$ rpki-client -vvf rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft File: oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft (raw, json) Hash identifier: JS/arKHrVUXG9L6O3FAhO+A4lDdmQo49kib/pQPMeN4= Subject key identifier: D2:C5:3E:1D:A1:A4:CF:77:84:79:CC:F4:0C:CD:D0:24:1E:24:1E:D0 Authority key identifier: A3:1A:E4:93:E8:04:C2:6F:23:99:E1:54:26:91:04:DB:24:58:A0:AA Certificate issuer: /CN=A915059B/serialNumber=A31AE493E804C26F2399E154269104DB2458A0AA Certificate serial: 0AF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxrkk-gEwm8jmeFUJpEE2yRYoKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft Manifest number: 124E Signing time: Sat 18 May 2024 20:01:55 +0000 Manifest this update: Sat 18 May 2024 20:01:54 +0000 Manifest next update: Sat 25 May 2024 20:01:54 +0000 Files and hashes: 1: oxrkk-gEwm8jmeFUJpEE2yRYoKo.crl (hash: CeAYg6dVk9IaGJdvi+0n39lUgdREi4SvmBcBEVbpMv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.crl rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxrkk-gEwm8jmeFUJpEE2yRYoKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915059B/serialNumber=A31AE493E804C26F2399E154269104DB2458A0AA Validity Not Before: May 18 20:01:54 2024 GMT Not After : May 25 20:01:54 2024 GMT Subject: CN=66490933-57c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f6:64:1b:1d:b9:ff:9a:59:1b:e4:b2:8e:87: b1:77:f6:43:f7:94:5e:7d:5d:80:27:00:df:23:14: de:3b:63:1a:df:69:13:a4:98:11:99:f9:ea:6a:d6: c6:73:d2:d4:86:af:73:a8:ab:5e:bd:b1:af:2f:69: c1:22:56:d5:a6:d6:14:94:3f:ba:46:96:bf:fb:37: 4f:42:ea:27:0a:d1:16:d4:7a:74:43:43:7a:4f:46: bf:d9:57:9c:c7:c4:1d:3e:ec:c6:81:e0:08:29:fe: bf:56:bd:f1:dc:92:58:9a:a2:e3:f3:62:30:43:48: 05:6c:d5:ae:2e:78:10:8f:bf:d4:8a:0e:3d:1d:fd: 67:9e:de:13:94:9b:2c:f3:54:0e:ab:cd:a9:8d:6a: 79:51:a8:52:64:e6:e5:ea:bf:3f:42:dd:da:91:2c: 04:e1:c2:ab:c4:e7:5a:6d:2b:81:46:b9:dc:32:69: a4:48:3b:70:f6:bd:de:6a:b4:15:70:ae:d3:b6:27: 99:82:0a:aa:e8:69:89:17:59:4a:d1:3b:e2:ff:e5: 79:47:02:eb:d6:5e:96:04:58:59:7a:24:fe:7a:0d: 94:d1:ac:30:0b:11:ac:1b:37:20:b4:bc:88:d7:b9: ab:14:d3:68:8f:1f:2f:18:3b:32:ba:c9:8c:4e:29: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C5:3E:1D:A1:A4:CF:77:84:79:CC:F4:0C:CD:D0:24:1E:24:1E:D0 X509v3 Authority Key Identifier: keyid:A3:1A:E4:93:E8:04:C2:6F:23:99:E1:54:26:91:04:DB:24:58:A0:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxrkk-gEwm8jmeFUJpEE2yRYoKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:dd:c1:cd:63:59:62:8d:6f:dc:e3:09:aa:74:fe:54:f9:90: