$ rpki-client -vvf rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft File: C0io-y5r59-P7QejyRmyPKQL3so.mft (raw, json) Hash identifier: yoKBKdjXnqWyKdLikQJxIZhR/7EkcEYaV4W04vYbgAQ= Subject key identifier: 4D:F0:7D:EE:4E:89:48:48:32:6A:94:FD:D4:91:53:51:B4:7C:21:39 Authority key identifier: 0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA Certificate issuer: /CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Certificate serial: 09FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft Manifest number: 09EC Signing time: Tue 30 Apr 2024 21:06:14 +0000 Manifest this update: Tue 30 Apr 2024 21:06:13 +0000 Manifest next update: Tue 07 May 2024 21:06:13 +0000 Files and hashes: 1: C0io-y5r59-P7QejyRmyPKQL3so.crl (hash: cgh/TPVfx34dcR4D/Yai7YX94mYzW9nPInfX+vpd0jY=) 2: E16EB924B1A011ECBB574850C4F9AE02.roa (hash: CEZ8Z/ydVgiIiROfP7uAQ+7fctg2F+eGoA3Q7mHZ4uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Validity Not Before: Apr 30 21:06:13 2024 GMT Not After : May 7 21:06:13 2024 GMT Subject: CN=66315d45-4717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:fa:5d:fa:a8:8a:15:ed:c7:57:9c:e8:50: 4e:13:c8:8b:a0:2f:80:0f:96:98:b8:00:5d:6c:8a: 0b:16:8c:5e:2a:4b:d1:39:97:a7:be:af:fe:b3:25: 4d:9e:b6:3b:87:75:86:68:84:d9:14:9b:55:54:e6: 0f:85:3c:2c:35:83:c9:f3:58:97:35:44:43:b4:0f: 65:dd:f3:5f:4b:85:ee:44:9c:94:c0:f2:67:48:85: 30:5e:4c:48:42:99:42:b7:79:fe:d7:a5:f4:1b:c0: 18:12:61:6e:99:e9:d2:b8:e4:86:fc:e9:c6:9d:0a: 69:1a:60:de:88:02:d7:48:4d:a1:8d:f8:77:40:1f: ff:e9:e0:e3:16:72:d8:3a:96:5b:af:ea:c1:ce:da: 39:66:ae:93:71:de:af:4e:a1:75:7a:74:70:e9:28: 7b:ed:a5:26:c5:1f:f5:92:38:11:af:33:6d:5d:51: 51:08:04:ad:b0:d4:d0:57:06:d2:a0:f1:35:90:8b: da:9c:64:34:88:b6:c6:78:68:a6:0f:1c:9d:88:8b: 94:bc:4c:1a:55:b4:f2:05:34:cb:15:3d:22:7b:39: 66:5b:1c:dd:98:1e:f6:4d:b9:a1:6a:e6:14:8f:92: 28:d1:aa:20:ea:04:db:03:e3:57:bc:e3:f1:2f:55: a2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:7D:EE:4E:89:48:48:32:6A:94:FD:D4:91:53:51:B4:7C:21:39 X509v3 Authority Key Identifier: keyid:0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:07:75:a8:f8:2d:d2:18:dc:01:4c:cf:dd:99:ff:aa:cc:87: 7e:cd:d9:9b:cb:1d:55:45:55:1f:9f:18:34:d4:af:ae:d0:15: a5:f5:a1:bb:a8:3c:64:58:19:73:8b:a6:80:60:e7:14:0c:a4: ff:73:4a:8b:e0:29:09:ba:67:46:80:bd:fb:43:ad:e4:80:e8: 9f:64:bc:90:fa:4e:61:c0:ba:cc:5a:5d:f1:b1:f4:a6:99:45: a3:e9:ff:d0:3b:81:62:21:27:a1:2e:a0:c5:4d:c6:95:f7:8d: a8:cd:ba:df:63:0a:97:2b:96:e1:82:f2:85:73:ec:cc:49:9c: 87:38:e4:fc:a6:31:e8:e3:36:40:de:82:db:e3:e8:22:15:a6: fd:0a:91:5b:8d:db:30:c3:9e:a6:2a:3f:db:bc:67:63:e2:ec: a1:40:51:ed:43:64:c4:44:59:db:eb:a6:91:bc:de:f1:96:cc: 62:d1:08:b8:14:dc:d1:37:39:db:64:37:f2:e7:e3:a5:38:a2: c1:f1:09:57:6c:7e:62:90:4a:25:9d:ca:be:67:e1:ad:af:80: c7:c3:b2:c4:9e:a3:50:58:05:8f:67:fc:d8:95:dd:a2:28:2e: 3e:e5:e9:2f:ed:6f:10:50:68:f7:1b:b5:24:58:f4:91:a2:3e: a3:7b:2b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyQjAxMTAvBgNVBAUTKDBCNDhBOEZCMkU2QkU3REY4RkVEMDdBM0M5MTlCMjND QTQwQkRFQ0EwHhcNMjQwNDMwMjEwNjEzWhcNMjQwNTA3MjEwNjEzWjAYMRYwFAYD VQQDEw02NjMxNWQ0NS00NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Or6XfqoihXtx1ec6FBOE8iLoC+AD5aYuABdbIoLFoxeKkvROZenvq/+syVN nrY7h3WGaITZFJtVVOYPhTwsNYPJ81iXNURDtA9l3fNfS4XuRJyUwPJnSIUwXkxI QplCt3n+16X0G8AYEmFumenSuOSG/OnGnQppGmDeiALXSE2hjfh3QB//6eDjFnLY OpZbr+rBzto5Zq6Tcd6vTqF1enRw6Sh77aUmxR/1kjgRrzNtXVFRCAStsNTQVwbS oPE1kIvanGQ0iLbGeGimDxydiIuUvEwaVbTyBTTLFT0iezlmWxzdmB72TbmhauYU j5Io0aog6gTbA+NXvOPxL1WicQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3wfe5O iUhIMmqU/dSRU1G0fCE5MB8GA1UdIwQYMBaAFAtIqPsua+ffj+0Ho8kZsjykC97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDJCMC82NkUwQ0FENjU2 RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5LVA3UWVqeVJteVBLUUwz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwaW8teTVyNTktUDdRZWp5Um15UEtRTDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDJCMC82NkUwQ0FENjU2RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5 LVA3UWVqeVJteVBLUUwzc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLB3Wo+C3SGNwBTM/dmf+qzId+zdmbyx1VRVUfnxg01K+u0BWl9aG7 qDxkWBlzi6aAYOcUDKT/c0qL4CkJumdGgL37Q63kgOifZLyQ+k5hwLrMWl3xsfSm mUWj6f/QO4FiISehLqDFTcaV942ozbrfYwqXK5bhgvKFc+zMSZyHOOT8pjHo4zZA 3oLb4+giFab9CpFbjdsww56mKj/bvGdj4uyhQFHtQ2TERFnb66aRvN7xlsxi0Qi4 FNzRNznbZDfy5+OlOKLB8QlXbH5ikEolncq+Z+Gtr4DHw7LEnqNQWAWPZ/zYld2i KC4+5ekv7W8QUGj3G7UkWPSRoj6jeyvX -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:56 2024 by rpki-client on console-fra.rpki-client.org