$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: QOb7nVNecQez/b4eD2jX/51AOHMeKvfIqZO9iKC1Klc= Subject key identifier: A0:60:B7:BC:56:1D:6F:00:6E:61:CF:4B:99:A1:59:56:A6:BA:B4:D7 Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 0685 Signing time: Mon 06 May 2024 23:31:16 +0000 Manifest this update: Mon 06 May 2024 23:31:16 +0000 Manifest next update: Mon 13 May 2024 23:31:16 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: hRp//bvL8ycPh+Hw2GSeOCKhDhnVlJSVXDVSrbwZWi8=) 2: 10DD258E2AE711EBBFFCBC15C4F9AE02.roa (hash: Mo+hPOfI71a1O5KOHpV9+ycAqTlWC6XGjhyhmnWVTds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: May 6 23:31:16 2024 GMT Not After : May 13 23:31:16 2024 GMT Subject: CN=66396844-cc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:df:3a:b8:3c:f8:92:2b:89:b5:96:88:93:3f: 5c:1d:94:99:8d:fc:df:38:8a:32:39:3f:39:a6:51: c5:48:31:60:d0:c7:8e:80:fa:e2:69:0b:63:cd:f9: 31:cd:71:e3:e5:78:7c:5b:a7:68:4a:eb:93:df:b2: 6d:fa:d3:71:d2:62:8c:18:73:8f:a4:6f:82:4d:58: 44:67:3a:9e:97:94:ac:d5:cc:7c:bd:89:d4:87:c8: 45:d9:8d:26:b3:1b:e1:cf:9a:03:03:5c:2c:14:0e: bd:36:8f:57:34:29:e4:ff:c7:9d:f0:d9:40:20:ea: d6:58:0d:8b:b5:1c:6e:76:4b:71:e7:53:bc:38:25: 20:a0:be:72:b8:64:cb:4b:76:c3:70:8c:0b:15:33: 9f:a9:69:fe:a6:7a:8e:cc:ee:d3:eb:5b:7d:6e:80: 0f:d2:21:c8:cc:14:58:24:9e:04:ae:f2:d4:bc:3f: 92:c8:a4:c1:06:fb:63:38:28:71:4b:6e:78:3a:cd: d1:91:05:2b:57:c5:c0:aa:4c:23:27:1f:7a:c7:59: cb:ad:6e:49:92:66:8c:9e:fd:72:e5:94:6f:ba:12: 4c:75:42:ee:4d:e4:11:b3:72:52:dc:72:46:44:0e: 3a:6c:3f:00:0f:76:95:32:a4:38:bc:4a:f4:02:80: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:60:B7:BC:56:1D:6F:00:6E:61:CF:4B:99:A1:59:56:A6:BA:B4:D7 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:82:dc:db:ec:a6:be:a8:9b:5c:0d:ec:8f:18:19:6a:55:ef: e4:e4:6f:41:2c:70:2a:15:4f:11:93:f6:e6:e1:7c:3f:49:1e: e4:e8:49:3c:30:8c:da:90:64:a6:8f:e1:b6:c5:88:78:7f:35: d2:c3:4d:de:93:ef:44:68:6c:fc:83:f0:3f:d7:37:76:17:13: 11:bf:c2:57:50:25:7a:39:f7:68:00:c8:19:7a:da:1f:a2:09: 15:c2:7b:99:34:ee:f7:c6:89:ad:07:6b:10:b7:97:e3:da:b3: 03:9c:ee:61:09:51:11:c2:4b:40:99:fc:19:a6:12:5e:61:7c: ab:af:d4:8e:18:37:3a:ef:1a:79:01:06:1f:e5:14:ee:c0:1e: 6e:f3:8d:ee:ab:2f:4e:47:61:4c:9a:3e:d0:63:3a:32:98:d9: 46:ca:2d:5b:4b:74:9f:42:62:d7:d3:c0:3d:e7:af:c4:01:e7: 65:ae:8b:bf:ed:b0:56:83:f2:63:d3:40:82:91:13:f9:3a:40: 86:a7:23:ce:0d:e5:9a:80:af:e9:07:38:9f:34:0c:d0:43:d6: 60:a8:5b:fb:d8:9c:7c:23:60:e2:ee:b1:24:8f:e3:f0:87:2d: 9b:9f:c4:ca:9e:d8:c1:c3:cc:ba:7e:c7:04:b3:2b:58:e4:18: 28:0a:c9:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjQwNTA2MjMzMTE2WhcNMjQwNTEzMjMzMTE2WjAYMRYwFAYD VQQDEw02NjM5Njg0NC1jYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6t86uDz4kiuJtZaIkz9cHZSZjfzfOIoyOT85plHFSDFg0MeOgPriaQtjzfkx zXHj5Xh8W6doSuuT37Jt+tNx0mKMGHOPpG+CTVhEZzqel5Ss1cx8vYnUh8hF2Y0m sxvhz5oDA1wsFA69No9XNCnk/8ed8NlAIOrWWA2LtRxudktx51O8OCUgoL5yuGTL S3bDcIwLFTOfqWn+pnqOzO7T61t9boAP0iHIzBRYJJ4ErvLUvD+SyKTBBvtjOChx S254Os3RkQUrV8XAqkwjJx96x1nLrW5JkmaMnv1y5ZRvuhJMdULuTeQRs3JS3HJG RA46bD8AD3aVMqQ4vEr0AoDBeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBgt7xW HW8AbmHPS5mhWVamurTXMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzgtzb7Ka+qJtcDeyPGBlqVe/k5G9BLHAqFU8Rk/bm4Xw/SR7k6Ek8 MIzakGSmj+G2xYh4fzXSw03ek+9EaGz8g/A/1zd2FxMRv8JXUCV6OfdoAMgZetof ogkVwnuZNO73xomtB2sQt5fj2rMDnO5hCVERwktAmfwZphJeYXyrr9SOGDc67xp5 AQYf5RTuwB5u843uqy9OR2FMmj7QYzoymNlGyi1bS3SfQmLX08A956/EAedlrou/ 7bBWg/Jj00CCkRP5OkCGpyPODeWagK/pBzifNAzQQ9ZgqFv72Jx8I2Di7rEkj+Pw hy2bn8TKntjBw8y6fscEsytY5BgoCslR -----END CERTIFICATE-----Generated at Tue May 7 00:53:17 2024 by rpki-client on console-ams.rpki-client.org