$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: xVvJ01momdImA4Kv0Gxm357e8lJYRn6RW99r5lEMU9I= Subject key identifier: AF:92:7B:47:01:98:8C:4C:D9:7F:EF:EB:D6:B7:89:3E:49:95:79:61 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0971 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 092A Signing time: Sat 04 May 2024 21:34:26 +0000 Manifest this update: Sat 04 May 2024 21:34:26 +0000 Manifest next update: Sat 11 May 2024 21:34:26 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: EQ0PjkumVEtWA027Y39ROK+h96DSqcEyNbOKXUg7Z8w=) 2: FB493356FAD711EE9AAB7E47C4F9AE02.roa (hash: +IFvKDNYODMSNMb2NUHlePhxBhuRZS5cEi+QM/N0I4g=) 3: 2959CCD4084211EF9319000EC4F9AE02.roa (hash: cnKCCfPeCDeSGfraz60QKh5ll1xdMMxKZs9EVqrAJ8U=) 4: E651DB36ECF111EE869C1110C4F9AE02.roa (hash: 5Z3/FuBA5PErQEgB2nD4J4pwLvYX0NDPdKAT++WPi1A=) 5: 0CA34A5AEBA211EE809DE15CC4F9AE02.roa (hash: YejwvAs+4sf5xmeyTeEYWDIvMmfGwSjRaToL79N5YwU=) 6: 5871666CFAD711EEA3D2F145C4F9AE02.roa (hash: O+0LHsC3L1ZFYZgFSrcwWJudGaOFWfmZO8s0ITSqe78=) 7: E5856BB4ECF111EE869C1110C4F9AE02.roa (hash: jracO1XGslY8JLsX5SrzVCcox71Rn8FTOjjOprv0Ah0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2417 (0x971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: May 4 21:34:26 2024 GMT Not After : May 11 21:34:26 2024 GMT Subject: CN=6636a9e2-a359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:eb:05:06:98:fb:4b:2c:42:22:d4:2a:54: d9:29:b9:27:2c:c8:c9:19:d8:6d:1d:93:4c:7c:6b: 8c:f9:a7:d2:a8:df:df:3a:f8:9a:69:d8:7f:6f:74: 6a:50:e8:90:63:2b:f1:ee:ea:d0:63:7c:6e:f8:73: fc:8a:9f:00:b4:04:c8:8f:32:03:8a:2e:cc:9f:52: 05:a4:20:0d:16:d3:81:24:40:ad:2d:b1:d6:d3:60: 4f:b7:40:02:ff:48:1c:8e:20:db:6f:64:46:cf:68: e5:7c:2d:b3:1a:dd:14:41:68:1f:a4:86:a3:f0:cd: e7:45:b0:f0:4a:98:63:b2:a7:20:86:a5:ad:f6:d4: a5:66:e1:b5:ba:43:a0:66:10:c2:b8:64:b1:6a:d3: 30:f2:6f:22:45:ba:21:75:70:2b:72:89:04:a6:8a: df:6d:fd:79:ae:ab:9b:cf:51:0c:35:72:d9:1a:92: 66:b1:32:75:cd:0a:9d:e9:03:c7:54:5d:3d:3e:10: 70:66:8a:9c:2e:9d:cd:50:15:d0:e3:0d:80:31:a2: 9b:4b:71:e1:76:e6:c7:f8:f8:3b:e7:67:b2:f0:1a: 63:39:28:30:a4:1f:ca:31:a9:fa:18:08:a5:38:79: 2b:0e:3b:a3:a6:6c:c2:45:76:ad:47:c8:be:6f:28: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:92:7B:47:01:98:8C:4C:D9:7F:EF:EB:D6:B7:89:3E:49:95:79:61 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9a:ce:58:da:ba:a8:50:05:bb:3f:6a:fd:cf:99:9d:94:61: af:18:2b:12:53:cc:4f:06:9a:d7:93:35:de:a6:df:26:4e:af: 90:7d:03:34:38:65:b8:92:55:49:57:b8:0e:a3:03:87:89:b9: 2b:10:ba:3e:7f:b1:3d:bd:cc:7c:1a:a9:51:25:87:96:fb:5a: ff:32:40:03:56:1c:fd:19:6b:17:ea:29:5d:8c:cf:db:fc:b8: ee:86:17:ab:b4:95:86:e7:c7:e2:ea:18:9b:63:c3:0c:ce:3d: 44:b6:6b:87:d2:4c:72:10:80:aa:e9:bf:1b:44:ba:13:82:33: 27:aa:86:20:16:a2:d5:1e:ea:71:55:fd:45:67:cb:5e:86:bb: ce:7e:c6:ee:c1:a1:8b:0d:02:eb:87:6e:9d:89:b0:9d:9b:29: 40:75:9c:24:ba:98:39:9a:ff:ff:ac:27:8f:f0:32:55:08:9f: 98:e2:3f:59:1d:50:bd:ee:b5:4f:3f:42:a3:5a:85:54:3f:f1: 15:6a:d9:bb:db:dd:c9:31:0d:21:5e:72:7e:c6:37:7b:07:10: 61:62:79:f0:ed:27:45:08:23:3f:a6:46:84:68:c3:a5:40:c6: b8:25:c8:a3:7a:23:fd:92:b9:f3:12:30:e6:c1:26:e7:87:ee: fd:e5:e9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjQwNTA0MjEzNDI2WhcNMjQwNTExMjEzNDI2WjAYMRYwFAYD VQQDEw02NjM2YTllMi1hMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSPrBQaY+0ssQiLUKlTZKbknLMjJGdhtHZNMfGuM+afSqN/fOviaadh/b3Rq UOiQYyvx7urQY3xu+HP8ip8AtATIjzIDii7Mn1IFpCANFtOBJECtLbHW02BPt0AC /0gcjiDbb2RGz2jlfC2zGt0UQWgfpIaj8M3nRbDwSphjsqcghqWt9tSlZuG1ukOg ZhDCuGSxatMw8m8iRbohdXArcokEporfbf15rqubz1EMNXLZGpJmsTJ1zQqd6QPH VF09PhBwZoqcLp3NUBXQ4w2AMaKbS3HhdubH+Pg752ey8BpjOSgwpB/KMan6GAil OHkrDjujpmzCRXatR8i+byjS6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+Se0cB mIxM2X/v69a3iT5JlXlhMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLms5Y2rqoUAW7P2r9z5mdlGGvGCsSU8xPBprXkzXept8mTq+QfQM0 OGW4klVJV7gOowOHibkrELo+f7E9vcx8GqlRJYeW+1r/MkADVhz9GWsX6ildjM/b /LjuhhertJWG58fi6hibY8MMzj1EtmuH0kxyEICq6b8bRLoTgjMnqoYgFqLVHupx Vf1FZ8tehrvOfsbuwaGLDQLrh26dibCdmylAdZwkupg5mv//rCeP8DJVCJ+Y4j9Z HVC97rVPP0KjWoVUP/EVatm7293JMQ0hXnJ+xjd7BxBhYnnw7SdFCCM/pkaEaMOl QMa4JcijeiP9krnzEjDmwSbnh+795elK -----END CERTIFICATE-----Generated at Sat May 4 22:06:52 2024 by rpki-client on console-ams.rpki-client.org