$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: ogprBu+wZekU5jruPJPKAs6EL7HW06wZSKPdprGS8bg= Subject key identifier: 9C:17:A3:41:36:79:1A:79:50:50:98:EC:26:67:01:50:DB:8A:FD:B0 Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: 1F Signing time: Thu 27 Jun 2024 07:35:13 +0000 Manifest this update: Thu 27 Jun 2024 07:35:12 +0000 Manifest next update: Thu 04 Jul 2024 07:35:12 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: U2+x1GJ8oUU4OB8A1UI+DwN07ye5iRoqjT5/+Po3ohQ=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: hVORPrWbzvnXa1/beyF2q+C2vxvW8EJa17wyUDKL+P4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 07:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: Jun 27 07:35:12 2024 GMT Not After : Jul 4 07:35:12 2024 GMT Subject: CN=667d1630-7db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:cd:5d:86:24:1b:f2:6b:22:79:11:13:f4: eb:92:1b:34:f4:22:42:98:55:34:f9:4b:29:9c:26: ee:9e:3e:ab:16:82:bf:2e:df:be:d2:45:43:76:a2: 7d:07:b5:68:a3:d7:e2:d5:ff:a9:76:8b:70:3a:9b: 03:79:4c:31:12:9d:b0:7d:bc:5e:df:00:81:01:04: fb:5f:33:a4:e6:13:4b:c1:56:33:60:58:f4:7a:74: 73:58:bf:d6:f6:96:02:de:71:b3:80:67:de:d1:bc: 99:70:1c:b8:0b:40:f6:48:ba:f7:47:0f:fc:98:de: 0b:45:ac:96:cf:bb:0c:f5:8a:0e:91:1b:9a:92:2c: 7a:e5:3c:6c:81:d3:6a:3e:2e:e2:cf:ac:1e:95:a5: b8:99:c8:82:97:ec:15:62:30:99:57:83:81:4b:cd: ef:09:0b:cc:92:d8:0b:0d:da:72:1c:6b:9e:d9:9f: 16:2c:a0:1d:20:7e:cc:5d:ac:4b:9c:eb:85:ee:87: cf:67:b4:5a:c0:99:ea:cd:41:64:91:87:49:c5:12: ee:9d:ee:93:3e:0d:db:ff:5f:92:78:05:b3:43:33: ad:a5:0e:1a:9d:43:7b:8a:14:da:d5:69:0a:af:0e: b7:a5:3c:38:10:d8:e8:e1:ab:20:26:08:ec:eb:43: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:17:A3:41:36:79:1A:79:50:50:98:EC:26:67:01:50:DB:8A:FD:B0 X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ab:54:77:19:3e:b2:67:da:6a:fd:4c:01:63:66:1c:8b:db: 58:31:45:0f:42:54:94:d2:58:db:c2:d8:93:5c:16:a2:04:58: 75:b1:44:f8:ac:13:34:d6:4e:fb:b3:a4:ae:89:ab:e1:75:29: 1e:83:be:33:49:40:69:3a:2f:c7:15:db:97:73:1a:27:8e:7a: 25:eb:79:53:7c:3a:cc:c9:88:9b:b5:00:83:95:b1:fa:6a:1e: 2f:e6:77:c3:cb:da:c4:26:3c:f4:88:f4:91:c5:55:fc:34:5c: 8c:eb:1c:76:ab:8f:ea:a4:04:33:13:be:87:34:08:dd:b9:9d: a0:8d:7d:1b:ec:05:5c:cf:f3:ec:7b:6b:27:8f:5b:50:1b:98: a8:e1:88:f8:23:e1:20:9e:13:02:eb:3e:9b:9d:7a:e5:9b:f7: 6d:f1:3f:f2:4c:eb:f1:cc:5e:a5:eb:56:d4:d8:54:2c:93:16: 56:5e:a6:67:d3:19:b6:36:10:a5:0f:9b:92:f4:d5:de:a7:74: 3c:cc:85:c2:4f:67:f4:26:8c:6d:67:16:b8:71:ef:57:14:a3: 13:cb:72:a6:f8:fe:fc:07:cf:be:a8:24:cc:e4:c5:fb:ce:0d: 52:59:2f:a7:6c:af:06:60:e1:43:0d:fa:0f:90:0d:67:bd:19: 2b:e9:97:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdDMjExMC8GA1UEBRMoMzg4NUY5RDJGRDA4NjAyODNCNTUzODFGMUM0RjRBNUEz QTFFRUYzRjAeFw0yNDA2MjcwNzM1MTJaFw0yNDA3MDQwNzM1MTJaMBgxFjAUBgNV BAMTDTY2N2QxNjMwLTdkYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFFc1dhiQb8msieRET9OuSGzT0IkKYVTT5SymcJu6ePqsWgr8u377SRUN2on0H tWij1+LV/6l2i3A6mwN5TDESnbB9vF7fAIEBBPtfM6TmE0vBVjNgWPR6dHNYv9b2 lgLecbOAZ97RvJlwHLgLQPZIuvdHD/yY3gtFrJbPuwz1ig6RG5qSLHrlPGyB02o+ LuLPrB6VpbiZyIKX7BViMJlXg4FLze8JC8yS2AsN2nIca57ZnxYsoB0gfsxdrEuc 64Xuh89ntFrAmerNQWSRh0nFEu6d7pM+Ddv/X5J4BbNDM62lDhqdQ3uKFNrVaQqv DrelPDgQ2OjhqyAmCOzrQ5jnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnBejQTZ5 GnlQUJjsJmcBUNuK/bAwHwYDVR0jBBgwFoAUOIX50v0IYCg7VTgfHE9KWjoe7z8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0MyL0I5MkJGQUQ0MDVF QjExRUY5NTZCRDY0M0M0RjlBRTAyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT0lYNTB2MElZQ2c3VlRnZkhFOUtXam9lN3o4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0MyL0I5MkJGQUQ0MDVFQjExRUY5NTZCRDY0M0M0RjlBRTAyL09JWDUwdjBJWUNn N1ZUZ2ZIRTlLV2pvZTd6OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAISrVHcZPrJn2mr9TAFjZhyL21gxRQ9CVJTSWNvC2JNcFqIEWHWxRPis EzTWTvuzpK6Jq+F1KR6DvjNJQGk6L8cV25dzGieOeiXreVN8OszJiJu1AIOVsfpq Hi/md8PL2sQmPPSI9JHFVfw0XIzrHHarj+qkBDMTvoc0CN25naCNfRvsBVzP8+x7 ayePW1AbmKjhiPgj4SCeEwLrPpudeuWb923xP/JM6/HMXqXrVtTYVCyTFlZepmfT GbY2EKUPm5L01d6ndDzMhcJPZ/QmjG1nFrhx71cUoxPLcqb4/vwHz76oJMzkxfvO DVJZL6dsrwZg4UMN+g+QDWe9GSvpl/Y= -----END CERTIFICATE-----Generated at Thu Jun 27 10:22:13 2024 by rpki-client on console-ams.rpki-client.org