$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: jW+EOpeOeNlas16jvGQi0AM70E8gRqs96xXGqVUDp1c= Subject key identifier: 4B:CD:BA:60:0B:76:89:CE:FD:7E:BE:3E:91:BE:40:7B:AE:1D:B4:CB Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: 38 Signing time: Sun 19 May 2024 08:16:54 +0000 Manifest this update: Sun 19 May 2024 08:16:53 +0000 Manifest next update: Sun 26 May 2024 08:16:53 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: IKrWhYNdfd9xAXSO8w9X/v75u2idUB1m2vY/fVFl8B4=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: 6CbYeGlMHWXdRnPvFBNIYVUzG6hSH7sytwhXDvb3oGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: May 19 08:16:53 2024 GMT Not After : May 26 08:16:53 2024 GMT Subject: CN=6649b576-ae89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a3:3f:76:58:8b:a4:b5:37:cf:af:95:fa:72: 95:db:13:aa:a7:ae:08:8c:82:68:3f:ef:fd:72:7b: 52:97:8c:35:0e:8a:db:b1:f7:0d:37:58:b4:a7:07: 2c:f9:59:b2:15:48:f5:a2:90:b6:83:4b:c3:ba:15: c4:f9:f9:0d:18:55:13:9b:ec:eb:95:00:39:ae:3c: 82:94:2c:f7:a4:50:75:30:be:d2:2f:8d:9f:3a:a9: 0e:b2:9f:71:9b:6d:61:8b:ae:b3:15:44:12:50:86: 7e:c9:3f:ba:8c:ff:fd:17:a9:9b:36:3a:28:d2:81: 76:32:97:d5:aa:3e:4f:4b:8a:22:bb:36:e4:09:b0: a4:be:a1:02:07:7f:fd:35:87:f2:5c:4a:7a:4d:7f: 05:80:3d:7d:3a:43:0e:a2:d3:d0:a7:31:0d:8c:6d: d3:a1:04:71:7b:c8:ee:d0:a2:78:f4:09:55:1a:b9: 1a:ab:c9:6a:52:a6:9d:12:f2:06:bb:5d:52:73:ee: 03:9e:e3:ed:fb:8a:34:b9:5d:a9:44:26:fe:fe:e0: 2e:ba:6c:98:2f:2d:ae:e7:45:33:8a:d6:86:88:97: c6:83:b8:d4:2c:94:8f:2c:4b:e2:f2:e7:1a:08:40: ec:ea:47:8c:ae:b0:c6:46:9b:3a:5a:99:84:ee:ae: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CD:BA:60:0B:76:89:CE:FD:7E:BE:3E:91:BE:40:7B:AE:1D:B4:CB X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:03:c9:ab:d6:ef:d0:01:d3:41:b3:a9:90:d3:17:2c:0f: da:ae:85:8a:a9:fd:0d:37:fb:7d:d9:3e:fb:6b:02:3d:2e:4a: 6e:1e:ee:93:6d:09:ec:bd:39:99:3e:f3:67:e9:0f:c9:40:39: fb:98:bc:b9:ea:c3:00:64:67:b5:7c:70:70:23:81:41:ab:1f: f8:54:d4:8b:0b:dd:82:d2:10:02:3a:45:69:bb:c3:be:3b:6e: 10:99:ba:94:a6:f1:f9:17:69:6b:9a:6d:c9:25:03:e9:0a:38: 59:54:4b:ed:dc:fe:49:48:a4:b1:43:cf:d5:33:42:d4:44:6c: 63:b5:83:42:04:c0:2e:1e:7d:b0:2b:27:c3:2e:d7:22:f4:31: f2:95:38:a5:09:ba:a8:f0:bf:2e:09:7f:6d:b8:6d:70:82:ae: 31:15:11:76:aa:99:2b:3e:c3:9b:d3:81:54:db:85:69:19:f8: 7a:d5:42:20:7f:72:fd:44:2b:f9:72:53:27:af:1d:4b:81:cd: c3:cd:26:68:11:7b:71:9b:9f:f1:1d:89:54:f4:b0:27:8e:f2: b6:8a:0f:12:f7:d1:1a:f0:db:97:18:11:81:f1:99:66:f7:e8: ce:77:f7:58:99:0a:82:12:0e:4e:24:09:94:a8:ed:14:0a:07: 0a:80:21:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTJDMTExMC8GA1UEBRMoQTMxNTRFQzcxQUZGMENFQzM2OEM3OTZEMjU3QzNBOUMw NTg5QTNGRjAeFw0yNDA1MTkwODE2NTNaFw0yNDA1MjYwODE2NTNaMBgxFjAUBgNV BAMTDTY2NDliNTc2LWFlODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjoz92WIuktTfPr5X6cpXbE6qnrgiMgmg/7/1ye1KXjDUOitux9w03WLSnByz5 WbIVSPWikLaDS8O6FcT5+Q0YVROb7OuVADmuPIKULPekUHUwvtIvjZ86qQ6yn3Gb bWGLrrMVRBJQhn7JP7qM//0XqZs2OijSgXYyl9WqPk9LiiK7NuQJsKS+oQIHf/01 h/JcSnpNfwWAPX06Qw6i09CnMQ2MbdOhBHF7yO7Qonj0CVUauRqryWpSpp0S8ga7 XVJz7gOe4+37ijS5XalEJv7+4C66bJgvLa7nRTOK1oaIl8aDuNQslI8sS+Ly5xoI QOzqR4yusMZGmzpamYTurk+jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS826YAt2 ic79fr4+kb5Ae64dtMswHwYDVR0jBBgwFoAUoxVOxxr/DOw2jHltJXw6nAWJo/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBMkMxLzdGRkRGQjY0QzA5 RTExRUVBRDNCODU1NEM0RjlBRTAyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9f OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3hWT3h4cl9ET3cyakhsdEpYdzZuQVdKb184LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB MkMxLzdGRkRGQjY0QzA5RTExRUVBRDNCODU1NEM0RjlBRTAyL294Vk94eHJfRE93 MmpIbHRKWHc2bkFXSm9fOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGmuA8mr1u/QAdNBs6mQ0xcsD9quhYqp/Q03+33ZPvtrAj0uSm4e7pNt Cey9OZk+82fpD8lAOfuYvLnqwwBkZ7V8cHAjgUGrH/hU1IsL3YLSEAI6RWm7w747 bhCZupSm8fkXaWuabcklA+kKOFlUS+3c/klIpLFDz9UzQtREbGO1g0IEwC4efbAr J8Mu1yL0MfKVOKUJuqjwvy4Jf224bXCCrjEVEXaqmSs+w5vTgVTbhWkZ+HrVQiB/ cv1EK/lyUyevHUuBzcPNJmgRe3Gbn/EdiVT0sCeO8raKDxL30Rrw25cYEYHxmWb3 6M5391iZCoISDk4kCZSo7RQKBwqAIWQ= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org