$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: vL86fsAiFzlDQYCaI9vEBXt+yzjxIFjo+bp00OaXnL4= Subject key identifier: EF:AC:50:DC:3A:B8:83:6D:7D:98:B9:50:87:6E:B8:00:F2:A3:21:12 Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: 40 Signing time: Sun 19 May 2024 08:13:06 +0000 Manifest this update: Sun 19 May 2024 08:13:05 +0000 Manifest next update: Sun 26 May 2024 08:13:05 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: nckcGXrfqj6qwOi+RqLmHlCyPkHeQayC2DbzMRCJwPo=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: VbbJAFeEANc5xpg56kqLWx6ph7v6NQjlCgiwAcE8S0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: May 19 08:13:05 2024 GMT Not After : May 26 08:13:05 2024 GMT Subject: CN=6649b491-c3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:d9:d2:55:a8:3f:8a:7a:b4:aa:f9:11:80: aa:08:53:06:f5:41:b8:5f:b4:85:65:66:84:00:a4: 59:bc:5b:2e:b2:a0:82:d4:80:f5:7e:4f:73:b1:5c: 98:6f:59:6f:95:93:94:02:b8:b5:56:df:56:54:50: 0d:1e:d0:61:7b:eb:ab:a6:44:89:6a:ac:31:92:7e: 8e:36:9f:27:01:82:61:e1:fb:df:70:d3:03:86:dd: 1b:3a:b4:46:b1:8f:d0:b9:30:fe:01:52:64:a5:20: 5c:de:f9:4c:50:ac:7b:37:ab:65:49:c6:ad:32:e8: 5d:dd:bd:da:0b:3b:5e:d7:b5:02:0f:d6:e3:c0:7f: 0d:57:1b:2f:4e:9b:c3:f0:05:62:8d:fc:04:a1:f7: 73:be:86:69:ba:16:d1:45:b4:fa:17:b1:0b:00:43: 95:9b:c3:f5:60:74:9e:5f:f1:30:16:ec:c2:6c:d9: 4e:07:a5:a1:ec:b9:d9:ea:d6:c1:f4:01:21:61:01: 90:db:13:9d:e8:f0:3b:5c:36:c9:89:0e:16:70:52: 4f:e1:e7:ef:9d:33:58:5f:6d:19:a4:e4:46:c7:71: 28:5e:29:ab:4e:81:ae:4e:54:58:96:60:ae:a8:a6: 1b:17:6c:43:1e:cb:bf:c3:4f:9c:75:8b:29:81:54: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AC:50:DC:3A:B8:83:6D:7D:98:B9:50:87:6E:B8:00:F2:A3:21:12 X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:65:9c:dd:15:a0:b6:c4:05:60:eb:76:fa:c6:fb:6c:06:9b: 03:d3:2d:e2:50:be:9d:39:62:87:29:25:3b:e5:42:c1:c4:f9: 6c:ab:9a:5b:5c:f6:4c:87:2c:c8:a3:04:26:e8:81:b5:d9:54: c3:92:bb:b4:fe:49:ea:43:6e:9e:79:40:b5:b5:d2:0a:7a:59: 58:1a:b9:13:29:34:3e:c6:55:c6:83:3b:d5:cc:8a:8a:f9:40: 76:64:1d:73:c3:77:56:14:a7:8b:92:c4:c4:15:3d:e7:be:c8: 76:9b:7f:c5:49:78:f3:14:55:b9:25:3b:b8:08:73:0f:54:18: 26:a0:d6:cb:ed:45:3b:8e:89:cc:d3:73:ed:13:11:ff:01:27: f2:c4:48:de:99:6f:0b:7f:92:d1:32:09:28:a0:dc:da:41:cd: de:53:b8:57:4e:b8:31:3e:b3:43:4e:ad:b9:cd:17:c5:fb:59: cc:c7:a3:8a:5a:ad:53:e7:e4:5a:e9:71:aa:68:50:91:e1:e2: e9:77:c9:3c:4b:87:6f:79:f8:0c:ba:74:b6:cc:c9:1c:f6:38: 1c:94:3a:db:68:af:c9:86:72:9d:db:c9:7b:fc:59:c8:52:b4: 0c:c5:81:70:54:b0:42:21:ff:d0:07:8c:04:23:d6:fc:eb:cc: ec:02:04:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjA2QTExMC8GA1UEBRMoQTNDQjM5OEVDNzM5NTE3NDc2MkQ5MzAzM0U3MDYwOUQ2 MEY0RERCMjAeFw0yNDA1MTkwODEzMDVaFw0yNDA1MjYwODEzMDVaMBgxFjAUBgNV BAMTDTY2NDliNDkxLWMzYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu+tnSVag/inq0qvkRgKoIUwb1QbhftIVlZoQApFm8Wy6yoILUgPV+T3OxXJhv WW+Vk5QCuLVW31ZUUA0e0GF766umRIlqrDGSfo42nycBgmHh+99w0wOG3Rs6tEax j9C5MP4BUmSlIFze+UxQrHs3q2VJxq0y6F3dvdoLO17XtQIP1uPAfw1XGy9Om8Pw BWKN/ASh93O+hmm6FtFFtPoXsQsAQ5Wbw/VgdJ5f8TAW7MJs2U4HpaHsudnq1sH0 ASFhAZDbE53o8DtcNsmJDhZwUk/h5++dM1hfbRmk5EbHcSheKatOga5OVFiWYK6o phsXbEMey7/DT5x1iymBVByRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU76xQ3Dq4 g219mLlQh264APKjIRIwHwYDVR0jBBgwFoAUo8s5jsc5UXR2LZMDPnBgnWD03bIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MDZBLzRGMjU4OEU0QkI0 NTExRUU4MzBDOTg1REM0RjlBRTAyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNi SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbzhzNWpzYzVVWFIyTFpNRFBuQmduV0QwM2JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MDZBLzRGMjU4OEU0QkI0NTExRUU4MzBDOTg1REM0RjlBRTAyL284czVqc2M1VVhS MkxaTURQbkJnbldEMDNiSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABNlnN0VoLbEBWDrdvrG+2wGmwPTLeJQvp05YocpJTvlQsHE+Wyrmltc 9kyHLMijBCbogbXZVMOSu7T+SepDbp55QLW10gp6WVgauRMpND7GVcaDO9XMior5 QHZkHXPDd1YUp4uSxMQVPee+yHabf8VJePMUVbklO7gIcw9UGCag1svtRTuOiczT c+0TEf8BJ/LESN6Zbwt/ktEyCSig3NpBzd5TuFdOuDE+s0NOrbnNF8X7WczHo4pa rVPn5FrpcapoUJHh4ul3yTxLh295+Ay6dLbMyRz2OByUOttor8mGcp3byXv8WchS tAzFgXBUsEIh/9AHjAQj1vzrzOwCBG4= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org