$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json) Hash identifier: kSfovQDWErOUHo7WMwu/JeJvcSuE9ArHEkFsZT42c58= Subject key identifier: EB:57:DF:DB:38:E8:48:A7:2F:D0:7F:B1:16:5B:3A:4F:F7:FD:80:DD Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20 Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft Manifest number: 0260 Signing time: Sat 27 Apr 2024 03:46:18 +0000 Manifest this update: Sat 27 Apr 2024 03:46:17 +0000 Manifest next update: Sat 04 May 2024 03:46:17 +0000 Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: QCLck/22DjskhP9v7P/eLFbPhuyYT6FAlNJUwOr/G64=) 2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: qn3Hd4WEpnWFP0NC57cKVAbwF0DX8ivcyDHg1oU42uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920 Validity Not Before: Apr 27 03:46:17 2024 GMT Not After : May 4 03:46:17 2024 GMT Subject: CN=662c7509-f6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:e6:65:f7:81:f4:e2:67:0c:8d:41:22:df: 42:4b:b0:a4:9b:81:36:d8:0b:94:f1:bc:e7:b1:a2: 7b:04:8a:82:42:95:c5:57:ff:d0:a8:0a:de:b2:13: ea:35:ad:b9:da:b4:a8:cc:93:c5:82:b9:59:3b:d6: ee:ee:11:ce:9b:ed:cb:a6:48:3d:10:b4:9a:e1:8c: 9d:4d:5c:8e:e4:66:ef:19:47:af:ac:20:7b:71:4e: 60:8c:06:56:33:d2:73:99:c8:1a:71:11:b3:55:aa: b4:f4:86:26:41:4e:eb:98:49:59:6b:14:0c:56:d3: 71:c4:e7:21:69:ea:b7:49:78:45:b8:05:45:ad:4e: 03:47:df:5e:01:d3:4d:29:bf:a1:92:ae:e1:bd:2f: 27:7c:1d:36:01:62:46:db:3c:4c:84:a3:11:cc:59: 32:7a:cd:77:1c:86:03:b7:74:7a:6a:a2:9e:fe:e7: 22:50:ff:98:6e:6f:a1:0f:af:ec:6c:5e:43:5b:47: cd:6c:3d:e6:e6:3e:33:2c:35:ba:53:c6:ba:13:8e: f7:67:ab:a3:c4:3e:ed:47:74:24:9e:a9:77:af:e1: 36:e5:e3:30:d0:5c:b8:4c:12:2b:20:07:8e:07:e8: 48:01:5d:09:a5:9c:c0:5a:fa:f3:aa:77:d7:a5:e1: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:57:DF:DB:38:E8:48:A7:2F:D0:7F:B1:16:5B:3A:4F:F7:FD:80:DD X509v3 Authority Key Identifier: keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:6d:b5:4f:ae:96:6a:e8:3d:ab:37:5b:5e:ba:76:9b:ed:29: bd:c7:fa:48:ff:dc:5d:25:60:d6:d4:d1:e7:35:d9:75:e8:f6: d7:9c:f5:55:1b:e0:18:6c:48:c3:0f:10:58:89:5e:66:8c:a2: 5b:f2:3f:4a:d7:4a:1a:2e:2c:d6:69:9e:12:04:9a:13:a1:b7: 79:8e:58:38:9c:e5:d2:4e:41:65:17:bb:6c:d2:3f:6b:c3:62: 5b:3f:11:d3:cf:00:d9:4c:5e:da:23:18:a5:e7:c6:67:8c:8d: f4:66:31:7c:16:d1:e4:d6:ac:3c:8c:8c:ad:7e:3b:45:15:c7: 36:13:ae:de:79:31:38:56:14:d0:fd:9c:b6:73:06:76:5b:83: 1e:51:cd:a9:19:3d:46:7b:c2:83:4c:24:5d:f6:da:05:28:ce: 93:3c:db:57:a2:55:73:16:4b:ab:ab:4c:3f:15:12:95:38:9c: a4:2b:2e:0e:72:f9:3d:9c:54:b0:ec:1e:01:c2:1b:82:97:32: 8d:05:41:4c:d6:9b:8d:48:7a:64:ae:73:a2:61:a7:31:82:f4: c6:c7:1c:b5:bd:c5:d2:2b:d6:c2:80:09:57:20:7b:e4:21:5e: bc:f2:e6:50:3f:f0:bf:42:3d:aa:81:30:95:49:e7:8d:88:16: b3:51:7e:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCNEIxMTAvBgNVBAUTKEEzNTU2MURBNDVBOTU1RjAyRDEyMkEwRDg4RThDNzYy MzlFREY5MjAwHhcNMjQwNDI3MDM0NjE3WhcNMjQwNTA0MDM0NjE3WjAYMRYwFAYD VQQDEw02NjJjNzUwOS1mNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPvmZfeB9OJnDI1BIt9CS7Ckm4E22AuU8bznsaJ7BIqCQpXFV//QqAreshPq Na252rSozJPFgrlZO9bu7hHOm+3Lpkg9ELSa4YydTVyO5GbvGUevrCB7cU5gjAZW M9JzmcgacRGzVaq09IYmQU7rmElZaxQMVtNxxOchaeq3SXhFuAVFrU4DR99eAdNN Kb+hkq7hvS8nfB02AWJG2zxMhKMRzFkyes13HIYDt3R6aqKe/uciUP+Ybm+hD6/s bF5DW0fNbD3m5j4zLDW6U8a6E473Z6ujxD7tR3Qknql3r+E25eMw0Fy4TBIrIAeO B+hIAV0JpZzAWvrzqnfXpeGHwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtX39s4 6EinL9B/sRZbOk/3/YDdMB8GA1UdIwQYMBaAFKNVYdpFqVXwLRIqDYjox2I57fkg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qi84RTE2MjQzMEM3 NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZmQXRFaW9OaU9qSFlqbnQt U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xVmgya1dwVmZBdEVpb05pT2pIWWpudC1TQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI0Qi84RTE2MjQzMEM3NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZm QXRFaW9OaU9qSFlqbnQtU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnbbVPrpZq6D2rN1teunab7Sm9x/pI/9xdJWDW1NHnNdl16PbXnPVV G+AYbEjDDxBYiV5mjKJb8j9K10oaLizWaZ4SBJoTobd5jlg4nOXSTkFlF7ts0j9r w2JbPxHTzwDZTF7aIxil58ZnjI30ZjF8FtHk1qw8jIytfjtFFcc2E67eeTE4VhTQ /Zy2cwZ2W4MeUc2pGT1Ge8KDTCRd9toFKM6TPNtXolVzFkurq0w/FRKVOJykKy4O cvk9nFSw7B4BwhuClzKNBUFM1puNSHpkrnOiYacxgvTGxxy1vcXSK9bCgAlXIHvk IV688uZQP/C/Qj2qgTCVSeeNiBazUX7C -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:14 2024 by rpki-client on console-ams.rpki-client.org