$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json) Hash identifier: x1Zl4GwPGGq9nt3cbpy8XYPefjJ7CwDuX90nDnuYxDU= Subject key identifier: 8F:74:9F:41:F9:A1:AB:9C:E4:65:AA:D9:7D:6D:E7:15:74:BF:41:45 Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft Manifest number: 12C7 Signing time: Tue 30 Apr 2024 20:11:20 +0000 Manifest this update: Tue 30 Apr 2024 20:11:19 +0000 Manifest next update: Tue 07 May 2024 20:11:19 +0000 Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: xfIdZR6pHytHMz5CumSRCSWhvmBaXwTIRpiH5e+LYr8=) 2: C766E398C0EE11EA94A1F146C4F9AE02.roa (hash: MyXemzF+bZd76W5cLpe6QSSUZHHh9fFPx1hPghzfB/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Validity Not Before: Apr 30 20:11:19 2024 GMT Not After : May 7 20:11:19 2024 GMT Subject: CN=66315068-7077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:1a:75:ad:e9:80:f0:c4:fc:21:a8:05:47: 4f:c6:e8:ec:de:d5:15:4f:95:bf:c3:4b:65:ce:e8: c5:31:0c:d2:c5:79:41:59:75:a7:e2:a7:6a:5c:6b: 2a:aa:5b:04:34:b5:bc:48:94:4f:48:ba:a5:b3:6c: 77:b7:90:31:40:1e:24:fc:34:5f:7d:2d:64:b7:e6: 99:db:02:21:48:74:79:27:08:6d:65:3b:c6:78:e2: ae:92:ef:6a:ee:7d:f1:02:5d:16:7b:0a:69:66:6b: 97:95:99:8a:dc:2f:25:5d:57:21:73:fe:34:fd:64: f4:74:56:fa:1b:a9:09:a4:89:bb:ee:5b:67:17:9b: bb:39:c2:51:2d:75:1d:47:b3:f4:ff:3a:70:63:08: 32:e5:a6:8f:c4:97:44:bb:6e:50:10:54:98:e1:8a: 05:d7:6f:e2:79:bc:87:2f:cc:de:b4:83:7c:41:da: 33:98:49:99:fc:c7:76:a7:bb:d1:7d:74:86:34:10: 8f:de:b4:07:af:04:87:a3:30:46:5f:4d:1f:c3:a2: 7f:0a:85:3c:99:80:f4:6d:75:c5:f0:f4:f9:55:0e: ef:dd:c3:fe:6f:f7:e2:0b:b8:71:e2:4b:18:9c:ce: c8:d6:89:11:76:db:5c:d5:93:d2:a3:d1:34:f5:e5: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:9F:41:F9:A1:AB:9C:E4:65:AA:D9:7D:6D:E7:15:74:BF:41:45 X509v3 Authority Key Identifier: keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8d:e9:a9:da:11:44:3d:4c:f6:29:b8:42:bc:af:40:d8:e8: 82:40:4d:c7:db:ea:b4:11:6b:19:25:43:ad:67:b8:31:a0:6c: 17:aa:2c:ca:13:f4:3a:eb:bd:47:9f:c6:91:76:c5:16:22:38: 68:20:4b:b9:b4:b0:40:18:9c:5f:d1:20:a4:07:36:0b:55:ed: fc:74:1c:a0:bc:7e:2c:7b:3e:35:47:4c:45:8c:5a:92:e4:b7: 0c:f8:41:f6:05:ba:9d:aa:cb:57:27:f5:a1:1f:1a:37:73:f9: 25:8a:62:a1:31:8b:5f:f7:42:be:64:9a:a7:14:ce:f9:d6:1c: b0:37:aa:45:60:0a:ed:7a:b1:d9:28:27:44:f1:e3:dc:4c:a0: 01:59:74:cb:2a:9f:c6:1f:6b:e7:d6:6e:0a:93:99:69:e0:df: 29:d7:b8:6f:f6:ef:59:d2:f3:7d:49:01:a1:9a:21:f7:ab:5c: 68:62:62:31:ea:95:ee:86:8c:d3:59:e2:da:24:03:b3:71:da: 7b:04:6e:22:16:e3:0a:2d:4b:e9:93:2b:32:8b:db:b2:e9:44: 73:ff:d1:2b:8a:8d:94:a7:eb:72:83:c2:88:fb:82:3e:9b:39: e8:02:f3:6c:60:22:ba:e6:b1:00:d9:32:09:b9:7f:3b:a9:85: 1d:e2:dd:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKDM4ODgwREI5MzZBQ0NDOUJENzREM0RCOERGODg4N0Iz MjhFNTc4OEQwHhcNMjQwNDMwMjAxMTE5WhcNMjQwNTA3MjAxMTE5WjAYMRYwFAYD VQQDEw02NjMxNTA2OC03MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztMada3pgPDE/CGoBUdPxujs3tUVT5W/w0tlzujFMQzSxXlBWXWn4qdqXGsq qlsENLW8SJRPSLqls2x3t5AxQB4k/DRffS1kt+aZ2wIhSHR5JwhtZTvGeOKuku9q 7n3xAl0WewppZmuXlZmK3C8lXVchc/40/WT0dFb6G6kJpIm77ltnF5u7OcJRLXUd R7P0/zpwYwgy5aaPxJdEu25QEFSY4YoF12/iebyHL8zetIN8QdozmEmZ/Md2p7vR fXSGNBCP3rQHrwSHozBGX00fw6J/CoU8mYD0bXXF8PT5VQ7v3cP+b/fiC7hx4ksY nM7I1okRdttc1ZPSo9E09eUg0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI90n0H5 oauc5GWq2X1t5xV0v0FFMB8GA1UdIwQYMBaAFDiIDbk2rMyb1009uN+Ih7Mo5XiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pKdlhUVDI0MzRpSHN5amxl STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZ051VGFzekp2WFRUMjQzNGlIc3lqbGVJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pK dlhUVDI0MzRpSHN5amxlSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANjemp2hFEPUz2KbhCvK9A2OiCQE3H2+q0EWsZJUOtZ7gxoGwXqizK E/Q6671Hn8aRdsUWIjhoIEu5tLBAGJxf0SCkBzYLVe38dBygvH4sez41R0xFjFqS 5LcM+EH2BbqdqstXJ/WhHxo3c/klimKhMYtf90K+ZJqnFM751hywN6pFYArterHZ KCdE8ePcTKABWXTLKp/GH2vn1m4Kk5lp4N8p17hv9u9Z0vN9SQGhmiH3q1xoYmIx 6pXuhozTWeLaJAOzcdp7BG4iFuMKLUvpkysyi9uy6URz/9Erio2Up+tyg8KI+4I+ mznoAvNsYCK65rEA2TIJuX87qYUd4t3q -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:54 2024 by rpki-client on console-fra.rpki-client.org