$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: E6z0DH/TqfDhXi83ZLW2lELsl2hQeBZW7O1CucZHGmc= Subject key identifier: A1:6E:64:28:74:B9:FE:15:BF:9F:F2:69:A8:4A:4F:BD:D1:79:F2:ED Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 0511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 050D Signing time: Sun 19 May 2024 01:07:08 +0000 Manifest this update: Sun 19 May 2024 01:07:08 +0000 Manifest next update: Sun 26 May 2024 01:07:08 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: chjPv/q+2COyzSoMqOW1L7H85uI6srFp9o76QeNFkEU=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: o2zEoY22pk3whF08IqjADBlvA+FXNXH03ZTCdev15kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: May 19 01:07:08 2024 GMT Not After : May 26 01:07:08 2024 GMT Subject: CN=664950bc-4357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:ef:4d:35:ef:e3:25:6a:89:96:4e:46:29: 84:8b:10:7f:36:32:8f:36:cb:e6:1e:af:2e:96:ad: 44:8e:2e:ea:fb:38:76:c9:e5:ad:1b:e2:2b:85:2d: f8:56:54:e3:39:55:42:b9:2c:fe:2e:32:6b:50:ab: 34:61:99:e8:79:15:4e:75:b5:3e:91:15:0f:da:f7: 88:48:aa:4c:8d:60:fc:00:2f:85:a9:21:71:70:7c: 47:c4:4c:7e:26:37:02:8c:3d:31:6c:91:11:5f:16: 85:19:6b:6f:56:67:63:21:ab:53:f2:58:94:fe:66: 0b:68:43:1b:7c:47:09:69:f7:ed:95:e4:83:82:e1: 45:35:02:67:9e:c2:14:f3:0b:d7:37:03:15:4b:5c: 18:b0:73:78:03:42:c7:43:52:d3:24:d9:ab:b0:4b: 3c:e8:ea:c7:12:f4:00:c9:ff:ff:e4:78:3d:e2:55: 24:4c:75:c0:f7:70:a3:76:6b:4b:ae:65:2c:de:02: c0:df:bb:a9:b7:8a:92:d7:48:ec:d2:45:4e:46:e9: f0:63:5e:5d:80:31:04:0f:b9:bf:f0:bb:22:49:95: 62:e3:b5:a8:e2:30:2f:64:fe:ea:b2:6a:7d:f1:f3: be:f2:8d:3c:ca:4a:0c:60:8b:ea:54:05:d6:e6:b4: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6E:64:28:74:B9:FE:15:BF:9F:F2:69:A8:4A:4F:BD:D1:79:F2:ED X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c8:ae:9e:dd:f4:59:ca:31:8f:7f:11:9e:50:cb:c2:9e:82: 2d:d9:de:74:66:d3:97:e7:59:7c:b9:76:d3:c8:c8:94:59:02: c2:76:62:30:9f:1c:53:ee:8f:3d:2f:90:18:2f:13:46:e3:18: 45:17:2d:34:78:00:b0:ac:7c:93:a1:0a:7c:fd:3f:be:87:72: 41:9c:c9:4e:e9:db:2b:d5:92:03:43:0d:4b:f1:5e:62:5a:94: 52:2e:d0:c9:94:64:6d:72:84:8b:a3:fd:51:d8:dc:63:7b:17: d9:3a:d9:67:c2:a2:2f:3f:4a:c0:2a:7f:7f:b7:25:66:26:17: 76:dc:ec:3d:a3:9c:6b:61:bf:3d:2d:e4:16:79:e5:34:1b:15: 88:89:56:11:92:cd:77:60:d0:f3:e5:3b:45:ff:4d:4c:8b:e5: fa:54:af:60:e0:fe:61:ef:98:35:af:79:f8:e4:3f:b0:b7:90: 82:e7:94:fa:01:e5:9c:48:4b:17:bf:45:cf:0f:88:d5:13:03: e9:92:f9:ad:dd:58:63:ba:f6:dd:9b:86:27:da:fa:5a:24:1b: b2:ae:06:33:5c:73:38:3e:c0:25:b4:10:4d:ff:f7:fb:e6:62: 15:03:f7:4a:e5:90:b3:87:32:2f:d4:9e:12:6f:69:f7:a9:e5: be:fb:b1:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjQwNTE5MDEwNzA4WhcNMjQwNTI2MDEwNzA4WjAYMRYwFAYD VQQDEw02NjQ5NTBiYy00MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjbvTTXv4yVqiZZORimEixB/NjKPNsvmHq8ulq1Eji7q+zh2yeWtG+IrhS34 VlTjOVVCuSz+LjJrUKs0YZnoeRVOdbU+kRUP2veISKpMjWD8AC+FqSFxcHxHxEx+ JjcCjD0xbJERXxaFGWtvVmdjIatT8liU/mYLaEMbfEcJafftleSDguFFNQJnnsIU 8wvXNwMVS1wYsHN4A0LHQ1LTJNmrsEs86OrHEvQAyf//5Hg94lUkTHXA93CjdmtL rmUs3gLA37upt4qS10js0kVORunwY15dgDEED7m/8LsiSZVi47Wo4jAvZP7qsmp9 8fO+8o08ykoMYIvqVAXW5rT7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFuZCh0 uf4Vv5/yaahKT73RefLtMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxyK6e3fRZyjGPfxGeUMvCnoIt2d50ZtOX51l8uXbTyMiUWQLCdmIw nxxT7o89L5AYLxNG4xhFFy00eACwrHyToQp8/T++h3JBnMlO6dsr1ZIDQw1L8V5i WpRSLtDJlGRtcoSLo/1R2NxjexfZOtlnwqIvP0rAKn9/tyVmJhd23Ow9o5xrYb89 LeQWeeU0GxWIiVYRks13YNDz5TtF/01Mi+X6VK9g4P5h75g1r3n45D+wt5CC55T6 AeWcSEsXv0XPD4jVEwPpkvmt3Vhjuvbdm4Yn2vpaJBuyrgYzXHM4PsAltBBN//f7 5mIVA/dK5ZCzhzIv1J4Sb2n3qeW++7FZ -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org