$ rpki-client -vvf rpki.apnic.net/member_repository/A9116748/572BD65801C211ED9A243C4BC4F9AE02/sO0GHRO-_8eUHqpoz83OADFmFJA.mft File: sO0GHRO-_8eUHqpoz83OADFmFJA.mft (raw, json) Hash identifier: +7prlKNHemCDOWfe6KV+ZLR1ePU30H0XSPt3JfldwXc= Subject key identifier: B7:68:99:57:AB:CF:58:EE:7E:30:D5:57:16:6F:58:6E:E8:EF:82:5D Authority key identifier: B0:ED:06:1D:13:BE:FF:C7:94:1E:AA:68:CF:CD:CE:00:31:66:14:90 Certificate issuer: /CN=A9116748/serialNumber=B0ED061D13BEFFC7941EAA68CFCDCE0031661490 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sO0GHRO-_8eUHqpoz83OADFmFJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116748/572BD65801C211ED9A243C4BC4F9AE02/sO0GHRO-_8eUHqpoz83OADFmFJA.mft Manifest number: 01CE Signing time: Fri 03 May 2024 04:26:45 +0000 Manifest this update: Fri 03 May 2024 04:26:44 +0000 Manifest next update: Fri 10 May 2024 04:26:44 +0000 Files and hashes: 1: sO0GHRO-_8eUHqpoz83OADFmFJA.crl (hash: lO6uSCivNJi5mrtvqbp5KOxufBmMt0BMZGH5wA6pN8c=) 2: A5F5AA7C01C511EDA71F2B4FC4F9AE02.roa (hash: v8yI83zUoA1co38QJExv0EWZHZ+0TiLqOvhxslIZjvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116748/572BD65801C211ED9A243C4BC4F9AE02/sO0GHRO-_8eUHqpoz83OADFmFJA.crl rsync://rpki.apnic.net/member_repository/A9116748/572BD65801C211ED9A243C4BC4F9AE02/sO0GHRO-_8eUHqpoz83OADFmFJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sO0GHRO-_8eUHqpoz83OADFmFJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116748/serialNumber=B0ED061D13BEFFC7941EAA68CFCDCE0031661490 Validity Not Before: May 3 04:26:44 2024 GMT Not After : May 10 04:26:44 2024 GMT Subject: CN=66346784-5d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:90:83:fd:a2:9d:d6:77:b2:91:19:85:d4:b5: 93:8a:28:cf:23:a3:82:03:fa:82:9e:81:ca:86:05: cf:09:3c:60:4e:55:c9:1f:72:ed:c4:25:5f:dd:cd: 4e:ed:87:6a:00:77:03:dc:2f:45:82:fd:8c:0d:bd: c4:5f:42:3d:ac:2c:01:10:67:00:d5:86:41:20:1b: 82:0f:36:39:e3:7b:a9:68:c2:2f:1b:b8:1b:fd:f1: 71:dd:4b:c2:f9:3d:41:ba:c8:92:c4:bc:56:85:60: 82:b8:83:4f:c4:fe:a3:83:c2:8a:66:ec:80:ac:a6: 0e:c9:7a:4c:61:da:b2:08:df:58:ad:27:02:e7:19: 1c:af:d8:79:60:05:41:0a:6a:a1:e4:46:a2:ad:d9: ff:6f:d8:cd:b9:7d:6c:a0:d3:f1:23:82:7d:d6:39: 45:e8:65:d2:3c:67:32:9e:0b:e2:f9:df:6b:44:37: c1:f9:da:92:4a:fa:b8:b1:6c:0f:86:fe:6a:9d:44: 95:2e:c2:39:73:cd:f3:06:11:d8:d4:3c:1d:de:d1: 79:55:e5:dc:6e:f1:cb:6c:54:70:d3:da:55:ab:b6: ab:0f:b8:2b:d0:e7:79:20:a4:37:c2:11:38:83:1a: 94:62:80:05:ab:9a:21:ac:7e:6b:e1:f4:ab:12:a5: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:68:99:57:AB:CF:58:EE:7E:30:D5:57:16:6F:58:6E:E8:EF:82:5D X509v3 Authority Key Identifier: