$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json) Hash identifier: wP4NsuBfJ6IhQ3UP+GF5ZVFCUm+AwyYnKxyzuuqMSoc= Subject key identifier: 5C:F4:D6:E1:44:4D:4A:EE:DE:BB:5A:E6:D6:26:35:88:B2:F4:70:E3 Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3 Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft Manifest number: 81 Signing time: Sun 19 May 2024 07:15:07 +0000 Manifest this update: Sun 19 May 2024 07:15:07 +0000 Manifest next update: Sun 26 May 2024 07:15:07 +0000 Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: qDbyP9KcKq7+QLNBaDoBOTUr8Rh9Qrx8Xkf5OMsi24A=) 2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: P/K1mPZ7bSqWZHYR19pG5pXCiEQ5je9p/7GKEVheaXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3 Validity Not Before: May 19 07:15:07 2024 GMT Not After : May 26 07:15:07 2024 GMT Subject: CN=6649a6fb-0976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:13:61:9e:7d:27:99:9e:28:de:f4:6e:08: fb:a7:c8:60:f5:5d:3b:7e:5f:33:83:ce:10:ac:f1: 1d:8d:9b:fd:0c:16:a4:f6:dd:3d:de:d5:ad:40:c0: 6f:34:ef:33:ce:a8:88:82:d3:0b:01:dd:f3:a7:0f: 1b:94:df:72:b0:83:8c:83:90:c7:ea:e3:5d:54:2f: 5f:76:09:76:08:86:33:c0:29:b6:93:57:e3:9f:20: da:15:89:69:a3:f5:49:1b:ef:24:68:45:64:9e:d0: 96:15:65:c9:b4:a3:2f:b9:65:4c:e5:d4:b4:a0:c9: 5b:36:a1:51:e2:4e:e3:8e:e7:c8:17:fe:70:60:b0: e5:ff:4f:ee:77:e1:37:81:b0:c2:a3:f6:ab:ff:ac: aa:ca:d9:5c:e2:7c:9a:f7:72:e0:40:65:b0:74:c1: 34:eb:13:05:f1:71:3f:81:ae:cc:87:cb:b0:b5:2c: 3f:1b:2f:00:a3:50:91:36:a6:43:8e:98:03:f9:ed: e6:f6:76:f1:96:a6:31:0a:ab:34:c7:cf:18:f0:f4: 49:ef:5b:06:b3:b8:24:f6:dc:cb:88:f0:5d:fe:f9: ec:f6:bd:a5:8f:3f:ac:d9:11:61:d3:35:fa:7b:b5: 28:44:5b:c8:6a:4b:a9:4a:c5:f9:8b:7c:e0:d2:86: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F4:D6:E1:44:4D:4A:EE:DE:BB:5A:E6:D6:26:35:88:B2:F4:70:E3 X509v3 Authority Key Identifier: keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:76:55:ea:16:9f:8d:53:f8:6e:41:9b:5f:1b:d9:b0:3a:a2: 5d:37:2d:ff:3d:91:21:6b:ba:4d:b8:58:31:0c:b0:6c:fa:c1: ca:ab:5c:02:a6:be:c2:c2:8f:81:c5:2e:d5:9b:eb:b7:a5:f5: 2d:a0:9f:9a:e6:6e:9a:1d:17:d9:da:10:4b:47:9f:21:47:99: d9:87:23:7e:d6:f1:11:99:a9:5c:5e:53:dc:97:58:8f:7a:45: f8:89:a6:3e:4c:dd:c7:cd:00:63:5d:84:15:fe:0e:74:5b:64: b0:47:99:69:17:0e:70:19:11:ae:2d:d4:02:bd:29:ca:28:36: c6:44:ea:aa:eb:68:5a:c6:4a:15:20:fb:e2:84:74:f1:7a:bf: 36:aa:db:56:a8:39:91:05:8f:8d:7a:d8:d0:db:c9:56:b8:d6: 3d:77:c5:7a:0c:a5:60:1e:33:6f:57:28:5c:c4:68:7e:0a:75: 61:67:36:f4:89:ed:5e:22:41:c4:da:44:bb:70:2b:15:ad:99: a3:8d:a3:47:8e:71:bd:08:d4:4d:d6:37:1b:02:6d:d0:cf:07: 55:d4:3a:6a:9d:d5:55:1c:20:c4:eb:7a:b4:0d:a8:ff:be:68: f6:03:e8:c4:eb:c1:5c:58:06:c2:62:52:ef:a4:a9:1f:31:05: f6:ff:1f:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKEEyQ0QxMEE0N0VENzIzRTFDNDhCNUY1MEQ2ODBDRjRG NjdGQ0IxRDMwHhcNMjQwNTE5MDcxNTA3WhcNMjQwNTI2MDcxNTA3WjAYMRYwFAYD VQQDEw02NjQ5YTZmYi0wOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KUTYZ59J5meKN70bgj7p8hg9V07fl8zg84QrPEdjZv9DBak9t093tWtQMBv NO8zzqiIgtMLAd3zpw8blN9ysIOMg5DH6uNdVC9fdgl2CIYzwCm2k1fjnyDaFYlp o/VJG+8kaEVkntCWFWXJtKMvuWVM5dS0oMlbNqFR4k7jjufIF/5wYLDl/0/ud+E3 gbDCo/ar/6yqytlc4nya93LgQGWwdME06xMF8XE/ga7Mh8uwtSw/Gy8Ao1CRNqZD jpgD+e3m9nbxlqYxCqs0x88Y8PRJ71sGs7gk9tzLiPBd/vns9r2ljz+s2RFh0zX6 e7UoRFvIakupSsX5i3zg0obloQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz01uFE TUru3rta5tYmNYiy9HDjMB8GA1UdIwQYMBaAFKLNEKR+1yPhxItfUNaAz09n/LHT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BNDcwNzg1RTU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEktSEVpMTlRMW9EUFQyZjhz ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29zMFFwSDdYSS1IRWkxOVExb0RQVDJmOHNkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BNDcwNzg1RTU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEkt SEVpMTlRMW9EUFQyZjhzZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCdlXqFp+NU/huQZtfG9mwOqJdNy3/PZEha7pNuFgxDLBs+sHKq1wC pr7Cwo+BxS7Vm+u3pfUtoJ+a5m6aHRfZ2hBLR58hR5nZhyN+1vERmalcXlPcl1iP ekX4iaY+TN3HzQBjXYQV/g50W2SwR5lpFw5wGRGuLdQCvSnKKDbGROqq62haxkoV IPvihHTxer82qttWqDmRBY+NetjQ28lWuNY9d8V6DKVgHjNvVyhcxGh+CnVhZzb0 ie1eIkHE2kS7cCsVrZmjjaNHjnG9CNRN1jcbAm3QzwdV1DpqndVVHCDE63q0Daj/ vmj2A+jE68FcWAbCYlLvpKkfMQX2/x81 -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org