$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft File: M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json) Hash identifier: 9c9o4j2Qj0isVntEYec8AE/QYv4BmQ/swjF9vQFQQ0o= Subject key identifier: F5:B4:36:97:10:95:29:94:30:FA:E3:4A:FC:00:BA:98:E2:93:CC:41 Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Certificate serial: 0AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft Manifest number: 0AEF Signing time: Fri 26 Apr 2024 19:58:44 +0000 Manifest this update: Fri 26 Apr 2024 19:58:44 +0000 Manifest next update: Fri 03 May 2024 19:58:44 +0000 Files and hashes: 1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: KTC8h4T5lTf7j4rJzoAJLhLaUYFi8eRAmokSIABqzFg=) 2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: CB5IE4ksCyHI1WtHUE34hn1yLuHmZuwQKKrDnjirwUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2807 (0xaf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Validity Not Before: Apr 26 19:58:44 2024 GMT Not After : May 3 19:58:44 2024 GMT Subject: CN=662c0774-b717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:1c:cf:1f:92:38:46:17:7c:a7:83:51:20: f1:6c:d5:58:42:d0:5f:0d:e1:21:00:ba:fc:c3:ed: 64:2a:47:86:7b:0d:7a:72:02:9f:77:65:d5:48:0a: c4:c3:bf:9d:a3:cd:b2:06:47:08:e1:84:f4:17:02: 7a:84:b1:ac:24:5a:d7:5c:bc:14:73:69:1c:b3:6d: 83:db:00:ca:72:6d:da:05:7f:3e:41:d3:c5:39:c9: 29:12:f7:35:fa:2f:c8:ca:4d:b0:33:ac:30:1e:69: 55:a2:0e:8a:5e:da:33:be:80:4b:73:25:74:e8:de: 23:e3:98:1a:4b:a8:51:41:4d:da:0c:ca:5b:4d:ca: a6:a7:e6:30:75:89:4e:ab:37:c0:93:bb:e5:1c:c4: f6:6b:f3:df:7d:67:12:b6:b7:cd:f7:88:c5:0a:a9: 34:6e:ba:a2:c6:c5:e8:5a:5c:00:9c:60:80:c8:69: 1d:89:f6:f1:45:9f:5d:53:af:16:38:f5:12:d2:c3: df:5e:5b:e7:5e:2d:61:a8:23:72:e7:ac:2c:f9:20: 7e:0e:05:40:7b:e1:b7:5a:39:4f:c5:43:a1:39:37: 17:3e:9f:2e:e9:0d:a9:d7:be:17:53:06:b6:0b:66: c0:8c:53:2f:dd:f9:92:e2:30:83:c5:0c:21:0a:9f: 21:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:36:97:10:95:29:94:30:FA:E3:4A:FC:00:BA:98:E2:93:CC:41 X509v3 Authority Key Identifier: keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ba:3f:bb:57:60:a0:2d:ce:34:bf:15:24:8a:f1:5e:54:88: 34:e5:6c:5f:e7:38:e8:51:86:8f:e2:72:33:49:d1:a4:1d:9a: c3:12:27:31:d4:3b:3a:d1:3a:a7:2a:fe:da:63:e5:ad:5d:49: 95:37:15:b9:0b:ba:94:94:d0:f4:4a:da:57:5d:01:ce:96:20: 93:c0:d7:42:fe:cf:be:6a:b2:96:62:a8:5f:1d:63:9b:80:5e: 00:63:50:fd:06:cb:c7:e3:bd:94:1a:fb:43:01:e7:62:09:0a: 42:06:0d:ca:8e:1d:c5:a6:11:3e:10:f3:f3:ef:48:01:17:ac: bf:86:8b:c3:eb:f4:99:dc:2f:06:f7:ab:01:32:74:eb:e5:79: 5b:e9:dc:63:a4:10:7d:a0:23:cb:61:97:ec:6f:25:aa:ab:46: 58:b6:7d:6d:ea:bc:12:61:4c:9d:0f:74:a7:80:76:b6:cf:0a: f3:04:7a:01:73:25:ce:ff:93:ee:1a:9b:7a:c5:34:dd:e1:46: d9:19:ab:31:01:52:70:04:25:d2:ed:60:87:8d:23:3a:d4:4c: 94:65:e8:47:16:fe:ee:04:03:d6:54:f7:dc:d4:7f:33:a4:2f: 2a:c6:e4:94:ec:95:78:c2:22:16:fb:59:47:c4:81:43:8d:92: 5f:18:ff:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0 MDg5MTg3NDIwHhcNMjQwNDI2MTk1ODQ0WhcNMjQwNTAzMTk1ODQ0WjAYMRYwFAYD VQQDEw02NjJjMDc3NC1iNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzo8czx+SOEYXfKeDUSDxbNVYQtBfDeEhALr8w+1kKkeGew16cgKfd2XVSArE w7+do82yBkcI4YT0FwJ6hLGsJFrXXLwUc2kcs22D2wDKcm3aBX8+QdPFOckpEvc1 +i/Iyk2wM6wwHmlVog6KXtozvoBLcyV06N4j45gaS6hRQU3aDMpbTcqmp+YwdYlO qzfAk7vlHMT2a/PffWcStrfN94jFCqk0brqixsXoWlwAnGCAyGkdifbxRZ9dU68W OPUS0sPfXlvnXi1hqCNy56ws+SB+DgVAe+G3WjlPxUOhOTcXPp8u6Q2p174XUwa2 C2bAjFMv3fmS4jCDxQwhCp8h2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPW0NpcQ lSmUMPrjSvwAupjik8xBMB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFRi9GOTAzMDI2MDFGQUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VS ZXpMbjVGaHF5cFJBaVJoMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnuj+7V2CgLc40vxUkivFeVIg05Wxf5zjoUYaP4nIzSdGkHZrDEicx 1Ds60TqnKv7aY+WtXUmVNxW5C7qUlND0StpXXQHOliCTwNdC/s++arKWYqhfHWOb gF4AY1D9BsvH472UGvtDAediCQpCBg3Kjh3FphE+EPPz70gBF6y/hovD6/SZ3C8G 96sBMnTr5Xlb6dxjpBB9oCPLYZfsbyWqq0ZYtn1t6rwSYUydD3SngHa2zwrzBHoB cyXO/5PuGpt6xTTd4UbZGasxAVJwBCXS7WCHjSM61EyUZehHFv7uBAPWVPfc1H8z pC8qxuSU7JV4wiIW+1lHxIFDjZJfGP+e -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:50 2024 by rpki-client on console-ams.rpki-client.org