$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: zqFM/DNSIuRJQxwSyoyTDFJUeT/S10TERLDhFMy2+v4= Subject key identifier: 16:40:77:67:B9:5B:3B:26:E1:75:4F:04:73:CA:AD:5C:C7:8F:92:B0 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 68 Signing time: Wed 15 May 2024 07:42:49 +0000 Manifest this update: Wed 15 May 2024 07:42:49 +0000 Manifest next update: Wed 22 May 2024 07:42:49 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: f6W947tf+NJ5LFcJCG9tf3JEXnxoFxhlj6T35ok9bA4=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: WSD7s6FqOh0iYhQmLGXX6qqH39LklCQwpZNKx6rnaR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: May 15 07:42:49 2024 GMT Not After : May 22 07:42:49 2024 GMT Subject: CN=66446779-e8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:29:eb:cd:38:db:38:c4:dd:cf:1c:da:55: 5d:66:ce:15:1d:ba:01:08:b7:0f:d5:61:a8:3b:78: bf:92:16:71:d1:7f:55:e8:20:9b:7d:0d:48:b1:2f: a8:8c:79:c0:6d:d7:92:5d:7c:21:9c:46:39:23:52: 27:5f:df:8f:f1:35:d4:47:0a:5c:f0:59:ed:5c:ef: b0:66:79:76:f9:b6:97:94:ae:71:8c:80:97:28:65: b0:97:f5:97:d4:64:64:20:0e:e1:62:6c:5b:45:fc: 8d:23:88:5a:fd:3f:8b:60:b6:bb:9a:3a:cc:cb:5d: 72:88:74:f0:eb:01:2b:36:f6:9e:a5:ec:de:d7:7f: b7:da:30:59:92:02:81:f2:3f:14:2a:92:8a:58:79: 48:34:b0:39:93:b1:d6:58:65:1a:e3:d2:44:b7:ad: 9b:60:b9:80:8f:e4:18:e2:54:7a:a0:58:eb:d2:94: 28:ec:f2:bb:31:54:fa:11:10:f4:b4:66:0d:c9:54: 3c:52:79:a5:34:3c:6e:64:50:67:46:25:f1:cc:f5: 1a:6e:34:cd:0c:d4:a3:97:5e:4f:1b:f3:c4:a5:34: 8e:90:c5:59:11:95:b7:43:0c:e4:94:3e:42:71:00: c4:1a:b2:7d:7f:d1:c2:e5:e6:b4:fc:a5:27:73:7b: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:77:67:B9:5B:3B:26:E1:75:4F:04:73:CA:AD:5C:C7:8F:92:B0 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:07:d7:3a:24:28:05:ed:e8:0f:bd:5a:f4:68:c1:de:60:2c: f9:70:63:ac:1f:d0:0d:40:18:23:7f:4f:0b:f7:d8:05:ec:fb: b3:88:15:c0:44:2e:cc:5d:5d:d2:b5:72:95:f9:ad:3a:dd:61: ed:29:31:0e:5f:b7:0e:be:f7:f1:c7:12:8c:59:09:91:b7:fd: 25:d0:2e:8a:44:99:70:15:ba:4d:44:0c:48:3e:f3:af:14:b9: af:f0:06:08:41:33:4d:d1:a5:04:fd:8f:35:c3:7b:a6:71:7a: 7d:f6:3f:e2:3f:44:d8:8c:61:b3:f4:55:15:17:31:ba:e1:7f: 86:3f:a1:6c:ae:45:81:74:c0:fd:c2:2e:99:b6:e3:1b:12:db: a9:d4:97:3a:2c:d8:82:d3:e7:73:fe:61:17:e1:b8:f1:26:b4: a0:61:f2:41:7d:53:50:b5:b2:23:7e:9f:eb:0d:1e:81:f0:7c: fd:0b:6b:4a:45:a5:3e:1d:c3:97:8d:49:12:ad:68:b7:7a:83: 07:fd:cd:ee:97:ba:24:6b:91:5f:15:e0:c6:79:02:32:33:12: 26:72:e4:ce:79:18:05:d8:88:b1:0d:09:c5:e3:bf:40:0b:60: d1:ad:be:f2:bb:e5:29:00:a6:ff:74:19:7d:81:1d:8c:b4:b0: 87:4b:d5:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkFDNjExMC8GA1UEBRMoQjRFREIwRDZDQ0I1RjAwQzkzMDQzNzRFRTgxRjVFMjYx QUU2NzFDOTAeFw0yNDA1MTUwNzQyNDlaFw0yNDA1MjIwNzQyNDlaMBgxFjAUBgNV BAMTDTY2NDQ2Nzc5LWU4ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9HCnrzTjbOMTdzxzaVV1mzhUdugEItw/VYag7eL+SFnHRf1XoIJt9DUixL6iM ecBt15JdfCGcRjkjUidf34/xNdRHClzwWe1c77BmeXb5tpeUrnGMgJcoZbCX9ZfU ZGQgDuFibFtF/I0jiFr9P4tgtruaOszLXXKIdPDrASs29p6l7N7Xf7faMFmSAoHy PxQqkopYeUg0sDmTsdZYZRrj0kS3rZtguYCP5BjiVHqgWOvSlCjs8rsxVPoREPS0 Zg3JVDxSeaU0PG5kUGdGJfHM9RpuNM0M1KOXXk8b88SlNI6QxVkRlbdDDOSUPkJx AMQasn1/0cLl5rT8pSdze9ovAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFkB3Z7lb OybhdU8Ec8qtXMePkrAwHwYDVR0jBBgwFoAUtO2w1sy18AyTBDdO6B9eJhrmcckw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QUM2L0ExQjZDQkVBNzk3 RDExRUU5OTQ5QjA3M0M0RjlBRTAyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNj ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdE8ydzFzeTE4QXlUQkRkTzZCOWVKaHJtY2NrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 QUM2L0ExQjZDQkVBNzk3RDExRUU5OTQ5QjA3M0M0RjlBRTAyL3RPMncxc3kxOEF5 VEJEZE82QjllSmhybWNjay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHEH1zokKAXt6A+9WvRowd5gLPlwY6wf0A1AGCN/Twv32AXs+7OIFcBE LsxdXdK1cpX5rTrdYe0pMQ5ftw6+9/HHEoxZCZG3/SXQLopEmXAVuk1EDEg+868U ua/wBghBM03RpQT9jzXDe6Zxen32P+I/RNiMYbP0VRUXMbrhf4Y/oWyuRYF0wP3C Lpm24xsS26nUlzos2ILT53P+YRfhuPEmtKBh8kF9U1C1siN+n+sNHoHwfP0La0pF pT4dw5eNSRKtaLd6gwf9ze6XuiRrkV8V4MZ5AjIzEiZy5M55GAXYiLENCcXjv0AL YNGtvvK75SkApv90GX2BHYy0sIdL1YI= -----END CERTIFICATE-----Generated at Wed May 15 09:04:06 2024 by rpki-client on console-ams.rpki-client.org