$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: s1J9e6GPjgCwPg3CGcZtGpaHF+skMduFz1BCmaRLT3M= Subject key identifier: BA:29:8C:EA:1B:EF:8D:C3:F3:91:5C:64:7D:18:22:14:FD:B8:94:09 Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 0716 Signing time: Fri 31 May 2024 23:28:10 +0000 Manifest this update: Fri 31 May 2024 23:28:09 +0000 Manifest next update: Fri 07 Jun 2024 23:28:09 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: 2WMGn3B8zT0+JA2fPqa9uqPCgOHLvkokFEIbR2jNMSo=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: Cxxl6EybkIAOT6d8CueqSL+8i5OFG+G+yJXvm0dYWPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: May 31 23:28:09 2024 GMT Not After : Jun 7 23:28:09 2024 GMT Subject: CN=665a5d0a-70f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:46:46:16:77:8b:1d:a3:1c:72:89:ae:29:d7: 47:e8:75:aa:ed:4a:ff:4f:ad:78:8f:4e:f3:11:fd: db:c6:de:d9:8c:8d:86:40:e5:a5:84:72:94:85:c2: 08:cf:31:d0:35:36:b8:a2:78:19:62:f0:5a:61:42: 84:cd:42:2d:e3:97:3f:60:3d:0f:dc:cd:a5:af:ad: 58:e5:96:0b:14:a9:2c:94:fe:0f:e0:3e:12:9f:81: ee:17:7a:e3:04:26:33:1b:d6:2a:1b:2f:14:80:27: 4c:5a:f7:53:ad:c3:0f:b2:08:2c:69:8b:4f:d0:9b: 1c:b7:65:cd:fc:e7:40:ab:e1:9b:c2:a2:7f:b5:d1: e8:de:4a:0f:6d:14:bb:51:c0:5d:d6:ef:da:2f:6a: ae:26:f8:cf:96:fb:f9:ae:2a:28:25:1b:90:a0:0b: 6e:7c:b9:dc:7d:67:a8:a5:09:c7:ac:e3:dc:a8:5c: f3:91:f8:3e:50:df:dc:53:83:ba:4b:f1:c0:4b:d8: 22:d1:1d:37:0e:3b:a9:57:2c:22:b7:4c:9f:4f:9c: 6f:a4:92:11:ba:33:74:ac:92:eb:9e:f4:0e:c0:53: d2:28:ba:ec:8c:a2:95:d1:76:bd:5f:26:5f:be:4d: b4:80:95:f5:c2:0d:67:ce:6d:a5:fb:2b:97:77:7f: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:29:8C:EA:1B:EF:8D:C3:F3:91:5C:64:7D:18:22:14:FD:B8:94:09 X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ff:07:d3:21:0a:a6:b5:75:99:7b:88:34:12:c3:1c:87:28: 1f:9b:eb:bc:ea:a5:63:1a:d2:b5:91:54:15:84:59:a1:76:ca: f9:03:b2:80:31:7f:8d:6d:9f:9c:29:6b:96:07:a2:e5:5f:60: 92:ef:b1:fc:94:e3:77:c6:81:4d:99:90:c0:a0:34:b0:6a:0a: dc:63:fe:09:2a:d9:1c:79:8b:b8:4b:89:a9:16:4a:d8:9b:66: b3:ad:04:d4:ef:bb:17:8f:0b:ea:d7:19:f1:16:12:16:cb:4a: a2:03:3b:29:58:c0:e3:bd:3c:18:d7:c5:34:64:3c:3f:71:eb: 9f:c5:db:3e:7e:ef:29:4e:18:04:53:e6:85:3b:f7:a1:94:7c: e2:c1:58:58:fe:4e:dc:07:5a:d6:dc:45:b0:64:f6:cb:15:05: 0f:e6:74:cf:93:4a:66:36:27:fe:e0:0c:81:e5:14:8f:97:b9: 20:f5:8e:b1:2b:ab:8c:5b:d0:60:52:17:c5:75:0c:93:ac:8f: 4d:fa:5a:5d:81:28:23:9d:a7:0e:b6:17:50:56:45:28:d4:aa: ee:e3:85:ae:0e:4d:c2:1f:51:ec:7c:85:13:73:1d:a5:89:5c: 46:23:ce:7a:f5:f7:02:22:a6:a0:6f:db:a6:49:e7:d4:16:c0: 44:11:ea:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjQwNTMxMjMyODA5WhcNMjQwNjA3MjMyODA5WjAYMRYwFAYD VQQDEw02NjVhNWQwYS03MGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UZGFneLHaMccomuKddH6HWq7Ur/T614j07zEf3bxt7ZjI2GQOWlhHKUhcII zzHQNTa4ongZYvBaYUKEzUIt45c/YD0P3M2lr61Y5ZYLFKkslP4P4D4Sn4HuF3rj BCYzG9YqGy8UgCdMWvdTrcMPsggsaYtP0Jsct2XN/OdAq+GbwqJ/tdHo3koPbRS7 UcBd1u/aL2quJvjPlvv5riooJRuQoAtufLncfWeopQnHrOPcqFzzkfg+UN/cU4O6 S/HAS9gi0R03DjupVywit0yfT5xvpJIRujN0rJLrnvQOwFPSKLrsjKKV0Xa9XyZf vk20gJX1wg1nzm2l+yuXd38U0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLopjOob 743D85FcZH0YIhT9uJQJMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz/wfTIQqmtXWZe4g0EsMchygfm+u86qVjGtK1kVQVhFmhdsr5A7KA MX+NbZ+cKWuWB6LlX2CS77H8lON3xoFNmZDAoDSwagrcY/4JKtkceYu4S4mpFkrY m2azrQTU77sXjwvq1xnxFhIWy0qiAzspWMDjvTwY18U0ZDw/ceufxds+fu8pThgE U+aFO/ehlHziwVhY/k7cB1rW3EWwZPbLFQUP5nTPk0pmNif+4AyB5RSPl7kg9Y6x K6uMW9BgUhfFdQyTrI9N+lpdgSgjnacOthdQVkUo1Kru44WuDk3CH1HsfIUTcx2l iVxGI8569fcCIqagb9umSefUFsBEEeqi -----END CERTIFICATE-----Generated at Fri May 31 23:53:05 2024 by rpki-client on console-fra.rpki-client.org