$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: 3XXQs1t1eFtNtJuVslpyKJyV6QcvdHx1ykyqSUF7xmo= Subject key identifier: C1:13:14:4C:F4:9E:B2:91:3A:97:95:B3:EB:AA:E0:FA:86:AF:4B:80 Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 34D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 3454 Signing time: Thu 02 May 2024 14:25:43 +0000 Manifest this update: Thu 02 May 2024 14:25:43 +0000 Manifest next update: Thu 09 May 2024 14:25:43 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: 9emiC+/UADBfJ8fBrAOslF3s6yPG/T23Grs8p7KxDv0=) 2: F99AB520FBC211EEBB321A7DC4F9AE02.roa (hash: hixTXqgxY0oVPFesAub1AV8JuZ2P2XC7hTYsxW78YCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13521 (0x34d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: May 2 14:25:43 2024 GMT Not After : May 9 14:25:43 2024 GMT Subject: CN=6633a267-8bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:cb:a4:c3:51:07:62:c8:2b:08:d0:90:2b: 45:7c:f1:d2:52:99:f5:64:ee:4a:dd:ec:e4:ad:a6: 39:40:d2:dd:85:01:92:6a:29:6c:9d:5d:64:8c:6b: 40:2f:18:b5:4f:88:ff:de:9a:af:1a:f7:7d:92:29: 90:d4:18:77:b4:1e:56:9e:90:38:70:ae:66:29:36: 56:97:d7:cf:dc:87:c4:ae:69:b4:a4:c0:f7:6b:91: f4:7e:dc:6b:ce:36:22:ba:83:82:e0:bb:a3:9c:37: e6:37:11:0a:b6:ed:1f:84:2e:f3:86:0f:41:3b:6f: 08:6a:84:71:76:76:5e:60:d3:e1:8e:63:33:fa:eb: c9:76:d3:c5:33:e8:28:56:3a:17:da:92:7f:ab:08: 78:2e:f8:3a:1a:62:9e:5d:7b:a1:c4:38:d6:e4:3a: a7:f3:93:3c:54:90:f3:ce:4c:85:ea:23:9d:25:b1: d9:00:6a:d5:d9:42:6a:cb:b1:2a:e0:35:a0:30:5f: 79:d2:fc:96:5e:f6:c8:7b:4d:66:f9:71:ff:2e:1d: 6a:54:d2:24:e4:33:70:97:4f:ee:9a:be:b7:f4:32: 6e:8a:aa:0c:25:43:6c:33:9c:ad:1d:fd:b6:56:76: 07:ae:8f:27:bd:af:19:55:f1:b9:10:20:8e:ad:35: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:13:14:4C:F4:9E:B2:91:3A:97:95:B3:EB:AA:E0:FA:86:AF:4B:80 X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a8:27:c3:fc:10:a6:7c:d9:6e:35:71:82:14:ae:c7:7e:34: 33:49:bf:e7:e7:52:0f:81:c8:1d:89:a1:4e:43:18:9b:ec:55: b9:ed:35:68:5d:2b:bb:96:c0:0c:cc:b1:e4:3e:06:87:15:19: d4:8c:bd:1c:48:f0:8d:9a:13:f8:0f:35:fe:b5:bd:83:69:50: 1c:4b:d0:1a:a6:7f:c8:47:eb:31:99:f2:42:0c:5a:54:66:21: f6:36:e6:a3:2d:48:a7:4d:27:55:e3:8a:cd:99:3d:a3:11:6f: 13:86:24:b0:68:10:70:78:4e:b5:88:04:40:c0:b4:7b:e8:1b: 16:e7:f7:67:17:2f:4f:c3:fc:8e:96:a9:eb:f3:83:40:6b:ab: 35:e0:4f:44:39:f4:72:45:54:6e:c0:27:a6:2c:92:f3:39:78: 72:6f:32:1b:79:9d:49:1c:42:a3:c5:96:b9:ae:ef:76:66:58: 2b:67:aa:71:2a:7f:65:5f:c4:b2:a5:40:5f:b0:5e:64:a9:1a: 0d:fa:61:c8:5b:ad:e5:77:7d:ea:ce:1d:87:41:33:eb:2a:31: 0b:ad:df:fa:23:95:fb:9e:df:e4:4c:2b:cd:53:1f:e4:25:15: 02:c0:ba:c3:1e:05:20:6f:0b:cb:ff:19:a1:88:9b:25:70:66: a8:24:88:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjQwNTAyMTQyNTQzWhcNMjQwNTA5MTQyNTQzWjAYMRYwFAYD VQQDEw02NjMzYTI2Ny04YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGHLpMNRB2LIKwjQkCtFfPHSUpn1ZO5K3ezkraY5QNLdhQGSailsnV1kjGtA Lxi1T4j/3pqvGvd9kimQ1Bh3tB5WnpA4cK5mKTZWl9fP3IfErmm0pMD3a5H0ftxr zjYiuoOC4LujnDfmNxEKtu0fhC7zhg9BO28IaoRxdnZeYNPhjmMz+uvJdtPFM+go VjoX2pJ/qwh4Lvg6GmKeXXuhxDjW5Dqn85M8VJDzzkyF6iOdJbHZAGrV2UJqy7Eq 4DWgMF950vyWXvbIe01m+XH/Lh1qVNIk5DNwl0/umr639DJuiqoMJUNsM5ytHf22 VnYHro8nva8ZVfG5ECCOrTVdewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMETFEz0 nrKROpeVs+uq4PqGr0uAMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByqCfD/BCmfNluNXGCFK7HfjQzSb/n51IPgcgdiaFOQxib7FW57TVo XSu7lsAMzLHkPgaHFRnUjL0cSPCNmhP4DzX+tb2DaVAcS9Aapn/IR+sxmfJCDFpU ZiH2NuajLUinTSdV44rNmT2jEW8ThiSwaBBweE61iARAwLR76BsW5/dnFy9Pw/yO lqnr84NAa6s14E9EOfRyRVRuwCemLJLzOXhybzIbeZ1JHEKjxZa5ru92ZlgrZ6px Kn9lX8SypUBfsF5kqRoN+mHIW63ld33qzh2HQTPrKjELrd/6I5X7nt/kTCvNUx/k JRUCwLrDHgUgbwvL/xmhiJslcGaoJIg+ -----END CERTIFICATE-----Generated at Thu May 2 17:43:45 2024 by rpki-client on console-fra.rpki-client.org