$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft File: rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json) Hash identifier: LJoenDX3MLJWVaaWoDeBC3Hqw3nMfvvFIUZHFJRfBIE= Subject key identifier: 66:EC:8F:C6:10:22:68:16:D1:F5:18:88:26:D0:9A:BE:44:78:19:CF Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft Manifest number: 2D Signing time: Wed 15 May 2024 08:37:46 +0000 Manifest this update: Wed 15 May 2024 08:37:46 +0000 Manifest next update: Wed 22 May 2024 08:37:45 +0000 Files and hashes: 1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: KNhQQWDhzSsgPAOpHCD5kIdc0M2ad9OzdXAzurWoVlo=) 2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: ytZ0mVr7Q5kbOcbcyXXPGqMfnF/2pBGd1W5uYZdomFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Validity Not Before: May 15 08:37:46 2024 GMT Not After : May 22 08:37:45 2024 GMT Subject: CN=6644745a-36ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:34:ba:fc:2f:48:dc:6d:df:c1:f3:7e:e7: 55:52:b4:99:db:61:ef:cd:2e:84:fc:28:8b:ca:15: 43:ff:e3:43:78:fd:6e:2f:ec:24:39:39:dd:e4:e8: 0f:f6:ea:2f:88:28:a7:15:00:bf:9e:7f:90:5f:07: c2:34:3e:d4:1a:de:f6:73:62:5a:eb:ca:92:3e:07: ef:0c:16:ca:8a:a7:98:b1:9e:c9:99:5c:bb:e1:eb: de:45:59:19:1d:5f:db:79:ee:16:23:da:94:49:72: e4:f2:a5:e9:f4:3b:59:e4:33:09:0b:4f:3e:92:38: 37:d4:be:0a:f1:a2:d6:44:06:fe:be:2d:22:46:e8: 98:23:e6:5d:3d:65:0a:52:89:7a:65:e2:97:5f:e9: 58:a0:16:fe:81:1f:9e:c0:94:17:67:19:72:a5:44: ad:69:a6:e0:ce:86:c8:4f:67:67:68:3c:5c:dd:cd: 78:5b:74:86:a2:98:fa:25:79:9a:ca:7e:09:c6:55: e6:69:83:ad:d9:23:81:56:23:62:50:f3:8c:ae:ee: 36:f8:c8:b8:4a:4e:69:c4:95:b5:03:4d:ca:46:0f: e2:82:bf:0b:16:2e:dd:57:4d:1c:f8:3d:19:87:f3: ef:8e:87:87:35:b2:ff:7f:2a:ce:eb:13:d6:68:6d: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EC:8F:C6:10:22:68:16:D1:F5:18:88:26:D0:9A:BE:44:78:19:CF X509v3 Authority Key Identifier: keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:98:48:38:91:2c:32:e6:12:c6:68:6a:68:5f:f5:60:c1:95: db:a3:63:55:be:ea:14:a3:9a:15:7d:36:8e:63:da:46:66:3e: 9f:f7:6f:d6:06:04:9c:ca:3f:15:ad:a9:f7:5a:9a:93:14:36: 03:5c:4c:3e:59:1b:e0:8e:77:87:38:13:b8:b0:00:e3:9e:93: 98:09:ff:12:3d:d3:58:d4:cf:c6:da:b8:bc:95:70:54:18:09: 6d:ed:03:27:15:b4:c9:bd:ad:75:02:29:18:bf:78:bc:db:d2: d8:63:61:14:bf:15:4d:76:0c:5e:cf:14:5f:a6:a9:b8:d8:89: 05:09:8e:9c:50:ff:ab:5c:18:6e:12:a0:58:3d:56:65:76:4f: 05:4e:23:69:1d:da:08:23:83:19:92:83:6b:fb:9e:89:45:10: db:7f:14:67:22:31:78:96:50:cc:7e:a6:34:cd:9b:fd:4a:0c: c6:5f:22:c6:8d:da:b6:6d:6f:80:9f:fd:79:12:06:9d:64:66: 5d:a1:ee:67:16:9d:54:e0:31:09:6c:7b:cc:4e:27:6c:f1:7e: fb:ed:1e:38:e7:6b:35:5b:36:e5:f4:38:05:76:e0:67:35:27: 77:bb:31:21:3e:fd:ac:f9:62:37:ea:f3:dd:92:b5:ad:a2:bd: 2c:17:bb:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjI0OTExMC8GA1UEBRMoQUNFMjhEQUJFNTM2NDk2MzdGQTZFNEUzMjFERTFCNjM0 NjNCODNDRjAeFw0yNDA1MTUwODM3NDZaFw0yNDA1MjIwODM3NDVaMBgxFjAUBgNV BAMTDTY2NDQ3NDVhLTM2YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN1jS6/C9I3G3fwfN+51VStJnbYe/NLoT8KIvKFUP/40N4/W4v7CQ5Od3k6A/2 6i+IKKcVAL+ef5BfB8I0PtQa3vZzYlrrypI+B+8MFsqKp5ixnsmZXLvh695FWRkd X9t57hYj2pRJcuTypen0O1nkMwkLTz6SODfUvgrxotZEBv6+LSJG6Jgj5l09ZQpS iXpl4pdf6VigFv6BH57AlBdnGXKlRK1ppuDOhshPZ2doPFzdzXhbdIaimPoleZrK fgnGVeZpg63ZI4FWI2JQ84yu7jb4yLhKTmnElbUDTcpGD+KCvwsWLt1XTRz4PRmH 8++Oh4c1sv9/Ks7rE9ZobXbdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZuyPxhAi aBbR9RiIJtCavkR4Gc8wHwYDVR0jBBgwFoAUrOKNq+U2SWN/puTjId4bY0Y7g88w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MjQ5L0ExRjIzNDNDRDE3 MDExRUVBNjE1MUM0REM0RjlBRTAyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvck9LTnEtVTJTV05fcHVUaklkNGJZMFk3Zzg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MjQ5L0ExRjIzNDNDRDE3MDExRUVBNjE1MUM0REM0RjlBRTAyL3JPS05xLVUyU1dO X3B1VGpJZDRiWTBZN2c4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHGYSDiRLDLmEsZoamhf9WDBldujY1W+6hSjmhV9No5j2kZmPp/3b9YG BJzKPxWtqfdampMUNgNcTD5ZG+COd4c4E7iwAOOek5gJ/xI901jUz8bauLyVcFQY CW3tAycVtMm9rXUCKRi/eLzb0thjYRS/FU12DF7PFF+mqbjYiQUJjpxQ/6tcGG4S oFg9VmV2TwVOI2kd2ggjgxmSg2v7nolFENt/FGciMXiWUMx+pjTNm/1KDMZfIsaN 2rZtb4Cf/XkSBp1kZl2h7mcWnVTgMQlse8xOJ2zxfvvtHjjnazVbNuX0OAV24Gc1 J3e7MSE+/az5Yjfq892Sta2ivSwXuzs= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org