2d:65:93:e4:73:48:fc:11: a1:eb:83:84:22:78:a1:65:62:a1:17:f0:f3:2b:49: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A9:BE:6B:3D:5B:64:30:63:C7:73:C9:22:06:1F:4E:4A:4C:B3:8E X509v3 Authority Key Identifier: keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:de:60:3d:a5:75:77:9f:69:5a:ec:90:be:56:a5:4f:81:69: 61:fe:67:ec:6b:5b:38:00:c1:83:38:0f:d6:d1:ad:e4:8b:9c: 18:0c:db:9c:c6:9e:ee:61:d6:b2:7e:2e:d5:f3:fb:32:ae:89: df:53:a4:29:dc:18:c6:89:49:bf:04:c1:41:23:80:1b:c6:18: d3:ff:42:a4:17:6a:19:59:8f:7d:d4:1d:21:66:8e:b3:9d:84: 0b:6d:af:06:05:19:0a:0b:00:f2:ab:21:9a:dd:9b:44:f8:4a: 86:2b:7a:38:13:eb:60:99:23:c8:56:ec:de:5b:3d:41:c4:c1: bb:e9:cb:31:51:e5:2c:dd:50:88:0d:98:56:f5:20:7a:2f:b0: a7:a0:d8:3b:67:61:50:11:c3:65:26:d2:97:ba:53:89:65:b8: 7a:48:3b:58:10:42:1c:9e:c7:ad:54:2f:05:5c:32:87:28:11: a9:83:9e:22:b9:fe:1e:2b:77:f9:2d:3e:da:9d:1c:59:ff:0b: 97:dc:0d:cb:a3:95:5e:e5:1a:df:3a:47:fb:92:f5:48:e8:b4: 91:5a:5f:77:28:e9:cf:13:04:01:03:99:6c:b7:50:8c:6c:d8: 05:41:bf:29:a8:e4:8e:cb:de:e6:15:2a:48:cc:bb:8c:e1:21: 1c:8e:e7:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NEQxMTAvBgNVBAUTKDBCRUE4RTMxODdCRDQ5OEQyNUYyNDk1RDZBQjBFRTlF NDUzNEE3RjEwHhcNMjQwNTE4MjIzMjEzWhcNMjQwNTI1MjIzMjEzWjAYMRYwFAYD VQQDEw02NjQ5MmM2ZS00YzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+D0VuGcZn/TpzrWKLUkXdHa8G/IhNDCR7CM+Z79KdCzcfwUM+5gyk+403iC bEs4vzY/px9ey1u0+MoPCkbOZv300lgZljwKZpsMnS4L7YTPgvaGIoxG6QbOTHhR ywDmra9hhTctTT3A+x/SIkq7UB7QVMDSYHcRcDWMi8VjJH37dVXrRSkx9TwBUKy6 1eBjTg69a//ruTtQf2cAxhcKQOGpYCjCqtOihJlSXH5BijOCn8K8GOEOIAxUzNOk KX2IulQKza5UTu4+Hn6l7SqHk5BjqQWo3PRnBooiJh4bP7LGWekH9ohtLWWT5HNI /BGh64OEInihZWKhF/DzK0kmkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKpvms9 W2QwY8dzySIGH05KTLOOMB8GA1UdIwQYMBaAFAvqjjGHvUmNJfJJXWqw7p5FNKfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY0RC9EQUQ0NTg2QUVE QzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZMGw4a2xkYXJEdW5rVTBw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtcU9NWWU5U1kwbDhrbGRhckR1bmtVMHBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY0RC9EQUQ0NTg2QUVEQzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZ MGw4a2xkYXJEdW5rVTBwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC23mA9pXV3n2la7JC+VqVPgWlh/mfsa1s4AMGDOA/W0a3ki5wYDNuc xp7uYdayfi7V8/syronfU6Qp3BjGiUm/BMFBI4AbxhjT/0KkF2oZWY991B0hZo6z nYQLba8GBRkKCwDyqyGa3ZtE+EqGK3o4E+tgmSPIVuzeWz1BxMG76csxUeUs3VCI DZhW9SB6L7CnoNg7Z2FQEcNlJtKXulOJZbh6SDtYEEIcnsetVC8FXDKHKBGpg54i uf4eK3f5LT7anRxZ/wuX3A3Lo5Ve5RrfOkf7kvVI6LSRWl93KOnPEwQBA5lst1CM bNgFQb8pqOSOy97mFSpIzLuM4SEcjudI -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org