$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: c0hhp8iXhqELtYPACOOwDP2lM+8IX8/wtS5sMxuJ44w= Subject key identifier: 8C:CB:5A:0F:48:D9:CC:1B:E0:9C:E8:B5:08:1F:14:F2:C9:11:7E:1F Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 0374 Signing time: Sun 19 May 2024 02:48:09 +0000 Manifest this update: Sun 19 May 2024 02:48:08 +0000 Manifest next update: Sun 26 May 2024 02:48:08 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: eXmecCiY5n6h/wJRcdNIoC/ONi0Q5kEzsr9DL6V2EMI=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: +D56I4b7nWl9oFXCZLe1V1DGfoh8L2BH9bwrOgGWI6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: May 19 02:48:08 2024 GMT Not After : May 26 02:48:08 2024 GMT Subject: CN=66496869-e403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:8b:43:6a:9d:fe:e3:28:89:f2:e2:4a:ca: 0a:0d:77:68:4a:a0:13:0d:6d:16:f8:d1:2d:34:39: 5b:6c:96:69:5e:15:22:c7:17:bd:11:09:76:15:6c: 87:52:02:d3:e6:0a:45:9d:8e:ea:7e:17:e2:c1:ba: e4:84:bf:d5:bb:a5:09:cc:b6:d8:51:53:69:a3:c3: fb:9d:4a:7e:83:51:21:30:37:8a:02:e0:87:36:e1: 04:4f:b0:ec:66:d6:3d:17:8d:1c:59:c8:0f:c6:07: 24:70:2f:3a:a0:b0:aa:60:06:7d:27:f9:db:74:2e: 29:8b:df:66:06:d1:fc:ea:22:b6:e9:69:7f:44:1a: 4e:9e:8b:1b:63:3f:82:ae:d1:5e:dd:74:55:a2:11: fe:fe:fd:97:0e:51:f0:91:10:a5:6f:b7:ab:ea:fa: c1:1a:49:ef:26:d6:b9:54:1f:88:be:a6:d0:4d:eb: 5f:d1:43:b5:49:bf:76:6f:f4:59:01:14:47:fa:6e: 25:ab:9b:27:c6:e9:a1:34:cc:c0:93:64:66:86:36: 93:0c:56:3d:ba:e3:3a:33:24:e8:24:13:79:96:73: 5c:b8:71:b1:4c:f7:67:a6:a5:af:bd:70:fa:ef:93: 22:34:9a:e1:12:dc:09:e9:2f:1e:87:77:41:e8:8c: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CB:5A:0F:48:D9:CC:1B:E0:9C:E8:B5:08:1F:14:F2:C9:11:7E:1F X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7d:86:0f:49:b8:45:be:02:ac:ed:35:94:23:e0:d3:08:25: 2b:85:79:d2:57:25:79:b3:67:dd:ee:2f:ed:25:21:07:22:ab: fd:55:25:6c:f2:6a:01:3d:92:28:de:7d:89:4a:a8:f3:41:a2: 7a:1e:31:9c:db:1e:fd:47:b3:31:07:42:4d:03:1b:c5:b8:7b: 2b:a2:7a:30:61:56:dc:17:9a:64:00:35:89:08:cb:26:64:26: f8:31:2b:6c:9b:5d:50:da:ad:26:61:38:80:ef:a2:52:a1:1f: 22:63:f3:72:cb:6d:81:e4:b3:26:08:05:6c:cd:0a:06:8c:56: cd:61:2a:e9:e5:6b:7c:d7:c7:0b:fc:4d:b1:53:7e:95:be:26: d6:b0:71:80:ca:d1:69:cf:87:97:45:b8:65:b1:bc:6e:4c:88: 7a:1f:91:da:b2:46:bf:e4:17:d9:c8:7a:66:cc:5e:71:0c:c8: d7:73:8c:71:32:27:73:53:a9:40:b0:ef:db:20:ec:19:c0:7f: 12:ae:21:4c:cd:a3:75:2e:e1:1c:59:5b:92:a2:a9:f7:81:25: 6a:c3:35:7b:e6:9a:86:c7:8c:24:1f:f9:9c:9a:4f:93:6d:39: 81:72:59:cf:69:aa:5e:b1:70:a9:3f:62:fc:49:65:ae:7e:8f: d3:e6:f3:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjQwNTE5MDI0ODA4WhcNMjQwNTI2MDI0ODA4WjAYMRYwFAYD VQQDEw02NjQ5Njg2OS1lNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkSLQ2qd/uMoifLiSsoKDXdoSqATDW0W+NEtNDlbbJZpXhUixxe9EQl2FWyH UgLT5gpFnY7qfhfiwbrkhL/Vu6UJzLbYUVNpo8P7nUp+g1EhMDeKAuCHNuEET7Ds ZtY9F40cWcgPxgckcC86oLCqYAZ9J/nbdC4pi99mBtH86iK26Wl/RBpOnosbYz+C rtFe3XRVohH+/v2XDlHwkRClb7er6vrBGknvJta5VB+IvqbQTetf0UO1Sb92b/RZ ARRH+m4lq5snxumhNMzAk2RmhjaTDFY9uuM6MyToJBN5lnNcuHGxTPdnpqWvvXD6 75MiNJrhEtwJ6S8eh3dB6Iw56QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzLWg9I 2cwb4JzotQgfFPLJEX4fMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBfYYPSbhFvgKs7TWUI+DTCCUrhXnSVyV5s2fd7i/tJSEHIqv9VSVs 8moBPZIo3n2JSqjzQaJ6HjGc2x79R7MxB0JNAxvFuHsronowYVbcF5pkADWJCMsm ZCb4MStsm11Q2q0mYTiA76JSoR8iY/Nyy22B5LMmCAVszQoGjFbNYSrp5Wt818cL /E2xU36VvibWsHGAytFpz4eXRbhlsbxuTIh6H5Haska/5BfZyHpmzF5xDMjXc4xx MidzU6lAsO/bIOwZwH8SriFMzaN1LuEcWVuSoqn3gSVqwzV75pqGx4wkH/mcmk+T bTmBclnPaapesXCpP2L8SWWufo/T5vMn -----END CERTIFICATE-----Generated at Sun May 19 03:38:13 2024 by rpki-client on console-ams.rpki-client.org