$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: lZe6lEJOvFbaMBeg9ECpWE8NxxciWe3shz/S+fQGOW4= Subject key identifier: AD:63:36:55:73:7C:1C:8B:2B:B4:B9:41:26:1E:D9:A1:05:1B:4B:67 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0980 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0936 Signing time: Sat 18 May 2024 21:23:06 +0000 Manifest this update: Sat 18 May 2024 21:23:06 +0000 Manifest next update: Sat 25 May 2024 21:23:06 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: fnwv9ITSpwpn4kc8VBsmYOfxyCdalkvYS2N4T7hmP8g=) 2: FB493356FAD711EE9AAB7E47C4F9AE02.roa (hash: LmDxswarwI/Je1ZWDgWoaGbAAtuSZrSCH/o8EsihdvU=) 3: E651DB36ECF111EE869C1110C4F9AE02.roa (hash: gM9jK1yl+3Zg9TOQYaAkyHlme4YU1m/cPfichmB1teM=) 4: B54D89BE144B11EFA8A3EB29C4F9AE02.roa (hash: XcQLmOe0eXGceNd+KDaepYeLiyThScK3a58Bqt0uMuE=) 5: 5871666CFAD711EEA3D2F145C4F9AE02.roa (hash: O+0LHsC3L1ZFYZgFSrcwWJudGaOFWfmZO8s0ITSqe78=) 6: E5856BB4ECF111EE869C1110C4F9AE02.roa (hash: jracO1XGslY8JLsX5SrzVCcox71Rn8FTOjjOprv0Ah0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2432 (0x980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: May 18 21:23:06 2024 GMT Not After : May 25 21:23:06 2024 GMT Subject: CN=66491c3a-86a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:3d:18:0b:bc:af:e7:5e:e2:c8:c8:95:78: 8a:d2:49:94:e7:c6:5f:8e:a0:a1:83:44:d1:e5:6f: 8e:b7:6e:08:22:1d:59:74:ce:f4:ca:ee:ef:7e:ff: 15:62:1a:11:b4:e3:92:33:2a:ce:8f:f6:7f:15:9c: 57:e6:a7:61:2c:10:81:8d:31:6a:bf:57:bb:8e:ab: cd:87:f5:f6:dd:33:f6:7a:3a:1a:70:26:c4:05:be: 8c:99:9f:87:fe:d0:a9:02:3e:95:7f:68:b9:48:10: bb:4b:e4:75:4d:7c:30:70:c9:1e:71:41:1e:14:68: d2:68:1d:27:18:ac:a1:b8:be:b1:57:cf:d2:87:5f: 4e:14:21:26:c8:21:45:94:b7:04:76:46:ce:21:42: 23:27:50:30:8a:49:68:58:cc:c8:68:84:90:d9:66: 4d:8f:04:f2:f7:d4:b0:4a:26:d2:b5:c1:c6:46:bf: a8:e2:f1:64:de:a1:4c:93:38:8c:ec:19:61:30:d1: 0e:a9:07:ef:c1:ff:59:99:c9:70:96:67:c2:a7:a9: 13:d3:59:fb:f9:e0:5e:50:63:30:42:34:52:5e:98: e6:2b:6d:d6:fc:59:65:2a:07:04:5f:6b:73:3e:f6: cb:02:0b:d4:1b:26:3d:bb:9a:85:d9:ab:32:11:dc: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:63:36:55:73:7C:1C:8B:2B:B4:B9:41:26:1E:D9:A1:05:1B:4B:67 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0f:4d:bd:49:eb:79:b0:1f:76:a8:2e:67:1c:4e:4a:9f:90: f0:72:6e:6e:df:4f:f7:f8:53:d0:a1:5b:a1:28:90:98:c6:be: b7:0e:f8:01:a0:a6:cd:62:a1:e2:39:75:c8:89:74:4b:6a:e6: 2c:68:be:d2:07:1b:22:37:f6:65:0c:1c:d8:9e:06:8e:c7:be: b5:18:69:9b:bb:5d:3e:d8:cc:e3:0f:47:6b:67:fa:b4:af:0e: a7:7a:65:7a:6b:3c:0e:4b:88:81:d6:e7:b6:90:b4:05:73:01: 47:3e:51:15:ca:fc:1f:2d:af:5c:17:be:21:63:b4:f9:57:ff: 6b:03:3a:73:b9:4a:7d:61:d4:38:95:f7:bc:9d:41:5b:24:c1: 9c:cb:84:35:23:ba:9f:f5:06:1a:96:c0:48:54:06:98:6e:5e: 2a:0a:38:3b:f9:f3:e3:7b:2c:3c:4b:f6:6d:91:c1:c1:ce:9e: 47:f6:97:43:e5:3c:b1:d4:1c:07:fe:e3:a3:00:a6:71:ce:ea: 34:54:e9:93:fe:09:c6:27:e7:76:d6:04:50:83:4e:c3:14:bb: 35:84:9c:f3:1c:58:14:1d:68:af:49:10:03:1d:30:ba:00:be: 0a:15:68:40:c8:c6:2f:6a:35:ed:fe:82:69:8f:25:57:ae:47: 57:20:6a:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjQwNTE4MjEyMzA2WhcNMjQwNTI1MjEyMzA2WjAYMRYwFAYD VQQDEw02NjQ5MWMzYS04NmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthg9GAu8r+de4sjIlXiK0kmU58ZfjqChg0TR5W+Ot24IIh1ZdM70yu7vfv8V YhoRtOOSMyrOj/Z/FZxX5qdhLBCBjTFqv1e7jqvNh/X23TP2ejoacCbEBb6MmZ+H /tCpAj6Vf2i5SBC7S+R1TXwwcMkecUEeFGjSaB0nGKyhuL6xV8/Sh19OFCEmyCFF lLcEdkbOIUIjJ1AwikloWMzIaISQ2WZNjwTy99SwSibStcHGRr+o4vFk3qFMkziM 7BlhMNEOqQfvwf9ZmclwlmfCp6kT01n7+eBeUGMwQjRSXpjmK23W/FllKgcEX2tz PvbLAgvUGyY9u5qF2asyEdwG5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1jNlVz fByLK7S5QSYe2aEFG0tnMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnD029Set5sB92qC5nHE5Kn5Dwcm5u30/3+FPQoVuhKJCYxr63DvgB oKbNYqHiOXXIiXRLauYsaL7SBxsiN/ZlDBzYngaOx761GGmbu10+2MzjD0drZ/q0 rw6nemV6azwOS4iB1ue2kLQFcwFHPlEVyvwfLa9cF74hY7T5V/9rAzpzuUp9YdQ4 lfe8nUFbJMGcy4Q1I7qf9QYalsBIVAaYbl4qCjg7+fPjeyw8S/ZtkcHBzp5H9pdD 5Tyx1BwH/uOjAKZxzuo0VOmT/gnGJ+d21gRQg07DFLs1hJzzHFgUHWivSRADHTC6 AL4KFWhAyMYvajXt/oJpjyVXrkdXIGo8 -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org