$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: GFstZlaKsd5qPW98yePacQZyDoJPFazMNHznf7y6c90= Subject key identifier: AB:33:DF:0F:44:50:DC:34:55:AF:21:4C:07:20:52:FB:59:EF:12:8D Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 0118 Signing time: Sun 05 May 2024 05:29:35 +0000 Manifest this update: Sun 05 May 2024 05:29:35 +0000 Manifest next update: Sun 12 May 2024 05:29:35 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: mVUaW7gXMPyWNnT8Ce5+RCgn2MABp6dwz3XJP4IUz0w=) 2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: UIaiumWPe9jUL45AtctOwNh6JmpIHSNMvBEiVQiJmyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: May 5 05:29:35 2024 GMT Not After : May 12 05:29:35 2024 GMT Subject: CN=6637193f-ef9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:79:1b:78:ac:45:0a:8b:34:fd:11:5c:e9: e1:6f:f8:ce:61:f3:e3:d9:e1:7b:24:59:41:78:6f: 0b:c2:7c:06:89:24:c5:c4:a7:f1:e7:de:72:c3:84: 9e:30:96:50:35:76:50:91:11:81:de:ba:56:9a:d9: f3:b0:37:7d:27:76:3e:2b:e6:9f:29:f7:9f:4f:63: 71:ec:13:62:b1:1a:43:86:97:cd:86:d0:47:9d:75: 46:80:ad:c0:72:58:d2:14:7d:ae:11:a7:6f:ea:5a: a5:cf:a5:83:67:c2:b2:48:f1:b8:c7:41:d6:d3:bc: db:75:00:b5:ff:24:12:cc:5a:15:14:43:bd:f7:44: 58:8d:44:0e:1d:5d:32:64:17:15:1e:90:28:26:3e: 01:0c:1c:1a:81:04:a0:45:02:4d:1a:ce:4e:52:6d: 22:19:e7:cf:90:27:25:c1:b4:46:c0:0d:8b:5c:48: c8:6c:c0:fa:b5:88:54:f3:46:e2:06:96:9d:93:8d: f1:d0:ff:46:21:4c:c9:49:0a:c2:e1:b5:7a:de:28: c1:09:1f:4d:d2:31:b4:c9:3f:b9:9e:a4:c5:c9:42: c9:ea:5a:6a:2d:69:f0:84:c4:ca:5b:4c:75:b3:ef: 36:d9:1d:03:66:88:12:3f:1c:b0:f0:65:41:4a:a2: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:DF:0F:44:50:DC:34:55:AF:21:4C:07:20:52:FB:59:EF:12:8D X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e2:da:7f:1d:52:96:39:f2:09:3a:ec:e3:4e:1e:50:ac:56: de:bf:6e:b2:80:94:b6:c5:e4:a2:c3:da:67:79:cd:a4:6a:4a: 5f:5e:65:d9:01:fe:14:d8:51:e8:30:ae:ee:f5:5b:93:b5:5b: 41:04:aa:ff:ff:c0:a3:8e:f6:c0:c0:2d:7c:f0:ef:3f:e8:8c: f9:03:b6:8a:8a:3e:74:1a:9a:36:62:ee:2c:19:33:29:06:b3: 59:92:2d:03:c2:cd:de:9f:52:b0:6f:7f:f5:2a:1e:bf:51:9a: ee:3f:4a:9e:9c:4e:4a:4c:3f:11:45:b4:e1:15:33:4a:2b:ca: c6:14:dd:11:92:86:c3:87:9f:52:a6:a8:1f:81:ff:08:a9:9a: 7f:b2:10:d9:54:77:22:5c:38:4a:fd:ce:25:b1:0f:e6:6d:ba: 61:a7:46:a7:ef:36:df:fa:6d:3d:fb:af:6d:8c:bc:2a:75:6d: 66:90:ef:33:7d:f2:52:2a:93:f1:80:85:54:bc:c9:e4:c4:91: 96:95:23:d7:10:9b:df:12:d8:48:3d:4a:63:3d:91:af:b4:25: c4:8e:3a:77:f8:8a:11:89:c8:bb:3a:a7:cf:e2:88:b7:57:2c: 27:5b:5a:52:6b:63:5e:d7:73:1a:56:04:e6:e7:75:c8:88:5e: ed:b0:98:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjQwNTA1MDUyOTM1WhcNMjQwNTEyMDUyOTM1WjAYMRYwFAYD VQQDEw02NjM3MTkzZi1lZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDZ5G3isRQqLNP0RXOnhb/jOYfPj2eF7JFlBeG8LwnwGiSTFxKfx595yw4Se MJZQNXZQkRGB3rpWmtnzsDd9J3Y+K+afKfefT2Nx7BNisRpDhpfNhtBHnXVGgK3A cljSFH2uEadv6lqlz6WDZ8KySPG4x0HW07zbdQC1/yQSzFoVFEO990RYjUQOHV0y ZBcVHpAoJj4BDBwagQSgRQJNGs5OUm0iGefPkCclwbRGwA2LXEjIbMD6tYhU80bi Bpadk43x0P9GIUzJSQrC4bV63ijBCR9N0jG0yT+5nqTFyULJ6lpqLWnwhMTKW0x1 s+822R0DZogSPxyw8GVBSqITdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsz3w9E UNw0Va8hTAcgUvtZ7xKNMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn4tp/HVKWOfIJOuzjTh5QrFbev26ygJS2xeSiw9pnec2kakpfXmXZ Af4U2FHoMK7u9VuTtVtBBKr//8CjjvbAwC188O8/6Iz5A7aKij50Gpo2Yu4sGTMp BrNZki0Dws3en1Kwb3/1Kh6/UZruP0qenE5KTD8RRbThFTNKK8rGFN0RkobDh59S pqgfgf8IqZp/shDZVHciXDhK/c4lsQ/mbbphp0an7zbf+m09+69tjLwqdW1mkO8z ffJSKpPxgIVUvMnkxJGWlSPXEJvfEthIPUpjPZGvtCXEjjp3+IoRici7OqfP4oi3 VywnW1pSa2Ne13MaVgTm53XIiF7tsJh6 -----END CERTIFICATE-----Generated at Sun May 5 06:13:35 2024 by rpki-client on console-ams.rpki-client.org