$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft File: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json) Hash identifier: e3aX1jM7SjQevjr0ci5/iUgT6q03BkRcY+P5wBq1kwM= Subject key identifier: CA:3D:A0:24:88:6B:DF:27:7A:6C:AE:DF:11:BC:4E:2B:1A:9F:73:F8 Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Certificate serial: 0332 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft Manifest number: 032F Signing time: Sat 27 Apr 2024 02:55:19 +0000 Manifest this update: Sat 27 Apr 2024 02:55:19 +0000 Manifest next update: Sat 04 May 2024 02:55:19 +0000 Files and hashes: 1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: HYFDzSJySrAOEhsJoWHF5kclXLDiL/87lSsOIJT5FFM=) 2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: uj3ryiqEyEItHLTKNBDv0Pu8PFeLmK1QdvcDvlyRkwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Validity Not Before: Apr 27 02:55:19 2024 GMT Not After : May 4 02:55:19 2024 GMT Subject: CN=662c6917-ac39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:33:5c:45:62:f4:d9:32:33:fc:83:f1:40: b8:71:a7:fa:1c:ab:27:ea:a8:3d:6b:14:8b:fa:72: 94:3c:32:92:93:b1:82:1c:b2:39:94:56:25:93:e7: 83:2b:5d:20:41:64:1d:e2:0a:a2:c7:6e:79:01:c3: 4f:23:79:03:99:00:3b:c9:f9:2f:89:37:c8:66:f6: 21:d4:b2:3d:ab:83:65:b2:e8:e5:fe:11:a2:20:6f: f4:d6:d6:4a:2d:05:53:e8:1e:2c:9c:84:4c:a8:23: e6:30:26:25:c1:f6:53:8d:b6:05:5b:44:0d:88:97: 02:c4:3b:f7:b3:4e:b5:3c:0a:34:9b:95:cf:ae:c8: 94:8c:1b:3b:d0:78:e4:13:6e:9f:13:72:f6:31:46: 77:21:43:29:d9:e2:4c:9b:19:69:77:5a:39:a4:f9: 71:1c:eb:8b:16:98:9e:ee:ef:73:85:15:5e:ad:09: cb:99:77:4d:0f:9d:75:86:57:7e:27:85:ad:28:8b: e0:9b:1c:f3:6f:ac:e0:50:3c:ea:be:83:5c:c7:d9: 49:9a:cf:16:80:35:05:33:53:67:63:23:83:aa:50: 1f:07:ef:45:1a:e5:51:f9:5c:77:ee:7d:19:81:99: cc:e3:db:ce:98:26:47:d3:c6:5d:ee:ee:d8:6b:09: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3D:A0:24:88:6B:DF:27:7A:6C:AE:DF:11:BC:4E:2B:1A:9F:73:F8 X509v3 Authority Key Identifier: keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a4:45:2d:fb:3c:fc:bc:d3:95:78:ec:da:8b:92:a4:8d:6a: 94:b2:fb:6d:21:0a:a2:63:e3:21:93:1d:21:06:61:04:41:ed: 1f:e9:73:3a:13:38:b9:e3:94:95:79:cb:58:fd:e6:f4:9a:34: cb:78:33:5d:df:95:e7:ea:7d:8b:ca:bb:2d:e2:15:b1:49:4a: d8:08:37:9b:1c:02:9d:e8:25:5c:00:0d:0f:c3:b2:62:8e:32: 9a:41:61:cd:71:1f:42:b7:b2:3a:31:79:bc:97:5d:51:e0:97: e3:6c:9c:ca:d2:50:60:dd:b3:a7:91:7e:0a:51:cd:49:4e:fb: f2:d2:fa:91:29:82:99:df:96:83:87:a9:cd:ab:d4:36:d5:a6: 04:13:2d:45:37:98:eb:95:e6:7b:c1:90:b7:d1:9f:7c:b9:4d: 43:bc:86:14:05:fe:f3:9a:be:12:3c:f7:cf:35:60:b3:eb:3e: 15:b6:a1:62:a9:cb:24:71:71:00:6e:4a:62:fa:46:62:c1:3d: c4:fa:9c:ac:40:5a:f9:80:75:39:3b:ec:e1:a4:f4:45:26:a5: 8d:60:b0:9f:a8:e2:2b:ef:20:b7:ef:d8:d0:68:13:53:a4:ce: 43:82:54:90:9e:56:04:85:2f:44:76:ba:25:8d:7b:51:42:3c: ad:36:b3:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyNkUxMTAvBgNVBAUTKEEzRkM5QTEwRTI1RDMxOTQyMThDQzA3RDNFM0I3OTU0 OUMyNDI5MkIwHhcNMjQwNDI3MDI1NTE5WhcNMjQwNTA0MDI1NTE5WjAYMRYwFAYD VQQDEw02NjJjNjkxNy1hYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJozXEVi9NkyM/yD8UC4caf6HKsn6qg9axSL+nKUPDKSk7GCHLI5lFYlk+eD K10gQWQd4gqix255AcNPI3kDmQA7yfkviTfIZvYh1LI9q4Nlsujl/hGiIG/01tZK LQVT6B4snIRMqCPmMCYlwfZTjbYFW0QNiJcCxDv3s061PAo0m5XPrsiUjBs70Hjk E26fE3L2MUZ3IUMp2eJMmxlpd1o5pPlxHOuLFpie7u9zhRVerQnLmXdND511hld+ J4WtKIvgmxzzb6zgUDzqvoNcx9lJms8WgDUFM1NnYyODqlAfB+9FGuVR+Vx37n0Z gZnM49vOmCZH08Zd7u7YawlgxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo9oCSI a98nemyu3xG8Tisan3P4MB8GA1UdIwQYMBaAFKP8mhDiXTGUIYzAfT47eVScJCkr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjI2RS9EQTFBNkM2Qzc2 QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1aUWhqTUI5UGp0NVZKd2tL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29feWFFT0pkTVpRaGpNQjlQanQ1Vkp3a0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjI2RS9EQTFBNkM2Qzc2QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1a UWhqTUI5UGp0NVZKd2tLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANpEUt+zz8vNOVeOzai5KkjWqUsvttIQqiY+Mhkx0hBmEEQe0f6XM6 Ezi545SVectY/eb0mjTLeDNd35Xn6n2Lyrst4hWxSUrYCDebHAKd6CVcAA0Pw7Ji jjKaQWHNcR9Ct7I6MXm8l11R4JfjbJzK0lBg3bOnkX4KUc1JTvvy0vqRKYKZ35aD h6nNq9Q21aYEEy1FN5jrleZ7wZC30Z98uU1DvIYUBf7zmr4SPPfPNWCz6z4VtqFi qcskcXEAbkpi+kZiwT3E+pysQFr5gHU5O+zhpPRFJqWNYLCfqOIr7yC379jQaBNT pM5DglSQnlYEhS9EdroljXtRQjytNrOT -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:44 2024 by rpki-client on console-ams.rpki-client.org