$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json) Hash identifier: ygLbTkOomE1LcTlvGMxRpPjOxIfCNWjFsLH676fl32c= Subject key identifier: 1D:70:AD:45:90:0A:73:CD:48:4A:88:F3:00:37:64:AF:8F:7C:67:68 Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft Manifest number: 02E1 Signing time: Wed 01 May 2024 03:38:07 +0000 Manifest this update: Wed 01 May 2024 03:38:06 +0000 Manifest next update: Wed 08 May 2024 03:38:06 +0000 Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: 6P/8YyDAy80s7NMXJHuLVhyAh4MCFDiSTzBkkgGqsdQ=) 2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: J2y++DTpQjM62pEpWjR1Gs3cyedpaujU22KIGL2GSqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Validity Not Before: May 1 03:38:06 2024 GMT Not After : May 8 03:38:06 2024 GMT Subject: CN=6631b91e-ce57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:30:04:20:35:07:2e:29:00:b2:92:7e:a7: 4f:6c:cc:ac:6e:bb:d0:a4:00:49:ef:eb:cb:5d:02: e2:0b:e6:18:5b:e7:25:94:11:27:3b:00:08:e7:09: e5:09:73:4e:9c:e3:1d:f1:25:63:dd:1f:a2:c0:48: 86:a6:43:5d:d2:bc:40:a7:94:68:28:4d:d9:e5:46: 6b:f2:b6:af:02:d0:bd:2b:af:b3:3c:b0:50:33:42: 3d:05:6b:12:d0:19:77:a2:a4:bf:3a:d0:b9:cc:42: 34:8f:f9:a6:59:95:72:3d:e5:37:a8:be:92:6e:5e: e3:19:ba:5d:91:10:06:02:99:36:b8:25:f6:9b:55: f0:c9:b8:58:be:66:7a:aa:51:1d:18:b2:a8:f2:3e: bb:ee:6e:d2:7c:8b:3c:2f:7c:55:02:c1:54:6c:a4: bd:9c:ab:e8:5e:c7:e6:e6:9b:ea:94:48:37:4d:a9: a9:96:df:6e:e9:41:b1:2e:34:4a:c0:a0:e7:96:53: ab:fb:3b:53:00:96:d8:e9:c7:da:98:fc:a7:b4:46: 24:9b:1f:43:d3:a0:53:81:55:3e:60:01:6a:18:c1: 69:0f:95:e0:63:d4:c0:0b:8a:c7:5c:9e:31:3a:46: dd:7a:58:2b:fd:7d:b4:d1:6e:04:6a:06:08:2f:e2: 01:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:AD:45:90:0A:73:CD:48:4A:88:F3:00:37:64:AF:8F:7C:67:68 X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e6:b5:ee:11:00:f4:7a:5e:98:72:75:84:92:59:f7:93:15: 6c:60:ed:ef:3a:e8:83:69:70:0a:61:08:64:28:2b:93:2a:fd: 71:6a:f8:ec:c9:37:96:18:96:9a:ed:a0:e1:17:68:30:9d:cd: 03:c3:1a:f7:2a:13:d8:ab:da:82:21:4f:60:2a:4a:36:c7:c6: 24:85:98:62:17:02:25:7b:eb:0f:ca:c2:48:f1:55:1f:c7:96: 27:3e:1a:ba:d3:81:e2:24:a3:c7:77:fe:99:fe:57:01:49:dd: 0e:eb:a4:4a:67:a3:d9:3e:0b:54:21:63:38:81:6c:77:1f:11: 72:44:2c:59:dd:6a:e4:a9:5e:d1:51:b7:fa:cc:f9:45:16:bb: 68:04:0f:56:6f:f1:e7:a8:4c:f6:17:16:6a:aa:7c:10:02:c5: ee:e9:f6:98:e4:8b:ea:36:01:da:4d:3f:75:a3:d6:35:f3:25: 8e:c3:6a:bd:f8:49:b6:3d:8d:cb:57:ab:fa:41:ae:b7:ac:23: f1:48:92:e5:aa:b9:81:b3:68:75:8f:81:6c:aa:6e:78:db:a3: 75:d6:be:49:80:dd:bc:8c:21:4d:79:98:5f:04:11:dd:55:0a: fd:34:03:6d:99:c1:b3:cf:d8:30:27:03:c3:54:b2:d0:17:5e: e9:bc:0c:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjQwNTAxMDMzODA2WhcNMjQwNTA4MDMzODA2WjAYMRYwFAYD VQQDEw02NjMxYjkxZS1jZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MYwBCA1By4pALKSfqdPbMysbrvQpABJ7+vLXQLiC+YYW+cllBEnOwAI5wnl CXNOnOMd8SVj3R+iwEiGpkNd0rxAp5RoKE3Z5UZr8ravAtC9K6+zPLBQM0I9BWsS 0Bl3oqS/OtC5zEI0j/mmWZVyPeU3qL6Sbl7jGbpdkRAGApk2uCX2m1XwybhYvmZ6 qlEdGLKo8j677m7SfIs8L3xVAsFUbKS9nKvoXsfm5pvqlEg3Tamplt9u6UGxLjRK wKDnllOr+ztTAJbY6cfamPyntEYkmx9D06BTgVU+YAFqGMFpD5XgY9TAC4rHXJ4x Okbdelgr/X200W4EagYIL+IBIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1wrUWQ CnPNSEqI8wA3ZK+PfGdoMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRBMS82OENFQzA5NDk1NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5 NDZ2MDllMFFob3IyMHpXX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf5rXuEQD0el6YcnWEkln3kxVsYO3vOuiDaXAKYQhkKCuTKv1xavjs yTeWGJaa7aDhF2gwnc0Dwxr3KhPYq9qCIU9gKko2x8YkhZhiFwIle+sPysJI8VUf x5YnPhq604HiJKPHd/6Z/lcBSd0O66RKZ6PZPgtUIWM4gWx3HxFyRCxZ3WrkqV7R Ubf6zPlFFrtoBA9Wb/HnqEz2FxZqqnwQAsXu6faY5IvqNgHaTT91o9Y18yWOw2q9 +Em2PY3LV6v6Qa63rCPxSJLlqrmBs2h1j4Fsqm5426N11r5JgN28jCFNeZhfBBHd VQr9NANtmcGzz9gwJwPDVLLQF17pvAwi -----END CERTIFICATE-----Generated at Wed May 1 05:59:01 2024 by rpki-client on console-fra.rpki-client.org