$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json) Hash identifier: 5KqLYX0KHH3M4nigjX/EGF4sSgT8SyEZtF9ucjoqDLA= Subject key identifier: 3C:08:95:5F:CA:D6:AB:B8:B9:AA:D6:FE:CD:75:AC:C0:4E:62:4A:45 Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1 Certificate serial: 1DE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft Manifest number: 1DD9 Signing time: Fri 31 May 2024 16:37:48 +0000 Manifest this update: Fri 31 May 2024 16:37:47 +0000 Manifest next update: Fri 07 Jun 2024 16:37:47 +0000 Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: 5T091a3dpcWonP1mDXv1uEHO0YXWeOuRJ0ldbypzB+c=) 2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: u2Rf8c+IxPJNEWPNhKjGUTuQHDebI9AcCob8gvsUIFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7652 (0x1de4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1 Validity Not Before: May 31 16:37:47 2024 GMT Not After : Jun 7 16:37:47 2024 GMT Subject: CN=6659fcdc-dfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:a8:66:d0:ec:10:c3:33:f3:2c:53:73:c1: f4:2f:7d:18:d5:a8:a9:e4:63:5a:7d:c1:86:a8:64: 64:61:36:ea:15:7e:71:14:c7:cf:06:e3:90:4c:2c: 6b:ec:c4:38:ba:20:00:1c:ae:1c:2e:0f:14:bb:2f: 83:53:7f:be:8d:05:6a:17:14:19:45:fc:c5:0b:11: de:df:9e:92:b1:53:54:9b:85:33:11:44:b6:a9:1e: 1c:80:17:6f:f3:dd:76:21:8f:4a:09:04:b3:23:ce: fd:74:97:dd:15:2b:ec:75:d2:8d:75:af:73:39:ac: 43:e1:65:4b:1e:a4:45:9f:8c:b9:4f:f8:af:54:52: e3:ba:52:73:82:d6:de:5b:32:f0:77:e6:28:96:de: e9:88:a7:6f:15:64:40:50:0c:ef:37:e7:ee:d3:f2: 12:1e:9e:40:a4:17:59:f3:06:c4:41:aa:93:54:f5: 04:d3:bd:16:ed:c3:8b:a1:62:af:a8:09:9e:3c:06: 6c:1c:34:8d:43:af:4f:03:d3:9a:f8:4d:c1:32:a6: c1:be:94:01:a0:e3:70:5e:77:8e:59:90:e3:5e:e6: 69:c2:b7:0f:77:c1:88:33:68:98:7a:0f:c0:30:cc: 1f:e7:98:53:07:0c:96:c2:c6:8d:d9:52:63:4c:57: 57:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:95:5F:CA:D6:AB:B8:B9:AA:D6:FE:CD:75:AC:C0:4E:62:4A:45 X509v3 Authority Key Identifier: keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d1:04:b9:54:26:1b:93:4f:cd:ad:3e:03:38:89:3e:48:d8: 6b:ac:6e:c9:c9:ec:06:3b:ba:47:41:4c:38:80:9b:c7:04:a2: a6:de:65:2d:54:cb:86:ff:b6:07:7e:3d:17:eb:18:e8:f6:27: 62:7a:b1:1f:ed:c1:fa:48:f1:97:75:05:72:ce:38:f5:c9:4c: fe:ad:78:00:6c:39:10:5d:47:8c:58:82:98:b9:e0:f0:48:3d: ff:ed:95:74:e6:0f:3f:19:cc:b8:01:7e:1d:6c:85:e8:58:32: c2:ab:1a:65:7d:b0:2a:51:02:67:ca:35:d6:8e:9e:4e:3d:a5: 74:0b:67:8a:51:b5:21:91:7a:68:ab:d8:78:bc:ff:83:dc:36: 02:70:08:99:e9:2a:fe:19:14:71:46:22:7d:3a:05:70:25:68: 3f:e1:ce:3f:ca:6d:62:97:69:e9:c6:88:ed:ad:7c:2d:9f:88: 0f:25:40:35:6f:cc:34:82:ea:17:77:1f:b9:16:7b:72:29:d3: 89:2d:7a:76:13:1b:44:61:25:49:8b:1d:6f:7a:91:ce:41:62: 46:d4:04:e8:14:19:e9:ea:18:de:df:81:88:48:50:c3:52:ed: 97:88:66:15:5a:ca:1a:ae:99:ce:bb:e2:4e:2a:be:06:de:54: 7e:ea:1d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3 OUM4MzBDRTEwHhcNMjQwNTMxMTYzNzQ3WhcNMjQwNjA3MTYzNzQ3WjAYMRYwFAYD VQQDEw02NjU5ZmNkYy1kZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0COoZtDsEMMz8yxTc8H0L30Y1aip5GNafcGGqGRkYTbqFX5xFMfPBuOQTCxr 7MQ4uiAAHK4cLg8Uuy+DU3++jQVqFxQZRfzFCxHe356SsVNUm4UzEUS2qR4cgBdv 8912IY9KCQSzI879dJfdFSvsddKNda9zOaxD4WVLHqRFn4y5T/ivVFLjulJzgtbe WzLwd+Yolt7piKdvFWRAUAzvN+fu0/ISHp5ApBdZ8wbEQaqTVPUE070W7cOLoWKv qAmePAZsHDSNQ69PA9Oa+E3BMqbBvpQBoONwXneOWZDjXuZpwrcPd8GIM2iYeg/A MMwf55hTBwyWwsaN2VJjTFdX/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwIlV/K 1qu4uarW/s11rMBOYkpFMB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM3Qy8yOUY3QTA0MDZFRjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtU VXdsRmcyR05iTUI1eURET0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk0QS5VCYbk0/NrT4DOIk+SNhrrG7JyewGO7pHQUw4gJvHBKKm3mUt VMuG/7YHfj0X6xjo9idierEf7cH6SPGXdQVyzjj1yUz+rXgAbDkQXUeMWIKYueDw SD3/7ZV05g8/Gcy4AX4dbIXoWDLCqxplfbAqUQJnyjXWjp5OPaV0C2eKUbUhkXpo q9h4vP+D3DYCcAiZ6Sr+GRRxRiJ9OgVwJWg/4c4/ym1il2npxojtrXwtn4gPJUA1 b8w0guoXdx+5FntyKdOJLXp2ExtEYSVJix1vepHOQWJG1AToFBnp6hje34GISFDD Uu2XiGYVWsoarpnOu+JOKr4G3lR+6h2P -----END CERTIFICATE-----Generated at Fri May 31 17:44:21 2024 by rpki-client on console-fra.rpki-client.org