$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json) Hash identifier: pIlK+5I4c3LP2GxWKfdPrqqsjHxhNbinuscDaEV+Jvs= Subject key identifier: F9:EB:17:D7:AE:E0:14:5D:CA:ED:BE:3E:65:87:4D:1A:F1:C7:3B:59 Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft Manifest number: 01C6 Signing time: Sat 27 Apr 2024 04:21:03 +0000 Manifest this update: Sat 27 Apr 2024 04:21:02 +0000 Manifest next update: Sat 04 May 2024 04:21:02 +0000 Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: k8gkE6gFmNdLBuAQAPBhBUqTphY4RWE4pLlRWKS13/c=) 2: 4CBD82765EEA11EE9854B56AC4F9AE02.roa (hash: T/gbAwFJ4igiaZ4NqRErGSjS11rWZuqeJOhnN+QapwM=) 3: 85DF02C00D5411ED8208604DC4F9AE02.roa (hash: 6rR/odhUUC5TRyN/kt+0VU054d3mvvlQx/UfLqHwnWU=) 4: 8531045E0D5411ED8208604DC4F9AE02.roa (hash: 8TG2wuR4MI26GcPAPwfGrAtGwHRmhMD3YNEU3wAuQMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Validity Not Before: Apr 27 04:21:02 2024 GMT Not After : May 4 04:21:02 2024 GMT Subject: CN=662c7d2e-8777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:5a:5e:82:a7:22:86:9d:63:dc:f7:c8:8b: 07:57:4c:de:c7:ce:5c:8c:99:fd:ce:90:3c:90:ab: 24:dc:c5:34:fa:50:38:67:87:9a:79:9b:85:0f:74: e7:58:67:93:de:d8:ca:65:22:04:83:ef:49:cd:1b: bf:f2:ef:32:67:2e:4c:c0:bf:01:d4:51:28:9e:e6: da:81:7e:9c:b4:da:31:0f:82:5a:9c:88:bb:10:f0: c6:37:61:6a:00:f5:84:b0:bc:bf:ff:13:43:00:f0: ad:f2:0c:25:37:ae:86:9a:55:fa:62:f2:ee:10:71: de:2d:7b:e5:e3:c0:08:5f:42:34:7f:09:68:b6:16: f5:d6:8e:75:04:f9:6d:2b:8a:c6:ed:96:3e:16:5b: ec:66:3a:99:d4:a0:80:9c:ec:06:f7:8a:72:44:3f: 8e:a5:df:bc:6a:90:5e:ab:d8:2f:52:aa:8a:20:ce: 89:29:bb:1c:ed:1b:94:da:c7:9c:aa:d0:53:3c:16: 7b:b7:31:14:5c:da:bc:21:04:22:5e:04:55:5e:0e: 8a:5c:ef:61:db:b0:8f:7a:70:69:c3:96:d1:73:4f: e8:f8:53:98:1c:36:97:bb:d3:e6:09:a5:4c:21:a9: a4:f5:1d:78:99:4b:8b:7a:0d:ad:c1:b6:cc:2d:e4: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EB:17:D7:AE:E0:14:5D:CA:ED:BE:3E:65:87:4D:1A:F1:C7:3B:59 X509v3 Authority Key Identifier: keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f6:a1:bc:bc:51:ad:9f:c6:f9:7c:60:af:ef:d4:e8:20:2f: b6:dc:04:34:4b:9e:eb:86:aa:76:bc:65:94:52:75:45:e7:01: 70:53:bc:a5:f4:26:9e:06:c9:23:00:fc:7c:b7:30:51:54:49: a2:83:26:f7:ed:11:c2:07:8f:70:0f:d7:d4:6b:6b:c7:fa:e7: 79:3d:40:ea:8d:d5:ad:a7:3d:10:7e:31:50:30:96:c3:b6:be: 8f:34:19:c3:57:33:3d:3b:fe:80:68:39:88:36:a9:00:d2:35: d2:47:91:e5:12:6d:05:6b:85:a3:3c:b3:0e:fa:fe:ef:e9:94: 01:eb:ee:bb:44:93:d1:62:90:73:99:6a:d8:58:6a:b3:1a:ad: 26:27:42:d0:22:e5:a0:90:5b:d6:b4:3e:93:f2:5a:93:69:03: 79:70:fd:8b:2d:06:e3:94:2e:e5:41:58:c6:e7:b0:f8:0d:03: 5b:71:0d:8d:d9:b3:f0:39:be:d8:aa:37:0c:cd:3d:64:54:5d: e8:1f:55:2b:1a:00:6c:8c:68:4f:88:e8:6b:50:b2:92:cf:7f: c7:89:b1:7d:31:1c:94:71:1f:1a:73:44:f8:01:5b:57:9a:ca: 9f:bd:6c:35:b7:0b:d7:08:18:a3:af:52:c3:04:3f:34:12:8b: aa:af:66:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5 RTgwRUREMzUwHhcNMjQwNDI3MDQyMTAyWhcNMjQwNTA0MDQyMTAyWjAYMRYwFAYD VQQDEw02NjJjN2QyZS04Nzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18xaXoKnIoadY9z3yIsHV0zex85cjJn9zpA8kKsk3MU0+lA4Z4eaeZuFD3Tn WGeT3tjKZSIEg+9JzRu/8u8yZy5MwL8B1FEonubagX6ctNoxD4JanIi7EPDGN2Fq APWEsLy//xNDAPCt8gwlN66GmlX6YvLuEHHeLXvl48AIX0I0fwlothb11o51BPlt K4rG7ZY+FlvsZjqZ1KCAnOwG94pyRD+Opd+8apBeq9gvUqqKIM6JKbsc7RuU2sec qtBTPBZ7tzEUXNq8IQQiXgRVXg6KXO9h27CPenBpw5bRc0/o+FOYHDaXu9PmCaVM Iamk9R14mUuLeg2twbbMLeRGNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnrF9eu 4BRdyu2+PmWHTRrxxztZMB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1 OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253 VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD9qG8vFGtn8b5fGCv79ToIC+23AQ0S57rhqp2vGWUUnVF5wFwU7yl 9CaeBskjAPx8tzBRVEmigyb37RHCB49wD9fUa2vH+ud5PUDqjdWtpz0QfjFQMJbD tr6PNBnDVzM9O/6AaDmINqkA0jXSR5HlEm0Fa4WjPLMO+v7v6ZQB6+67RJPRYpBz mWrYWGqzGq0mJ0LQIuWgkFvWtD6T8lqTaQN5cP2LLQbjlC7lQVjG57D4DQNbcQ2N 2bPwOb7YqjcMzT1kVF3oH1UrGgBsjGhPiOhrULKSz3/HibF9MRyUcR8ac0T4AVtX msqfvWw1twvXCBijr1LDBD80Eouqr2bM -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:45 2024 by rpki-client on console-ams.rpki-client.org