$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: PNyyNHb4nFxca9xkFuZ4vf0oNCPG4vbdW1l1sk2NVT0= Subject key identifier: 25:86:36:E1:13:1D:3B:C6:CC:D8:FE:4C:D4:53:4E:35:F1:45:94:26 Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 056E Signing time: Sun 19 May 2024 00:43:45 +0000 Manifest this update: Sun 19 May 2024 00:43:44 +0000 Manifest next update: Sun 26 May 2024 00:43:44 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: u5q4Rwra+PepFr8IMiv7g1FEflJTgUR4SvYXvFHbeaQ=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: JP5QB1zVHjOC8Yy1kU6cPSVIQkrzd0sn+DomcdrK1tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: May 19 00:43:44 2024 GMT Not After : May 26 00:43:44 2024 GMT Subject: CN=66494b41-a3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:50:20:89:84:51:71:8c:3a:f4:61:47:39: a4:c9:e1:32:87:9e:ca:7c:ee:d2:61:3b:ba:ec:d5: 99:be:a7:bb:d6:04:fd:06:dc:55:4e:10:11:44:e8: b1:0a:a7:38:62:54:21:78:11:f5:a8:26:12:13:1a: 32:0a:e1:38:14:dc:9f:92:99:6e:45:25:84:df:1b: 49:31:86:8b:01:d0:58:14:33:ff:94:64:3f:c4:e3: 00:9e:56:d0:61:03:f8:7a:90:a1:12:1a:03:93:a5: 4e:c7:e9:ce:3e:fb:fe:44:78:8e:a9:c6:ef:db:58: a6:f9:95:44:64:3b:9f:df:03:20:80:80:6a:29:2a: 44:48:50:d3:5b:ea:e8:ee:ad:f8:e5:f2:15:35:32: 9f:ca:09:e5:7f:96:12:2b:42:d2:73:db:2d:79:d0: aa:0b:91:ba:c9:f5:70:12:76:0a:4f:19:e8:81:1b: 1d:ce:a7:dd:4f:db:52:6d:0a:d2:f7:f7:0f:34:f8: 88:9e:7b:40:e1:f4:b4:ad:7d:d7:37:09:2b:ed:19: 46:de:24:77:d6:45:f5:2a:52:44:a6:61:f1:04:72: 0a:a8:33:84:1f:0f:59:66:d7:38:b7:51:00:49:25: 19:91:e4:ed:f8:05:7a:5e:42:5c:a3:22:5d:3d:98: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:86:36:E1:13:1D:3B:C6:CC:D8:FE:4C:D4:53:4E:35:F1:45:94:26 X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f5:1a:a4:f5:f8:35:99:0a:7a:87:dd:52:7b:78:f7:48:89: 54:94:10:ef:b2:71:bc:4b:d2:57:ab:58:4b:a1:d0:40:32:95: c8:86:0f:f7:2a:65:1f:97:ba:6d:40:53:5a:24:f5:17:64:0d: 0c:c6:ed:0e:7f:f4:ca:c0:14:4e:98:72:41:fb:b5:64:5f:45: de:80:77:e2:e3:9c:0b:9b:8e:6e:2b:37:62:35:bd:38:1d:4a: f0:a9:84:13:c0:9b:25:45:70:58:54:fd:aa:d2:de:eb:c7:28: 5a:40:39:b7:cb:4e:0f:39:84:e5:50:4a:3d:83:da:7d:b9:a1: 49:04:40:66:d6:fb:bc:a1:1f:0e:31:23:fc:c7:70:19:f6:45: 7b:d6:e7:07:d8:a6:f4:41:db:4d:0f:b6:ce:e5:11:00:52:44: 68:3f:ae:c9:93:f2:60:9a:05:74:78:e4:57:bc:02:e8:dc:04: 5e:bc:bb:ac:c9:6a:56:f3:7a:f7:06:e8:48:c4:29:9d:f1:43: 34:4f:19:fc:04:0b:e3:05:8b:77:da:ea:85:1c:00:c2:c4:b2: 0b:3e:dd:ca:95:20:2c:c3:45:10:32:0b:a6:ce:7c:2d:8c:24: 6e:2a:1d:ca:bd:54:2d:0c:8a:14:7a:a8:94:2e:02:ef:b4:b0: a5:77:dc:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjQwNTE5MDA0MzQ0WhcNMjQwNTI2MDA0MzQ0WjAYMRYwFAYD VQQDEw02NjQ5NGI0MS1hM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0FQIImEUXGMOvRhRzmkyeEyh57KfO7SYTu67NWZvqe71gT9BtxVThARROix Cqc4YlQheBH1qCYSExoyCuE4FNyfkpluRSWE3xtJMYaLAdBYFDP/lGQ/xOMAnlbQ YQP4epChEhoDk6VOx+nOPvv+RHiOqcbv21im+ZVEZDuf3wMggIBqKSpESFDTW+ro 7q345fIVNTKfygnlf5YSK0LSc9stedCqC5G6yfVwEnYKTxnogRsdzqfdT9tSbQrS 9/cPNPiInntA4fS0rX3XNwkr7RlG3iR31kX1KlJEpmHxBHIKqDOEHw9ZZtc4t1EA SSUZkeTt+AV6XkJcoyJdPZgnYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWGNuET HTvGzNj+TNRTTjXxRZQmMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz9Rqk9fg1mQp6h91Se3j3SIlUlBDvsnG8S9JXq1hLodBAMpXIhg/3 KmUfl7ptQFNaJPUXZA0Mxu0Of/TKwBROmHJB+7VkX0XegHfi45wLm45uKzdiNb04 HUrwqYQTwJslRXBYVP2q0t7rxyhaQDm3y04POYTlUEo9g9p9uaFJBEBm1vu8oR8O MSP8x3AZ9kV71ucH2Kb0QdtND7bO5REAUkRoP67Jk/JgmgV0eORXvALo3ARevLus yWpW83r3BuhIxCmd8UM0Txn8BAvjBYt32uqFHADCxLILPt3KlSAsw0UQMgumznwt jCRuKh3KvVQtDIoUeqiULgLvtLCld9wB -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org