da:ec:da:cb:85:a1:a0:5e:c4:7b:02:3b:e1:5e:3e:66:c5:13: e2:c0:6f:b0:da:08:f3:b2:e3:8d:39:4a:85:75:54:42:10:cf: 67:b7:0b:fa:fe:a7:78:a0:67:6c:b6:4c:f1:04:e5:b6:e8:83: 91:cc:94:61:36:34:28:7c:e1:28:a0:45:f8:45:db:6a:6e:33: 69:50:cf:39:3e:63:5f:13:88:f3:38:77:e3:cd:ac:9f:c0:12: a4:79:45:a0:b2:8e:07:19:3e:b8:26:96:9f:32:eb:d2:21:c2: 27:16:bc:53:22:33:b9:ba:eb:8a:2c:66:85:dc:f0:18:1f:52: 46:89:4d:6a:20:bd:b2:4b:2f:b1:d7:c9:01:99:1a:a6:fe:ea: 68:36:0e:37:2c:fc:20:20:ea:ca:da:2f:29:4f:97:9d:a5:d7: cb:b8:f9:46:18:4d:bf:56:9e:e4:ac:75:c1:b1:e4:d8:e0:bd: 3c:34:91:61:64:97:fa:1d:53:32:fc:19:57:36:cc:c6:10:b1: 31:97:07:66:97:aa:e9:1b:43:7c:9e:25:ba:60:50:bf:34:fb: cb:c0:90:03:b2:ca:c9:a9:cc:1e:ce:c8:88:3e:7b:fc:1a:e1: 1b:ea:6a:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1OUIxMTAvBgNVBAUTKEEzMUFFNDkzRTgwNEMyNkYyMzk5RTE1NDI2OTEwNERC MjQ1OEEwQUEwHhcNMjQwNTE4MjAwMTU0WhcNMjQwNTI1MjAwMTU0WjAYMRYwFAYD VQQDEw02NjQ5MDkzMy01N2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+PZkGx25/5pZG+Syjoexd/ZD95RefV2AJwDfIxTeO2Ma32kTpJgRmfnqatbG c9LUhq9zqKtevbGvL2nBIlbVptYUlD+6Rpa/+zdPQuonCtEW1Hp0Q0N6T0a/2Vec x8QdPuzGgeAIKf6/Vr3x3JJYmqLj82IwQ0gFbNWuLngQj7/Uig49Hf1nnt4TlJss 81QOq82pjWp5UahSZObl6r8/Qt3akSwE4cKrxOdabSuBRrncMmmkSDtw9r3earQV cK7TtieZggqq6GmJF1lK0Tvi/+V5RwLr1l6WBFhZeiT+eg2U0awwCxGsGzcgtLyI 17mrFNNojx8vGDsyusmMTinstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLFPh2h pM93hHnM9AzN0CQeJB7QMB8GA1UdIwQYMBaAFKMa5JPoBMJvI5nhVCaRBNskWKCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDU5Qi83NEZCNDJBODIy NzMxMUVBOEEwRjM4MjJDNEY5QUUwMi9veHJray1nRXdtOGptZUZVSnBFRTJ5Ullv S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294cmtrLWdFd204am1lRlVKcEVFMnlSWW9Lby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDU5Qi83NEZCNDJBODIyNzMxMUVBOEEwRjM4MjJDNEY5QUUwMi9veHJray1nRXdt OGptZUZVSnBFRTJ5UllvS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl3cHNY1lijW/c4wmqdP5U+ZDa7NrLhaGgXsR7AjvhXj5mxRPiwG+w 2gjzsuONOUqFdVRCEM9ntwv6/qd4oGdstkzxBOW26IORzJRhNjQofOEooEX4Rdtq bjNpUM85PmNfE4jzOHfjzayfwBKkeUWgso4HGT64JpafMuvSIcInFrxTIjO5uuuK LGaF3PAYH1JGiU1qIL2ySy+x18kBmRqm/upoNg43LPwgIOrK2i8pT5edpdfLuPlG GE2/Vp7krHXBseTY4L08NJFhZJf6HVMy/BlXNszGELExlwdml6rpG0N8niW6YFC/ NPvLwJADssrJqcwezsiIPnv8GuEb6mpT -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org