$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft File: o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json) Hash identifier: hWjiWrX1ZBC0ZEP0xg2dmzD+u+6LcOC+B6bPIr1p0i0= Subject key identifier: F5:8B:0F:77:9C:91:D7:C2:DC:67:AA:E9:5F:E5:9D:D0:06:0E:C7:0C Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft Manifest number: 12 Signing time: Fri 17 May 2024 08:58:53 +0000 Manifest this update: Fri 17 May 2024 08:58:53 +0000 Manifest next update: Fri 24 May 2024 08:58:53 +0000 Files and hashes: 1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: W0OzFtDG5Y99iYhWNmBp+PFx9+ZiMetB+MGOLO5Uhj0=) 2: 8C7FA9C0FD4B11EEABAB0B60C4F9AE02.roa (hash: 6DnvLHwkOsmNheO3/dmZL+mDrT6py3IBbzDfl6LMYsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Validity Not Before: May 17 08:58:53 2024 GMT Not After : May 24 08:58:53 2024 GMT Subject: CN=66471c4d-bf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:35:04:77:69:7a:61:f5:5a:c6:ae:c5:8b: ba:a9:2b:0d:2d:18:5b:54:3f:0f:94:c4:54:f1:3a: 3a:db:c8:08:65:f4:c3:b3:3b:de:31:66:78:e5:b1: 28:80:3b:8e:b7:0d:fc:dc:9b:5d:db:b5:7c:ea:e7: 96:4a:69:a4:42:2f:8a:85:a2:58:78:57:73:df:54: ed:0c:48:b2:91:da:aa:e1:8c:c4:61:76:39:6b:cb: 8a:8f:2a:48:1d:65:b2:b9:6a:5a:ce:a8:52:31:24: c3:65:b7:5b:fc:8c:8f:72:14:39:6b:49:ec:4a:4b: d4:60:a4:73:68:b9:3c:f4:a1:c5:41:28:61:f6:1c: 3c:45:49:4a:6c:00:99:c6:08:6c:c9:46:97:54:20: 10:1d:c1:6d:e4:ab:f1:eb:0b:54:4b:c4:67:11:56: 60:80:05:55:f8:15:ab:ac:d1:1f:2a:a8:18:06:5e: 9f:45:bf:06:7e:16:28:8b:8b:c7:7e:e3:45:9c:52: 91:c4:73:f7:36:7c:f9:a4:0f:13:37:c7:5f:58:0f: aa:cb:d4:b0:7a:b7:6f:36:9a:ac:dc:99:be:d0:61: e3:b3:8e:fc:61:b8:05:01:8a:80:c8:c8:2b:0c:71: c3:c9:bb:92:e6:8b:ff:1c:5a:ad:0a:00:a7:c8:e7: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8B:0F:77:9C:91:D7:C2:DC:67:AA:E9:5F:E5:9D:D0:06:0E:C7:0C X509v3 Authority Key Identifier: keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:cb:61:6b:ee:02:29:40:cd:d8:67:4f:7a:46:f7:7f:e1:46: f9:e8:ae:9d:7a:99:0b:df:37:41:81:1c:53:ee:24:f8:7e:3a: 16:5f:08:b6:d5:e7:e5:bf:00:29:ca:f0:5d:5e:5d:03:50:a7: 98:ed:e3:79:2a:4c:1d:34:b0:fc:7d:44:58:82:21:d3:a2:74: a4:3e:74:2b:62:aa:ae:b4:e6:b4:a2:f2:d2:91:86:1b:88:c5: a1:38:e1:57:df:f9:08:27:7e:7b:ce:22:af:32:7c:a5:4d:17: ba:32:6c:a4:b1:8b:d8:00:65:41:ad:ee:5b:13:45:30:f1:9f: 2b:1c:2e:fa:b5:05:7a:f3:78:18:0b:0e:0b:d9:59:dc:e5:1c: 59:6d:85:18:e3:66:47:bf:30:ed:d8:3e:f1:88:08:28:cb:61: 8b:3a:51:fc:09:d9:60:e7:87:8c:61:69:ec:68:91:a7:09:37: d8:a3:5b:37:ad:77:8c:cb:66:e9:76:10:67:c8:36:f9:7a:a2: 2a:55:db:98:68:f9:69:2a:03:c0:1d:72:7a:18:03:ca:33:26: 2e:91:6b:54:5e:58:84:ac:cb:68:9d:e6:4d:f2:1b:3f:9f:ca: 4b:21:5f:ff:58:e6:ca:84:11:a6:97:e1:5e:f7:fa:71:97:cc: 4a:de:1e:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzEwRjExMC8GA1UEBRMoQTNFQjUxRDI5OTlCQkI0NDY1OUJEREE2QkUxRTEwRkE1 NTFFMjI2NTAeFw0yNDA1MTcwODU4NTNaFw0yNDA1MjQwODU4NTNaMBgxFjAUBgNV BAMTDTY2NDcxYzRkLWJmNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSVDUEd2l6YfVaxq7Fi7qpKw0tGFtUPw+UxFTxOjrbyAhl9MOzO94xZnjlsSiA O463Dfzcm13btXzq55ZKaaRCL4qFolh4V3PfVO0MSLKR2qrhjMRhdjlry4qPKkgd ZbK5alrOqFIxJMNlt1v8jI9yFDlrSexKS9RgpHNouTz0ocVBKGH2HDxFSUpsAJnG CGzJRpdUIBAdwW3kq/HrC1RLxGcRVmCABVX4Faus0R8qqBgGXp9FvwZ+FiiLi8d+ 40WcUpHEc/c2fPmkDxM3x19YD6rL1LB6t282mqzcmb7QYeOzjvxhuAUBioDIyCsM ccPJu5Lmi/8cWq0KAKfI58yBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9YsPd5yR 18LcZ6rpX+Wd0AYOxwwwHwYDVR0jBBgwFoAUo+tR0pmbu0Rlm92mvh4Q+lUeImUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDMTBGLzlBNzU4MEM4RkQ0 QTExRUU4MDlCMDczMEM0RjlBRTAyL28tdFIwcG1idTBSbG05Mm12aDRRLWxVZUlt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvby10UjBwbWJ1MFJsbTkybXZoNFEtbFVlSW1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD MTBGLzlBNzU4MEM4RkQ0QTExRUU4MDlCMDczMEM0RjlBRTAyL28tdFIwcG1idTBS bG05Mm12aDRRLWxVZUltVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJjLYWvuAilAzdhnT3pG93/hRvnorp16mQvfN0GBHFPuJPh+OhZfCLbV 5+W/ACnK8F1eXQNQp5jt43kqTB00sPx9RFiCIdOidKQ+dCtiqq605rSi8tKRhhuI xaE44Vff+QgnfnvOIq8yfKVNF7oybKSxi9gAZUGt7lsTRTDxnyscLvq1BXrzeBgL DgvZWdzlHFlthRjjZke/MO3YPvGICCjLYYs6UfwJ2WDnh4xhaexokacJN9ijWzet d4zLZul2EGfINvl6oipV25ho+WkqA8AdcnoYA8ozJi6Ra1ReWISsy2id5k3yGz+f ykshX/9Y5sqEEaaX4V73+nGXzEreHn8= -----END CERTIFICATE-----Generated at Fri May 17 10:10:50 2024 by rpki-client on console-fra.rpki-client.org