$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: Ae3L8K8E65GRwulH1HIPv0emBN8s9Ni3ydJt3Knk6XA= Subject key identifier: 4E:39:4A:E6:9F:C0:BE:2F:B7:E7:14:5E:A0:DC:9F:D8:04:11:38:48 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 042D Signing time: Sun 19 May 2024 02:00:47 +0000 Manifest this update: Sun 19 May 2024 02:00:46 +0000 Manifest next update: Sun 26 May 2024 02:00:46 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: /mNLLyaBOGPsH3mKhGP9sN3NTCSCavFwyEtxfIST/uc=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: DqlBCHLgYBfwa2Dql2gd6kD09NgBwEMrDmWuDNyQkRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: May 19 02:00:46 2024 GMT Not After : May 26 02:00:46 2024 GMT Subject: CN=66495d4f-9751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:60:c8:76:8b:af:ec:8a:a3:13:16:9c:d4:08: ff:9a:e4:99:ee:15:9f:05:73:21:33:06:9a:a6:81: 98:f7:25:45:45:ea:ff:c2:d6:da:eb:df:78:1e:88: 25:4b:36:04:91:00:b9:1f:2c:d3:df:a1:49:6b:ae: aa:eb:ff:fc:eb:19:d2:b1:31:84:1c:62:0b:34:d9: 29:c8:80:2f:8a:65:99:30:f6:96:81:74:70:a0:9f: 79:25:22:71:4c:8c:eb:8f:2b:fe:f6:ec:32:7e:1e: 28:7f:73:da:e1:e8:2b:7d:48:6b:b3:d2:ad:a7:ba: 00:ac:a8:d1:cc:80:bc:1f:c1:1c:7e:96:ae:76:e1: 5d:85:39:ef:0f:c1:24:be:4f:00:32:c9:83:0d:a2: d4:e8:d8:4c:d0:c5:88:95:2b:71:58:23:bd:75:60: 90:7b:c1:80:6a:6d:91:a4:fd:81:b5:9c:0d:96:6c: f8:15:17:8c:8c:f0:74:c4:af:74:22:26:2e:24:cd: 2b:30:48:10:a2:42:67:e5:a6:7f:42:e2:56:d1:f5: ef:67:17:ad:48:19:17:00:f6:c3:15:f2:41:17:06: 29:8d:aa:09:99:af:27:62:b9:a8:a1:ec:e8:ab:ff: cf:2e:1e:ad:41:d3:95:b4:8b:f3:9b:4f:33:ae:ea: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:39:4A:E6:9F:C0:BE:2F:B7:E7:14:5E:A0:DC:9F:D8:04:11:38:48 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c1:1d:17:d1:9b:f8:59:b9:a3:8a:2c:62:4f:10:b0:0b:e3: c0:aa:80:b7:22:90:de:ce:74:e8:fc:e6:1f:a3:4c:39:1c:ee: 1e:8a:68:32:0b:2c:7b:55:2f:e9:29:1f:d5:69:be:0f:d1:bb: 21:ee:2b:0c:a4:ef:57:d8:80:9e:5f:a1:16:27:6c:f5:99:7e: ed:42:e7:1e:be:12:77:ba:7a:b1:c1:d7:fc:4a:ed:1c:ee:58: 6e:b6:b3:78:f5:7b:0c:ea:e9:b0:4e:6c:39:fb:5f:fb:63:da: 2a:65:14:46:97:ae:ec:55:e0:01:3b:a3:bc:ec:8f:5e:0a:1f: b8:31:88:1a:7b:dd:55:09:78:87:78:e1:61:32:67:9d:fd:6c: 83:a2:fa:6d:2b:81:a7:f3:26:52:f2:b7:1c:dd:6d:24:0e:b5: 41:29:53:1e:b7:11:d9:5f:19:42:47:d4:0d:98:86:ae:8d:14: 1f:ac:6c:be:19:ee:73:dc:0c:54:37:8a:22:61:fb:27:03:62: 4c:7a:39:38:50:7f:a0:9f:2a:89:36:36:2c:7d:44:ce:17:0b: e2:f6:05:7c:5d:d5:29:d4:22:1e:c4:a2:1c:26:ac:ce:57:11: 8c:73:61:41:15:6e:32:42:fc:61:cf:60:9d:43:91:12:d5:7d: 63:99:69:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjQwNTE5MDIwMDQ2WhcNMjQwNTI2MDIwMDQ2WjAYMRYwFAYD VQQDEw02NjQ5NWQ0Zi05NzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WDIdouv7IqjExac1Aj/muSZ7hWfBXMhMwaapoGY9yVFRer/wtba6994Hogl SzYEkQC5HyzT36FJa66q6//86xnSsTGEHGILNNkpyIAvimWZMPaWgXRwoJ95JSJx TIzrjyv+9uwyfh4of3Pa4egrfUhrs9Ktp7oArKjRzIC8H8EcfpauduFdhTnvD8Ek vk8AMsmDDaLU6NhM0MWIlStxWCO9dWCQe8GAam2RpP2BtZwNlmz4FReMjPB0xK90 IiYuJM0rMEgQokJn5aZ/QuJW0fXvZxetSBkXAPbDFfJBFwYpjaoJma8nYrmooezo q//PLh6tQdOVtIvzm08zrupv2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE45Suaf wL4vt+cUXqDcn9gEEThIMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9wR0X0Zv4WbmjiixiTxCwC+PAqoC3IpDeznTo/OYfo0w5HO4eimgy Cyx7VS/pKR/Vab4P0bsh7isMpO9X2ICeX6EWJ2z1mX7tQucevhJ3unqxwdf8Su0c 7lhutrN49XsM6umwTmw5+1/7Y9oqZRRGl67sVeABO6O87I9eCh+4MYgae91VCXiH eOFhMmed/WyDovptK4Gn8yZS8rcc3W0kDrVBKVMetxHZXxlCR9QNmIaujRQfrGy+ Ge5z3AxUN4oiYfsnA2JMejk4UH+gnyqJNjYsfUTOFwvi9gV8XdUp1CIexKIcJqzO VxGMc2FBFW4yQvxhz2CdQ5ES1X1jmWlV -----END CERTIFICATE-----Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org