$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: hGwHy5BHT2G3+9RyJ6ygzm/YTPYrBHsC09gPV5VaoRI= Subject key identifier: 9B:03:EE:C4:5C:3A:60:F8:69:BE:46:76:DD:90:AB:CC:A3:7E:90:88 Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 0271 Signing time: Sun 19 May 2024 03:47:08 +0000 Manifest this update: Sun 19 May 2024 03:47:08 +0000 Manifest next update: Sun 26 May 2024 03:47:08 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: SoKz3qIAVySf1D5YpJwJ7jWqFL6Qt0rcjwljU3vhF2g=) 2: 5E979F10C6C811ECA5A9AB33C4F9AE02.roa (hash: hZ1F/54EU32b4+tOv1jdpwsQTgq+Rgy859FLjmzADU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: May 19 03:47:08 2024 GMT Not After : May 26 03:47:08 2024 GMT Subject: CN=6649763c-d282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:bb:11:5c:96:ee:54:74:a6:c6:81:d3:9d: 60:ed:67:fa:ce:e5:e7:bb:d4:29:b4:bb:8c:ad:14: 2d:e8:3a:72:0b:d5:50:b9:ee:61:65:b9:c8:18:d3: ce:8f:a0:64:fc:92:c7:8a:65:7d:a4:a9:3e:a0:e1: 7a:9a:35:44:86:98:e8:52:40:c6:ed:99:93:a8:4b: 32:f6:ee:6c:cf:09:fa:4f:c6:66:37:c7:14:b0:bb: 1d:ad:d8:62:60:1b:70:74:2a:51:dd:b9:dc:5d:35: b0:70:f9:a5:98:f6:23:7d:fa:a2:3a:b8:41:5f:c0: c2:1e:31:06:ff:0a:3e:44:0f:67:06:04:ad:e1:54: 6a:3b:d8:9d:e1:e2:44:aa:76:71:8e:9d:5b:ae:c0: 86:cd:f8:ce:ce:eb:38:e1:d0:17:97:eb:8f:ad:39: e6:37:1c:8f:6b:e8:4a:db:41:38:9e:9f:3c:e9:6a: c2:0b:2c:72:74:e9:42:36:b1:2e:4e:d8:cf:4a:cf: 76:e4:82:fb:ea:e1:cd:b6:8f:2f:d4:2f:9c:98:ac: 65:90:09:9f:48:54:00:61:82:91:e7:c7:dc:3f:23: d8:89:52:80:94:a7:da:1f:35:a6:79:d4:40:71:3b: 1c:d2:25:a9:70:23:4f:0c:9d:57:d3:88:12:ab:c8: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:03:EE:C4:5C:3A:60:F8:69:BE:46:76:DD:90:AB:CC:A3:7E:90:88 X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2a:13:e0:34:93:f4:3a:66:6b:98:9f:d5:6e:2b:de:21:76: f6:2f:a0:6b:a7:9e:37:54:2a:fe:3d:06:24:50:69:ab:d1:d5: 08:93:0d:06:12:9f:02:8f:31:b2:0b:14:1f:c5:92:9c:0e:9b: 62:fa:ed:13:98:b1:17:1f:c4:d2:5d:c7:78:37:52:91:08:02: 66:84:b7:e6:83:86:47:f7:51:07:6d:b3:9a:6d:fe:c9:d2:b8: e0:09:b5:38:cd:3a:91:bf:8e:58:5f:86:4d:7f:5b:fa:64:d3: f2:37:dc:90:a3:7d:b5:07:b5:00:fc:e5:01:07:6a:ee:50:90: 87:9f:b6:f3:2e:b7:e8:2f:1a:ae:54:95:fe:3f:bc:85:b3:0f: eb:9d:17:66:bc:1f:83:dd:2a:bf:49:d5:c6:d2:44:bf:68:0e: ee:9f:12:63:ca:17:df:48:3a:af:39:e8:e1:91:9d:46:c1:0b: 6c:1f:11:41:53:14:31:8f:fd:8d:76:c7:03:a6:8c:36:87:74: 89:ef:83:e9:f0:a3:a3:32:d2:9e:bd:1e:a0:42:86:aa:3c:bd: 14:df:be:dc:24:5f:35:99:d3:13:6f:4e:54:5e:58:65:05:51: c1:e1:43:a0:bc:8d:42:e2:3e:b8:c6:23:7d:d5:aa:91:8c:ed: 5f:a8:56:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjQwNTE5MDM0NzA4WhcNMjQwNTI2MDM0NzA4WjAYMRYwFAYD VQQDEw02NjQ5NzYzYy1kMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+i7EVyW7lR0psaB051g7Wf6zuXnu9QptLuMrRQt6DpyC9VQue5hZbnIGNPO j6Bk/JLHimV9pKk+oOF6mjVEhpjoUkDG7ZmTqEsy9u5szwn6T8ZmN8cUsLsdrdhi YBtwdCpR3bncXTWwcPmlmPYjffqiOrhBX8DCHjEG/wo+RA9nBgSt4VRqO9id4eJE qnZxjp1brsCGzfjOzus44dAXl+uPrTnmNxyPa+hK20E4np886WrCCyxydOlCNrEu TtjPSs925IL76uHNto8v1C+cmKxlkAmfSFQAYYKR58fcPyPYiVKAlKfaHzWmedRA cTsc0iWpcCNPDJ1X04gSq8ixxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsD7sRc OmD4ab5Gdt2Qq8yjfpCIMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFKhPgNJP0OmZrmJ/VbiveIXb2L6Brp543VCr+PQYkUGmr0dUIkw0G Ep8CjzGyCxQfxZKcDpti+u0TmLEXH8TSXcd4N1KRCAJmhLfmg4ZH91EHbbOabf7J 0rjgCbU4zTqRv45YX4ZNf1v6ZNPyN9yQo321B7UA/OUBB2ruUJCHn7bzLrfoLxqu VJX+P7yFsw/rnRdmvB+D3Sq/SdXG0kS/aA7unxJjyhffSDqvOejhkZ1GwQtsHxFB UxQxj/2NdscDpow2h3SJ74Pp8KOjMtKevR6gQoaqPL0U377cJF81mdMTb05UXlhl BVHB4UOgvI1C4j64xiN91aqRjO1fqFbG -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org