$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json) Hash identifier: kBjMWo1qxRyfZdvTKDECXROAageOHkddcpCoqq6D8lo= Subject key identifier: 37:E6:45:15:A5:BF:18:71:72:F2:C7:D7:02:75:9A:C2:1B:60:EB:B6 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 342C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft Manifest number: 33EA Signing time: Tue 30 Apr 2024 14:27:39 +0000 Manifest this update: Tue 30 Apr 2024 14:27:38 +0000 Manifest next update: Tue 07 May 2024 14:27:38 +0000 Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: 4KWf+/1ltMq3qDYXAa5uyRwMuGpfz27vslg9AQGBcb4=) 2: 913288EE1C1711EA8B048E84C4F9AE02.roa (hash: fE99kbP8klBflhCG2sv15esicVbgarP5pF0zxYygq+k=) 3: 190AC86A33FF11EDB747A054C4F9AE02.roa (hash: V/ZK9abZhv1DDg/8AcYcL8nf+YshLfES9DN9TUeFvoo=) 4: 203B2B7A1C9811EE995E057EC4F9AE02.roa (hash: AqTDwBCtegvr6nD7WVbs9do0Ik1wCiqRfvjh1I3pi8Q=) 5: E63F3CA2E39E11EAAAE0622CC4F9AE02.roa (hash: RgBGdfHwU/1xzkv+q5ZJIeAMYoOF9aNROEMmy+nAD/E=) 6: 19FC767E33FF11EDB747A054C4F9AE02.roa (hash: VEHIwaTJOXdH0dS1VED7m8GNR+0upJRphZ7uU6TVShI=) 7: E52789DCE39E11EAAAE0622CC4F9AE02.roa (hash: FLQlq+/xB5YusH3j2LsK1cqPSb+5Tw6zYrX7zZnE/ak=) 8: 9A31551A007911EFB9E2570FC4F9AE02.roa (hash: /WkI9P2YYh4Vg+ygrnYMsFRJwTBS5KbFAzWLwGmGka8=) 9: 1901CC2A972211ED876D8452C4F9AE02.roa (hash: n2Ck1CIYhU/Zj79OnSM6zA+joLItAmPk6euia1aGJNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13356 (0x342c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Apr 30 14:27:38 2024 GMT Not After : May 7 14:27:38 2024 GMT Subject: CN=6630ffda-7323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:d7:00:ef:be:5c:5b:0c:c6:1e:51:9e:7b: 4b:0d:69:67:03:aa:38:66:1c:e6:c5:88:de:c7:d5: f4:bb:d5:76:e6:c9:19:6c:e4:aa:e7:65:ed:37:64: 23:7a:40:94:7e:10:0b:17:12:c2:4a:82:e6:58:90: 47:39:cf:cb:18:72:b4:1f:3f:21:55:ea:ac:ad:95: fd:3b:b3:51:06:47:54:4f:86:ce:73:c6:70:ff:d1: 49:b1:f4:78:10:e8:bc:81:84:75:2d:75:a2:6e:18: 1a:b5:f7:f4:64:73:1d:0d:64:e3:5c:4d:d7:46:76: ec:c7:fe:3e:cd:c7:a6:34:ab:77:bf:30:24:84:1c: 42:6b:8b:e7:c7:ee:9b:94:54:85:61:ec:d3:29:38: 8a:08:c5:b8:28:5a:20:a4:ec:cf:d6:41:ed:13:89: c7:fa:60:11:3b:2f:dc:ad:ea:71:a2:21:db:11:6a: c8:84:3d:11:49:f8:2b:37:66:c4:22:b6:dd:4d:6c: 62:cf:c1:95:69:26:4a:c6:ac:df:8d:a3:36:d7:30: 