$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: jU6cTpK+lQgKQ+6OJYx1G+psM+Ysp4q1q23MalaO5fY= Subject key identifier: D7:CF:97:22:58:4A:82:6F:B9:64:18:5A:AA:75:C3:DF:6C:83:62:03 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 01D4 Signing time: Sun 19 May 2024 04:23:10 +0000 Manifest this update: Sun 19 May 2024 04:23:09 +0000 Manifest next update: Sun 26 May 2024 04:23:09 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: 5rXvB0Igi9JDNWWyBaRuRKhuq0k8HtCEjCJwGjBmW+A=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: DbBPo2nZEBZ5YcRd/HuopO6nmST3Nfv9ez8j4kDEnKE=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: XU8GoOZ72W1jv2aNZTnpFiR3dy1NjTUNfF1EjcwQUYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: May 19 04:23:09 2024 GMT Not After : May 26 04:23:09 2024 GMT Subject: CN=66497ead-1f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:b3:5d:42:4e:7d:ee:09:10:09:2a:55:d7: ca:84:b4:00:1b:ce:8d:2a:6a:9a:6b:8b:89:f5:0a: 3d:69:65:3c:6f:27:c2:ae:79:b6:e8:0f:86:d8:a9: 25:84:5e:9e:8b:ca:0a:0d:0c:e4:fa:f7:b7:ae:dd: b2:ad:f0:57:38:07:c7:cd:7f:97:4c:5e:4d:74:18: 2e:48:e0:5e:0d:41:46:20:a6:1d:b3:22:0d:80:df: 89:fa:9c:2a:91:b6:05:15:38:de:5d:c8:f9:f7:e1: 71:36:50:28:a2:4c:95:0d:3b:76:41:3e:02:af:22: 33:41:b4:f5:4d:9d:c3:78:7f:cb:c6:d8:41:c7:b9: 0d:be:04:f2:d0:a6:50:fc:f4:06:bb:f3:ea:4b:44: fd:31:dd:b6:19:14:64:64:55:24:5d:f0:26:60:be: 46:92:67:99:1b:90:30:c6:99:f0:72:26:9c:b0:0e: e4:90:cd:4a:2d:ad:82:5c:9c:a5:01:21:00:a5:3f: 6c:0a:db:d1:54:b4:94:41:24:2c:55:1e:3a:fb:8d: 21:22:91:53:88:dc:7e:4f:0e:9b:df:f7:cf:40:02: 7b:e0:33:9f:2f:5d:3a:bc:db:53:bd:d7:61:76:3e: 26:19:8e:bd:73:8c:d8:46:ba:e0:40:a9:86:81:4f: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CF:97:22:58:4A:82:6F:B9:64:18:5A:AA:75:C3:DF:6C:83:62:03 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:02:c6:2e:84:16:51:8a:14:9f:42:41:64:1f:5e:7e:5d:2e: b8:2d:ff:46:bd:67:48:ce:c3:c2:f4:fc:1e:06:64:ec:f1:f4: 4b:23:7c:76:c8:64:6b:1e:a9:99:94:04:6e:4f:ef:c6:58:01: 2a:fb:39:06:b3:2b:96:af:83:60:8e:3d:0a:c4:7b:4f:ce:66: fd:e7:00:d6:e0:91:2c:37:ce:cb:4e:4c:0e:94:f2:72:df:77: f7:d2:a9:0f:00:6b:71:5b:38:d2:76:53:a8:34:88:64:da:3e: ba:c6:19:fe:27:ba:af:ea:1d:4d:33:9f:76:dc:8f:1e:6b:5e: c9:9e:f3:34:8b:9d:e4:a2:dc:ce:7c:60:49:ed:8b:47:8c:0d: f6:e3:77:60:90:8c:f0:a3:4e:f8:29:6e:74:62:28:91:bc:b5: 26:0a:b7:6a:b7:7e:70:ba:8a:fc:f3:9c:d0:23:12:dd:ea:d4: 4f:cb:75:bb:07:4a:eb:fb:06:5e:b1:5c:0b:fe:ac:a4:77:4b: 9a:c8:2e:6f:9d:cf:c2:a0:6c:d7:2e:4e:6a:6c:a0:2d:af:f8: 9c:94:40:85:02:2a:a7:7e:ae:89:2a:c3:d7:a5:22:36:1c:30: 22:a0:b3:48:02:a7:6c:8e:a7:47:88:ab:ef:7b:3d:ff:4d:be: 6c:78:18:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjQwNTE5MDQyMzA5WhcNMjQwNTI2MDQyMzA5WjAYMRYwFAYD VQQDEw02NjQ5N2VhZC0xZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ2zXUJOfe4JEAkqVdfKhLQAG86NKmqaa4uJ9Qo9aWU8byfCrnm26A+G2Kkl hF6ei8oKDQzk+ve3rt2yrfBXOAfHzX+XTF5NdBguSOBeDUFGIKYdsyINgN+J+pwq kbYFFTjeXcj59+FxNlAookyVDTt2QT4CryIzQbT1TZ3DeH/LxthBx7kNvgTy0KZQ /PQGu/PqS0T9Md22GRRkZFUkXfAmYL5GkmeZG5AwxpnwciacsA7kkM1KLa2CXJyl ASEApT9sCtvRVLSUQSQsVR46+40hIpFTiNx+Tw6b3/fPQAJ74DOfL106vNtTvddh dj4mGY69c4zYRrrgQKmGgU9hkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfPlyJY SoJvuWQYWqp1w99sg2IDMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLAsYuhBZRihSfQkFkH15+XS64Lf9GvWdIzsPC9PweBmTs8fRLI3x2 yGRrHqmZlARuT+/GWAEq+zkGsyuWr4Ngjj0KxHtPzmb95wDW4JEsN87LTkwOlPJy 33f30qkPAGtxWzjSdlOoNIhk2j66xhn+J7qv6h1NM5923I8ea17JnvM0i53kotzO fGBJ7YtHjA3243dgkIzwo074KW50YiiRvLUmCrdqt35wuor885zQIxLd6tRPy3W7 B0rr+wZesVwL/qykd0uayC5vnc/CoGzXLk5qbKAtr/iclECFAiqnfq6JKsPXpSI2 HDAioLNIAqdsjqdHiKvvez3/Tb5seBgC -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org