$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: u4AxsMhIZuJzJYYrbvNcuv+pufC/Ko211o9muWQT7dw= Subject key identifier: 08:67:BF:D0:07:71:20:31:2D:F1:4B:29:BC:3C:7C:33:27:0A:C3:A5 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 14E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1376 Signing time: Wed 01 May 2024 23:55:53 +0000 Manifest this update: Wed 01 May 2024 23:55:52 +0000 Manifest next update: Wed 08 May 2024 23:55:52 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: NNW4k1raORjetkApp11Krd3dt7d2eOM6mpwLJcqIpdY=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: 50AXZQqKUmiU0u0HomFfkCWt/VhgUNdJibk1b9+guYw=) 3: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: VdiqX+NESx2d1hHgoHylX6kY3mnKpOxVAOGYIPyUgSo=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Ix/BMBnPFP9d811BL68apCWN0PSAMe/pfFPlCH82naw=) 5: 0D3EC250081211EFA6FF3E1AC4F9AE02.roa (hash: XxE8Xktp22gCM3vIikENfHvAjgVjGfs6HKEw3fQ0fis=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: Tt8yEYi29sC59bMyxnHbI6OXbGsM5Np/JaarrFEEXkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 23:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5347 (0x14e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: May 1 23:55:52 2024 GMT Not After : May 8 23:55:52 2024 GMT Subject: CN=6632d689-a056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:72:17:64:cf:fe:2a:74:70:f5:f4:62:a5: 43:a4:42:73:b2:04:e9:d4:13:d5:e0:01:94:f1:a7: cf:45:b3:9b:41:6f:77:f8:28:fe:c9:c4:15:24:f8: f3:db:fa:76:2e:c1:b1:22:51:3c:19:42:d4:89:69: 0c:c7:b0:89:48:a5:49:82:6b:b9:95:6a:34:c9:53: 2d:e5:b5:87:bd:19:9a:0e:c6:13:1b:59:b2:61:4e: 7b:85:12:a4:42:02:6f:fb:5f:f8:6c:69:fc:91:fb: 7b:ea:a4:f7:7d:9d:b8:6d:dd:88:77:28:c8:b4:88: f6:cb:ec:ea:01:f2:6b:02:11:77:c2:17:7d:1b:16: 13:47:02:b0:7d:89:68:2c:6d:5d:7b:6c:c5:9b:cc: d4:df:77:70:aa:a3:28:ad:76:9c:18:ca:54:39:ea: 70:f6:7f:7b:62:de:09:ea:55:86:fb:2c:e2:24:ff: 84:9f:69:20:ea:45:bd:51:3c:15:4d:bf:f1:d8:3b: 6f:ff:58:31:53:65:e8:a9:31:61:9f:9e:97:b1:b8: c4:9b:98:f9:11:e5:e8:41:98:a0:66:b8:bf:1e:60: 70:89:03:86:89:e1:ac:93:43:64:1d:3c:a6:d7:8c: af:2b:22:1b:27:04:98:04:f6:72:a3:49:1d:c0:ba: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:67:BF:D0:07:71:20:31:2D:F1:4B:29:BC:3C:7C:33:27:0A:C3:A5 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bc:ec:bd:49:a3:12:1b:c2:31:f2:8c:06:04:0c:62:37:ff: ab:b9:46:f8:d8:5f:1b:83:09:4b:60:56:03:bc:31:1c:06:52: cc:12:4b:d5:a4:5f:bd:2f:57:3e:a5:27:72:42:49:0e:3b:57: 2e:a2:e6:f5:0e:08:5c:c6:da:32:4b:c7:db:c8:aa:10:14:f4: 91:ac:57:0a:3d:cf:4f:2b:f3:c0:9e:e0:46:ec:42:73:7b:fa: bf:9c:00:17:6c:f9:fa:ee:bb:aa:22:ba:9c:55:aa:a8:45:b6: 4b:0d:e6:a2:32:40:06:a7:af:fd:7f:e3:52:64:4a:08:0b:aa: b0:ad:53:1c:cb:33:f7:26:97:4c:74:8d:30:16:2a:91:f6:79: 4e:ff:e2:5c:6d:81:32:9e:bc:9d:f8:19:a2:14:2a:5d:67:c3: 96:b3:5d:86:67:ab:d2:3d:a1:f3:73:15:49:a7:65:34:98:8c: 75:aa:ec:21:31:62:19:21:31:9c:17:1f:fa:e0:4a:2e:b3:56: 25:76:b9:bc:64:ee:a6:9a:3c:89:65:4c:83:2b:ce:bb:7d:e8: b2:a5:25:d8:cf:e0:07:db:ac:e1:4a:8c:06:e7:eb:08:35:8b: 36:e7:b2:c1:75:87:9c:3c:57:21:1e:88:59:f1:e2:03:e6:88: c8:2b:32:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjQwNTAxMjM1NTUyWhcNMjQwNTA4MjM1NTUyWjAYMRYwFAYD VQQDEw02NjMyZDY4OS1hMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2ByF2TP/ip0cPX0YqVDpEJzsgTp1BPV4AGU8afPRbObQW93+Cj+ycQVJPjz 2/p2LsGxIlE8GULUiWkMx7CJSKVJgmu5lWo0yVMt5bWHvRmaDsYTG1myYU57hRKk QgJv+1/4bGn8kft76qT3fZ24bd2IdyjItIj2y+zqAfJrAhF3whd9GxYTRwKwfYlo LG1de2zFm8zU33dwqqMorXacGMpUOepw9n97Yt4J6lWG+yziJP+En2kg6kW9UTwV Tb/x2Dtv/1gxU2XoqTFhn56XsbjEm5j5EeXoQZigZri/HmBwiQOGieGsk0NkHTym 14yvKyIbJwSYBPZyo0kdwLolGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhnv9AH cSAxLfFLKbw8fDMnCsOlMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6vOy9SaMSG8Ix8owGBAxiN/+ruUb42F8bgwlLYFYDvDEcBlLMEkvV pF+9L1c+pSdyQkkOO1cuoub1DghcxtoyS8fbyKoQFPSRrFcKPc9PK/PAnuBG7EJz e/q/nAAXbPn67ruqIrqcVaqoRbZLDeaiMkAGp6/9f+NSZEoIC6qwrVMcyzP3JpdM dI0wFiqR9nlO/+JcbYEynryd+BmiFCpdZ8OWs12GZ6vSPaHzcxVJp2U0mIx1quwh MWIZITGcFx/64Eous1Yldrm8ZO6mmjyJZUyDK867feiypSXYz+AH26zhSowG5+sI NYs257LBdYecPFchHohZ8eID5ojIKzIh -----END CERTIFICATE-----Generated at Thu May 2 01:06:41 2024 by rpki-client on console-fra.rpki-client.org