$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft File: SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json) Hash identifier: 3xu0Qli94tqofojvS0gay3JDH6JCcYSxxRo6OuWT5q8= Subject key identifier: 9F:4A:4B:02:0C:7F:70:55:2D:8A:56:64:91:F9:11:68:9E:75:44:C9 Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft Manifest number: 030F Signing time: Tue 07 May 2024 03:10:05 +0000 Manifest this update: Tue 07 May 2024 03:10:04 +0000 Manifest next update: Tue 14 May 2024 03:10:04 +0000 Files and hashes: 1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: 3AyH8vDuIBoUTtV/uUk3jkVfJGp0T8YiD/Uo/dhYQro=) 2: 259E1BCC09FF11EFB1919C6CC4F9AE02.roa (hash: bkwXMz/ax0ThHTElNjHP9oRkkURT+ErZY6fIjy6b9Kc=) 3: ECCC589A09FE11EFBEBB616CC4F9AE02.roa (hash: NLpKCaNzwymqX+JUy4oTmpLmRdKhH96APzizVGdYs+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Validity Not Before: May 7 03:10:04 2024 GMT Not After : May 14 03:10:04 2024 GMT Subject: CN=66399b8c-35fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d1:f8:20:b9:ff:1b:6c:5d:04:2d:f4:8f:de: aa:39:6a:be:f3:75:21:95:61:6a:cd:06:87:c9:3a: 94:7f:a6:f3:a5:91:d7:50:a9:34:da:6e:dd:48:b3: a5:ce:31:a6:0c:f7:d6:08:08:8c:92:05:3b:e9:d9: fb:06:8f:ce:c2:c8:5b:97:9b:14:df:d1:86:87:e9: 64:c2:0e:8e:25:15:5c:e8:51:8b:dd:cc:b8:38:f5: 81:8c:4e:46:a1:35:ce:21:f3:60:5a:62:0f:13:c7: 34:80:49:72:25:d1:d3:cf:a1:71:86:09:a6:37:4e: 6d:7a:60:23:9b:80:ba:e9:ea:0c:a3:bf:82:e4:eb: c0:00:4d:07:e5:70:78:f3:2c:5d:7e:88:98:43:94: 72:53:f3:22:07:a0:d6:06:4d:4b:67:f5:e6:98:da: 0d:3d:c1:14:b0:3f:32:fb:64:74:98:a7:4f:55:f9: 63:52:de:09:ce:6f:a0:7e:74:18:e6:5f:5f:c3:23: 2b:73:81:73:a8:5f:83:e2:f4:95:3d:4d:76:4a:3c: 93:bf:64:48:d0:61:38:15:cd:ea:35:5b:b4:a1:33: 71:9b:63:f7:25:83:7c:21:dd:88:70:06:a0:97:38: be:f1:6b:b3:7b:ec:ce:34:f9:1c:d7:bd:52:b6:ef: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4A:4B:02:0C:7F:70:55:2D:8A:56:64:91:F9:11:68:9E:75:44:C9 X509v3 Authority Key Identifier: keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:83:ea:68:a2:89:bf:87:5b:52:4a:d9:69:b2:39:aa:e4:25: 44:18:81:aa:b0:e0:19:d1:62:7d:44:9c:60:51:6a:aa:85:8c: c5:12:60:06:33:a5:8d:b5:a3:ae:b4:5f:86:e9:bc:82:50:89: 2b:2f:e7:12:3f:8b:80:7c:f9:2e:09:2f:c3:8f:a3:32:49:be: 69:f2:3f:87:c7:a7:f9:a6:31:81:80:89:fb:33:5b:92:a5:08: 8e:e9:45:07:1d:a5:f9:30:b7:18:85:a2:44:b9:a2:8a:a5:93: 11:ff:00:63:39:ee:92:3c:de:3f:d3:2d:61:2c:09:72:62:bb: 73:4b:16:10:1f:eb:79:1a:80:c2:f0:c0:c7:a3:a3:65:36:8d: bf:81:b9:d4:ba:18:e1:9b:b1:58:28:4b:10:76:e4:c3:89:10: fe:bc:9b:1c:88:d3:4d:42:a3:1e:05:38:b4:82:ac:40:ba:3f: 78:69:a5:7a:b6:7d:f0:fc:a1:1a:02:15:2d:b6:33:82:c9:f8: ac:1f:45:c8:48:0b:a7:05:c6:e4:12:73:5c:ff:1b:58:bf:7c: ee:a1:33:ea:9f:49:70:8b:f6:ce:42:00:0d:f7:1d:31:cf:63: a3:e3:c0:1f:0b:88:a1:57:ce:5f:02:c6:fa:4e:70:77:6f:b1: dc:cf:c5:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwQUYxMTAvBgNVBAUTKDRBODVDRjEzODg3MkQzRTQ0RjkwRDdCNkYzMDI4RjBC NTA2NzM0Q0MwHhcNMjQwNTA3MDMxMDA0WhcNMjQwNTE0MDMxMDA0WjAYMRYwFAYD VQQDEw02NjM5OWI4Yy0zNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49H4ILn/G2xdBC30j96qOWq+83UhlWFqzQaHyTqUf6bzpZHXUKk02m7dSLOl zjGmDPfWCAiMkgU76dn7Bo/Owshbl5sU39GGh+lkwg6OJRVc6FGL3cy4OPWBjE5G oTXOIfNgWmIPE8c0gElyJdHTz6FxhgmmN05temAjm4C66eoMo7+C5OvAAE0H5XB4 8yxdfoiYQ5RyU/MiB6DWBk1LZ/XmmNoNPcEUsD8y+2R0mKdPVfljUt4Jzm+gfnQY 5l9fwyMrc4FzqF+D4vSVPU12SjyTv2RI0GE4Fc3qNVu0oTNxm2P3JYN8Id2IcAag lzi+8Wuze+zONPkc171Stu9xmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9KSwIM f3BVLYpWZJH5EWiedUTJMB8GA1UdIwQYMBaAFEqFzxOIctPkT5DXtvMCjwtQZzTM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4 REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAtUlBrTmUyOHdLUEMxQm5O TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvWFBFNGh5MC1SUGtOZTI4d0tQQzFCbk5Ndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAt UlBrTmUyOHdLUEMxQm5OTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgg+pooom/h1tSStlpsjmq5CVEGIGqsOAZ0WJ9RJxgUWqqhYzFEmAG M6WNtaOutF+G6byCUIkrL+cSP4uAfPkuCS/Dj6MySb5p8j+Hx6f5pjGBgIn7M1uS pQiO6UUHHaX5MLcYhaJEuaKKpZMR/wBjOe6SPN4/0y1hLAlyYrtzSxYQH+t5GoDC 8MDHo6NlNo2/gbnUuhjhm7FYKEsQduTDiRD+vJsciNNNQqMeBTi0gqxAuj94aaV6 tn3w/KEaAhUttjOCyfisH0XISAunBcbkEnNc/xtYv3zuoTPqn0lwi/bOQgAN9x0x z2Oj48AfC4ihV85fAsb6TnB3b7Hcz8Vw -----END CERTIFICATE-----Generated at Tue May 7 03:49:58 2024 by rpki-client on console-ams.rpki-client.org