$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: I6RiEZI1P+noaQcWjniWIiaDb3PhwTLpqeotzSiYlLk= Subject key identifier: 8E:BE:4F:B1:DF:1C:32:01:2F:FB:04:1C:C0:B9:BD:D4:65:43:DF:71 Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0B27 Signing time: Sat 04 May 2024 19:59:36 +0000 Manifest this update: Sat 04 May 2024 19:59:36 +0000 Manifest next update: Sat 11 May 2024 19:59:36 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: RvBKtVNDl3lhz3pNtQIb7JZfcwAgB32ZtcRuYkC/LIE=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: eV56fuiHryIQKRFyea/z5/qNhu8IKn93PeRTauxJVa0=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: 0LTunTRdOppVif2M1VIsKTeuAvtTcCE4K9s7XeFc1wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: May 4 19:59:36 2024 GMT Not After : May 11 19:59:36 2024 GMT Subject: CN=663693a8-8c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:ce:b6:2b:a6:71:21:c3:79:74:19:03:75: 38:fd:47:bd:3e:af:83:3e:98:41:99:b9:12:6c:95: 68:44:03:ed:0a:33:06:10:b8:17:b6:c8:80:29:1b: 53:08:4e:22:75:c3:95:93:4a:41:99:29:0e:79:dd: 50:ff:3b:32:eb:64:02:0b:2c:8a:77:7d:85:c2:10: 99:53:cf:f7:06:56:18:fe:3c:42:37:9b:c2:bc:db: 38:d4:99:a8:c0:a2:fa:d0:9c:5c:5e:f5:2d:78:d4: 08:75:f5:38:2c:ed:60:ec:8c:80:88:05:3c:f3:aa: ce:f6:c6:12:ec:28:f2:f1:93:66:b6:d1:4b:04:48: 35:2d:dc:a6:9e:a0:54:88:31:b5:97:92:ff:e0:5f: 42:ff:9d:7a:f4:79:84:a8:65:48:f5:62:84:f4:dd: 7d:f0:3e:ff:fb:1d:b5:08:6c:05:75:be:de:8d:4e: 2f:a7:69:2c:19:79:51:6a:dd:3c:11:ed:72:46:5c: d2:b4:79:02:18:ec:ce:9f:66:b6:76:37:e1:37:90: a2:df:15:5f:ad:c0:c8:06:c9:40:60:f7:1e:8a:39: 1d:67:d0:a9:7d:d7:2a:81:72:aa:b4:41:6b:77:71: 91:ea:13:78:6b:28:30:0f:59:1f:78:5d:89:2f:e7: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:4F:B1:DF:1C:32:01:2F:FB:04:1C:C0:B9:BD:D4:65:43:DF:71 X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e4:a8:d5:25:24:e4:27:91:2f:f6:ff:77:02:50:64:dd:bb: 5f:32:29:6d:8b:92:4c:26:a6:44:04:b0:74:8e:40:98:eb:40: 95:32:ae:18:0d:4b:86:c5:c1:72:89:9b:50:79:c4:82:86:4a: 92:ca:60:43:b6:5e:5b:30:69:44:82:81:62:fc:6b:30:65:32: cf:c0:08:2b:2f:d3:17:a9:f9:e4:ca:05:4b:ca:08:29:42:41: 33:bd:75:03:23:3b:5c:73:9b:54:51:af:0a:2f:9e:c9:f6:d3: 2e:57:69:2b:3f:d4:ed:45:95:25:39:91:85:cf:e7:e8:6b:2b: ee:81:55:6d:4b:d0:c0:16:62:55:03:f3:ec:46:c0:10:6d:dd: 3f:2d:18:71:f7:a0:6c:53:b5:08:e5:1c:34:62:09:05:4f:3b: 03:45:c6:f1:3f:59:84:63:9e:14:96:bd:21:3e:e5:18:d7:8f: c7:17:a4:24:c1:5c:de:d0:7e:da:86:54:98:5d:14:53:b7:45: be:de:ad:89:19:8b:a3:55:6a:62:dd:98:06:e2:02:90:5b:b3: bf:13:2b:c4:4b:4c:64:ff:fd:ba:40:5a:7d:d8:6f:9b:b4:0d: fd:5f:c0:e8:93:bf:e1:22:3f:af:54:b1:b0:c1:e9:c5:03:a4: bb:db:f0:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjQwNTA0MTk1OTM2WhcNMjQwNTExMTk1OTM2WjAYMRYwFAYD VQQDEw02NjM2OTNhOC04Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUnOtiumcSHDeXQZA3U4/Ue9Pq+DPphBmbkSbJVoRAPtCjMGELgXtsiAKRtT CE4idcOVk0pBmSkOed1Q/zsy62QCCyyKd32FwhCZU8/3BlYY/jxCN5vCvNs41Jmo wKL60JxcXvUteNQIdfU4LO1g7IyAiAU886rO9sYS7Cjy8ZNmttFLBEg1LdymnqBU iDG1l5L/4F9C/5169HmEqGVI9WKE9N198D7/+x21CGwFdb7ejU4vp2ksGXlRat08 Ee1yRlzStHkCGOzOn2a2djfhN5Ci3xVfrcDIBslAYPceijkdZ9CpfdcqgXKqtEFr d3GR6hN4aygwD1kfeF2JL+dShQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6+T7Hf HDIBL/sEHMC5vdRlQ99xMB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb5KjVJSTkJ5Ev9v93AlBk3btfMilti5JMJqZEBLB0jkCY60CVMq4Y DUuGxcFyiZtQecSChkqSymBDtl5bMGlEgoFi/GswZTLPwAgrL9MXqfnkygVLyggp QkEzvXUDIztcc5tUUa8KL57J9tMuV2krP9TtRZUlOZGFz+foayvugVVtS9DAFmJV A/PsRsAQbd0/LRhx96BsU7UI5Rw0YgkFTzsDRcbxP1mEY54Ulr0hPuUY14/HF6Qk wVze0H7ahlSYXRRTt0W+3q2JGYujVWpi3ZgG4gKQW7O/EyvES0xk//26QFp92G+b tA39X8Dok7/hIj+vVLGwwenFA6S72/DS -----END CERTIFICATE-----Generated at Sat May 4 21:19:28 2024 by rpki-client on console-ams.rpki-client.org