$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: mEXxC0LaV0ffR6yRUeQ+P0o+jEeSJdJNBGGI/gKFLMg= Subject key identifier: 4A:CD:33:AE:05:72:1F:93:E5:8B:18:B7:05:D1:B5:96:94:FC:83:9A Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 073F Signing time: Tue 30 Apr 2024 22:45:19 +0000 Manifest this update: Tue 30 Apr 2024 22:45:18 +0000 Manifest next update: Tue 07 May 2024 22:45:18 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: mr3eNzf1sAbxnVt5C6rG6aGGbBRX/PxrBwQCWk1EAgk=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: rKz6S4ig+3Nn3Uq5Htmq9rz0thwBeC0p821+eve0GW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Apr 30 22:45:18 2024 GMT Not After : May 7 22:45:18 2024 GMT Subject: CN=6631747f-9f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ff:95:c6:e3:71:40:dc:2f:ec:31:05:4a:6d: 1c:f7:6a:b2:e7:7a:41:37:40:66:1a:46:26:df:16: cb:6e:7a:2a:d5:d7:52:9a:b3:04:8e:68:e2:04:1d: 3c:50:d9:d4:8c:f1:d3:41:7b:ee:3e:c9:10:13:32: 01:fc:77:27:ae:1f:8e:32:cb:0e:f0:93:a6:a3:ff: 6e:8a:02:0e:1f:a2:46:52:45:6d:7b:24:1f:5c:0c: 1b:79:76:9f:e8:de:a0:c9:00:da:d8:ae:cd:a9:b2: 6c:fd:7e:09:83:13:4d:e6:81:73:ca:b0:7a:90:5c: 01:11:b6:45:f5:d1:6a:f3:bf:23:a3:dc:c4:ca:16: 69:0d:05:3e:08:c6:74:a0:61:a2:d6:8a:c8:68:e2: 5a:de:1e:e2:6e:77:42:dd:92:64:0a:5b:4a:00:a6: 0a:64:28:b5:58:26:3c:52:aa:dd:cd:59:41:c8:14: 6d:78:2c:1f:cd:72:fb:2d:49:b7:a3:1f:e9:cb:c9: d9:20:60:05:85:f8:9f:20:ea:32:40:98:7a:46:76: 7f:70:ee:13:35:43:23:68:7f:73:41:99:9c:80:7d: 3b:74:0f:17:f0:63:d3:ce:14:06:6c:ab:78:5e:99: 28:28:4a:4d:63:42:c5:69:39:fb:a5:9c:a9:d6:41: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CD:33:AE:05:72:1F:93:E5:8B:18:B7:05:D1:B5:96:94:FC:83:9A X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:18:76:31:fd:da:16:4d:af:ae:7c:ab:e4:e3:99:58:fd:7e: d5:c2:79:d9:71:b5:1c:6d:12:28:57:d6:f6:d5:63:1f:14:27: b5:34:37:f5:6e:45:c6:72:07:11:36:b3:ef:ed:94:c0:e9:53: 8d:76:d8:48:ac:89:ee:0c:ea:01:2e:f3:46:28:0c:73:35:de: 63:e4:7f:2f:b6:4b:2f:83:b0:c6:00:9a:f4:fe:00:5a:03:5b: 02:4e:17:0a:8c:3d:60:44:4b:52:9f:63:3c:4f:1b:b7:47:bf: 1a:b6:ff:40:61:2e:b7:e0:9a:4c:04:32:c5:7b:52:88:b0:7e: 34:b9:69:cd:e1:fe:4e:a6:cc:b1:a6:b5:13:73:90:cc:9b:50: 06:fb:73:36:62:c3:0f:10:4d:a0:aa:35:e5:f7:77:a7:84:da: 29:db:a0:91:d6:21:37:17:df:96:f2:cf:1a:63:35:0a:d5:8a: dc:40:b8:d0:55:8e:4e:6b:19:be:ba:67:ec:6d:cd:c4:96:7e: ad:17:5a:4e:f0:88:d2:c6:93:f8:23:73:e2:b9:47:ac:ad:ab: 9d:bd:b4:db:29:7b:67:77:e7:cd:2c:6a:66:a8:27:d6:83:b6: 0c:11:e6:46:1a:b2:c9:ef:25:a7:15:c9:a2:42:ef:10:4f:fe: 2d:7d:6a:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjQwNDMwMjI0NTE4WhcNMjQwNTA3MjI0NTE4WjAYMRYwFAYD VQQDEw02NjMxNzQ3Zi05ZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6v+VxuNxQNwv7DEFSm0c92qy53pBN0BmGkYm3xbLbnoq1ddSmrMEjmjiBB08 UNnUjPHTQXvuPskQEzIB/Hcnrh+OMssO8JOmo/9uigIOH6JGUkVteyQfXAwbeXaf 6N6gyQDa2K7NqbJs/X4JgxNN5oFzyrB6kFwBEbZF9dFq878jo9zEyhZpDQU+CMZ0 oGGi1orIaOJa3h7ibndC3ZJkCltKAKYKZCi1WCY8UqrdzVlByBRteCwfzXL7LUm3 ox/py8nZIGAFhfifIOoyQJh6RnZ/cO4TNUMjaH9zQZmcgH07dA8X8GPTzhQGbKt4 XpkoKEpNY0LFaTn7pZyp1kFB6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErNM64F ch+T5YsYtwXRtZaU/IOaMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKGHYx/doWTa+ufKvk45lY/X7VwnnZcbUcbRIoV9b21WMfFCe1NDf1 bkXGcgcRNrPv7ZTA6VONdthIrInuDOoBLvNGKAxzNd5j5H8vtksvg7DGAJr0/gBa A1sCThcKjD1gREtSn2M8Txu3R78atv9AYS634JpMBDLFe1KIsH40uWnN4f5Opsyx prUTc5DMm1AG+3M2YsMPEE2gqjXl93enhNop26CR1iE3F9+W8s8aYzUK1YrcQLjQ VY5Oaxm+umfsbc3Eln6tF1pO8IjSxpP4I3PiuUesraudvbTbKXtnd+fNLGpmqCfW g7YMEeZGGrLJ7yWnFcmiQu8QT/4tfWr8 -----END CERTIFICATE-----Generated at Tue Apr 30 23:40:13 2024 by rpki-client on console-fra.rpki-client.org