$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft File: 1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json) Hash identifier: xtQOROhDNzYw/M9dXfrTPo9LQdyK4Nw1nLnMHoT25eI= Subject key identifier: D5:5C:C0:65:EA:49:27:12:50:7C:38:36:2B:60:F8:FF:1C:E0:A4:D1 Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft Manifest number: 06B8 Signing time: Tue 30 Apr 2024 23:25:55 +0000 Manifest this update: Tue 30 Apr 2024 23:25:55 +0000 Manifest next update: Tue 07 May 2024 23:25:55 +0000 Files and hashes: 1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: iG3vKq5N53wUUR1hmS5AKEE22R/bRN69miJZp+spZtg=) 2: A994D7B2128D11EB8538DC84C4F9AE02.roa (hash: hRwZC1oJXqbGtYl0T1dGj14964mtJLEARM6MORRMFe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: Apr 30 23:25:55 2024 GMT Not After : May 7 23:25:55 2024 GMT Subject: CN=66317e03-9ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:59:20:41:da:d5:e0:71:5e:3f:35:30:86: d2:c2:31:15:ca:4d:18:15:d9:51:89:3d:17:3e:57: 87:05:36:e5:d1:63:21:fb:04:d7:d8:30:ee:26:d3: 55:a4:9e:3b:73:59:86:fc:88:59:05:70:3e:15:4b: f2:da:3a:2e:c3:7a:b0:ad:4c:86:cb:e2:a2:15:a6: 98:a2:ce:53:7d:67:64:51:78:8c:c7:1d:b3:74:e4: 26:ab:82:65:59:68:fa:77:e1:7c:29:12:86:3b:18: c5:56:f8:32:53:9f:4f:c0:86:e3:06:6a:92:de:d3: ab:ba:10:8b:b7:b0:c0:49:90:56:91:20:c8:dd:cc: cc:1b:fc:15:bc:76:3d:65:81:b4:d9:b0:a9:60:25: 16:d8:56:aa:b0:57:29:8c:1d:e7:2b:07:c8:36:98: 16:66:89:9e:6d:d2:a6:44:a2:57:22:31:68:dd:55: 42:78:70:a9:7c:10:7f:fd:c7:98:c8:6a:da:7f:04: 87:b2:e4:29:29:37:88:21:73:22:7a:90:ff:97:81: 34:54:eb:ce:66:39:24:42:77:a1:18:25:60:50:7d: 08:71:35:a9:79:b1:2f:64:b1:ea:d5:b3:3b:85:96: b6:0f:46:1c:95:b3:44:76:88:7e:85:04:8d:49:dd: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5C:C0:65:EA:49:27:12:50:7C:38:36:2B:60:F8:FF:1C:E0:A4:D1 X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b8:a0:78:69:ef:6d:03:37:41:f1:a4:d0:9b:4b:4d:ef:9d: 89:f2:77:54:3a:41:90:af:7a:b8:12:0a:17:0e:3a:5b:7a:0b: 7c:5d:20:07:f0:29:b7:8f:cf:c9:39:1f:8f:0f:ef:c9:2c:2e: f5:22:0c:f2:d6:f5:75:23:c3:a5:2f:3f:dd:63:77:b4:03:4f: dd:38:15:82:e1:eb:79:2a:26:04:ab:b9:26:22:e9:95:68:7e: 6d:df:53:7a:51:34:5b:f4:29:7c:b1:41:82:02:0f:6a:d7:06: 03:bb:1e:58:dc:4f:65:79:b7:dc:67:9c:60:ae:a1:ac:6b:14: b1:ab:ac:82:87:82:65:f6:b2:4a:22:7a:9a:4a:09:13:71:a5: 88:7e:71:5a:e2:19:62:44:00:b1:46:5f:7d:46:42:e3:c1:51: 5d:6a:1c:d7:0b:ff:5f:c1:1a:37:61:30:18:be:90:98:d8:44: e7:45:95:c8:b8:41:97:da:46:ca:09:0b:49:48:76:e5:eb:5d: 86:64:12:a1:18:48:6f:40:dc:71:7e:8c:fd:21:0f:dc:25:42: c0:f8:59:86:62:0d:e8:20:d4:a8:7f:9b:23:54:44:f5:1e:0a: 4c:8a:01:0e:eb:f1:42:4c:ac:8a:b6:d8:e5:b5:f2:52:7c:a5: b7:58:75:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjQwNDMwMjMyNTU1WhcNMjQwNTA3MjMyNTU1WjAYMRYwFAYD VQQDEw02NjMxN2UwMy05YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWRZIEHa1eBxXj81MIbSwjEVyk0YFdlRiT0XPleHBTbl0WMh+wTX2DDuJtNV pJ47c1mG/IhZBXA+FUvy2jouw3qwrUyGy+KiFaaYos5TfWdkUXiMxx2zdOQmq4Jl WWj6d+F8KRKGOxjFVvgyU59PwIbjBmqS3tOruhCLt7DASZBWkSDI3czMG/wVvHY9 ZYG02bCpYCUW2FaqsFcpjB3nKwfINpgWZomebdKmRKJXIjFo3VVCeHCpfBB//ceY yGrafwSHsuQpKTeIIXMiepD/l4E0VOvOZjkkQnehGCVgUH0IcTWpebEvZLHq1bM7 hZa2D0YclbNEdoh+hQSNSd1mzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVcwGXq SScSUHw4Nitg+P8c4KTRMB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzY3Ri9BMjIxOTA1ODEyOEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNt MTlJU2pjTjFMeUtJZ0FGdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9uKB4ae9tAzdB8aTQm0tN752J8ndUOkGQr3q4EgoXDjpbegt8XSAH 8Cm3j8/JOR+PD+/JLC71Igzy1vV1I8OlLz/dY3e0A0/dOBWC4et5KiYEq7kmIumV aH5t31N6UTRb9Cl8sUGCAg9q1wYDux5Y3E9lebfcZ5xgrqGsaxSxq6yCh4Jl9rJK InqaSgkTcaWIfnFa4hliRACxRl99RkLjwVFdahzXC/9fwRo3YTAYvpCY2ETnRZXI uEGX2kbKCQtJSHbl612GZBKhGEhvQNxxfoz9IQ/cJULA+FmGYg3oINSof5sjVET1 HgpMigEO6/FCTKyKttjltfJSfKW3WHUp -----END CERTIFICATE-----Generated at Wed May 1 00:35:49 2024 by rpki-client on console-ams.rpki-client.org