$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: U8LKqnEIkCZp4lznv6Ii2Xa8It2D+MbPEsYagqV5McQ= Subject key identifier: C3:9A:43:6D:A3:B5:A2:A6:74:E0:0D:F5:2B:7E:83:21:A9:1A:09:28 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0B9C Signing time: Mon 22 Apr 2024 19:34:47 +0000 Manifest this update: Mon 22 Apr 2024 19:34:47 +0000 Manifest next update: Mon 29 Apr 2024 19:34:47 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: xd54zOlszmFbNkujvnhZQ2oZ+8+uxbUaBAwd+i0jVC0=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: a6Xwc4IgmpEHrW4twM+UR9anddZ08NYax5VtnbtXTkI=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: Gy8EKBzby7TbA7bANPsKrh8185xtB8FfvgQKdW33eec=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: ZMkvn8M/+ZjeMYlcx5BpRn45pEDyzj9iUfMiESTYCg8=) 5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: Y0Xjy0NkWka/3Qez2EmWXAAasDaGl97FsPDAHdKjWqE=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0DoL/2IpHaxAw9TImjiB81cUOFzWeL1Jqh3GctUyL3w=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: dMeU+VWkNLHSsE/YjflyFx6fuE/Tkj6eZEDgHPwyvpw=) 8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /x4gISDdQ58Cm6cZRirKRBC5irA+dN86MCQWeCpo8e4=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: l0LcGN3bLpC6egx6E1ErrRqx4ZIHX8gGWW4UD/kKTdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 19:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Apr 22 19:34:47 2024 GMT Not After : Apr 29 19:34:47 2024 GMT Subject: CN=6626bbd7-c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:9d:38:31:5d:0d:20:4a:e7:1a:53:50:24: a9:bf:e9:2b:d7:aa:04:49:a8:bb:96:21:06:b9:70: 6e:58:e6:b7:a1:eb:59:5c:9d:4b:09:7f:2a:1d:34: f9:e3:41:f3:e5:7c:db:38:0c:28:90:70:0d:bc:4d: 6e:3d:a1:8f:b9:4f:aa:71:dc:6b:89:70:12:83:ea: 7a:74:98:45:dd:81:8d:7d:c6:e7:03:3e:88:19:f2: 80:77:4b:85:61:82:73:05:0d:a9:93:06:18:11:06: 15:76:4d:ac:b5:5b:80:82:f9:30:c8:f0:b0:e9:dc: b7:b5:ff:d5:7d:9e:54:a7:5c:df:9c:a4:e9:18:a2: f6:6b:f4:f4:7a:41:b6:44:2f:1b:1d:75:1f:e2:99: a9:1c:3f:3e:46:de:e1:1c:2d:b7:33:80:3b:67:22: 62:4d:f8:fd:3b:e1:3e:a4:9e:5e:35:8b:8e:67:f0: f2:6d:93:ae:78:2c:9a:c3:e4:22:eb:bb:c6:b1:82: 27:64:32:05:48:90:9e:31:8d:ac:1b:99:a4:65:74: 10:aa:a8:f7:da:ef:75:ac:6a:5b:26:72:4a:c0:93: d2:ef:ab:2b:3d:ef:6e:5c:89:c9:39:33:55:73:b7: d6:81:81:0a:9f:50:2a:61:e4:67:9b:c5:ca:7b:39: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9A:43:6D:A3:B5:A2:A6:74:E0:0D:F5:2B:7E:83:21:A9:1A:09:28 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d5:17:62:65:f0:dd:c8:c3:2b:2a:44:af:44:e3:19:71:f8: e2:ab:2e:17:20:ab:0d:5b:48:9a:a5:77:9b:37:95:55:7d:79: 11:24:47:77:7e:9c:05:dc:35:ef:74:ad:d0:b6:aa:36:b0:05: 98:1a:f4:29:19:cd:6b:f1:b5:09:bb:d5:5b:9a:1c:ad:61:f4: 06:07:8f:9a:ee:6c:57:09:2d:1b:6b:70:cc:42:a6:6f:52:46: 32:e5:da:dd:b4:10:cd:24:e0:dd:ee:7b:bf:1e:64:fb:9c:57: 39:dc:cd:0d:eb:c0:36:24:13:49:21:8c:ff:2d:e2:77:17:84: 68:b1:f1:3c:ab:91:f8:42:76:8e:63:65:d4:25:80:b7:a4:07: d4:ba:79:1a:ba:97:f6:9f:f3:4d:79:e8:e5:76:d3:3c:ae:51: ad:c0:c0:b4:86:43:79:ba:74:6d:3d:4c:24:70:84:5a:3f:e9: 0f:0e:4f:c8:95:08:b8:9d:f3:2a:05:46:c6:e4:02:f7:7c:2d: b2:69:95:7f:00:fe:bf:6a:03:9b:ac:89:4c:c7:2d:15:34:f5: f6:57:2a:db:45:38:98:31:86:d0:5a:bc:38:b7:de:c1:89:92: 99:1d:39:82:3a:1e:a3:c8:1c:ba:43:d5:bb:95:4e:34:15:e5: e0:94:5c:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjQwNDIyMTkzNDQ3WhcNMjQwNDI5MTkzNDQ3WjAYMRYwFAYD VQQDEw02NjI2YmJkNy1jNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGydODFdDSBK5xpTUCSpv+kr16oESai7liEGuXBuWOa3oetZXJ1LCX8qHTT5 40Hz5XzbOAwokHANvE1uPaGPuU+qcdxriXASg+p6dJhF3YGNfcbnAz6IGfKAd0uF YYJzBQ2pkwYYEQYVdk2stVuAgvkwyPCw6dy3tf/VfZ5Up1zfnKTpGKL2a/T0ekG2 RC8bHXUf4pmpHD8+Rt7hHC23M4A7ZyJiTfj9O+E+pJ5eNYuOZ/DybZOueCyaw+Qi 67vGsYInZDIFSJCeMY2sG5mkZXQQqqj32u91rGpbJnJKwJPS76srPe9uXInJOTNV c7fWgYEKn1AqYeRnm8XKeznHuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOaQ22j taKmdOAN9St+gyGpGgkoMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd1RdiZfDdyMMrKkSvROMZcfjiqy4XIKsNW0iapXebN5VVfXkRJEd3 fpwF3DXvdK3Qtqo2sAWYGvQpGc1r8bUJu9VbmhytYfQGB4+a7mxXCS0ba3DMQqZv UkYy5drdtBDNJODd7nu/HmT7nFc53M0N68A2JBNJIYz/LeJ3F4RosfE8q5H4QnaO Y2XUJYC3pAfUunkaupf2n/NNeejldtM8rlGtwMC0hkN5unRtPUwkcIRaP+kPDk/I lQi4nfMqBUbG5AL3fC2yaZV/AP6/agObrIlMxy0VNPX2VyrbRTiYMYbQWrw4t97B iZKZHTmCOh6jyBy6Q9W7lU40FeXglFyS -----END CERTIFICATE-----Generated at Tue Apr 23 18:43:10 2024 by rpki-client on console-ams.rpki-client.org