$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: ADYDcDw4RBN84eF8a+mcMQWYuU2q5iWmo7PztiPitX0= Subject key identifier: DF:2A:08:2C:C4:4B:8B:72:C5:6D:0C:53:2C:7A:34:13:F2:53:A6:08 Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: F6 Signing time: Tue 07 May 2024 05:41:51 +0000 Manifest this update: Tue 07 May 2024 05:41:50 +0000 Manifest next update: Tue 14 May 2024 05:41:50 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: s0WZEc7w1lbpwmHgojgEeR2VWlA7fR+0wpP9hC5fa6U=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: CqHtyxNfgtR6scFLatHhD2VlzFmB7JLLHd+3DwpASNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: May 7 05:41:50 2024 GMT Not After : May 14 05:41:50 2024 GMT Subject: CN=6639bf1f-2141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:d9:e4:e5:d9:27:a9:87:c6:19:a3:36:c8: 06:59:d5:9c:ac:08:52:b4:1a:7f:90:96:bb:6c:50: 53:6f:db:2c:16:aa:a7:26:7a:21:8e:fe:1d:ad:c5: 33:50:b6:05:c7:36:1e:f4:ef:c6:1f:68:91:09:ac: f8:f3:3f:4a:c8:a6:18:26:e3:3b:06:be:e0:27:81: 9a:ab:2e:c5:c4:55:0f:3a:75:da:97:31:a6:9b:08: 93:fd:26:8b:25:80:16:61:d7:2c:36:52:6e:bc:0c: 69:23:a2:a2:58:d5:06:35:79:a1:17:11:6b:ec:45: 38:2f:f9:a5:f6:f2:5c:34:51:3e:55:d6:74:d2:e6: 35:84:23:0b:67:83:bc:1b:0d:85:02:e8:7e:dd:ff: 59:85:7c:5c:25:3f:5d:48:91:eb:21:0c:80:f8:c5: cb:1c:4c:0d:06:33:e8:b0:49:a4:24:31:7e:e4:28: 16:83:ce:00:49:47:6b:fc:98:26:4f:67:60:26:6a: 2f:4e:99:cf:4e:c9:2e:f4:3c:85:ed:d3:19:c5:5f: 16:41:bb:29:f3:58:05:45:9a:88:f0:cc:93:67:f2: 27:1e:86:50:17:24:a6:af:83:3c:67:e9:4d:dc:5e: f5:11:03:5c:9c:fe:c1:3a:e6:09:df:9a:f1:3f:4a: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2A:08:2C:C4:4B:8B:72:C5:6D:0C:53:2C:7A:34:13:F2:53:A6:08 X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:df:f7:97:f7:28:3c:de:81:f6:d0:32:cd:66:2c:6d:e9:b0: 92:08:9d:88:10:a7:3f:d3:fe:a4:dc:36:5b:8d:45:e9:80:ce: 3a:9d:10:e1:05:64:99:2f:58:0a:05:9f:b8:67:7a:12:76:b3: 10:d2:c7:d2:ec:6c:8c:b4:b6:53:58:0c:ad:d2:4b:f8:c3:28: 36:7a:fd:b4:d1:bd:2a:8f:ab:cf:b5:c7:af:40:8c:88:26:81: 04:67:a5:92:7e:a9:33:f8:e0:8f:09:ed:3b:d1:6d:50:02:6f: b1:e8:a9:0f:73:a5:71:f2:64:ae:cd:95:48:4c:c8:b4:df:ec: 3e:bd:1d:d7:31:eb:87:db:3b:be:a8:a2:20:e0:ce:16:02:60: 2d:f5:6e:d1:fe:12:f3:fb:b4:9e:5a:d1:2f:18:42:81:a8:6a: d3:a1:30:fc:c3:28:5c:a0:cf:e0:6c:f9:24:b3:cb:c4:6c:f3: 41:bf:a6:f5:26:6b:2b:f4:bc:a8:b6:ae:97:ef:ae:e4:77:84: 8f:49:67:50:a6:2f:34:d8:62:63:45:da:01:95:b6:6d:49:d6: a6:23:f0:d6:55:ba:e1:a0:b8:af:85:9f:8d:54:5b:dd:e5:71: 83:52:f4:3f:8a:e5:9c:0d:99:49:54:63:35:91:75:b8:de:85: 82:d1:e0:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjQwNTA3MDU0MTUwWhcNMjQwNTE0MDU0MTUwWjAYMRYwFAYD VQQDEw02NjM5YmYxZi0yMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4znZ5OXZJ6mHxhmjNsgGWdWcrAhStBp/kJa7bFBTb9ssFqqnJnohjv4drcUz ULYFxzYe9O/GH2iRCaz48z9KyKYYJuM7Br7gJ4Gaqy7FxFUPOnXalzGmmwiT/SaL JYAWYdcsNlJuvAxpI6KiWNUGNXmhFxFr7EU4L/ml9vJcNFE+VdZ00uY1hCMLZ4O8 Gw2FAuh+3f9ZhXxcJT9dSJHrIQyA+MXLHEwNBjPosEmkJDF+5CgWg84ASUdr/Jgm T2dgJmovTpnPTsku9DyF7dMZxV8WQbsp81gFRZqI8MyTZ/InHoZQFySmr4M8Z+lN 3F71EQNcnP7BOuYJ35rxP0oyAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8qCCzE S4tyxW0MUyx6NBPyU6YIMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp3/eX9yg83oH20DLNZixt6bCSCJ2IEKc/0/6k3DZbjUXpgM46nRDh BWSZL1gKBZ+4Z3oSdrMQ0sfS7GyMtLZTWAyt0kv4wyg2ev200b0qj6vPtcevQIyI JoEEZ6WSfqkz+OCPCe070W1QAm+x6KkPc6Vx8mSuzZVITMi03+w+vR3XMeuH2zu+ qKIg4M4WAmAt9W7R/hLz+7SeWtEvGEKBqGrToTD8wyhcoM/gbPkks8vEbPNBv6b1 Jmsr9Lyotq6X767kd4SPSWdQpi802GJjRdoBlbZtSdamI/DWVbrhoLivhZ+NVFvd 5XGDUvQ/iuWcDZlJVGM1kXW43oWC0eCQ -----END CERTIFICATE-----Generated at Tue May 7 06:20:53 2024 by rpki-client on console-fra.rpki-client.org