$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: Rc7BYRh73pPoVmwlZ00XoxFW2v1+das8Zc8ZunA3fEk= Subject key identifier: 23:7C:9B:84:22:BE:E3:B4:F4:A8:27:AF:1C:66:32:C0:20:40:8C:9E Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1C77 Signing time: Fri 31 May 2024 16:44:36 +0000 Manifest this update: Fri 31 May 2024 16:44:36 +0000 Manifest next update: Fri 07 Jun 2024 16:44:36 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: X47uL1TQ29Z3Bw6NYPUMXc/vII6ajHlDW+61OGyZAsc=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: 1Y/6mhbczLDis+QbubtdSaOBm5IZRuZEmTlZsH1PE9o=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: VPEb9AuhD4Gc7G1qgMFG21KF3zWXYPschojYmoWASrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7298 (0x1c82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: May 31 16:44:36 2024 GMT Not After : Jun 7 16:44:36 2024 GMT Subject: CN=6659fe74-fd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:a3:94:70:f8:b1:29:70:65:67:05:80:5a: a3:53:ef:ac:de:1a:e3:c5:56:0d:5c:47:82:a0:98: 3b:a2:94:ef:18:15:15:7d:d9:40:a8:df:44:7b:24: f8:7b:22:68:19:19:83:8a:2c:2d:0c:7b:4a:35:04: 0f:11:45:e3:fc:60:85:f2:51:d7:b2:22:29:92:83: f0:d8:54:21:f9:7c:5f:44:f1:9e:70:f8:74:2e:6b: fd:92:fa:dc:ec:0c:ae:2f:ec:b9:88:63:5e:0e:c5: 34:f7:b3:35:e1:a9:dc:e6:35:dc:3c:23:48:e3:88: 9a:1d:24:39:fd:30:23:05:4e:a3:26:4d:65:f4:d0: 71:81:3c:94:a5:bb:f0:84:b5:6e:50:c5:df:30:8a: 4f:d3:da:be:a8:71:70:d5:9e:54:9d:af:55:5f:b3: 15:40:dc:6e:89:98:52:cb:f8:98:42:7d:72:be:40: 3b:78:96:c2:4d:dd:27:ca:7a:d7:8a:c3:a0:f1:56: 12:ed:c9:99:a4:6c:db:c7:17:f9:98:37:2e:39:bf: 62:be:6d:fc:b1:75:85:a9:87:c1:01:65:f9:1d:25: 2a:38:25:29:a6:c0:24:17:72:39:cc:a4:ec:0b:a6: b4:8e:b6:2d:1a:41:5f:48:f3:00:3e:e9:fd:22:5f: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7C:9B:84:22:BE:E3:B4:F4:A8:27:AF:1C:66:32:C0:20:40:8C:9E X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:cb:f3:7c:54:f2:1d:15:96:85:8e:c2:6e:2e:0d:f9:52:01: 51:37:3f:79:d2:c5:96:6a:35:c1:8f:5e:70:2f:f7:bf:7b:53: f4:a6:7d:98:27:99:30:c2:84:af:96:b4:99:76:53:af:be:7a: cd:e0:29:33:8e:fe:ff:41:fb:c7:6f:22:d2:75:2a:25:c6:c0: 30:6e:b4:36:a9:d5:7e:c0:c6:0a:30:b4:08:50:5d:25:24:98: 71:8d:05:67:33:85:34:9f:83:38:89:76:71:67:90:6c:c2:0b: 57:7c:84:99:34:68:16:2b:e7:90:fe:fa:ea:1f:4d:1f:d2:2f: 75:ef:7e:44:26:5f:34:0a:ff:69:25:f2:e5:93:c1:68:52:26: a1:33:1c:5a:0e:ab:7b:93:8c:6e:70:71:42:45:bb:68:a4:6c: 90:a2:b4:57:81:71:43:40:b0:ae:1c:f8:41:f2:7c:bf:a5:0c: cb:6a:a8:ce:2c:38:03:cf:5d:92:48:05:5e:1b:92:9c:9e:39: 5b:0e:e7:db:85:f1:8f:d5:a6:7a:83:70:f9:5e:66:1f:3c:4a: fe:39:ac:db:3b:cd:d5:4d:5d:26:c4:76:f4:d6:35:79:9a:f0: 45:8a:c7:5f:5f:4d:8e:61:3e:77:f6:a0:11:46:65:7e:9b:00: 84:eb:d2:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjQwNTMxMTY0NDM2WhcNMjQwNjA3MTY0NDM2WjAYMRYwFAYD VQQDEw02NjU5ZmU3NC1mZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8CjlHD4sSlwZWcFgFqjU++s3hrjxVYNXEeCoJg7opTvGBUVfdlAqN9EeyT4 eyJoGRmDiiwtDHtKNQQPEUXj/GCF8lHXsiIpkoPw2FQh+XxfRPGecPh0Lmv9kvrc 7AyuL+y5iGNeDsU097M14anc5jXcPCNI44iaHSQ5/TAjBU6jJk1l9NBxgTyUpbvw hLVuUMXfMIpP09q+qHFw1Z5Una9VX7MVQNxuiZhSy/iYQn1yvkA7eJbCTd0nynrX isOg8VYS7cmZpGzbxxf5mDcuOb9ivm38sXWFqYfBAWX5HSUqOCUppsAkF3I5zKTs C6a0jrYtGkFfSPMAPun9Il9rhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN8m4Qi vuO09KgnrxxmMsAgQIyeMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmy/N8VPIdFZaFjsJuLg35UgFRNz950sWWajXBj15wL/e/e1P0pn2Y J5kwwoSvlrSZdlOvvnrN4Ckzjv7/QfvHbyLSdSolxsAwbrQ2qdV+wMYKMLQIUF0l JJhxjQVnM4U0n4M4iXZxZ5BswgtXfISZNGgWK+eQ/vrqH00f0i91735EJl80Cv9p JfLlk8FoUiahMxxaDqt7k4xucHFCRbtopGyQorRXgXFDQLCuHPhB8ny/pQzLaqjO LDgDz12SSAVeG5KcnjlbDufbhfGP1aZ6g3D5XmYfPEr+OazbO83VTV0mxHb01jV5 mvBFisdfX02OYT539qARRmV+mwCE69K4 -----END CERTIFICATE-----Generated at Fri May 31 17:44:22 2024 by rpki-client on console-fra.rpki-client.org