$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: YXkg6QRt8ApFGRmoPTar81b64L66r/NX7IYSVRzFpx8= Subject key identifier: 20:38:99:B0:D2:25:27:F0:E1:41:2E:2B:7D:A5:0D:5E:89:CA:BF:50 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 17 Signing time: Sun 19 May 2024 08:47:54 +0000 Manifest this update: Sun 19 May 2024 08:47:54 +0000 Manifest next update: Sun 26 May 2024 08:47:54 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: TK/kCGAt3sqyuHLIKG3nC3G6AZeSeUqJb+1u7u7aMUM=) 2: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: pka10Uc6nzlxGkED9VZp9bJBwLv9g+b02qwlKzxKN2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: May 19 08:47:54 2024 GMT Not After : May 26 08:47:54 2024 GMT Subject: CN=6649bcba-0d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:b3:4f:4f:4c:9b:fb:4c:bd:72:bf:c2:8b: c7:b1:ce:10:ea:79:a9:69:79:82:63:84:8e:df:89: 63:4d:1e:2d:56:67:24:6f:8f:41:33:f4:59:0f:5f: d8:26:3a:40:32:63:c7:39:5a:40:02:52:31:27:a2: 69:c9:52:57:64:0e:41:cb:1c:68:bb:d8:4c:c4:89: d6:a6:dc:e5:48:a8:ed:0a:c5:88:03:69:7a:49:c7: 37:3f:33:83:e6:cd:03:bc:56:b4:02:2c:fb:26:a6: a3:25:04:90:f9:c1:4e:7c:89:3e:eb:b1:c9:30:50: b4:7c:b0:c6:4e:8d:56:6e:cc:73:d2:55:36:6e:c5: 30:17:b9:f2:9d:5a:b6:52:65:2c:5d:9e:79:7c:d6: ef:81:bc:ec:5c:ed:a7:12:44:59:28:c8:93:18:37: 2a:d8:3e:84:1a:e5:3e:ae:3d:95:13:94:e1:53:3c: 9d:6b:1a:f5:ff:45:bb:d8:b4:38:3b:49:73:fd:ad: 60:40:17:75:c0:80:c8:88:00:1b:82:de:a1:27:e0: 03:d1:ed:c0:35:bf:5f:f4:7c:5e:f1:2d:e7:50:24: 63:00:ce:48:7c:e1:e4:49:e8:5e:4d:fa:43:de:82: 07:b5:d7:0b:1d:bf:cd:3f:2a:28:95:75:99:b5:d5: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:38:99:B0:D2:25:27:F0:E1:41:2E:2B:7D:A5:0D:5E:89:CA:BF:50 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d9:9f:e0:86:6c:eb:88:ee:43:51:0a:86:8a:46:3a:ee:39: 53:49:9c:98:24:ee:df:c4:d6:04:d2:12:f5:e1:81:a2:27:ed: b1:b3:51:7a:6f:41:25:e8:57:e5:c3:f8:f2:90:19:97:96:b3: 19:db:1c:7c:23:86:bd:ab:b5:e4:d0:41:52:c1:3b:36:8a:dd: 22:38:8e:25:37:8c:8c:a7:ab:eb:00:99:e1:20:b4:53:29:7f: 49:97:c5:70:09:5c:d5:f1:c9:6b:2f:e5:1c:85:92:27:64:4f: d3:70:1e:d8:f8:2f:bf:bd:c0:5b:f2:a3:2c:5d:d0:6e:41:ea: aa:b0:ca:c1:44:43:04:43:ae:e8:2a:7c:59:70:56:59:d2:0c: e9:82:66:2d:fd:44:b1:f2:47:41:f5:e2:2b:95:e7:c5:0a:6a: d0:72:46:e3:0d:53:0f:0f:70:7d:e8:b9:bf:2d:06:e5:77:49: 93:bd:47:1b:23:01:b5:2b:b4:38:c4:af:c7:72:12:1b:ce:d2: d4:6b:4d:9c:a3:be:88:b0:cd:4a:a1:35:ae:87:d8:b8:ca:a3: b5:2a:93:91:49:c8:0c:d5:5f:78:fd:70:bc:5f:da:6c:7a:c4: 97:0f:14:9f:b4:09:3f:61:e3:e8:24:54:02:12:17:5f:e6:ab: 74:ec:4c:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODhFRTExMC8GA1UEBRMoM0FFREE4MDQwN0Q3N0JCNTI4NDhBQkQ5RjcyNTlCRDgw N0E1RDM2MDAeFw0yNDA1MTkwODQ3NTRaFw0yNDA1MjYwODQ3NTRaMBgxFjAUBgNV BAMTDTY2NDliY2JhLTBkN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPErNPT0yb+0y9cr/Ci8exzhDqealpeYJjhI7fiWNNHi1WZyRvj0Ez9FkPX9gm OkAyY8c5WkACUjEnomnJUldkDkHLHGi72EzEidam3OVIqO0KxYgDaXpJxzc/M4Pm zQO8VrQCLPsmpqMlBJD5wU58iT7rsckwULR8sMZOjVZuzHPSVTZuxTAXufKdWrZS ZSxdnnl81u+BvOxc7acSRFkoyJMYNyrYPoQa5T6uPZUTlOFTPJ1rGvX/RbvYtDg7 SXP9rWBAF3XAgMiIABuC3qEn4APR7cA1v1/0fF7xLedQJGMAzkh84eRJ6F5N+kPe gge11wsdv80/KiiVdZm11RShAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIDiZsNIl J/DhQS4rfaUNXonKv1AwHwYDVR0jBBgwFoAUOu2oBAfXe7UoSKvZ9yWb2Ael02Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4OEVFLzMyMDk3MzFBRkJB RjExRUVBNkJDMzk1MkM0RjlBRTAyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAy QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3Uyb0JBZlhlN1VvU0t2Wjl5V2IyQWVsMDJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 OEVFLzMyMDk3MzFBRkJBRjExRUVBNkJDMzk1MkM0RjlBRTAyL091Mm9CQWZYZTdV b1NLdlo5eVdiMkFlbDAyQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/Zn+CGbOuI7kNRCoaKRjruOVNJnJgk7t/E1gTSEvXhgaIn7bGzUXpv QSXoV+XD+PKQGZeWsxnbHHwjhr2rteTQQVLBOzaK3SI4jiU3jIynq+sAmeEgtFMp f0mXxXAJXNXxyWsv5RyFkidkT9NwHtj4L7+9wFvyoyxd0G5B6qqwysFEQwRDrugq fFlwVlnSDOmCZi39RLHyR0H14iuV58UKatByRuMNUw8PcH3oub8tBuV3SZO9Rxsj AbUrtDjEr8dyEhvO0tRrTZyjvoiwzUqhNa6H2LjKo7Uqk5FJyAzVX3j9cLxf2mx6 xJcPFJ+0CT9h4+gkVAISF1/mq3TsTIQ= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org