$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json) Hash identifier: sNCA9VNkShyUG77B54rVH2xyT6A1Su6QcKzuEe8k/zQ= Subject key identifier: 8D:C8:0F:A0:69:A6:42:67:CE:C9:87:A3:44:0A:D1:6A:1C:30:74:02 Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft Manifest number: 05AE Signing time: Sun 19 May 2024 00:15:16 +0000 Manifest this update: Sun 19 May 2024 00:15:15 +0000 Manifest next update: Sun 26 May 2024 00:15:15 +0000 Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: KQ77NOE27gCmK6FF/CyFGVECVWNUsKUYTmM/qLV0ZeI=) 2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: LnEdIB0sQiBaFOFXc4sUkHoxa/OUoNANFJ/i1ZswMUM=) 3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: Iv7i7A/6Mu+lxzLCeTQNY67J4Y8FkA9karezRmCzZ0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: May 19 00:15:15 2024 GMT Not After : May 26 00:15:15 2024 GMT Subject: CN=66494494-f56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2a:1f:0f:31:5f:7c:b0:6b:6b:ed:9b:8f:ca: ab:57:f0:fa:50:53:1a:a0:88:a9:d5:ad:dc:bc:62: 24:33:aa:05:ea:d7:59:52:18:ec:54:28:53:28:12: d6:09:4d:4f:13:e6:5c:e4:4b:53:62:c1:25:fa:07: 5f:12:da:89:a1:63:4c:bb:0b:9f:a7:37:c8:8a:7a: ba:af:c0:91:c7:ec:7b:23:c8:cf:a1:93:fe:fc:a0: 26:ef:f8:36:01:ca:7a:fd:64:84:ad:4d:10:7d:ea: 2d:a9:0f:bf:f4:ae:fb:e6:4e:54:21:c1:1f:8d:4a: b6:be:44:94:67:78:8d:e4:a0:07:a8:93:52:2b:9f: e8:6a:d9:65:ba:7a:20:2f:52:8a:7c:a3:37:1d:13: c9:5a:60:7e:53:ab:8f:08:48:6f:dc:4c:e6:17:13: a0:f9:9b:ef:ef:3a:53:f5:8e:0d:bd:4e:85:de:5c: cb:49:5e:76:63:9f:a0:9b:a6:14:5a:73:ba:96:28: 42:2c:b4:42:80:90:20:99:74:60:7f:fd:18:eb:e3: 13:46:df:86:3f:82:91:30:fc:34:c0:42:d5:a1:5a: 90:66:01:7c:5b:ed:e6:55:28:98:9c:ba:37:b5:37: c3:80:24:9d:27:a3:b8:22:50:79:27:e7:1c:7d:5d: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C8:0F:A0:69:A6:42:67:CE:C9:87:A3:44:0A:D1:6A:1C:30:74:02 X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:ee:7a:d8:b0:5f:11:9d:96:40:7a:04:e0:85:05:2c:fe:ae: 7c:01:5d:15:e7:78:67:4d:1e:93:0e:d7:43:0a:7b:9e:84:5b: c3:e5:b1:88:23:7c:c2:6c:8f:57:3b:c1:81:89:92:ce:14:a8: 02:3a:32:d3:88:c2:e0:ed:47:9d:6f:bd:f9:d7:eb:9b:42:3a: 3b:45:2f:2e:c6:03:89:db:e1:0a:93:e8:7e:30:34:70:3b:30: 9e:db:90:c6:de:f2:2f:33:62:6a:bd:92:6b:6c:9f:2a:dd:98: fc:7d:d5:16:57:e5:87:d7:45:af:3f:2a:c6:4c:e5:3e:eb:b1: 98:1d:2d:bf:13:90:7a:fe:24:ba:15:76:db:7d:a8:8a:d9:59: 1a:68:d1:5e:4b:75:f3:e1:47:68:c3:63:2d:ea:af:dc:38:1b: ed:24:28:a7:1f:2b:34:cd:cc:20:2e:78:24:29:d6:16:a0:d6: d1:86:a6:e5:43:01:12:ca:14:a5:9f:95:e7:cc:84:59:a7:70: f7:2e:78:c7:01:8d:5d:aa:8e:9a:f7:48:cb:f5:cc:5d:4e:db: cf:b9:4d:65:e9:59:8e:1a:3b:68:2d:86:39:7d:65:e7:57:00: 13:47:c6:30:e4:c1:0e:6c:19:9b:b3:4c:83:50:32:81:ab:b2: 4a:11:0d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjQwNTE5MDAxNTE1WhcNMjQwNTI2MDAxNTE1WjAYMRYwFAYD VQQDEw02NjQ5NDQ5NC1mNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+CofDzFffLBra+2bj8qrV/D6UFMaoIip1a3cvGIkM6oF6tdZUhjsVChTKBLW CU1PE+Zc5EtTYsEl+gdfEtqJoWNMuwufpzfIinq6r8CRx+x7I8jPoZP+/KAm7/g2 Acp6/WSErU0QfeotqQ+/9K775k5UIcEfjUq2vkSUZ3iN5KAHqJNSK5/oatllunog L1KKfKM3HRPJWmB+U6uPCEhv3EzmFxOg+Zvv7zpT9Y4NvU6F3lzLSV52Y5+gm6YU WnO6lihCLLRCgJAgmXRgf/0Y6+MTRt+GP4KRMPw0wELVoVqQZgF8W+3mVSiYnLo3 tTfDgCSdJ6O4IlB5J+ccfV3Y8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3ID6Bp pkJnzsmHo0QK0WocMHQCMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa V05pbmtSam83MWI4aHk1Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDi7nrYsF8RnZZAegTghQUs/q58AV0V53hnTR6TDtdDCnuehFvD5bGI I3zCbI9XO8GBiZLOFKgCOjLTiMLg7Uedb7351+ubQjo7RS8uxgOJ2+EKk+h+MDRw OzCe25DG3vIvM2JqvZJrbJ8q3Zj8fdUWV+WH10WvPyrGTOU+67GYHS2/E5B6/iS6 FXbbfaiK2VkaaNFeS3Xz4Udow2Mt6q/cOBvtJCinHys0zcwgLngkKdYWoNbRhqbl QwESyhSln5XnzIRZp3D3LnjHAY1dqo6a90jL9cxdTtvPuU1l6VmOGjtoLYY5fWXn VwATR8Yw5MEObBmbs0yDUDKBq7JKEQ0C -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org