$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: hpfQUPkCAgimgbHZ4EbMivK5BfNofFt2No8KnlZqOj8= Subject key identifier: 19:FF:D9:1F:9C:3C:FD:30:A8:E3:B7:64:BD:F3:25:F6:AA:34:77:95 Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 0692 Signing time: Fri 26 Apr 2024 23:19:25 +0000 Manifest this update: Fri 26 Apr 2024 23:19:25 +0000 Manifest next update: Fri 03 May 2024 23:19:25 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: PN3+NdMxxyuRIYlj/bmFvhiYmhUu9zR8050Og9lqk9Y=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: gW3bVS/9PILzwmq5JMbanHWz8KQbmSI+xxJNf/Hzfls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: Apr 26 23:19:25 2024 GMT Not After : May 3 23:19:25 2024 GMT Subject: CN=662c367d-f286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:8e:2e:06:71:95:ae:f9:17:1c:69:df:c9: 52:d4:12:49:61:e1:96:8b:ab:7f:0b:7d:74:ef:5d: 0e:15:c3:85:97:1c:2e:04:20:83:de:8b:fb:47:5c: a7:99:2f:70:f6:68:24:bf:f9:cc:68:f1:31:ac:45: 4f:98:b8:42:fb:d5:dc:cc:a9:2e:6c:cd:d6:8c:b2: cc:57:f1:c0:88:64:ab:ec:dd:b1:93:8a:fc:40:18: 79:48:dd:4c:02:05:51:db:b1:8d:b7:eb:86:64:84: 8b:ed:e6:fd:0c:61:21:53:7a:80:ee:01:25:8d:e4: 26:86:c5:a3:64:e4:21:55:43:db:2e:bb:71:7d:22: 1f:9a:0b:07:8e:33:71:64:c2:f6:4b:d2:f2:cd:b2: 93:62:6d:f7:1f:71:f3:4c:3c:8f:93:2f:88:4c:fe: 37:f8:08:42:f5:51:1d:e9:ea:7b:1c:b7:76:b6:37: 6a:d0:65:f0:b9:a4:75:23:a9:c3:e6:3f:f8:a5:5e: 9c:aa:17:98:75:60:f0:f8:b6:4a:e4:ba:ec:8e:92: e5:a6:46:ac:6f:3c:be:96:2d:18:b6:c3:bb:63:d1: 43:4a:90:3b:42:61:40:bc:c1:e5:a6:62:9a:a3:a9: b2:ae:2f:22:01:52:8b:8f:5b:1a:1e:89:37:a6:bc: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:D9:1F:9C:3C:FD:30:A8:E3:B7:64:BD:F3:25:F6:AA:34:77:95 X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7d:99:bf:be:1c:0a:d5:11:3d:5a:27:0b:60:09:dd:37:0a: f8:f4:e0:cb:02:cc:b3:6a:02:6d:8f:c7:af:21:66:5b:27:15: 2a:b2:32:94:29:be:a8:22:e0:fe:24:ad:19:5f:88:e6:71:c3: c6:70:d7:03:a3:3f:98:6f:9f:67:f0:60:f6:7c:74:b4:51:39: 4d:8e:f1:3a:84:a2:13:49:03:b9:ec:ae:3f:04:4a:8f:e7:18: 58:3a:12:53:7c:5b:19:30:6e:ec:2d:15:1c:4d:bd:be:a4:fb: 0b:9c:d3:23:ca:65:00:e4:bd:2d:05:d5:f5:df:0b:a3:7b:b7: 6e:57:2c:ec:d5:59:b5:8c:0b:9c:ce:18:ca:bc:4c:b3:ba:7a: 2b:95:bd:b5:1e:28:84:a1:49:ba:c5:c3:8b:77:cd:c9:06:e9: 0e:b7:e8:aa:bd:c1:50:28:68:70:45:bf:a2:cc:70:e3:d1:48: 24:17:73:8c:50:f7:94:8c:34:76:9f:26:3a:14:35:e5:92:2e: 03:ba:db:73:0d:a9:61:b6:f6:42:d9:3d:f4:9b:7c:de:b5:1f: 11:07:40:0c:d6:1a:6e:ee:bd:1d:3d:2a:5a:9b:3a:0d:21:32: 5a:37:b1:33:3d:6f:1b:95:d7:cf:e5:5a:e9:2f:7a:8f:a2:95: 2c:44:d1:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjQwNDI2MjMxOTI1WhcNMjQwNTAzMjMxOTI1WjAYMRYwFAYD VQQDEw02NjJjMzY3ZC1mMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA376OLgZxla75Fxxp38lS1BJJYeGWi6t/C310710OFcOFlxwuBCCD3ov7R1yn mS9w9mgkv/nMaPExrEVPmLhC+9XczKkubM3WjLLMV/HAiGSr7N2xk4r8QBh5SN1M AgVR27GNt+uGZISL7eb9DGEhU3qA7gEljeQmhsWjZOQhVUPbLrtxfSIfmgsHjjNx ZML2S9LyzbKTYm33H3HzTDyPky+ITP43+AhC9VEd6ep7HLd2tjdq0GXwuaR1I6nD 5j/4pV6cqheYdWDw+LZK5LrsjpLlpkasbzy+li0YtsO7Y9FDSpA7QmFAvMHlpmKa o6myri8iAVKLj1saHok3pry9HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBn/2R+c PP0wqOO3ZL3zJfaqNHeVMB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6fZm/vhwK1RE9WicLYAndNwr49ODLAsyzagJtj8evIWZbJxUqsjKU Kb6oIuD+JK0ZX4jmccPGcNcDoz+Yb59n8GD2fHS0UTlNjvE6hKITSQO57K4/BEqP 5xhYOhJTfFsZMG7sLRUcTb2+pPsLnNMjymUA5L0tBdX13wuje7duVyzs1Vm1jAuc zhjKvEyzunorlb21HiiEoUm6xcOLd83JBukOt+iqvcFQKGhwRb+izHDj0UgkF3OM UPeUjDR2nyY6FDXlki4DuttzDalhtvZC2T30m3zetR8RB0AM1hpu7r0dPSpamzoN ITJaN7EzPW8bldfP5VrpL3qPopUsRNFV -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:53 2024 by rpki-client on console-ams.rpki-client.org