$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft File: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json) Hash identifier: u5Mb/X/GLfpkJo21i40zpFboHIXXQe2hfcxIRSrHRRQ= Subject key identifier: 1B:31:61:9B:6A:70:C6:DB:C2:B8:F0:59:26:A5:2E:8E:4C:CB:93:26 Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft Manifest number: 0339 Signing time: Sun 19 May 2024 02:58:01 +0000 Manifest this update: Sun 19 May 2024 02:58:01 +0000 Manifest next update: Sun 26 May 2024 02:58:01 +0000 Files and hashes: 1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: E6PxlIha07mGOEbb0c6tjfGskza/MboCP2bBZfpFo0w=) 2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: uj3ryiqEyEItHLTKNBDv0Pu8PFeLmK1QdvcDvlyRkwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Validity Not Before: May 19 02:58:01 2024 GMT Not After : May 26 02:58:01 2024 GMT Subject: CN=66496ab9-1f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:57:0e:46:9c:73:6f:30:86:7d:fe:39:88: 76:7a:59:69:a9:a9:05:01:9d:62:61:0a:c4:65:55: 5c:c8:69:fa:f8:b8:0a:b9:ca:16:70:16:e7:c1:3a: 94:be:80:49:c7:47:1d:94:30:e6:6f:d8:41:16:d3: dc:32:ab:e8:b2:fa:13:99:75:98:32:56:f9:b4:2f: 4a:ec:14:e0:f1:70:50:28:c7:39:d5:0f:77:ed:ee: 00:c8:31:4e:bf:7c:48:16:9b:fb:67:c8:6f:23:45: e0:2d:62:91:b5:2a:0b:fa:2b:ff:6f:73:85:f0:b8: d8:2b:ce:4d:63:24:28:3a:84:d7:e5:95:a5:39:ed: 13:ee:04:1b:28:8a:fb:99:bf:3b:91:14:a6:b5:73: bc:ad:b7:ae:6e:3b:d8:c2:8b:0a:ac:42:77:6c:5b: 58:1a:87:27:54:db:59:83:6f:33:4a:40:14:93:5c: 99:66:4e:7e:6f:8a:db:eb:89:34:4c:b4:fd:4c:9e: 48:e4:69:0c:54:3d:11:5f:c3:81:cf:41:20:7a:c0: 8d:09:4a:27:25:fe:8c:58:4b:81:d7:00:d2:aa:0b: 57:0f:5f:6a:f5:54:cc:cc:64:30:45:49:de:1d:5b: ae:8c:17:e3:b9:0a:9c:04:8e:94:bc:f7:d9:8d:e5: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:61:9B:6A:70:C6:DB:C2:B8:F0:59:26:A5:2E:8E:4C:CB:93:26 X509v3 Authority Key Identifier: keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ab:f2:c0:1a:6b:b5:9b:df:e7:51:ba:76:5f:a2:0b:13:ea: d4:2d:b0:cf:e4:d4:e0:92:89:ed:5b:fe:35:63:0d:b5:7b:c6: 63:25:53:60:29:2b:f9:dd:75:2e:0e:58:a3:14:9b:57:c8:2a: b5:da:8e:94:9d:01:f5:66:7f:fd:dc:38:a8:30:8d:8d:0d:65: 06:44:f5:1d:e7:e1:ed:84:e8:9b:33:5c:29:e0:98:65:40:87: a7:4d:0d:35:3b:42:71:e5:d3:40:21:c5:78:f7:3e:bc:3c:a1: 47:d1:6d:3f:4a:d4:03:34:1a:53:43:16:2a:82:4b:1e:81:11: 1e:3a:4d:84:1e:57:b3:ba:8e:d1:37:84:88:af:5c:4d:28:7d: d4:77:e6:da:b1:88:bf:11:ba:49:b6:d8:26:fa:5e:34:fe:0d: 79:e8:55:22:4e:20:3f:97:c5:3a:fc:62:e8:52:7a:a2:4b:01: 2a:6d:26:c4:2c:c6:34:56:e8:9a:d0:fa:13:2d:e2:4c:b3:f7: 2f:c7:66:77:09:bb:ce:c8:cd:91:fd:f0:12:2d:07:68:49:14: 8c:ec:0f:24:6b:85:b4:b3:6c:a8:91:e7:e2:bc:ab:af:81:72: 46:d2:2d:d5:9b:09:b7:d2:99:b9:62:62:cb:aa:92:26:da:3f: c0:c9:3f:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyNkUxMTAvBgNVBAUTKEEzRkM5QTEwRTI1RDMxOTQyMThDQzA3RDNFM0I3OTU0 OUMyNDI5MkIwHhcNMjQwNTE5MDI1ODAxWhcNMjQwNTI2MDI1ODAxWjAYMRYwFAYD VQQDEw02NjQ5NmFiOS0xZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZtXDkacc28whn3+OYh2ellpqakFAZ1iYQrEZVVcyGn6+LgKucoWcBbnwTqU voBJx0cdlDDmb9hBFtPcMqvosvoTmXWYMlb5tC9K7BTg8XBQKMc51Q937e4AyDFO v3xIFpv7Z8hvI0XgLWKRtSoL+iv/b3OF8LjYK85NYyQoOoTX5ZWlOe0T7gQbKIr7 mb87kRSmtXO8rbeubjvYwosKrEJ3bFtYGocnVNtZg28zSkAUk1yZZk5+b4rb64k0 TLT9TJ5I5GkMVD0RX8OBz0EgesCNCUonJf6MWEuB1wDSqgtXD19q9VTMzGQwRUne HVuujBfjuQqcBI6UvPfZjeVJ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsxYZtq cMbbwrjwWSalLo5My5MmMB8GA1UdIwQYMBaAFKP8mhDiXTGUIYzAfT47eVScJCkr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjI2RS9EQTFBNkM2Qzc2 QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1aUWhqTUI5UGp0NVZKd2tL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29feWFFT0pkTVpRaGpNQjlQanQ1Vkp3a0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjI2RS9EQTFBNkM2Qzc2QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1a UWhqTUI5UGp0NVZKd2tLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfq/LAGmu1m9/nUbp2X6ILE+rULbDP5NTgkontW/41Yw21e8ZjJVNg KSv53XUuDlijFJtXyCq12o6UnQH1Zn/93DioMI2NDWUGRPUd5+HthOibM1wp4Jhl QIenTQ01O0Jx5dNAIcV49z68PKFH0W0/StQDNBpTQxYqgksegREeOk2EHlezuo7R N4SIr1xNKH3Ud+basYi/EbpJttgm+l40/g156FUiTiA/l8U6/GLoUnqiSwEqbSbE LMY0Vuia0PoTLeJMs/cvx2Z3CbvOyM2R/fASLQdoSRSM7A8ka4W0s2yokefivKuv gXJG0i3Vmwm30pm5YmLLqpIm2j/AyT8y -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org