$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: 1VODwrcWUWqnamDB9yzLLhajr+cM9pxlVUsbx3WiDmI= Subject key identifier: D0:79:BB:A3:B6:28:75:63:22:75:AB:B8:A8:B7:9E:79:14:91:0D:A7 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0CA6 Signing time: Thu 02 May 2024 18:54:40 +0000 Manifest this update: Thu 02 May 2024 18:54:40 +0000 Manifest next update: Thu 09 May 2024 18:54:40 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: yih3E/tdpOP8zF1gSZhNsfKSh201ayUBy1eNnr9Ueyw=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: WH82AuzkuaBUfX+CU/eyjfKymAYKdsJeRyZvDqGsz+w=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: icYRbR5tc2wCnYjX5dQ4/TeG+uoe4Ost58AGatA/sHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: May 2 18:54:40 2024 GMT Not After : May 9 18:54:40 2024 GMT Subject: CN=6633e170-b952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:a8:08:49:fb:6a:aa:c6:87:11:7f:42:96: 4b:5c:e2:c5:e7:f9:08:9d:47:40:6d:87:65:e8:97: 5b:9f:ab:d6:a8:07:82:d8:82:91:63:f0:e1:8f:d1: 72:01:ed:7a:fe:06:67:50:50:3d:93:c3:90:c0:c0: 21:57:72:ac:a4:aa:93:f3:98:40:43:1f:b7:9f:9b: 01:3e:0d:b3:fe:aa:07:38:dd:f3:51:73:39:80:1d: f5:e9:e6:66:2b:4f:91:86:10:6c:88:2b:0b:b0:a9: 67:6a:c7:2e:9b:7b:5d:bc:b3:c4:97:2c:61:f2:30: a8:44:74:db:26:03:a0:c3:5b:bf:ff:b3:c0:42:87: 46:a8:1a:f3:cb:6f:13:7d:b0:b7:b2:61:b1:e8:bb: 89:84:90:10:e1:23:00:b1:83:84:6b:4d:e0:0a:8b: 90:3b:39:1e:a3:28:b6:07:2a:91:79:32:1b:88:b3: 64:6f:0a:28:23:5d:af:e8:79:bd:9b:55:97:ce:81: 60:13:61:f1:30:fa:3c:6c:80:ba:f2:27:ff:0f:48: f7:7a:1d:24:93:17:ad:bd:b0:bc:1d:bc:fc:c1:13: 4b:f2:54:34:e2:99:81:5f:57:76:a5:b0:3b:09:31: 66:42:be:f6:88:29:cd:e9:65:d0:4d:bb:f6:34:98: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:BB:A3:B6:28:75:63:22:75:AB:B8:A8:B7:9E:79:14:91:0D:A7 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:46:39:0e:ed:94:db:f4:fa:92:18:40:b1:27:6a:7b:18:22: ee:40:17:c0:d4:0a:16:3c:22:e7:02:7e:33:3f:be:3b:d0:22: d3:9c:cc:03:73:5c:f6:d6:b5:39:35:6d:a3:70:ee:7a:9c:bc: 49:61:85:f4:6e:d6:b7:a8:98:8a:14:84:ef:05:78:db:5e:38: 41:f7:19:16:ee:ed:52:ad:f2:9c:40:9b:e5:4b:b4:ae:6e:13: ce:f9:37:02:b8:90:94:3a:fa:a4:46:45:22:0f:09:58:68:7c: d7:64:de:5c:31:55:e7:b7:01:20:b6:cb:c1:92:1f:d2:d4:2a: 7d:de:ab:a5:33:a8:e2:39:ac:df:91:79:5f:bb:83:16:3a:c8: 37:5b:42:a1:63:16:86:61:3a:11:cc:7a:9c:77:8b:aa:76:4a: 63:39:f8:e6:0c:d7:be:60:68:f6:d7:db:70:1d:a3:49:f8:5d: 82:2b:b1:c5:14:1e:aa:3f:12:d4:b1:9d:0b:74:4f:73:62:ec: 1e:c2:22:42:e3:96:47:4b:32:86:26:75:7a:46:e7:f9:86:24: 14:d1:aa:ac:7f:51:b3:19:88:cd:32:7a:45:35:da:fe:ec:84: 0b:b6:ed:67:42:26:50:3d:a5:0c:28:56:07:8d:03:b9:90:71: 8a:19:2e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjQwNTAyMTg1NDQwWhcNMjQwNTA5MTg1NDQwWjAYMRYwFAYD VQQDEw02NjMzZTE3MC1iOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXOoCEn7aqrGhxF/QpZLXOLF5/kInUdAbYdl6Jdbn6vWqAeC2IKRY/Dhj9Fy Ae16/gZnUFA9k8OQwMAhV3KspKqT85hAQx+3n5sBPg2z/qoHON3zUXM5gB316eZm K0+RhhBsiCsLsKlnascum3tdvLPElyxh8jCoRHTbJgOgw1u//7PAQodGqBrzy28T fbC3smGx6LuJhJAQ4SMAsYOEa03gCouQOzkeoyi2ByqReTIbiLNkbwooI12v6Hm9 m1WXzoFgE2HxMPo8bIC68if/D0j3eh0kkxetvbC8Hbz8wRNL8lQ04pmBX1d2pbA7 CTFmQr72iCnN6WXQTbv2NJjbmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB5u6O2 KHVjInWruKi3nnkUkQ2nMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANRjkO7ZTb9PqSGECxJ2p7GCLuQBfA1AoWPCLnAn4zP7470CLTnMwD c1z21rU5NW2jcO56nLxJYYX0bta3qJiKFITvBXjbXjhB9xkW7u1SrfKcQJvlS7Su bhPO+TcCuJCUOvqkRkUiDwlYaHzXZN5cMVXntwEgtsvBkh/S1Cp93qulM6jiOazf kXlfu4MWOsg3W0KhYxaGYToRzHqcd4uqdkpjOfjmDNe+YGj219twHaNJ+F2CK7HF FB6qPxLUsZ0LdE9zYuwewiJC45ZHSzKGJnV6Ruf5hiQU0aqsf1GzGYjNMnpFNdr+ 7IQLtu1nQiZQPaUMKFYHjQO5kHGKGS7S -----END CERTIFICATE-----Generated at Thu May 2 20:50:24 2024 by rpki-client on console-fra.rpki-client.org