$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft File: bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json) Hash identifier: Jk7p1qJDv2q9LGbhQ4lhagVSoUgnVlqJArTav5padc0= Subject key identifier: 14:6B:2E:26:95:DB:7D:89:15:D7:06:23:52:1F:7E:E4:C0:DD:38:9E Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B Certificate issuer: /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft Manifest number: 70 Signing time: Fri 17 May 2024 07:35:56 +0000 Manifest this update: Fri 17 May 2024 07:35:55 +0000 Manifest next update: Fri 24 May 2024 07:35:55 +0000 Files and hashes: 1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: 2BTAJ0DD+jt8H63+8gxxrTGqHJOshHL+225g9opUbUw=) 2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: vc95pWIwY/O90dCzIDvkkXU3ok7B1feeaGtEaxmTRj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B Validity Not Before: May 17 07:35:55 2024 GMT Not After : May 24 07:35:55 2024 GMT Subject: CN=664708dc-675c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:94:a4:54:78:a3:07:da:1d:6a:b6:71:1a:93: 33:42:c4:7e:25:fa:fb:98:07:ce:5d:da:6d:30:fe: b1:6c:6f:52:63:43:74:9b:9d:7a:3b:d7:a6:63:0e: 77:a1:95:8a:29:f4:64:bd:b3:e5:75:b9:10:56:c1: 85:e7:6f:19:4a:a3:2e:13:d6:24:d2:3f:c7:01:40: 28:8a:94:db:7c:9c:72:e1:28:7d:00:9e:4d:32:b2: 1e:6d:32:89:c3:72:04:c5:a3:8b:b6:3d:f7:6f:94: c2:25:45:02:67:af:53:13:6f:c6:78:b7:6f:f9:32: 9e:bc:01:a0:9f:58:5a:d1:b4:34:32:28:a7:86:48: 5b:12:16:44:86:07:80:e4:5b:ea:3e:e4:b1:d3:be: 99:b9:1c:96:64:48:bf:00:ab:3b:48:73:65:ad:fc: 8e:87:93:44:d1:93:c1:98:dd:49:45:4b:42:a9:b6: 44:c3:1c:ef:9f:94:b1:41:a4:b6:25:c1:9b:c5:e6: 03:8b:31:56:e8:e4:e3:2a:ea:83:b0:67:28:dc:b2: 32:c6:12:0f:71:0a:7d:db:86:80:a1:08:8b:08:a8: 58:53:f1:c5:a9:55:40:b2:37:c9:e7:f3:06:3b:60: 36:a6:40:4c:60:ae:ee:4d:0f:9a:41:eb:34:df:2f: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6B:2E:26:95:DB:7D:89:15:D7:06:23:52:1F:7E:E4:C0:DD:38:9E X509v3 Authority Key Identifier: keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:cb:19:46:ed:31:a2:23:34:d4:17:6d:dd:8a:24:f8:7d:17: 66:e5:85:40:f8:f7:88:9a:7f:d0:2e:8f:01:5e:6b:b2:80:05: cd:de:48:e2:3a:bc:b3:d7:c0:00:1a:8c:82:d1:40:62:85:f4: 07:1c:4a:33:02:f9:2c:b6:d3:c3:ba:d1:a6:23:c8:f8:44:72: b3:99:35:f7:f9:dc:11:fb:b3:fc:09:d6:43:31:9f:41:dc:5e: 30:27:56:ec:9e:5b:f7:f1:ba:1f:28:41:15:d1:db:8e:46:fd: 17:26:7d:df:08:ac:71:8b:16:2f:58:cd:92:58:7d:50:80:52: 10:9e:41:ad:1c:8a:b7:33:6e:1d:c4:c9:da:0a:e9:e7:ae:06: 13:92:d4:78:a1:3e:d5:34:b7:a8:8f:61:2b:dd:2c:8d:0a:4f: e7:b2:e8:2a:bd:ae:d6:d6:9a:87:26:57:5e:da:b4:3c:35:b3: a7:a1:e7:2d:db:cc:ef:27:74:40:c3:d6:07:a0:0e:1e:7d:e8: b3:b2:ea:b8:6d:62:85:e3:29:52:2f:03:65:15:3c:b9:ed:bc: ed:5c:2b:d8:9a:d7:c3:9f:63:e0:4d:51:52:6d:f5:0d:50:ae: 2c:93:f7:47:a7:bf:6e:cf:c1:4a:2c:dc:f6:dd:42:b7:0a:f6: 56:14:72:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEU5ODExMC8GA1UEBRMoNkNFMkQ3RDBEOTU5ODBENzQzQ0FENDg0ODY5ODQ4REJB MTI1QzI5QjAeFw0yNDA1MTcwNzM1NTVaFw0yNDA1MjQwNzM1NTVaMBgxFjAUBgNV BAMTDTY2NDcwOGRjLTY3NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTlKRUeKMH2h1qtnEakzNCxH4l+vuYB85d2m0w/rFsb1JjQ3SbnXo716ZjDneh lYop9GS9s+V1uRBWwYXnbxlKoy4T1iTSP8cBQCiKlNt8nHLhKH0Ank0ysh5tMonD cgTFo4u2PfdvlMIlRQJnr1MTb8Z4t2/5Mp68AaCfWFrRtDQyKKeGSFsSFkSGB4Dk W+o+5LHTvpm5HJZkSL8AqztIc2Wt/I6Hk0TRk8GY3UlFS0KptkTDHO+flLFBpLYl wZvF5gOLMVbo5OMq6oOwZyjcsjLGEg9xCn3bhoChCIsIqFhT8cWpVUCyN8nn8wY7 YDamQExgru5ND5pB6zTfL5MZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFGsuJpXb fYkV1wYjUh9+5MDdOJ4wHwYDVR0jBBgwFoAUbOLX0NlZgNdDytSEhphI26Elwpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwRTk4Lzc0RkQ1RTgyNkU1 MzExRUU5QjkxN0U3OUM0RjlBRTAyL2JPTFgwTmxaZ05kRHl0U0VocGhJMjZFbHdw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYk9MWDBObFpnTmREeXRTRWhwaEkyNkVsd3BzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw RTk4Lzc0RkQ1RTgyNkU1MzExRUU5QjkxN0U3OUM0RjlBRTAyL2JPTFgwTmxaZ05k RHl0U0VocGhJMjZFbHdwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACDLGUbtMaIjNNQXbd2KJPh9F2blhUD494iaf9AujwFea7KABc3eSOI6 vLPXwAAajILRQGKF9AccSjMC+Sy208O60aYjyPhEcrOZNff53BH7s/wJ1kMxn0Hc XjAnVuyeW/fxuh8oQRXR245G/Rcmfd8IrHGLFi9YzZJYfVCAUhCeQa0circzbh3E ydoK6eeuBhOS1HihPtU0t6iPYSvdLI0KT+ey6Cq9rtbWmocmV17atDw1s6eh5y3b zO8ndEDD1gegDh596LOy6rhtYoXjKVIvA2UVPLntvO1cK9ia18OfY+BNUVJt9Q1Q riyT90env27PwUos3PbdQrcK9lYUcuM= -----END CERTIFICATE-----Generated at Fri May 17 08:52:45 2024 by rpki-client on console-ams.rpki-client.org