$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json) Hash identifier: p606We3123hnl4v9wC4kGgvrgLogi6/P4CO+DrcQL/o= Subject key identifier: A6:2F:27:FC:05:88:87:AD:8A:57:25:D3:E6:10:93:7F:19:92:38:C1 Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft Manifest number: 0601 Signing time: Fri 26 Apr 2024 23:55:41 +0000 Manifest this update: Fri 26 Apr 2024 23:55:40 +0000 Manifest next update: Fri 03 May 2024 23:55:40 +0000 Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: c9z3agSbCxxHs48pYktI+bgl1UuwKNOfhrDKXUAlF0w=) 2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: AFnKyv13BwnIhnPbTpxnyVf7p3Hft3Ho64nrgxctp3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Validity Not Before: Apr 26 23:55:40 2024 GMT Not After : May 3 23:55:40 2024 GMT Subject: CN=662c3efd-036b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:b4:1c:3b:f9:f6:90:4a:89:3f:47:28:df: c2:a6:c7:2b:7b:b7:a9:51:f4:01:1a:0f:9e:d1:6b: ed:c0:bf:22:d5:f1:4f:41:50:ad:83:fc:50:c0:24: 54:41:e1:53:5d:f3:87:fd:0a:44:5a:51:c2:b0:2a: f1:d4:dc:ca:1a:ac:d1:99:f8:dd:c6:8c:0b:a6:05: 5c:5c:1b:b6:da:24:07:08:3b:04:71:87:69:7f:4d: 69:6c:15:bf:90:41:86:9d:37:7b:26:1e:c6:06:0c: fb:1a:de:fc:db:d3:c3:ca:47:94:64:ee:7b:07:44: fb:e8:fc:ba:53:bb:cb:e6:93:e6:48:c5:fd:71:d0: 43:03:73:cd:e4:86:f1:02:56:a2:47:91:e4:a1:72: 41:55:4a:f7:ad:22:71:5a:ac:a3:63:f9:71:ac:4b: 74:a9:4c:a1:85:2f:ca:58:99:85:6e:e9:a6:3d:08: 91:e3:a8:4b:72:8e:4f:ac:ce:7e:cd:99:0e:b6:54: 76:4d:3c:ed:85:75:2e:f3:23:de:76:22:3d:90:8f: 60:85:8b:d9:ce:4b:50:06:33:88:8f:44:fb:0a:ab: 82:17:d6:a0:e5:04:05:a3:54:6a:7b:e1:c1:8d:23: 4b:80:69:99:8d:69:df:d8:1e:3d:6c:79:f6:eb:85: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2F:27:FC:05:88:87:AD:8A:57:25:D3:E6:10:93:7F:19:92:38:C1 X509v3 Authority Key Identifier: keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7b:fd:33:42:18:ef:35:01:90:df:c6:70:da:52:e7:4f:d3: 02:87:b9:a2:46:2b:0a:c1:02:ad:3c:63:50:da:d6:c2:ff:9d: eb:49:42:28:45:a1:b1:6e:a8:36:34:d3:f6:fe:46:4c:9b:4b: 65:5b:d0:be:bd:18:13:2e:a9:60:ff:fc:55:6d:c6:34:55:c0: 01:ed:1e:78:dc:6f:6a:e8:f9:b2:3d:6c:14:32:48:e1:79:71: c4:0a:6c:c5:3b:27:f6:6a:52:7f:fb:00:2e:2d:f3:60:51:21: bf:78:a1:69:94:cb:c7:a5:87:d4:f3:84:3e:8d:a1:11:ba:1a: 3c:ce:31:72:54:2e:17:55:f4:08:75:15:b3:96:c0:a3:4f:3e: c6:fe:0f:18:28:dd:ee:40:10:e0:77:25:66:c3:5d:f2:af:16: 05:58:5e:c8:96:39:3c:ec:9d:70:15:77:49:46:a0:1f:0b:bc: f9:f9:3b:29:d1:de:b4:46:bc:8d:a5:e3:83:83:6f:37:1e:8b: 6f:16:56:00:97:7f:ef:d0:c4:57:ad:9c:11:2e:6c:c5:5a:5b: b9:c6:de:b5:4c:d1:e6:ed:9c:68:bb:94:0d:a6:e6:d2:21:f0: e2:c6:8b:8f:4c:75:7e:63:d4:70:16:e8:1b:73:c2:06:3e:ca: b8:a5:4f:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyNUMxMTAvBgNVBAUTKDBDRUE2OEEwMkM1MjlGODg3NTJDNjQyREUwRDJGRUY5 RjVEN0ExNEEwHhcNMjQwNDI2MjM1NTQwWhcNMjQwNTAzMjM1NTQwWjAYMRYwFAYD VQQDEw02NjJjM2VmZC0wMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyka0HDv59pBKiT9HKN/Cpscre7epUfQBGg+e0WvtwL8i1fFPQVCtg/xQwCRU QeFTXfOH/QpEWlHCsCrx1NzKGqzRmfjdxowLpgVcXBu22iQHCDsEcYdpf01pbBW/ kEGGnTd7Jh7GBgz7Gt7829PDykeUZO57B0T76Py6U7vL5pPmSMX9cdBDA3PN5Ibx AlaiR5HkoXJBVUr3rSJxWqyjY/lxrEt0qUyhhS/KWJmFbummPQiR46hLco5PrM5+ zZkOtlR2TTzthXUu8yPediI9kI9ghYvZzktQBjOIj0T7CquCF9ag5QQFo1Rqe+HB jSNLgGmZjWnf2B49bHn264U5pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYvJ/wF iIetilcl0+YQk38ZkjjBMB8GA1UdIwQYMBaAFAzqaKAsUp+IdSxkLeDS/vn116FK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDI1Qy9BQzA1NTgyNjVF MjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240aDFMR1F0NE5MLS1mWFhv VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPcG9vQ3hTbjRoMUxHUXQ0TkwtLWZYWG9Vby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDI1Qy9BQzA1NTgyNjVFMjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240 aDFMR1F0NE5MLS1mWFhvVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAze/0zQhjvNQGQ38Zw2lLnT9MCh7miRisKwQKtPGNQ2tbC/53rSUIo RaGxbqg2NNP2/kZMm0tlW9C+vRgTLqlg//xVbcY0VcAB7R543G9q6PmyPWwUMkjh eXHECmzFOyf2alJ/+wAuLfNgUSG/eKFplMvHpYfU84Q+jaERuho8zjFyVC4XVfQI dRWzlsCjTz7G/g8YKN3uQBDgdyVmw13yrxYFWF7Iljk87J1wFXdJRqAfC7z5+Tsp 0d60RryNpeODg283HotvFlYAl3/v0MRXrZwRLmzFWlu5xt61TNHm7Zxou5QNpubS IfDixouPTHV+Y9RwFugbc8IGPsq4pU+j -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:37 2024 by rpki-client on console-ams.rpki-client.org