$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: LN2OJuku5hKrr7/8egt5qvLQvGDKn1bmiO6AP5Lgkew= Subject key identifier: 29:58:EC:62:C1:40:F9:14:33:69:82:D3:35:2B:E4:D5:F7:41:A0:33 Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: BC Signing time: Sun 19 May 2024 06:22:34 +0000 Manifest this update: Sun 19 May 2024 06:22:34 +0000 Manifest next update: Sun 26 May 2024 06:22:34 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: mRMrDSbbepJEbaziH4cwIGHtJ1/0/NCmnP05jN3t+PM=) 2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: Up/qLyExi9Qax/bVF+TBmMjmrUKDouf8YMyKfLQp8Qk=) 3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: +ZnfjT0NHU+3g3B4t5M516CYstdlcUHh/xQeYEw1ulI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: May 19 06:22:34 2024 GMT Not After : May 26 06:22:34 2024 GMT Subject: CN=66499aaa-c8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:b9:4a:80:0b:a0:dd:28:01:cf:19:2e:1c: 40:f5:1e:95:eb:8a:43:da:cf:70:ee:81:a3:58:2c: e6:de:d8:8a:6d:4d:40:44:d4:d8:b5:8b:54:eb:8e: a4:41:77:e8:35:60:96:f7:79:5a:82:07:92:97:19: ba:b7:ba:02:f5:41:96:32:3c:c2:54:f3:5b:b0:ed: 6f:3f:77:a4:d7:24:eb:06:17:c1:55:0f:4a:ed:9a: 59:4c:07:10:9e:0d:76:98:f6:32:b0:a4:09:f1:d1: f6:1e:ad:dc:f3:48:78:66:d4:a1:ad:55:99:77:e3: e9:d7:9e:f9:d5:2b:95:c5:f4:61:18:c3:01:f4:19: 8c:f9:35:14:7a:2c:40:26:a2:c7:ca:91:11:02:ec: 8d:be:03:9a:af:11:1b:8a:c4:05:cd:b4:01:d8:0d: 55:3c:42:a7:26:fa:72:82:b3:c7:1b:77:d4:6b:6b: ac:be:71:5a:40:30:a8:13:1f:d2:91:89:34:5c:b8: 36:ee:f8:bc:46:2a:fc:12:5f:64:8d:67:70:64:a4: e3:91:67:89:fb:a9:7f:55:75:5b:32:34:74:14:8f: 7a:ea:da:09:b4:96:2d:14:37:8b:64:e5:20:e0:f3: 2f:83:0c:c0:a2:e9:38:98:1a:63:15:1e:ad:1a:19: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:58:EC:62:C1:40:F9:14:33:69:82:D3:35:2B:E4:D5:F7:41:A0:33 X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:7d:b6:f2:14:13:68:ad:3d:a3:32:82:d3:2f:33:bd:60:6e: c2:85:47:a3:32:e2:2d:82:9d:92:f6:7c:42:fb:da:34:90:93: 32:a3:ce:e2:ca:45:8b:a3:90:e2:7b:e6:41:62:59:e6:58:cd: fd:1c:3e:b2:ac:01:b2:c7:8f:c2:1d:09:1a:bf:0b:98:27:17: d7:75:41:74:80:49:89:d2:32:c1:01:15:19:35:81:b2:42:81: f1:4a:02:3b:27:d7:61:78:a6:98:d1:be:7b:35:db:b9:c7:4e: 3a:76:26:db:01:ad:f8:e2:44:c6:4f:e6:71:95:2c:a9:e7:69: ac:ae:76:d0:93:38:d9:7b:c9:0e:dd:09:5d:94:5a:36:8c:9c: f2:7c:bb:2f:31:4d:c8:a2:00:af:ec:18:95:3d:ca:77:a6:6a: 2f:e5:0c:ff:3b:38:8f:bd:6c:dd:1f:c8:3a:5d:37:31:02:7a: 72:8b:73:7d:7e:f5:8c:4c:7a:9b:28:f4:cc:88:66:9c:e6:0f: 1e:d0:e6:26:47:09:93:56:70:4d:d7:ad:64:6d:fc:6c:f6:6d: e5:aa:92:66:56:c4:32:98:e9:59:ae:01:48:10:c5:cc:4d:25: 68:44:fc:21:0c:c1:c7:6c:75:e7:cd:f6:e5:de:78:31:9a:46: dc:b9:e7:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjQwNTE5MDYyMjM0WhcNMjQwNTI2MDYyMjM0WjAYMRYwFAYD VQQDEw02NjQ5OWFhYS1jOGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycm5SoALoN0oAc8ZLhxA9R6V64pD2s9w7oGjWCzm3tiKbU1ARNTYtYtU646k QXfoNWCW93laggeSlxm6t7oC9UGWMjzCVPNbsO1vP3ek1yTrBhfBVQ9K7ZpZTAcQ ng12mPYysKQJ8dH2Hq3c80h4ZtShrVWZd+Pp15751SuVxfRhGMMB9BmM+TUUeixA JqLHypERAuyNvgOarxEbisQFzbQB2A1VPEKnJvpygrPHG3fUa2usvnFaQDCoEx/S kYk0XLg27vi8Rir8El9kjWdwZKTjkWeJ+6l/VXVbMjR0FI966toJtJYtFDeLZOUg 4PMvgwzAouk4mBpjFR6tGhkKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClY7GLB QPkUM2mC0zUr5NX3QaAzMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwfbbyFBNorT2jMoLTLzO9YG7ChUejMuItgp2S9nxC+9o0kJMyo87i ykWLo5Die+ZBYlnmWM39HD6yrAGyx4/CHQkavwuYJxfXdUF0gEmJ0jLBARUZNYGy QoHxSgI7J9dheKaY0b57Ndu5x046dibbAa344kTGT+ZxlSyp52msrnbQkzjZe8kO 3QldlFo2jJzyfLsvMU3IogCv7BiVPcp3pmov5Qz/OziPvWzdH8g6XTcxAnpyi3N9 fvWMTHqbKPTMiGac5g8e0OYmRwmTVnBN161kbfxs9m3lqpJmVsQymOlZrgFIEMXM TSVoRPwhDMHHbHXnzfbl3ngxmkbcuedp -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org