keyid:B0:ED:06:1D:13:BE:FF:C7:94:1E:AA:68:CF:CD:CE:00:31:66:14:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116748/572BD65801C211ED9A243C4BC4F9AE02/sO0GHRO-_8eUHqpoz83OADFmFJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sO0GHRO-_8eUHqpoz83OADFmFJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116748/572BD65801C211ED9A243C4BC4F9AE02/sO0GHRO-_8eUHqpoz83OADFmFJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:84:35:dd:07:3c:d2:bf:9f:c4:e5:45:e2:fd:fc:a7:7a:2b: 68:2f:13:4b:b1:e1:24:c7:d0:3d:12:84:05:e3:5f:0d:ce:77: 6c:d9:af:bc:db:be:ca:11:73:6f:e4:d5:3f:d3:f0:d8:ab:3e: e2:63:a6:35:08:d6:a9:4c:ad:99:93:03:7d:71:39:f6:61:c6: 32:5f:7e:39:09:c0:c7:49:50:d9:fa:d2:30:03:0b:25:d1:f6: df:4e:0f:82:13:8e:d3:47:df:4b:aa:04:2e:d1:9f:52:6b:8b: 4c:de:c7:4e:04:e0:2f:c2:3a:c4:67:3f:26:e6:e4:07:46:74: e5:7b:37:c5:11:d7:22:56:48:68:dd:47:6b:ee:c8:f0:45:f1: cd:90:fc:4a:53:ec:77:a8:04:49:09:80:6b:d2:ce:bd:6b:f6: dc:f8:c6:f3:26:46:d6:1c:d2:c4:df:69:99:30:7b:7f:34:60: e2:80:a4:ec:9e:e9:9a:d3:ce:e4:9d:59:3f:30:8e:1c:38:61: 0b:71:2a:0d:88:26:40:44:8f:48:46:d2:fb:6d:30:7b:a6:72: 4b:41:a1:07:29:bc:c9:f8:86:cc:0e:f6:1a:f8:76:54:cf:3d: 3c:e9:b9:0d:30:ad:d6:5d:47:c1:a9:f0:f8:52:1f:4e:90:cb: 3c:3e:eb:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3NDgxMTAvBgNVBAUTKEIwRUQwNjFEMTNCRUZGQzc5NDFFQUE2OENGQ0RDRTAw MzE2NjE0OTAwHhcNMjQwNTAzMDQyNjQ0WhcNMjQwNTEwMDQyNjQ0WjAYMRYwFAYD VQQDEw02NjM0Njc4NC01ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25CD/aKd1neykRmF1LWTiijPI6OCA/qCnoHKhgXPCTxgTlXJH3LtxCVf3c1O 7YdqAHcD3C9Fgv2MDb3EX0I9rCwBEGcA1YZBIBuCDzY543upaMIvG7gb/fFx3UvC +T1BusiSxLxWhWCCuINPxP6jg8KKZuyArKYOyXpMYdqyCN9YrScC5xkcr9h5YAVB Cmqh5Eairdn/b9jNuX1soNPxI4J91jlF6GXSPGcyngvi+d9rRDfB+dqSSvq4sWwP hv5qnUSVLsI5c83zBhHY1Dwd3tF5VeXcbvHLbFRw09pVq7arD7gr0Od5IKQ3whE4 gxqUYoAFq5ohrH5r4fSrEqWmqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdomVer z1jufjDVVxZvWG7o74JdMB8GA1UdIwQYMBaAFLDtBh0Tvv/HlB6qaM/NzgAxZhSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc0OC81NzJCRDY1ODAx QzIxMUVEOUEyNDNDNEJDNEY5QUUwMi9zTzBHSFJPLV84ZVVIcXBvejgzT0FERm1G SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NPMEdIUk8tXzhlVUhxcG96ODNPQURGbUZKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc0OC81NzJCRDY1ODAxQzIxMUVEOUEyNDNDNEJDNEY5QUUwMi9zTzBHSFJPLV84 ZVVIcXBvejgzT0FERm1GSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9hDXdBzzSv5/E5UXi/fyneitoLxNLseEkx9A9EoQF418Nznds2a+8 277KEXNv5NU/0/DYqz7iY6Y1CNapTK2ZkwN9cTn2YcYyX345CcDHSVDZ+tIwAwsl 0fbfTg+CE47TR99LqgQu0Z9Sa4tM3sdOBOAvwjrEZz8m5uQHRnTlezfFEdciVkho 3Udr7sjwRfHNkPxKU+x3qARJCYBr0s69a/bc+MbzJkbWHNLE32mZMHt/NGDigKTs numa087knVk/MI4cOGELcSoNiCZARI9IRtL7bTB7pnJLQaEHKbzJ+IbMDvYa+HZU zz086bkNMK3WXUfBqfD4Uh9OkMs8Putf -----END CERTIFICATE-----Generated at Fri May 3 05:32:31 2024 by rpki-client on console-ams.rpki-client.org