$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: JuX8Bu2CnvFTj5eY8tcUUOrqwqx+cjI4OSNkApH2v3Q= Subject key identifier: 9C:49:17:B3:D7:39:D7:3D:4C:67:20:35:36:DB:A5:35:80:BC:97:39 Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0CDD Signing time: Wed 24 Apr 2024 18:49:58 +0000 Manifest this update: Wed 24 Apr 2024 18:49:57 +0000 Manifest next update: Wed 01 May 2024 18:49:57 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: 68elgxptPQ1Y5s1gVtdyHL3S3mEt9GNwK1uwQ19tGd4=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: +aIJztic4JbrKlc9xRRwNT7mIqNibRE3refWU8LEceQ=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: 3WC0Myyrt/lI4+b8R8F5+KcYn/adMapUqVAAHow9r+4=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: qSVxFIsVr+S/G6SoyCOtDObNV5qE0GWQ+oHE5K9CkD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: Apr 24 18:49:57 2024 GMT Not After : May 1 18:49:57 2024 GMT Subject: CN=66295455-881f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:09:c8:3f:0f:cb:3f:36:c2:f4:0d:47:41: a6:f8:ba:08:6e:ba:fe:10:b2:ff:27:e2:07:8f:f9: b5:f3:7a:27:d1:a2:0e:25:4e:22:1e:c0:68:f8:48: 39:1f:2a:52:51:00:b8:03:61:b7:1f:5a:cc:e8:01: e3:bb:53:c6:cd:c6:86:cd:53:fe:94:49:96:99:69: a3:96:59:5f:a0:e1:bb:26:74:cc:f0:07:4a:9b:b9: 44:8a:49:bf:eb:f6:1d:45:bd:a8:fc:c2:df:a1:1d: ce:be:5b:32:08:21:97:c7:7b:2b:67:f6:eb:28:30: 13:5a:49:94:ba:58:52:54:9c:fc:19:b9:67:2e:e7: bd:a1:df:95:80:85:f1:67:7f:35:f9:76:6c:1d:8c: e0:7a:fd:ed:e6:f3:4b:69:f5:44:6b:dc:2d:84:38: 71:63:29:b6:11:d0:ed:04:5d:1f:eb:58:aa:85:b4: a2:40:40:e8:0e:23:87:74:88:bd:b4:9e:34:b3:38: 67:18:fd:79:c6:38:1c:b8:08:07:4c:2e:01:88:e4: 1d:bc:e8:9f:05:52:bc:ed:94:d1:34:c3:1b:ba:d7: 69:3c:e8:e8:de:4d:2e:02:30:a0:27:ac:f1:41:59: f0:2e:9d:3c:54:74:66:73:97:32:40:fa:79:c0:38: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:49:17:B3:D7:39:D7:3D:4C:67:20:35:36:DB:A5:35:80:BC:97:39 X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:98:89:76:a6:6e:97:fa:88:58:a2:1b:ea:ef:37:11:5d:7a: 2f:6b:0d:ac:e5:de:06:f6:8a:74:d7:6d:74:a4:9c:e7:64:94: 0d:46:7e:73:91:5a:07:d8:63:e8:bf:14:ba:42:d0:04:5f:31: dd:a0:60:79:a1:1e:04:2a:84:34:d3:d9:b9:f2:42:5f:c2:4e: 2e:9a:29:e4:26:0f:69:4a:11:59:08:b7:71:95:8f:11:e4:39: 8d:32:1c:68:41:3a:66:e3:16:f9:0d:0d:52:7e:d2:a7:75:80: 3a:3c:ef:78:09:1e:3b:a6:93:45:a2:f9:f0:0f:94:b8:a2:ff: d8:ed:fe:d3:1f:82:df:b2:9a:c3:74:bc:c1:55:9f:99:1a:6f: 58:c6:79:a4:65:cb:cc:87:e6:81:3b:da:02:73:f0:e8:93:c6: b7:26:57:41:68:35:f1:09:4e:13:2b:31:7b:65:fc:b8:62:7b: 78:f3:ff:c9:96:3e:c0:69:c9:de:a6:22:8a:6e:48:10:d2:6f: 81:e8:e7:cf:00:8b:6f:12:f5:a7:67:10:a7:88:1e:6a:99:9b: 81:b7:d1:99:4e:9c:2e:f4:dd:ff:d0:ae:03:af:13:07:36:30: 6f:87:12:98:ba:7d:9f:43:b6:65:5b:d1:6f:2f:8a:7c:12:62: b4:a9:78:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjQwNDI0MTg0OTU3WhcNMjQwNTAxMTg0OTU3WjAYMRYwFAYD VQQDEw02NjI5NTQ1NS04ODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCsJyD8Pyz82wvQNR0Gm+LoIbrr+ELL/J+IHj/m183on0aIOJU4iHsBo+Eg5 HypSUQC4A2G3H1rM6AHju1PGzcaGzVP+lEmWmWmjlllfoOG7JnTM8AdKm7lEikm/ 6/YdRb2o/MLfoR3OvlsyCCGXx3srZ/brKDATWkmUulhSVJz8GblnLue9od+VgIXx Z381+XZsHYzgev3t5vNLafVEa9wthDhxYym2EdDtBF0f61iqhbSiQEDoDiOHdIi9 tJ40szhnGP15xjgcuAgHTC4BiOQdvOifBVK87ZTRNMMbutdpPOjo3k0uAjCgJ6zx QVnwLp08VHRmc5cyQPp5wDibTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxJF7PX Odc9TGcgNTbbpTWAvJc5MB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/mIl2pm6X+ohYohvq7zcRXXovaw2s5d4G9op01210pJznZJQNRn5z kVoH2GPovxS6QtAEXzHdoGB5oR4EKoQ009m58kJfwk4uminkJg9pShFZCLdxlY8R 5DmNMhxoQTpm4xb5DQ1SftKndYA6PO94CR47ppNFovnwD5S4ov/Y7f7TH4LfsprD dLzBVZ+ZGm9YxnmkZcvMh+aBO9oCc/Dok8a3JldBaDXxCU4TKzF7Zfy4Ynt48//J lj7AacnepiKKbkgQ0m+B6OfPAItvEvWnZxCniB5qmZuBt9GZTpwu9N3/0K4DrxMH NjBvhxKYun2fQ7ZlW9FvL4p8EmK0qXhT -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:46 2024 by rpki-client on console-fra.rpki-client.org