$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft File: n0OyarpyjoL2JjN_omUh-Oafu8s.mft (raw, json) Hash identifier: qVNqGT5TV6wLzGlHaZuy11GHriwzl+VSbmD5IDxXtBU= Subject key identifier: 1C:FF:60:B3:B0:D7:A4:1A:70:71:0F:C9:10:C0:D9:0F:49:03:04:A7 Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB Certificate issuer: /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft Manifest number: 01A1 Signing time: Tue 07 May 2024 04:40:36 +0000 Manifest this update: Tue 07 May 2024 04:40:36 +0000 Manifest next update: Tue 14 May 2024 04:40:36 +0000 Files and hashes: 1: n0OyarpyjoL2JjN_omUh-Oafu8s.crl (hash: 8qGiSOd6/0RvEZztF8TsqG5R3+QpEeeci56H2v1NvHk=) 2: 22D1D50A58BC11ED96790F65C4F9AE02.roa (hash: 38M/018HE8j1auWfLuzY8vpRa41iqNX3JHdrD2gzEG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB Validity Not Before: May 7 04:40:36 2024 GMT Not After : May 14 04:40:36 2024 GMT Subject: CN=6639b0c4-a338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:8c:07:6e:7f:7e:65:7d:14:1f:b4:f6:63: 16:f2:50:ba:f5:0b:0a:87:4e:40:50:16:bb:55:60: 93:f0:be:30:54:cc:da:15:8c:c0:d6:39:be:50:ba: 2f:08:4c:84:c6:6a:19:a6:ad:80:e6:4e:c9:7f:32: 9e:87:47:64:05:09:6e:f8:d9:90:ce:52:91:90:10: a7:56:af:fa:2a:3a:d1:a8:a3:28:87:26:a2:ff:41: 89:fc:66:a1:85:a7:27:08:e5:05:48:d2:46:54:be: 6c:27:cd:6f:9a:a6:90:bf:27:88:d8:2d:ec:ee:3f: 86:9a:f1:78:0e:46:90:68:92:5e:89:79:c3:61:fd: f8:cb:cb:3f:5c:15:c2:7e:24:d5:ca:0d:32:5e:06: c4:c1:bd:a7:24:11:b8:f9:62:32:46:31:8c:73:3c: 22:c9:82:bb:e8:ad:df:59:1c:d8:a7:8e:6f:83:6c: 4c:e8:93:d2:c8:a1:92:fe:d3:aa:3f:55:57:49:fe: 59:ba:0c:23:25:32:70:ac:7d:48:6f:27:e2:da:ed: 9b:eb:c1:fc:ea:f8:62:c9:c7:ee:e4:0d:5a:c0:6d: ec:bf:12:96:73:94:c9:09:89:81:76:1b:8f:71:55: 8e:e4:3a:66:cc:e3:45:bb:17:0b:7f:24:25:ef:19: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FF:60:B3:B0:D7:A4:1A:70:71:0F:C9:10:C0:D9:0F:49:03:04:A7 X509v3 Authority Key Identifier: keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a5:08:50:a7:a2:9b:82:0b:1c:90:02:80:ac:79:87:0c:25: e4:02:72:9b:e5:8d:45:b3:ca:54:c4:30:47:61:e2:9c:74:60: ea:b5:d1:63:f4:17:70:71:8c:cb:c2:cc:fb:f6:f7:6f:f1:27: 7c:01:a0:9a:32:c2:6c:77:9d:c6:3d:02:26:8c:71:3c:38:e3: bc:2d:f8:49:23:d9:65:7a:fd:54:a1:1c:02:d9:b0:9c:13:cb: bc:dd:c5:7f:c5:a5:77:38:61:ec:eb:3f:c3:88:19:e7:4d:59: e4:99:14:42:a8:57:07:e9:ad:be:32:94:6e:b0:4a:bc:f2:aa: c8:ab:e4:89:68:57:cb:c9:03:06:2a:85:f2:39:3b:d0:09:bd: 09:b7:68:8b:4a:f5:7b:41:b0:79:ae:71:18:34:db:4e:94:6a: e5:7d:16:41:05:0f:64:af:bd:a2:f5:59:1b:6f:e2:ff:95:a7: 4d:be:4b:f7:42:d5:7a:56:e5:2d:a4:71:98:62:82:60:69:8c: d3:33:74:61:f1:a2:61:88:da:93:ec:d9:38:ba:3f:ac:82:f5: f6:6f:25:87:4a:ec:cc:6b:6e:f4:51:4d:c0:b4:f9:de:e2:00: 0c:40:93:0f:2a:e3:a9:25:30:61:be:a2:fd:19:33:24:ff:b7: e5:be:46:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCNDExMTAvBgNVBAUTKDlGNDNCMjZBQkE3MjhFODJGNjI2MzM3RkEyNjUyMUY4 RTY5RkJCQ0IwHhcNMjQwNTA3MDQ0MDM2WhcNMjQwNTE0MDQ0MDM2WjAYMRYwFAYD VQQDEw02NjM5YjBjNC1hMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxyMB25/fmV9FB+09mMW8lC69QsKh05AUBa7VWCT8L4wVMzaFYzA1jm+ULov CEyExmoZpq2A5k7JfzKeh0dkBQlu+NmQzlKRkBCnVq/6KjrRqKMohyai/0GJ/Gah hacnCOUFSNJGVL5sJ81vmqaQvyeI2C3s7j+GmvF4DkaQaJJeiXnDYf34y8s/XBXC fiTVyg0yXgbEwb2nJBG4+WIyRjGMczwiyYK76K3fWRzYp45vg2xM6JPSyKGS/tOq P1VXSf5ZugwjJTJwrH1Ibyfi2u2b68H86vhiycfu5A1awG3svxKWc5TJCYmBdhuP cVWO5DpmzONFuxcLfyQl7xnWQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz/YLOw 16QacHEPyRDA2Q9JAwSnMB8GA1UdIwQYMBaAFJ9Dsmq6co6C9iYzf6JlIfjmn7vL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUI0MS8xOEQ3OTU1NjE3 QkUxMUVEOEIzMjU5MzhDNEY5QUUwMi9uME95YXJweWpvTDJKak5fb21VaC1PYWZ1 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24wT3lhcnB5am9MMkpqTl9vbVVoLU9hZnU4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUI0MS8xOEQ3OTU1NjE3QkUxMUVEOEIzMjU5MzhDNEY5QUUwMi9uME95YXJweWpv TDJKak5fb21VaC1PYWZ1OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAypQhQp6KbggsckAKArHmHDCXkAnKb5Y1Fs8pUxDBHYeKcdGDqtdFj 9BdwcYzLwsz79vdv8Sd8AaCaMsJsd53GPQImjHE8OOO8LfhJI9llev1UoRwC2bCc E8u83cV/xaV3OGHs6z/DiBnnTVnkmRRCqFcH6a2+MpRusEq88qrIq+SJaFfLyQMG KoXyOTvQCb0Jt2iLSvV7QbB5rnEYNNtOlGrlfRZBBQ9kr72i9Vkbb+L/ladNvkv3 QtV6VuUtpHGYYoJgaYzTM3Rh8aJhiNqT7Nk4uj+sgvX2byWHSuzMa270UU3AtPne 4gAMQJMPKuOpJTBhvqL9GTMk/7flvkbj -----END CERTIFICATE-----Generated at Tue May 7 05:34:26 2024 by rpki-client on console-ams.rpki-client.org