$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json) Hash identifier: beJ+aty8NFt2dja7gKKzm6K4mj8TMMp40BwnSAE+OMs= Subject key identifier: 45:58:78:50:DA:2E:6C:C3:2A:B3:D4:64:9C:9B:FC:44:4E:42:DA:A7 Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft Manifest number: 06CF Signing time: Tue 30 Apr 2024 23:16:38 +0000 Manifest this update: Tue 30 Apr 2024 23:16:37 +0000 Manifest next update: Tue 07 May 2024 23:16:37 +0000 Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: xzsZOK5MPBrUbA8JpcFVqjyV05HGnzHxhTZPBJY8HGg=) 2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: rqs6z6P4PhYp4TGXhgwj4ZGeqaHDaPPgCo1WuJJGsoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Validity Not Before: Apr 30 23:16:37 2024 GMT Not After : May 7 23:16:37 2024 GMT Subject: CN=66317bd6-f31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:0a:fd:a8:44:31:ac:96:6e:df:6a:dc:b9: 85:4e:b3:ef:2a:10:f5:a8:5a:18:0e:32:ad:ff:21: 0f:33:71:a7:e3:e0:3a:09:fd:c6:f4:90:5d:6b:e9: e5:2c:ac:81:e4:c4:9f:70:ba:25:47:fb:0d:9e:35: 09:dc:6e:70:74:d7:5a:7e:82:03:e2:00:7a:2f:77: 62:83:57:b1:68:2f:39:38:cc:cf:d7:84:95:66:a8: 55:5f:c9:35:1f:08:36:ce:12:07:99:af:28:d4:88: 14:80:22:69:8f:ed:83:dd:ac:1a:83:33:d0:1d:12: 75:f0:6d:7c:ec:a2:cf:26:b8:ac:ac:99:28:ad:48: e4:4e:03:8f:d3:bf:20:11:50:a7:1a:38:f7:5e:9a: 19:c6:fe:35:2a:97:17:94:82:9b:d8:07:9f:51:1b: 64:f4:4a:4c:04:36:e0:7e:5e:0b:7a:fb:d8:69:89: 27:2f:cb:7f:b5:24:8d:a2:f1:29:f1:51:17:f8:e3: 5a:32:5b:3a:20:b8:c6:e1:32:44:20:2b:9a:2c:4e: 5c:11:0c:a1:11:db:78:68:6d:57:b5:10:4f:c4:3e: 1a:d9:34:24:3c:df:fe:b6:b1:25:9a:04:a5:35:d8: 79:05:5e:4f:60:3b:80:e9:b5:67:c6:1c:e5:fd:c5: 99:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:58:78:50:DA:2E:6C:C3:2A:B3:D4:64:9C:9B:FC:44:4E:42:DA:A7 X509v3 Authority Key Identifier: keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:72:06:bc:b6:83:83:07:eb:7f:be:3e:69:ca:ab:52:53:7a: 64:ac:aa:40:8c:8f:bd:01:6b:e2:2a:47:59:b7:2d:18:10:a7: 84:18:2d:5a:f1:98:2b:3b:3e:db:94:45:09:a8:ab:58:aa:4d: dd:45:3c:71:b4:c4:63:de:74:d9:28:88:f1:82:9a:90:10:d4: ad:cc:93:5d:3e:31:37:ee:0e:b2:9b:21:e9:8f:10:f2:23:31: b7:4e:56:ac:2d:4a:4e:9d:66:24:30:14:5e:dc:67:0e:7c:db: 02:a7:0a:a0:24:b6:f9:5e:e5:4d:cc:67:d5:5b:1d:6e:0f:68: 94:6e:b1:ff:72:2e:fe:c4:37:ee:09:9f:a4:0b:a8:25:91:86: 33:bf:03:77:f9:4a:09:ac:c4:ea:4f:5b:5b:1e:35:21:59:c3: cf:c5:43:80:c0:91:f0:73:4d:9b:80:15:60:72:14:39:47:4e: bb:b1:5d:13:14:7e:55:04:83:6f:7d:0e:02:75:1d:3d:a4:d4: cf:d8:75:aa:04:ff:aa:ce:65:13:cd:6a:de:49:90:97:7d:f1: 1f:cf:f6:af:06:69:07:56:d1:27:65:78:55:99:a7:92:5f:db: 48:62:77:e2:be:7e:23:b2:16:30:68:e4:3e:14:75:2d:8b:d1: 4f:4a:6b:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5MzExMTAvBgNVBAUTKDY4REE0RTg1QTc5ODRCM0ZEMTBBRUYzNEM3RDFEMDBG MUI0NjQ1MzEwHhcNMjQwNDMwMjMxNjM3WhcNMjQwNTA3MjMxNjM3WjAYMRYwFAYD VQQDEw02NjMxN2JkNi1mMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscMK/ahEMayWbt9q3LmFTrPvKhD1qFoYDjKt/yEPM3Gn4+A6Cf3G9JBda+nl LKyB5MSfcLolR/sNnjUJ3G5wdNdafoID4gB6L3dig1exaC85OMzP14SVZqhVX8k1 Hwg2zhIHma8o1IgUgCJpj+2D3awagzPQHRJ18G187KLPJrisrJkorUjkTgOP078g EVCnGjj3XpoZxv41KpcXlIKb2AefURtk9EpMBDbgfl4LevvYaYknL8t/tSSNovEp 8VEX+ONaMls6ILjG4TJEICuaLE5cEQyhEdt4aG1XtRBPxD4a2TQkPN/+trElmgSl Ndh5BV5PYDuA6bVnxhzl/cWZKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVYeFDa LmzDKrPUZJyb/EROQtqnMB8GA1UdIwQYMBaAFGjaToWnmEs/0QrvNMfR0A8bRkUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDkzMS9GQjVBNTA4NDA4 NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6X1JDdTgweDlIUUR4dEdS VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FOcE9oYWVZU3pfUkN1ODB4OUhRRHh0R1JURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDkzMS9GQjVBNTA4NDA4NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6 X1JDdTgweDlIUUR4dEdSVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0cga8toODB+t/vj5pyqtSU3pkrKpAjI+9AWviKkdZty0YEKeEGC1a 8ZgrOz7blEUJqKtYqk3dRTxxtMRj3nTZKIjxgpqQENStzJNdPjE37g6ymyHpjxDy IzG3TlasLUpOnWYkMBRe3GcOfNsCpwqgJLb5XuVNzGfVWx1uD2iUbrH/ci7+xDfu CZ+kC6glkYYzvwN3+UoJrMTqT1tbHjUhWcPPxUOAwJHwc02bgBVgchQ5R067sV0T FH5VBINvfQ4CdR09pNTP2HWqBP+qzmUTzWreSZCXffEfz/avBmkHVtEnZXhVmaeS X9tIYnfivn4jshYwaOQ+FHUti9FPSmtv -----END CERTIFICATE-----Generated at Tue Apr 30 23:52:30 2024 by rpki-client on console-ams.rpki-client.org