$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json) Hash identifier: OviHVHwcWp594cD2U/yyJoH4Ki1MtFBtzah8vrAEvhE= Subject key identifier: 69:A1:B4:25:09:24:F9:63:91:15:0F:A6:B2:E9:95:91:5C:7F:01:46 Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft Manifest number: 75 Signing time: Fri 17 May 2024 07:56:56 +0000 Manifest this update: Fri 17 May 2024 07:56:55 +0000 Manifest next update: Fri 24 May 2024 07:56:55 +0000 Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: 67es3jyf/Jq/JNomfPfQgDe9oIvM3INYDoHt6tXLAfo=) 2: 0D16F5F4933211EEA5AC155DC4F9AE02.roa (hash: nZ1yHEPeiG19plzrBwBsmWUzv4md0N8DTeYNsXYdWYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: May 17 07:56:55 2024 GMT Not After : May 24 07:56:55 2024 GMT Subject: CN=66470dc7-4447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:86:ba:39:88:cd:10:33:3c:b2:91:12:ae: 15:cd:85:a5:c6:c3:a0:f7:81:40:3c:44:4c:fb:c3: a3:60:8a:2e:49:c5:ec:91:90:38:e3:d0:a5:b0:d1: 63:22:b4:79:08:de:38:3a:4e:e7:3b:aa:7f:55:8e: 3a:13:70:24:54:ce:42:2d:5b:36:f5:31:6c:b1:06: 81:b3:37:1c:b3:63:f0:03:70:05:ef:00:85:a2:d4: 35:00:4f:13:07:14:e9:05:47:d1:62:d4:83:b8:df: 6d:c7:07:ea:8c:fe:be:7e:b5:e5:5b:f4:7d:f6:5a: ab:6f:83:bd:27:33:8e:58:a7:2d:3b:fa:22:22:e3: d1:fa:91:7f:79:c4:ea:43:37:06:13:99:63:3d:43: f4:23:ae:c7:db:2f:3a:02:72:d8:94:15:49:42:62: fc:48:76:77:d0:8e:d1:2c:08:0d:b0:47:cf:30:0a: cb:fd:95:56:27:00:a7:cd:03:e5:a4:2d:6e:f2:f0: cd:55:fe:6f:7c:86:0f:ee:40:e4:80:ed:29:9f:e2: 60:1b:e3:a8:65:90:3d:58:5f:81:f4:6f:39:e8:b0: ad:0a:2e:a7:98:43:8d:c5:db:69:b4:ce:85:01:4b: 92:fd:51:9f:0d:17:6e:ff:7f:3c:76:f7:d0:f0:97: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A1:B4:25:09:24:F9:63:91:15:0F:A6:B2:E9:95:91:5C:7F:01:46 X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:41:a6:e0:dc:b9:d6:1f:3a:a4:5f:50:b1:a5:75:bf:74:30: 74:db:95:98:0d:96:f0:fa:5a:51:62:d7:f1:e0:2f:e4:13:f7: 1e:6c:cb:11:ff:ca:7a:6e:9c:67:e5:37:59:f1:a6:f1:30:69: d4:94:56:da:de:bf:5b:7c:dc:78:ff:2c:d9:bb:4b:dd:b2:81: 96:b9:5d:67:4a:72:9d:43:f8:ee:db:06:43:0d:b1:93:fd:40: e8:fa:4d:57:13:85:f3:99:17:d1:d8:12:74:4c:0e:e1:58:d8: 37:83:b2:15:15:63:49:5a:8a:83:a7:b8:7f:4e:da:35:22:e6: 93:3d:05:2c:43:53:4b:29:af:55:fc:4f:ad:77:b1:1f:c4:70: 43:8b:e2:4b:9b:6b:8e:dd:6f:e1:17:e2:35:e3:d2:b0:1f:e1: d2:eb:0a:05:25:c3:f0:a1:50:d3:32:8d:4c:58:3b:26:fb:2a: 5b:61:f0:67:c3:84:72:58:99:c4:48:fd:f6:44:9b:42:70:aa: 2e:b8:04:d0:f2:d2:3e:de:8d:ab:9a:d8:0b:82:5b:11:7e:22: fe:11:42:d1:95:04:66:de:80:e3:f7:dd:50:ed:dd:75:37:bf: 9e:75:94:82:29:f7:54:41:4f:36:a2:02:ce:f4:77:23:ab:24: 90:6d:d5:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjQwNTE3MDc1NjU1WhcNMjQwNTI0MDc1NjU1WjAYMRYwFAYD VQQDEw02NjQ3MGRjNy00NDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw86GujmIzRAzPLKREq4VzYWlxsOg94FAPERM+8OjYIouScXskZA449ClsNFj IrR5CN44Ok7nO6p/VY46E3AkVM5CLVs29TFssQaBszccs2PwA3AF7wCFotQ1AE8T BxTpBUfRYtSDuN9txwfqjP6+frXlW/R99lqrb4O9JzOOWKctO/oiIuPR+pF/ecTq QzcGE5ljPUP0I67H2y86AnLYlBVJQmL8SHZ30I7RLAgNsEfPMArL/ZVWJwCnzQPl pC1u8vDNVf5vfIYP7kDkgO0pn+JgG+OoZZA9WF+B9G856LCtCi6nmEONxdtptM6F AUuS/VGfDRdu/388dvfQ8Jc8lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmhtCUJ JPljkRUPprLplZFcfwFGMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xz clBoTXQ2eW9nUGg0b1Vfa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEQabg3LnWHzqkX1CxpXW/dDB025WYDZbw+lpRYtfx4C/kE/cebMsR /8p6bpxn5TdZ8abxMGnUlFba3r9bfNx4/yzZu0vdsoGWuV1nSnKdQ/ju2wZDDbGT /UDo+k1XE4XzmRfR2BJ0TA7hWNg3g7IVFWNJWoqDp7h/Tto1IuaTPQUsQ1NLKa9V /E+td7EfxHBDi+JLm2uO3W/hF+I149KwH+HS6woFJcPwoVDTMo1MWDsm+ypbYfBn w4RyWJnESP32RJtCcKouuATQ8tI+3o2rmtgLglsRfiL+EULRlQRm3oDj991Q7d11 N7+edZSCKfdUQU82ogLO9HcjqySQbdVU -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org