12:5e:22:31:f4:e7:7c:84:f0:be:16:bd:52:3d:41: 0e:de:11:f1:90:32:fd:a9:2c:f8:02:a5:97:21:bf: 7c:de:0f:38:7e:22:67:97:c6:70:ea:99:92:63:dd: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E6:45:15:A5:BF:18:71:72:F2:C7:D7:02:75:9A:C2:1B:60:EB:B6 X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5d:00:f8:19:46:16:84:c9:58:16:75:8b:ee:58:c7:7f:21: 97:61:64:6d:1c:e8:38:6a:35:4a:d1:c4:aa:fd:0d:7d:ed:1f: 1a:d4:ef:cc:23:bd:52:4e:13:cd:68:8d:62:c3:ae:b9:b1:be: e0:cb:44:70:fb:71:9f:7d:57:b9:e9:3d:20:b9:0c:61:f2:51: 06:99:46:f8:f5:69:90:7f:66:8b:60:29:98:12:dd:ce:4d:fb: 30:ca:9e:b6:72:23:80:24:41:f6:32:eb:59:a6:6d:6d:dd:70: 47:11:97:47:5f:3d:e0:95:fb:8a:73:e7:de:5d:39:6e:b1:fb: b2:ff:65:f5:97:fb:24:84:60:7c:72:27:9e:55:74:d7:44:6e: 81:3f:7e:5e:0e:16:4f:06:f2:01:b0:e2:83:92:5b:95:9d:95: 07:0b:81:3d:7f:0c:40:bf:cd:6e:b5:32:01:24:6a:42:5e:af: 7e:54:a9:03:06:6c:fe:45:7f:3f:07:5e:ba:35:fb:09:8a:12: 6e:0d:57:37:66:bf:45:84:eb:83:91:64:19:97:99:c3:a8:e2: c0:04:c0:d2:9d:3e:93:4e:21:2d:e4:1b:b1:90:b9:2f:45:ee: cf:ca:f3:9c:ca:0b:c8:0c:b9:13:d7:6b:f5:81:70:90:f7:57: b1:0b:00:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjQwNDMwMTQyNzM4WhcNMjQwNTA3MTQyNzM4WjAYMRYwFAYD VQQDEw02NjMwZmZkYS03MzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfDXAO++XFsMxh5RnntLDWlnA6o4ZhzmxYjex9X0u9V25skZbOSq52XtN2Qj ekCUfhALFxLCSoLmWJBHOc/LGHK0Hz8hVeqsrZX9O7NRBkdUT4bOc8Zw/9FJsfR4 EOi8gYR1LXWibhgatff0ZHMdDWTjXE3XRnbsx/4+zcemNKt3vzAkhBxCa4vnx+6b lFSFYezTKTiKCMW4KFogpOzP1kHtE4nH+mAROy/crepxoiHbEWrIhD0RSfgrN2bE IrbdTWxiz8GVaSZKxqzfjaM21zASXiIx9Od8hPC+Fr1SPUEO3hHxkDL9qSz4AqWX Ib983g84fiJnl8Zw6pmSY937VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfmRRWl vxhxcvLH1wJ1msIbYOu2MB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB WmZCUVk0aEdEa3J5OFg4XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbXQD4GUYWhMlYFnWL7ljHfyGXYWRtHOg4ajVK0cSq/Q197R8a1O/M I71SThPNaI1iw665sb7gy0Rw+3GffVe56T0guQxh8lEGmUb49WmQf2aLYCmYEt3O Tfswyp62ciOAJEH2MutZpm1t3XBHEZdHXz3glfuKc+feXTlusfuy/2X1l/skhGB8 cieeVXTXRG6BP35eDhZPBvIBsOKDkluVnZUHC4E9fwxAv81utTIBJGpCXq9+VKkD Bmz+RX8/B166NfsJihJuDVc3Zr9FhOuDkWQZl5nDqOLABMDSnT6TTiEt5BuxkLkv Re7PyvOcygvIDLkT12v1gXCQ91exCwDs -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:09 2024 by rpki-client on console-ams.rpki-client.org