$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json) Hash identifier: n+tiQLtmRiaJSdZdjwMsTNUfUSxp0HihoAVemx8uMIc= Subject key identifier: EA:01:81:DD:D9:D3:E9:A1:F6:5E:A1:02:3B:F5:30:71:AE:3A:95:4A Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft Manifest number: 073F Signing time: Sat 04 May 2024 22:31:46 +0000 Manifest this update: Sat 04 May 2024 22:31:45 +0000 Manifest next update: Sat 11 May 2024 22:31:45 +0000 Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: vtq0T0s11/MRrDx77IMwkXNKr7MXrQLfdTT4Q7m8BjQ=) 2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: Fqx2jGB1eq9bRLPpOYwztJv7iYCvwuhl3LNyP9sYVd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Validity Not Before: May 4 22:31:45 2024 GMT Not After : May 11 22:31:45 2024 GMT Subject: CN=6636b751-9e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:a2:5d:c8:f7:07:11:ba:c9:2f:d0:c4:77: 3a:e4:eb:df:d4:e1:d2:9f:82:88:d1:7d:fd:7e:be: aa:d4:40:4e:71:2a:58:88:c5:17:4b:fa:36:d3:8b: ce:7a:71:a6:06:9c:b3:84:01:3c:8b:77:c5:fe:c1: dc:89:05:fe:19:bc:e7:fd:d5:8c:fc:a4:b3:2a:c1: e3:f9:98:e6:57:db:6b:23:1d:e0:b9:82:12:a7:46: 7e:5b:b6:12:3d:5b:57:4a:bb:1b:1f:e1:51:0d:0e: 59:21:83:87:f5:7b:4e:d2:21:b2:d3:08:4d:99:fe: 86:34:81:aa:86:17:7f:29:5b:06:3c:6f:b0:58:44: 67:bd:6c:4b:4a:b8:83:81:45:ea:d7:23:b0:de:31: e2:54:17:5b:60:37:97:00:02:23:af:be:e1:ec:03: 73:ff:2c:65:6d:e5:e2:49:df:c5:12:38:8a:c4:67: 17:b6:57:ca:04:19:49:03:a1:0b:c7:85:41:be:9d: 72:aa:02:f7:b1:b3:9c:40:db:8e:37:04:00:b8:e5: c9:e3:04:60:e0:77:2e:61:82:59:c7:3f:fd:da:8e: a1:d2:61:5c:34:f0:92:3c:30:f1:9a:2a:54:bc:0d: 51:0f:e6:33:a5:e7:34:a2:80:43:ce:65:e3:da:32: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:01:81:DD:D9:D3:E9:A1:F6:5E:A1:02:3B:F5:30:71:AE:3A:95:4A X509v3 Authority Key Identifier: keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c5:1a:6e:bd:88:8a:4a:42:0c:66:d0:30:b6:25:e9:07:33: 0e:70:c7:16:af:75:29:0c:f3:9c:32:1a:4d:1c:20:e8:17:70: b3:2c:7d:b6:47:c3:89:5d:c1:45:2c:82:a2:44:54:69:50:7a: dd:fa:5b:ee:aa:6d:0f:9e:4f:7f:1f:67:bb:23:ee:4a:db:d1: 3e:6b:b1:93:e6:98:22:ca:a2:cf:4c:c3:8c:c0:94:78:7e:34: 83:43:ec:31:04:5d:f7:7b:f7:f1:d7:3c:16:2c:80:d3:f9:32: 51:d4:bd:d4:54:a2:c3:b2:8a:96:0c:29:18:14:b6:fd:6f:11: 3b:46:4b:39:a9:2c:3e:77:17:74:c5:bf:36:33:9e:4c:2d:3a: 57:e3:16:af:00:11:c3:4b:87:d2:20:83:18:ca:5c:91:64:c4: cf:c5:8e:a7:89:f9:d4:b9:e7:6f:9e:32:3f:0d:e5:df:40:4c: c2:fe:ad:c3:4e:68:67:a1:05:3a:2e:dd:4a:38:ad:59:bb:03: 19:dd:d8:9f:3b:35:62:2a:41:c7:6d:79:d5:c0:0f:d8:2b:0d: 0d:cc:90:c5:d4:87:4f:c0:1a:94:57:d7:18:38:d5:9a:90:6a: e3:78:68:9c:70:74:2c:e7:5e:0f:10:ee:88:47:76:9f:0e:93: 88:e9:f2:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDRjYxMTAvBgNVBAUTKEEzNTExNzE4QjQyOUEyQjA0M0U2NDVCRkIxNjUwRUU2 Nzc3RTQxNzIwHhcNMjQwNTA0MjIzMTQ1WhcNMjQwNTExMjIzMTQ1WjAYMRYwFAYD VQQDEw02NjM2Yjc1MS05ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWuiXcj3BxG6yS/QxHc65Ovf1OHSn4KI0X39fr6q1EBOcSpYiMUXS/o204vO enGmBpyzhAE8i3fF/sHciQX+Gbzn/dWM/KSzKsHj+ZjmV9trIx3guYISp0Z+W7YS PVtXSrsbH+FRDQ5ZIYOH9XtO0iGy0whNmf6GNIGqhhd/KVsGPG+wWERnvWxLSriD gUXq1yOw3jHiVBdbYDeXAAIjr77h7ANz/yxlbeXiSd/FEjiKxGcXtlfKBBlJA6EL x4VBvp1yqgL3sbOcQNuONwQAuOXJ4wRg4HcuYYJZxz/92o6h0mFcNPCSPDDxmipU vA1RD+Yzpec0ooBDzmXj2jKmeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoBgd3Z 0+mh9l6hAjv1MHGuOpVKMB8GA1UdIwQYMBaAFKNRFxi0KaKwQ+ZFv7FlDuZ3fkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUNGNi8zNDk3ODNFRURC ODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9yQkQ1a1dfc1dVTzVuZC1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRVhHTFFwb3JCRDVrV19zV1VPNW5kLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUNGNi8zNDk3ODNFRURCODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9y QkQ1a1dfc1dVTzVuZC1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQxRpuvYiKSkIMZtAwtiXpBzMOcMcWr3UpDPOcMhpNHCDoF3CzLH22 R8OJXcFFLIKiRFRpUHrd+lvuqm0Pnk9/H2e7I+5K29E+a7GT5pgiyqLPTMOMwJR4 fjSDQ+wxBF33e/fx1zwWLIDT+TJR1L3UVKLDsoqWDCkYFLb9bxE7Rks5qSw+dxd0 xb82M55MLTpX4xavABHDS4fSIIMYylyRZMTPxY6nifnUuedvnjI/DeXfQEzC/q3D TmhnoQU6Lt1KOK1ZuwMZ3difOzViKkHHbXnVwA/YKw0NzJDF1IdPwBqUV9cYONWa kGrjeGiccHQs514PEO6IR3afDpOI6fLl -----END CERTIFICATE-----Generated at Sun May 5 00:12:27 2024 by rpki-client on console-fra.rpki-client.org