$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: PPacK29bwC/+XJRhLZK+MYJTS55GN1ivClZ+G4stUio= Subject key identifier: A2:15:3E:5E:20:E4:45:14:BB:ED:EB:42:F7:0C:3C:45:E0:C1:AE:AC Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 0712 Signing time: Sat 18 May 2024 22:35:15 +0000 Manifest this update: Sat 18 May 2024 22:35:14 +0000 Manifest next update: Sat 25 May 2024 22:35:14 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: h87Ow6tFfnTNkj04GCW8f45CsoTLS6mG8P1Uxe+Ahc0=) 2: D26A631494D011EEBECF111CC4F9AE02.roa (hash: lNCPZWgPWvDsSNT82bj8eu8yx05ZG1x3ORIqj0JbPLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: May 18 22:35:14 2024 GMT Not After : May 25 22:35:14 2024 GMT Subject: CN=66492d23-5af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:54:46:86:de:9a:56:4e:91:cb:9b:df:5f: e9:00:6e:8d:29:ea:85:59:cd:be:82:40:4f:51:7e: 8b:4b:62:5b:38:99:64:e1:ed:37:b3:82:bf:f7:9b: 59:c1:a7:78:ee:1f:3f:76:ab:27:04:12:d7:d1:96: 7d:b4:59:f6:19:57:0d:cf:3c:e3:51:10:84:f1:35: 95:f2:90:61:da:7b:8a:03:4b:7a:8a:e7:4b:19:fa: ed:3b:a9:54:f0:8d:72:11:c1:a2:99:3c:34:90:72: cf:3c:e7:20:3b:ba:75:d2:25:9e:f8:9d:55:3d:90: d1:d4:ed:c6:6b:bf:6e:49:0c:54:b2:a6:e7:eb:d3: d6:fa:4c:64:8b:1c:1b:7f:c8:22:28:0b:42:be:4e: df:72:e9:7f:79:af:e8:81:62:ed:24:83:5e:5e:ea: ab:2e:e8:dd:f1:31:67:6d:9d:2d:67:2a:a9:51:97: f6:65:81:f5:37:9b:87:33:ca:13:c9:e1:cb:00:ba: 76:b9:18:8f:2f:81:de:77:02:9e:1a:7b:e7:93:6e: ab:05:9b:a8:4f:94:c1:77:02:77:b8:aa:34:f1:bc: e6:2e:9a:45:a8:93:43:c3:b3:fb:3e:f1:b6:40:7f: 29:5d:23:3b:a4:bd:d5:a2:b4:52:9c:2a:33:fc:e6: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:15:3E:5E:20:E4:45:14:BB:ED:EB:42:F7:0C:3C:45:E0:C1:AE:AC X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b2:12:54:65:81:b4:23:02:78:34:5d:b9:d0:62:9e:3b:a3: f3:f4:12:9e:74:1b:fe:a5:3c:c9:c2:74:1d:7e:e0:2b:82:99: 08:5b:87:a2:fc:6c:88:d1:be:74:bd:62:08:67:97:aa:10:f7: 5b:5e:df:4c:72:2f:31:ff:b9:9c:c4:98:fe:ee:5c:6c:a3:48: 77:e5:e0:ac:9f:ee:e5:15:81:b7:eb:03:17:c0:a1:cd:5c:22: 5d:73:82:43:7b:55:fd:6f:70:59:d6:2c:fb:b8:4d:fd:07:75: f6:03:f4:20:7c:f1:60:87:0d:d7:12:4e:57:02:1d:ef:3b:0f: da:b9:74:7f:8d:f7:fd:7d:09:cc:09:a6:78:86:e2:c4:fd:13: ed:0d:f1:65:1a:a2:02:28:69:29:76:99:5c:68:05:d1:ef:02: 81:24:78:a5:bb:7c:61:8e:c1:e1:83:77:28:10:91:19:ba:81: a4:12:b2:b4:6a:d4:26:5b:ce:cd:38:58:0a:62:b3:4a:a5:12: 4a:13:78:dd:65:fd:d4:18:ba:ba:71:56:2f:ab:0c:47:25:4d: 29:22:b8:c2:f9:f4:52:12:75:a8:3e:0d:d3:b4:9a:07:7c:7f: 02:be:c9:9f:5b:6d:80:a3:79:4c:7f:f3:c8:a3:07:04:aa:43: fa:31:72:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjQwNTE4MjIzNTE0WhcNMjQwNTI1MjIzNTE0WjAYMRYwFAYD VQQDEw02NjQ5MmQyMy01YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydVURobemlZOkcub31/pAG6NKeqFWc2+gkBPUX6LS2JbOJlk4e03s4K/95tZ wad47h8/dqsnBBLX0ZZ9tFn2GVcNzzzjURCE8TWV8pBh2nuKA0t6iudLGfrtO6lU 8I1yEcGimTw0kHLPPOcgO7p10iWe+J1VPZDR1O3Ga79uSQxUsqbn69PW+kxkixwb f8giKAtCvk7fcul/ea/ogWLtJINeXuqrLujd8TFnbZ0tZyqpUZf2ZYH1N5uHM8oT yeHLALp2uRiPL4HedwKeGnvnk26rBZuoT5TBdwJ3uKo08bzmLppFqJNDw7P7PvG2 QH8pXSM7pL3VorRSnCoz/ObwJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIVPl4g 5EUUu+3rQvcMPEXgwa6sMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBshJUZYG0IwJ4NF250GKeO6Pz9BKedBv+pTzJwnQdfuArgpkIW4ei /GyI0b50vWIIZ5eqEPdbXt9Mci8x/7mcxJj+7lxso0h35eCsn+7lFYG36wMXwKHN XCJdc4JDe1X9b3BZ1iz7uE39B3X2A/QgfPFghw3XEk5XAh3vOw/auXR/jff9fQnM CaZ4huLE/RPtDfFlGqICKGkpdplcaAXR7wKBJHilu3xhjsHhg3coEJEZuoGkErK0 atQmW87NOFgKYrNKpRJKE3jdZf3UGLq6cVYvqwxHJU0pIrjC+fRSEnWoPg3TtJoH fH8CvsmfW22Ao3lMf/PIowcEqkP6MXIU -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org