$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: CMRNDe6MkeVzLUs9m+jUfeLSsCsNpQqeZlrkkNWlv+0= Subject key identifier: C8:6F:DD:60:33:A9:8E:E0:81:EE:2B:C7:F5:00:D6:63:95:6B:72:6B Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: F0 Signing time: Sat 27 Apr 2024 05:38:42 +0000 Manifest this update: Sat 27 Apr 2024 05:38:41 +0000 Manifest next update: Sat 04 May 2024 05:38:41 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: BL3E9AY8vvt5WixN1MIhY8JjTBN/9WhrQNMrU0v4MPA=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: Z+8OAsXUqTPdaxZduFocVP1QFHv7C2jepVgKTrjE3Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Apr 27 05:38:41 2024 GMT Not After : May 4 05:38:41 2024 GMT Subject: CN=662c8f61-6fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:f7:e0:27:d2:e5:81:35:91:ed:11:a7:9b: ce:63:2b:af:1f:42:68:e0:88:32:a6:1e:3d:db:d7: 4c:8e:f8:b7:74:c9:db:a2:27:0b:83:5d:16:db:76: c4:c6:d4:1a:9b:4b:e9:2a:55:a1:6f:63:62:06:ea: ad:9a:2c:88:60:b1:6b:03:38:46:31:b1:44:f3:49: 63:e9:36:0a:60:7c:84:1b:09:97:17:0c:16:dd:80: 96:ee:5c:1f:65:79:0f:c7:c8:69:4c:92:cc:ea:63: 79:31:0d:ed:de:da:b6:e6:0d:b8:f5:dc:5e:ef:6a: e5:22:b1:3a:20:ab:49:e9:53:9b:9a:59:23:3f:20: cf:17:d1:d8:ac:8b:ce:37:98:18:b5:dc:0d:ae:c0: a6:0c:ca:a4:ff:d8:96:b7:43:d2:13:ca:2e:d6:53: ae:f9:73:b9:c7:4b:ad:ff:92:62:67:cb:2b:15:b7: 8f:d1:35:4a:cc:40:a6:bc:52:68:17:81:4e:0b:d7: 0b:79:61:d6:39:49:29:4b:d4:35:1c:9a:9b:a0:62: 78:53:90:26:8a:c5:a8:f1:cb:11:3e:f5:87:30:1a: 1f:fc:bb:63:c5:65:8b:a0:7f:11:8f:81:66:7d:22: 64:aa:9d:a3:a1:34:71:85:1a:d7:50:34:db:96:f9: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6F:DD:60:33:A9:8E:E0:81:EE:2B:C7:F5:00:D6:63:95:6B:72:6B X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:47:1a:b0:1d:7c:a9:94:e2:d8:bf:37:e9:3a:54:4e:d5:4c: 6b:d0:f3:ef:a3:70:35:c8:9e:b3:b0:5b:cc:7f:51:05:06:d7: 42:c1:f7:bb:68:26:37:7a:30:57:66:46:51:06:f6:e6:c7:be: 1b:74:c5:0d:3b:00:a1:75:bb:9e:f7:52:2c:1a:df:ce:47:b5: 5c:a5:d0:e5:98:66:5c:03:53:69:67:29:c4:ee:41:57:9f:6a: c1:04:be:df:00:ea:90:cf:b3:f9:46:36:e9:c5:fa:dd:c6:7b: cd:b8:f9:e3:55:44:ae:1b:3e:8b:d3:86:68:f3:e9:1a:d5:39: e0:fb:5b:54:ff:c2:9b:fb:b9:05:bf:77:0b:f2:e3:c3:40:7f: 17:ef:8d:89:12:a9:03:40:d3:0d:2e:97:3f:62:0c:cd:18:a2: 92:e4:f3:89:06:24:97:8f:64:6d:1e:f8:79:f1:46:a0:f9:6a: 0a:0a:df:05:f8:4c:4a:13:b6:25:95:c0:bf:75:3e:5a:1f:44: a2:53:56:69:3d:8f:c1:fb:b0:0a:c5:75:c5:f4:14:ca:49:ea: 3b:18:a9:ea:b6:29:4e:87:a8:61:99:31:7c:63:60:ec:77:0e: 60:9b:a7:0a:9a:f3:9a:69:94:b8:e7:05:2f:70:f6:07:58:9c: 02:0c:ad:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjQwNDI3MDUzODQxWhcNMjQwNTA0MDUzODQxWjAYMRYwFAYD VQQDEw02NjJjOGY2MS02ZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Qf34CfS5YE1ke0Rp5vOYyuvH0Jo4Igyph4929dMjvi3dMnboicLg10W23bE xtQam0vpKlWhb2NiBuqtmiyIYLFrAzhGMbFE80lj6TYKYHyEGwmXFwwW3YCW7lwf ZXkPx8hpTJLM6mN5MQ3t3tq25g249dxe72rlIrE6IKtJ6VObmlkjPyDPF9HYrIvO N5gYtdwNrsCmDMqk/9iWt0PSE8ou1lOu+XO5x0ut/5JiZ8srFbeP0TVKzECmvFJo F4FOC9cLeWHWOUkpS9Q1HJqboGJ4U5AmisWo8csRPvWHMBof/LtjxWWLoH8Rj4Fm fSJkqp2joTRxhRrXUDTblvlJbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhv3WAz qY7gge4rx/UA1mOVa3JrMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzRxqwHXyplOLYvzfpOlRO1Uxr0PPvo3A1yJ6zsFvMf1EFBtdCwfe7 aCY3ejBXZkZRBvbmx74bdMUNOwChdbue91IsGt/OR7VcpdDlmGZcA1NpZynE7kFX n2rBBL7fAOqQz7P5RjbpxfrdxnvNuPnjVUSuGz6L04Zo8+ka1Tng+1tU/8Kb+7kF v3cL8uPDQH8X742JEqkDQNMNLpc/YgzNGKKS5POJBiSXj2RtHvh58Uag+WoKCt8F +ExKE7YllcC/dT5aH0SiU1ZpPY/B+7AKxXXF9BTKSeo7GKnqtilOh6hhmTF8Y2Ds dw5gm6cKmvOaaZS45wUvcPYHWJwCDK3/ -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:28 2024 by rpki-client on console-ams.rpki-client.org