$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json) Hash identifier: EmGvMlb373vYiN5VXjpyu0QgqmD9rLwl/Y7KFhuBF/I= Subject key identifier: 1F:B9:B9:97:3D:A6:2F:E6:B1:85:A0:DB:E8:9C:CF:6C:51:CF:15:98 Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft Manifest number: 01F3 Signing time: Sun 19 May 2024 04:14:36 +0000 Manifest this update: Sun 19 May 2024 04:14:35 +0000 Manifest next update: Sun 26 May 2024 04:14:35 +0000 Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: CPNRrpj2y5zO28+gFV+2bf3MHmbbAAKVjowM9bX0x0U=) 2: 4E1203088C1411EDA66E4F28C4F9AE02.roa (hash: 0amE5+aro/fZmIxW9AjraFMlhEgv6beQEmk80z0hSig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Validity Not Before: May 19 04:14:35 2024 GMT Not After : May 26 04:14:35 2024 GMT Subject: CN=66497cac-830b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:33:3b:e6:67:36:1f:6c:b9:87:65:fc:d4: 53:6a:6a:79:ed:dd:a7:70:82:43:6c:a3:5e:8b:54: 3e:5b:72:2a:71:c6:21:cf:8d:c1:12:06:48:2a:0c: 5b:95:17:a5:c0:78:6c:1c:27:6d:76:3d:e3:cb:b2: 5f:20:56:51:4a:11:9b:b1:1e:23:a3:83:27:3d:ce: ec:21:01:d3:d4:66:59:07:be:93:8f:d0:ee:00:b4: f9:01:a9:dc:68:3a:9e:1d:f2:ae:87:fa:61:47:19: 3b:1b:ae:cc:bc:23:d8:7c:c6:5c:da:d1:18:07:13: b8:ef:c8:b1:be:d6:4e:78:54:a2:22:00:17:b6:35: 7e:9f:c9:1d:77:fb:91:2e:4e:28:d3:d3:9f:67:21: 52:5d:95:5e:31:16:d3:84:91:67:8f:9d:06:c0:db: 66:9d:28:72:5c:96:43:9d:0f:73:a8:78:81:24:9a: 3f:43:9d:13:7e:f7:07:12:13:f6:ac:21:2c:e4:0b: e2:c0:72:37:1d:de:ae:b9:ea:8a:8a:2b:e9:7e:06: 72:10:93:c7:8c:25:31:34:a5:eb:ba:25:e8:93:63: b7:00:8e:73:97:32:f9:12:90:e5:7c:69:7d:58:e8: 54:72:fd:51:85:3b:0f:a7:04:3a:3e:98:0d:f6:c8: 28:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:B9:97:3D:A6:2F:E6:B1:85:A0:DB:E8:9C:CF:6C:51:CF:15:98 X509v3 Authority Key Identifier: keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:79:05:2c:6e:a9:93:34:23:f9:a0:80:ed:47:93:43:bd:01: 09:9b:1a:4d:94:6b:39:75:38:3d:b0:04:ea:29:25:9c:dc:0c: 53:23:74:e4:6b:55:a9:df:d5:cb:be:39:8c:f5:f1:12:95:2c: 75:4e:3d:6d:23:c0:ad:f4:02:b9:70:9d:53:a3:a0:ad:21:16: 24:9c:c9:c1:b6:d9:1e:ec:5c:12:87:a4:25:67:57:6e:8e:00: 9a:b8:18:1e:34:61:88:5d:75:65:57:d9:58:61:97:1a:a1:06: a2:6b:a1:e6:93:02:0e:4e:3d:47:ed:f3:d8:fd:9c:ee:5c:01: 30:1d:bb:a1:ed:6b:c3:a5:2f:1c:34:90:24:5f:4f:d4:83:78: 96:ce:36:80:eb:4d:a9:bb:0e:9a:9c:79:72:1d:6e:1c:2f:f8: 56:63:bb:e9:45:fc:d9:3c:cd:7e:20:6f:db:87:30:ff:9e:82: c1:91:ff:59:f6:06:29:b6:b7:8a:43:ae:c3:ed:e5:83:cb:41: c9:e2:c6:3f:f6:32:ec:ad:b7:78:9a:9d:88:97:46:31:35:3e: 15:f0:6a:20:d2:c2:23:67:24:39:73:15:88:af:61:b5:00:1b: 58:2b:9b:23:10:c2:47:e3:e6:ca:86:dc:03:bb:72:18:4d:03: ed:64:e5:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1NUMxMTAvBgNVBAUTKEExREExNUJBMkIzQkI2NjJBMTc4RTI2RDk2NjgxNUEy MkEyRTQ2OTkwHhcNMjQwNTE5MDQxNDM1WhcNMjQwNTI2MDQxNDM1WjAYMRYwFAYD VQQDEw02NjQ5N2NhYy04MzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCQzO+ZnNh9suYdl/NRTamp57d2ncIJDbKNei1Q+W3IqccYhz43BEgZIKgxb lRelwHhsHCdtdj3jy7JfIFZRShGbsR4jo4MnPc7sIQHT1GZZB76Tj9DuALT5Aanc aDqeHfKuh/phRxk7G67MvCPYfMZc2tEYBxO478ixvtZOeFSiIgAXtjV+n8kdd/uR Lk4o09OfZyFSXZVeMRbThJFnj50GwNtmnShyXJZDnQ9zqHiBJJo/Q50TfvcHEhP2 rCEs5AviwHI3Hd6uueqKiivpfgZyEJPHjCUxNKXruiXok2O3AI5zlzL5EpDlfGl9 WOhUcv1RhTsPpwQ6PpgN9sgorwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+5uZc9 pi/msYWg2+icz2xRzxWYMB8GA1UdIwQYMBaAFKHaFborO7ZioXjibZZoFaIqLkaZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjU1Qy9FOTE2RDJFRUY4 NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3RtS2hlT0p0bG1nVm9pb3VS cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kb1Z1aXM3dG1LaGVPSnRsbWdWb2lvdVJway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjU1Qy9FOTE2RDJFRUY4NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3Rt S2hlT0p0bG1nVm9pb3VScGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVeQUsbqmTNCP5oIDtR5NDvQEJmxpNlGs5dTg9sATqKSWc3AxTI3Tk a1Wp39XLvjmM9fESlSx1Tj1tI8Ct9AK5cJ1To6CtIRYknMnBttke7FwSh6QlZ1du jgCauBgeNGGIXXVlV9lYYZcaoQaia6HmkwIOTj1H7fPY/ZzuXAEwHbuh7WvDpS8c NJAkX0/Ug3iWzjaA602puw6anHlyHW4cL/hWY7vpRfzZPM1+IG/bhzD/noLBkf9Z 9gYptreKQ67D7eWDy0HJ4sY/9jLsrbd4mp2Il0YxNT4V8Gog0sIjZyQ5cxWIr2G1 ABtYK5sjEMJH4+bKhtwDu3IYTQPtZOXX -----END CERTIFICATE-----Generated at Sun May 19 05:08:03 2024 by rpki-client on console-ams.rpki-client.org