$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: PKN+qmkNe5nOoEqLdZIpuBIOnPFeMRghK0fX6lhwyIk= Subject key identifier: 29:39:C3:56:43:AC:3D:B4:B6:F7:93:5C:0F:CA:9F:13:73:59:0C:7E Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0B26 Signing time: Thu 02 May 2024 19:54:29 +0000 Manifest this update: Thu 02 May 2024 19:54:28 +0000 Manifest next update: Thu 09 May 2024 19:54:28 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: iVEwX7IALZ4dj22MCIkdb4z6PP82RheazqsjHL5jIVA=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: eV56fuiHryIQKRFyea/z5/qNhu8IKn93PeRTauxJVa0=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: 0LTunTRdOppVif2M1VIsKTeuAvtTcCE4K9s7XeFc1wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: May 2 19:54:28 2024 GMT Not After : May 9 19:54:28 2024 GMT Subject: CN=6633ef75-98d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:a9:40:b6:9d:d4:ae:3d:9f:2b:68:3d:d2: 6e:ed:e0:b3:40:31:bc:bb:7a:25:5c:90:e5:56:02: ce:73:19:20:d6:c0:9e:ba:a7:cb:aa:cb:ae:03:10: 97:fd:65:eb:24:18:df:e0:f4:7c:ce:ab:ce:9f:8b: b9:9f:42:91:2a:23:a2:14:4c:a5:6c:21:c4:7d:d9: 4a:3e:d7:32:a8:17:42:75:c8:de:50:86:47:cc:d4: aa:b8:79:91:11:67:59:e3:15:9d:ef:9e:1e:ac:11: ca:8a:b3:1e:65:a1:bd:16:35:52:cf:f3:90:d5:be: e6:86:98:03:ad:07:6f:fc:a9:06:2f:18:41:75:db: 00:49:58:70:ec:3a:33:2f:e4:b1:56:a8:53:49:6b: 49:f0:b6:ea:be:78:03:db:1a:f4:f2:07:d0:e2:f9: e5:4f:3b:75:aa:62:d2:e9:2f:61:0f:cf:60:7c:92: 78:e9:1c:bf:0b:e8:35:eb:3d:fa:df:3c:fc:2d:b0: 33:1f:9f:a0:95:59:74:b6:98:7a:52:8e:70:05:6e: a5:dc:c1:9e:09:09:83:f6:8d:ac:36:60:84:9a:a5: 3e:68:78:de:33:20:9d:b6:09:55:3e:51:c3:e4:b3: 88:b1:1a:10:43:86:e7:6e:3d:c0:94:8c:9e:a7:04: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:39:C3:56:43:AC:3D:B4:B6:F7:93:5C:0F:CA:9F:13:73:59:0C:7E X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:c9:2f:01:e4:07:c9:03:dc:f7:b5:f1:d6:78:04:b0:d9:50: 39:36:31:94:fd:ee:c7:91:da:5f:33:6c:9e:19:e8:ab:c5:7b: fa:0d:c8:77:01:b6:ec:2e:92:fa:6e:49:5e:15:ac:13:a0:c5: d5:ff:b8:bc:0c:af:fd:64:ec:03:3d:ea:97:9a:64:8b:40:ed: c3:33:97:d4:d6:f2:09:1a:f7:b7:af:d9:1e:f4:4f:76:15:e9: 5b:9f:78:04:4e:44:c6:1d:6e:3c:83:f9:bd:79:8a:64:d7:08: df:47:0a:42:1b:03:a8:d0:36:1b:6a:d4:c7:8c:2e:af:8d:39: 7e:c8:7b:c7:5b:3b:d6:83:79:36:db:ba:af:5c:47:0c:8e:0b: 59:79:32:a9:91:3c:f9:9d:cf:b0:10:5b:44:8d:ee:4b:cd:70: 8b:58:db:1d:9e:7b:2a:6a:72:b0:5e:b2:f1:34:bc:ca:43:89: 0b:a0:8f:a7:94:f1:25:3d:de:7e:a4:01:bf:77:a0:93:eb:f4: 9b:2c:25:ae:14:a2:de:18:c7:d8:94:35:c1:e0:8f:c2:98:1e: ea:2a:9b:52:f9:2b:74:c3:ee:30:79:28:21:1d:76:76:a9:bf: 09:e9:da:96:56:02:5e:f1:08:06:01:30:4b:8f:dd:4b:a9:fa: 98:29:6f:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjQwNTAyMTk1NDI4WhcNMjQwNTA5MTk1NDI4WjAYMRYwFAYD VQQDEw02NjMzZWY3NS05OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJWpQLad1K49nytoPdJu7eCzQDG8u3olXJDlVgLOcxkg1sCeuqfLqsuuAxCX /WXrJBjf4PR8zqvOn4u5n0KRKiOiFEylbCHEfdlKPtcyqBdCdcjeUIZHzNSquHmR EWdZ4xWd754erBHKirMeZaG9FjVSz/OQ1b7mhpgDrQdv/KkGLxhBddsASVhw7Doz L+SxVqhTSWtJ8LbqvngD2xr08gfQ4vnlTzt1qmLS6S9hD89gfJJ46Ry/C+g16z36 3zz8LbAzH5+glVl0tph6Uo5wBW6l3MGeCQmD9o2sNmCEmqU+aHjeMyCdtglVPlHD 5LOIsRoQQ4bnbj3AlIyepwTMcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCk5w1ZD rD20tveTXA/KnxNzWQx+MB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEyS8B5AfJA9z3tfHWeASw2VA5NjGU/e7HkdpfM2yeGeirxXv6Dch3 AbbsLpL6bkleFawToMXV/7i8DK/9ZOwDPeqXmmSLQO3DM5fU1vIJGve3r9ke9E92 Felbn3gETkTGHW48g/m9eYpk1wjfRwpCGwOo0DYbatTHjC6vjTl+yHvHWzvWg3k2 27qvXEcMjgtZeTKpkTz5nc+wEFtEje5LzXCLWNsdnnsqanKwXrLxNLzKQ4kLoI+n lPElPd5+pAG/d6CT6/SbLCWuFKLeGMfYlDXB4I/CmB7qKptS+St0w+4weSghHXZ2 qb8J6dqWVgJe8QgGATBLj91LqfqYKW8C -----END CERTIFICATE-----Generated at Thu May 2 20:50:23 2024 by rpki-client on console-fra.rpki-client.org