$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: x/+AHX1qaEL23vNu3OXs35CVsqAgwlmNGPf2pbLUlh0= Subject key identifier: 21:6B:98:67:5B:94:6E:E1:FA:64:0A:96:C4:E5:51:9F:3D:D2:3C:07 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0EEC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 0EE4 Signing time: Sat 18 May 2024 18:17:02 +0000 Manifest this update: Sat 18 May 2024 18:17:01 +0000 Manifest next update: Sat 25 May 2024 18:17:01 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: v0S1uv1M+bSNfmi5awXPu0RquC/I+97i61h6tAn0e88=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: 4lBnHy42IrC+CuFwqVAzKyt4CMy0vA1UroTjFuzkrh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3820 (0xeec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: May 18 18:17:01 2024 GMT Not After : May 25 18:17:01 2024 GMT Subject: CN=6648f09d-633e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:e1:ac:e0:98:8d:89:14:5b:c4:25:52:6b: 6b:8c:3e:87:a0:58:7f:10:53:77:5e:82:6d:a1:5c: 8f:55:63:d2:5b:31:5b:64:66:b2:74:6b:48:08:a4: e1:b0:ab:65:b9:4f:0e:5f:ae:bc:7e:28:ce:4c:f2: 19:b6:c0:86:68:ea:2f:cc:77:74:cd:b6:81:2e:30: ed:af:62:33:cf:01:c8:8b:66:95:e7:6c:21:52:90: c1:5e:8d:05:a9:0f:6d:33:f5:af:79:02:26:70:78: 23:66:a5:b8:76:e2:e0:b0:56:c7:82:ac:1a:d0:0b: 72:0f:62:d0:37:01:f5:64:3a:72:3e:3f:03:d3:52: 2f:76:7e:33:69:72:9a:12:86:c0:42:0e:54:12:46: 90:ec:6e:38:65:50:ba:33:01:a1:c3:ab:2d:01:67: 14:1e:ad:d1:3c:fe:3f:78:88:aa:32:9f:96:10:cd: 56:ec:df:a1:63:48:f9:53:d9:8b:bf:a3:f7:c8:71: 1f:5f:47:25:6a:4e:f9:37:ca:47:48:b8:e9:d3:91: e6:68:a6:db:4a:0d:49:05:68:89:88:a7:f7:56:b7: d1:7d:aa:21:0e:c5:b9:ef:88:6c:29:d3:2a:4e:2c: 08:68:65:ec:b4:85:4b:0b:2b:20:07:b2:87:da:11: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6B:98:67:5B:94:6E:E1:FA:64:0A:96:C4:E5:51:9F:3D:D2:3C:07 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f2:7b:09:d6:77:16:ee:4c:b9:4f:b3:58:8a:e4:04:88:89: d4:c6:3d:02:53:1b:bc:fd:76:8b:95:62:21:dc:68:58:a0:ad: b4:e6:d0:d8:8d:b9:aa:3a:2a:7c:15:5a:44:5e:df:ab:3c:45: 63:ce:ba:77:6e:82:2e:e5:d3:f7:f6:21:31:df:e0:f4:b9:63: 5d:81:b9:8b:89:93:90:0b:33:21:b0:fa:34:c4:c4:ea:75:64: ad:96:f3:c9:38:68:e8:2f:e5:9d:95:06:21:b2:fb:02:a0:e0: c5:36:2a:64:24:d2:be:49:30:19:c2:1f:7d:2b:ee:3f:dd:1a: 99:32:4b:ee:ad:3a:94:69:50:c9:f8:8f:c0:52:dd:ae:c4:20: 21:1c:e9:09:7b:50:8a:7c:d9:1f:15:ff:6b:88:5b:61:60:fb: b8:68:55:1c:07:4f:a1:78:22:51:b4:20:ae:27:3c:8b:83:dd: 65:59:44:e4:54:a8:4c:74:81:25:12:d2:86:1e:e3:bb:d8:01: 12:8d:47:08:5e:27:6c:b7:95:8c:d7:a2:db:ee:bc:eb:4d:10: 6b:ad:80:bc:1d:ee:48:a9:56:6d:32:7f:f7:9b:7f:a8:ee:74: 9c:68:ed:42:ff:31:54:80:e3:e6:9b:34:a9:94:f8:a7:9f:7b: 01:c9:33:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjQwNTE4MTgxNzAxWhcNMjQwNTI1MTgxNzAxWjAYMRYwFAYD VQQDEw02NjQ4ZjA5ZC02MzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk/hrOCYjYkUW8QlUmtrjD6HoFh/EFN3XoJtoVyPVWPSWzFbZGaydGtICKTh sKtluU8OX668fijOTPIZtsCGaOovzHd0zbaBLjDtr2IzzwHIi2aV52whUpDBXo0F qQ9tM/WveQImcHgjZqW4duLgsFbHgqwa0AtyD2LQNwH1ZDpyPj8D01Ivdn4zaXKa EobAQg5UEkaQ7G44ZVC6MwGhw6stAWcUHq3RPP4/eIiqMp+WEM1W7N+hY0j5U9mL v6P3yHEfX0clak75N8pHSLjp05HmaKbbSg1JBWiJiKf3VrfRfaohDsW574hsKdMq TiwIaGXstIVLCysgB7KH2hFnHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFrmGdb lG7h+mQKlsTlUZ890jwHMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB38nsJ1ncW7ky5T7NYiuQEiInUxj0CUxu8/XaLlWIh3GhYoK205tDY jbmqOip8FVpEXt+rPEVjzrp3boIu5dP39iEx3+D0uWNdgbmLiZOQCzMhsPo0xMTq dWStlvPJOGjoL+WdlQYhsvsCoODFNipkJNK+STAZwh99K+4/3RqZMkvurTqUaVDJ +I/AUt2uxCAhHOkJe1CKfNkfFf9riFthYPu4aFUcB0+heCJRtCCuJzyLg91lWUTk VKhMdIElEtKGHuO72AESjUcIXidst5WM16Lb7rzrTRBrrYC8He5IqVZtMn/3m3+o 7nScaO1C/zFUgOPmmzSplPinn3sByTOR -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org