$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: LSM0hKiWEP3pLkcvcO1UWp5FPSg1T0OIiOPGhQXR9e8= Subject key identifier: F3:4D:4B:86:0E:25:39:D0:EB:3B:F0:11:67:48:63:08:C0:C1:AA:FA Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 07B2 Signing time: Sat 04 May 2024 22:15:41 +0000 Manifest this update: Sat 04 May 2024 22:15:41 +0000 Manifest next update: Sat 11 May 2024 22:15:41 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: FfcmRAJikdQXw4rUK2kqcov2C0H3cN8sYdtF724FVfI=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: BHbhjSIezGCGGzK4e8rIeDB98iHUoKHnWs1fsyUW3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: May 4 22:15:41 2024 GMT Not After : May 11 22:15:41 2024 GMT Subject: CN=6636b38d-66fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:08:bd:2b:be:01:55:af:ed:32:52:2c:ed: 16:ec:3d:6a:07:c2:fb:c0:fb:5f:60:fc:0d:bc:4d: fb:4c:68:70:26:89:01:cf:e1:44:c6:38:e3:c0:91: 9d:63:f2:7d:f2:76:b1:6b:ed:92:c2:c6:84:ae:37: 5d:f1:da:06:c9:56:c3:32:8c:22:03:a8:02:77:63: 6e:1d:a1:cd:07:f6:91:39:40:e7:6f:ea:2d:ba:b9: 1b:91:a8:df:82:09:7a:e1:da:be:5b:17:4c:e5:66: ba:c4:03:45:ab:af:30:8c:6a:2d:eb:56:c6:a7:b1: 42:fe:f8:9a:09:bb:bd:c8:d4:ed:28:78:7f:90:d7: 58:13:93:f3:35:d4:76:bf:79:a5:de:b2:2e:0c:d9: 3c:bc:f8:0a:dd:f0:97:c5:f9:f5:1e:88:2e:39:40: 3d:a0:7e:04:f2:4f:b1:6f:40:41:0b:ae:80:7f:12: a5:cf:04:e9:69:92:fe:b8:eb:04:62:52:19:34:c6: 83:c3:86:59:d3:61:42:f6:54:89:fe:c9:31:ac:97: ac:0d:97:a8:2e:2b:a6:de:80:c9:f6:04:58:6b:97: b7:45:7c:43:d2:28:11:ed:8d:6f:f4:dd:0b:58:49: 01:c5:83:ce:45:98:71:65:0f:b5:20:ab:c4:30:ac: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4D:4B:86:0E:25:39:D0:EB:3B:F0:11:67:48:63:08:C0:C1:AA:FA X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1a:a3:ea:75:eb:1f:fd:f9:c9:dc:42:5a:8c:23:26:2d:e8: 14:5f:73:0a:fe:dc:08:32:cb:c8:4d:09:57:bd:22:da:63:df: 99:c0:ea:9b:a1:6d:88:b2:92:50:e8:b8:7c:1e:75:c1:cf:0d: 8f:7f:35:90:96:a6:bf:67:29:55:9d:1e:40:18:5d:b4:9b:c2: 53:7d:be:a8:a8:ad:25:ae:ca:c9:74:61:b1:55:9f:08:34:e9: f6:bc:72:86:04:f4:b5:c5:7b:eb:c4:a1:1d:1a:8b:54:41:69: db:3b:5a:69:80:9c:be:c1:30:2d:18:8b:1f:1a:f1:08:9f:0e: 72:d6:2a:f2:b4:0f:b5:09:cf:51:7b:42:8e:0a:da:62:c4:2a: 42:b4:2c:d4:39:0a:ef:22:6e:68:30:7f:36:22:06:15:76:61: 56:2d:6a:ad:4f:2e:35:b1:5f:60:95:d1:06:d1:2f:5c:fd:bd: c1:df:17:3b:a9:6c:00:73:64:b3:1e:d3:d4:54:1d:4e:72:34: fe:b4:d0:8d:37:c2:60:35:9b:b2:79:e5:7b:d0:79:da:f0:f8: f5:e2:ac:2b:be:cc:f9:5e:dd:94:e9:73:ac:81:ae:30:d1:08: 14:f7:20:18:e7:51:f8:11:cb:32:24:d2:73:4a:75:6a:99:b0: 2b:a0:5b:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjQwNTA0MjIxNTQxWhcNMjQwNTExMjIxNTQxWjAYMRYwFAYD VQQDEw02NjM2YjM4ZC02NmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ooIvSu+AVWv7TJSLO0W7D1qB8L7wPtfYPwNvE37TGhwJokBz+FExjjjwJGd Y/J98naxa+2SwsaErjdd8doGyVbDMowiA6gCd2NuHaHNB/aROUDnb+oturkbkajf ggl64dq+WxdM5Wa6xANFq68wjGot61bGp7FC/viaCbu9yNTtKHh/kNdYE5PzNdR2 v3ml3rIuDNk8vPgK3fCXxfn1HoguOUA9oH4E8k+xb0BBC66AfxKlzwTpaZL+uOsE YlIZNMaDw4ZZ02FC9lSJ/skxrJesDZeoLium3oDJ9gRYa5e3RXxD0igR7Y1v9N0L WEkBxYPORZhxZQ+1IKvEMKxt2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNNS4YO JTnQ6zvwEWdIYwjAwar6MB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMGqPqdesf/fnJ3EJajCMmLegUX3MK/twIMsvITQlXvSLaY9+ZwOqb oW2IspJQ6Lh8HnXBzw2PfzWQlqa/ZylVnR5AGF20m8JTfb6oqK0lrsrJdGGxVZ8I NOn2vHKGBPS1xXvrxKEdGotUQWnbO1ppgJy+wTAtGIsfGvEInw5y1irytA+1Cc9R e0KOCtpixCpCtCzUOQrvIm5oMH82IgYVdmFWLWqtTy41sV9gldEG0S9c/b3B3xc7 qWwAc2SzHtPUVB1OcjT+tNCNN8JgNZuyeeV70Hna8Pj14qwrvsz5Xt2U6XOsga4w 0QgU9yAY51H4EcsyJNJzSnVqmbAroFuf -----END CERTIFICATE-----Generated at Sun May 5 00:14:40 2024 by rpki-client on console-ams.rpki-client.org