$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: E1kL9/gaQNS0i26AfoHPvZTv+GzN1i12bPFtPtHO40g= Subject key identifier: 01:F3:5A:76:F8:51:CB:69:81:4E:A8:F2:C8:79:AB:88:07:71:D2:CB Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0BA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0B9D Signing time: Mon 06 May 2024 19:18:54 +0000 Manifest this update: Mon 06 May 2024 19:18:54 +0000 Manifest next update: Mon 13 May 2024 19:18:54 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: 1ZDakU20dWsF8zrUmZehAlqJkE8jReX2VI9hEdMhYj4=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: yJ7JJ57X7acJRxSqEFCo5C/DFSHfzNjQxukB2Lk3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: May 6 19:18:54 2024 GMT Not After : May 13 19:18:54 2024 GMT Subject: CN=66392d1e-9be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:b1:b6:25:76:3a:27:ee:ad:54:a2:15:6a: e9:79:24:7d:8a:d9:01:fc:a2:dc:ef:da:b0:61:c8: a7:d6:23:17:ef:87:fc:bb:76:1b:33:80:6d:77:13: 78:16:d2:91:7a:87:a6:22:69:23:66:d4:fe:d9:36: bd:d8:b3:78:d0:b9:dd:d6:50:78:57:5d:50:ea:b3: 38:35:94:cb:e6:02:59:c4:3b:b2:c1:ed:86:b4:9e: 05:ad:51:c2:57:c7:e4:0f:48:fb:39:a0:9d:5b:13: 8c:0f:55:ff:3f:de:73:d5:b1:98:56:a4:b9:2d:2b: f5:36:7e:2f:af:f0:68:70:30:78:e7:f5:5a:d7:30: 5d:a0:13:9f:08:44:e2:16:93:5b:5f:77:11:4b:63: 26:22:1f:ac:55:59:c7:d5:91:bf:6b:d8:1b:4b:75: f7:a0:bd:55:fa:49:3b:a3:3e:bf:23:80:cf:55:0a: 40:c8:5b:22:af:2d:aa:8f:f2:db:30:30:8d:96:26: 2c:5e:98:de:e8:48:9b:54:a2:bb:ea:5a:a0:8c:32: 3a:89:31:f6:20:b7:bb:58:72:62:00:d6:a9:e1:73: cd:65:10:1f:be:22:d4:44:c5:49:b1:20:fe:13:4f: 90:39:a5:11:0d:fe:e8:d4:f2:69:f2:57:97:85:57: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F3:5A:76:F8:51:CB:69:81:4E:A8:F2:C8:79:AB:88:07:71:D2:CB X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:79:76:48:a0:53:e9:0b:60:79:bb:46:36:a0:20:c2:45:39: 26:6f:f7:30:19:a4:71:10:51:e1:53:d8:90:f6:38:80:42:ff: 5f:ae:fa:07:c4:c2:27:4f:b6:2e:26:54:4a:c4:c0:57:a3:91: 82:b8:83:fc:84:a3:ff:ba:14:c0:5d:27:61:bd:4f:a3:92:4d: 06:cf:d7:0c:75:93:85:92:b8:1a:e5:a2:bd:00:71:ec:4c:62: 39:92:c0:e1:3f:22:f6:f7:b0:0b:af:8f:47:45:14:5a:78:d8: 53:c9:ec:98:77:86:2c:24:13:d3:f2:47:5c:ca:ae:59:62:d1: 4c:d5:c0:9a:97:6f:58:0f:cb:1b:c5:82:32:e5:d4:93:d9:b5: fc:e5:bc:90:18:88:e8:cc:3e:7d:16:58:46:96:a5:27:0b:e0: bc:e3:da:a0:94:21:de:fe:9e:58:b9:66:92:3e:f5:74:75:d6: 95:b6:cb:8a:cd:47:28:88:f0:ea:d3:58:b2:7d:a6:64:3c:60: 2a:e0:d7:19:4a:57:65:34:df:b1:40:64:69:53:c7:2f:12:15: b1:03:3c:55:71:17:f1:18:d4:d6:43:5a:ed:b6:8e:fd:42:14: d1:d4:90:b3:1a:6b:e1:c5:85:35:a2:c3:90:96:10:e6:5a:48: 9f:c7:e5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjQwNTA2MTkxODU0WhcNMjQwNTEzMTkxODU0WjAYMRYwFAYD VQQDEw02NjM5MmQxZS05YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwyxtiV2OifurVSiFWrpeSR9itkB/KLc79qwYcin1iMX74f8u3YbM4BtdxN4 FtKReoemImkjZtT+2Ta92LN40Lnd1lB4V11Q6rM4NZTL5gJZxDuywe2GtJ4FrVHC V8fkD0j7OaCdWxOMD1X/P95z1bGYVqS5LSv1Nn4vr/BocDB45/Va1zBdoBOfCETi FpNbX3cRS2MmIh+sVVnH1ZG/a9gbS3X3oL1V+kk7oz6/I4DPVQpAyFsiry2qj/Lb MDCNliYsXpje6EibVKK76lqgjDI6iTH2ILe7WHJiANap4XPNZRAfviLURMVJsSD+ E0+QOaURDf7o1PJp8leXhVefuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHzWnb4 UctpgU6o8sh5q4gHcdLLMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoeXZIoFPpC2B5u0Y2oCDCRTkmb/cwGaRxEFHhU9iQ9jiAQv9frvoH xMInT7YuJlRKxMBXo5GCuIP8hKP/uhTAXSdhvU+jkk0Gz9cMdZOFkrga5aK9AHHs TGI5ksDhPyL297ALr49HRRRaeNhTyeyYd4YsJBPT8kdcyq5ZYtFM1cCal29YD8sb xYIy5dST2bX85byQGIjozD59FlhGlqUnC+C849qglCHe/p5YuWaSPvV0ddaVtsuK zUcoiPDq01iyfaZkPGAq4NcZSldlNN+xQGRpU8cvEhWxAzxVcRfxGNTWQ1rtto79 QhTR1JCzGmvhxYU1osOQlhDmWkifx+U8 -----END CERTIFICATE-----Generated at Mon May 6 20:19:29 2024 by rpki-client on console-ams.rpki-client.org