$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json) Hash identifier: gxSyoI3fEUU4M3kkwGsiuYjweg3P6zhQSw4vTXic880= Subject key identifier: A9:AF:4E:FD:66:21:EC:27:E8:9F:75:BB:D2:F1:D6:78:D5:9C:57:F8 Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft Manifest number: 023D Signing time: Sun 19 May 2024 03:34:33 +0000 Manifest this update: Sun 19 May 2024 03:34:32 +0000 Manifest next update: Sun 26 May 2024 03:34:32 +0000 Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: ZzEfKJYC3zoZqdD4iYTpMXHMIl8ESbumBak40wVObuk=) 2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: DmfQ3+8ymZBHNatwkjVgDY8oSbLfHdTsnMMne1LGaYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Validity Not Before: May 19 03:34:32 2024 GMT Not After : May 26 03:34:32 2024 GMT Subject: CN=66497348-5b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:45:b3:20:ea:97:51:22:ea:90:32:6d:b2: 69:dc:ea:4c:36:07:2e:95:9b:e7:ae:b1:b1:fc:38: 7b:a8:20:56:71:c2:a7:c8:26:32:65:e2:6a:2f:84: 6a:0c:8c:22:f7:55:64:9f:70:cf:c1:20:36:8d:70: 48:e4:18:b6:62:40:eb:ce:4f:95:af:4a:46:98:3d: 35:07:43:e2:fb:aa:dc:c3:1e:01:6d:26:71:1f:8d: d9:11:47:2a:b6:88:9e:74:de:7b:ea:86:c4:51:ec: 05:59:d8:fb:a5:26:b0:53:d0:47:c0:23:26:32:ef: 32:90:44:ca:6e:77:a9:1c:96:ea:f6:59:51:b1:3d: 24:3b:ad:2e:3c:f7:02:11:1d:bb:8b:e2:19:f2:fe: 33:86:c7:79:44:32:44:1e:56:bf:34:a7:95:f8:91: 06:62:09:6b:3f:e9:5b:ed:34:d7:9f:41:b5:38:b8: 27:84:3d:8b:70:48:03:a2:9e:7d:b6:8a:f0:15:64: da:9c:e6:43:44:95:f9:a9:51:e1:78:a9:64:32:54: 8b:c5:b5:2b:2b:ca:b7:96:68:51:9b:ee:4f:d8:d1: 6c:75:15:f5:92:e9:41:d8:7b:b9:65:43:f3:7d:00: 84:03:89:a2:74:24:3e:4b:53:a3:d8:fe:76:2f:f1: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AF:4E:FD:66:21:EC:27:E8:9F:75:BB:D2:F1:D6:78:D5:9C:57:F8 X509v3 Authority Key Identifier: keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:a6:36:83:9a:b2:00:d6:0a:25:d9:95:b5:d1:47:9d:2f:2a: 6a:c6:70:74:5e:06:d4:be:77:2a:e1:3b:c6:a8:5a:f9:04:39: e8:ae:a4:69:91:d4:d2:1a:d8:13:83:d9:a2:0d:00:1e:a0:71: 8d:07:50:f4:2b:83:78:38:d2:19:53:a5:9b:40:ea:2a:1b:8b: e2:a3:a3:ea:86:a2:be:80:f7:24:7e:f0:17:70:70:74:75:44: d2:74:f4:9b:15:bf:f8:10:45:65:4d:0a:b2:56:9e:80:59:4d: 88:fe:22:29:91:9d:99:6f:d3:ac:8f:c9:d0:16:80:8d:66:24: 57:c7:42:08:f2:60:62:f3:d3:ba:16:15:10:7a:9f:e1:41:b2: b1:61:2f:e7:43:24:bf:71:e1:e1:c1:62:af:13:fb:a8:b5:3e: 4b:ab:3a:8e:68:07:7d:b7:05:a9:7c:85:c1:ec:d1:ed:db:15: 80:d7:e1:f0:9c:d8:52:d1:02:68:20:9b:8c:0b:c2:2d:bb:d0: 1d:e0:42:2a:d6:db:18:3e:61:b5:39:97:6d:ae:83:65:01:15: cc:f9:94:26:dc:2d:f3:86:30:98:2b:8c:79:7e:99:bd:f3:18: f9:45:eb:0c:70:39:08:85:d3:de:a1:e5:eb:6d:ea:10:1a:42: 20:04:3e:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3 RDQ1OUYwOUMwHhcNMjQwNTE5MDMzNDMyWhcNMjQwNTI2MDMzNDMyWjAYMRYwFAYD VQQDEw02NjQ5NzM0OC01YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4G1FsyDql1Ei6pAybbJp3OpMNgculZvnrrGx/Dh7qCBWccKnyCYyZeJqL4Rq DIwi91Vkn3DPwSA2jXBI5Bi2YkDrzk+Vr0pGmD01B0Pi+6rcwx4BbSZxH43ZEUcq toiedN576obEUewFWdj7pSawU9BHwCMmMu8ykETKbnepHJbq9llRsT0kO60uPPcC ER27i+IZ8v4zhsd5RDJEHla/NKeV+JEGYglrP+lb7TTXn0G1OLgnhD2LcEgDop59 torwFWTanOZDRJX5qVHheKlkMlSLxbUrK8q3lmhRm+5P2NFsdRX1kulB2Hu5ZUPz fQCEA4midCQ+S1Oj2P52L/Ei8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmvTv1m Iewn6J91u9Lx1njVnFf4MB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC9CMzVFQjUwQ0RCRjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFr cjZ2OUs2TU1pNFY5Ulo4SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdpjaDmrIA1gol2ZW10UedLypqxnB0XgbUvncq4TvGqFr5BDnorqRp kdTSGtgTg9miDQAeoHGNB1D0K4N4ONIZU6WbQOoqG4vio6PqhqK+gPckfvAXcHB0 dUTSdPSbFb/4EEVlTQqyVp6AWU2I/iIpkZ2Zb9Osj8nQFoCNZiRXx0II8mBi89O6 FhUQep/hQbKxYS/nQyS/ceHhwWKvE/uotT5LqzqOaAd9twWpfIXB7NHt2xWA1+Hw nNhS0QJoIJuMC8Itu9Ad4EIq1tsYPmG1OZdtroNlARXM+ZQm3C3zhjCYK4x5fpm9 8xj5ResMcDkIhdPeoeXrbeoQGkIgBD7Y -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org