$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft File: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft (raw, json) Hash identifier: oczc7jR0QxjhzsJXBowSCvXTJMtQonofS8LPOljQwUU= Subject key identifier: E4:D5:73:F0:84:03:5A:92:62:E7:85:89:A4:67:50:65:CD:9A:B4:0F Authority key identifier: A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED Certificate issuer: /CN=A918EF94/serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft Manifest number: 5E Signing time: Sat 18 May 2024 18:37:08 +0000 Manifest this update: Sat 18 May 2024 18:37:08 +0000 Manifest next update: Sat 25 May 2024 18:37:08 +0000 Files and hashes: 1: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl (hash: 6FiWM/E9jDSB70CDX0lnv/nb5UDXX4sH7juz8HkdtFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94/serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Validity Not Before: May 18 18:37:08 2024 GMT Not After : May 25 18:37:08 2024 GMT Subject: CN=6648f554-02bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:61:3d:76:f7:ec:a3:aa:da:79:c0:c5:61: db:98:94:43:dc:91:48:64:6d:56:3a:a5:4c:05:0b: 5f:88:54:6c:93:4f:0d:51:03:77:46:5e:b9:ce:b9: ac:8b:3f:36:e9:20:8a:0a:28:5a:9a:78:52:71:2c: 80:11:fb:dd:d1:18:0c:1d:ee:a9:50:4a:5d:a7:cc: 28:79:b2:f9:ad:d1:dc:92:76:ec:b1:cb:77:29:20: 2f:46:98:1e:73:5f:83:43:65:cc:1b:09:a0:3b:1b: a8:ff:b2:c5:36:e5:1c:9f:ec:4d:40:dc:c5:21:bb: 40:2f:13:40:81:5e:f1:ce:5e:51:90:b3:bf:34:0a: e0:d7:e2:b8:a5:02:62:51:d0:c4:b7:98:86:09:cd: a4:23:ac:f7:a1:44:40:e4:b7:57:fd:88:5b:be:f9: 5d:d4:c5:c3:90:55:56:30:08:b6:18:81:97:df:21: 1a:fa:b6:ad:f4:8e:4d:7f:78:5a:c9:33:6d:f4:0d: d4:05:71:94:f9:f6:a9:ef:12:cd:43:22:5a:03:4e: 23:a6:df:5d:cd:03:3f:b9:82:0f:fd:e6:f5:41:a7: a1:69:a1:44:e9:4e:d0:49:51:e5:e4:96:8f:79:29: 4f:c8:fe:0d:f3:9d:00:39:2b:1e:76:6b:a1:30:d4: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D5:73:F0:84:03:5A:92:62:E7:85:89:A4:67:50:65:CD:9A:B4:0F X509v3 Authority Key Identifier: keyid:A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:75:7b:49:f8:c1:0d:ab:64:5a:b2:b8:21:d3:aa:12:17:46: 4f:d9:f5:a3:51:00:97:b0:39:b4:dc:6b:4c:a4:14:a4:33:9d: 49:6b:d6:1f:1b:ee:2b:a3:2d:2d:12:ef:f0:38:7d:95:a5:dd: 95:88:ba:7c:e0:13:be:62:22:e3:ba:33:e7:f5:81:63:36:3c: ce:6c:5b:7a:14:90:71:0f:d1:7f:2a:6c:d5:1d:9e:d6:cc:b1: 72:84:75:b0:e6:3b:22:92:05:42:68:e3:f3:1c:4a:55:91:8e: 92:56:88:57:48:51:fd:1d:ab:9a:d3:54:80:86:a3:f1:cf:50: d7:04:bc:d4:8d:9f:57:9a:a3:7e:88:ed:94:bb:ca:13:56:af: d3:a9:79:30:4a:11:d2:59:4a:27:30:db:c8:97:90:f8:97:93: dd:40:fa:63:66:67:af:f9:6a:cd:97:c2:15:7d:28:22:18:85: 28:ac:55:20:fa:43:87:85:1a:01:cc:53:4c:fe:25:21:b8:06: 21:f9:f2:0f:2c:be:1c:cd:be:ed:0f:b7:dc:79:d6:94:d0:b2: 67:a3:18:71:8d:c9:f5:ce:c9:a4:48:fd:96:cd:f8:53:0b:04: 72:cd:58:f0:af:b0:a0:e5:8e:91:83:74:0e:11:4a:e8:65:a6: 5a:29:ae:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY5NDExMC8GA1UEBRMoQTFFNEYwOUQyRjQ3MDc4NjdDRkFFMjdFOEYxMzIzNjlG Qjk3RDBFRDAeFw0yNDA1MTgxODM3MDhaFw0yNDA1MjUxODM3MDhaMBgxFjAUBgNV BAMTDTY2NDhmNTU0LTAyYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8+mE9dvfso6raecDFYduYlEPckUhkbVY6pUwFC1+IVGyTTw1RA3dGXrnOuayL PzbpIIoKKFqaeFJxLIAR+93RGAwd7qlQSl2nzCh5svmt0dySduyxy3cpIC9GmB5z X4NDZcwbCaA7G6j/ssU25Ryf7E1A3MUhu0AvE0CBXvHOXlGQs780CuDX4rilAmJR 0MS3mIYJzaQjrPehREDkt1f9iFu++V3UxcOQVVYwCLYYgZffIRr6tq30jk1/eFrJ M230DdQFcZT59qnvEs1DIloDTiOm313NAz+5gg/95vVBp6FpoUTpTtBJUeXklo95 KU/I/g3znQA5Kx52a6Ew1C0hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5NVz8IQD WpJi54WJpGdQZc2atA8wHwYDVR0jBBgwFoAUoeTwnS9HB4Z8+uJ+jxMjafuX0O0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjk0LzUwMjk1NTRDOEE3 OTExRUU4NTQ0MTkxOEM0RjlBRTAyL29lVHduUzlIQjRaOC11Si1qeE1qYWZ1WDBP MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb2VUd25TOUhCNFo4LXVKLWp4TWphZnVYME8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjk0LzUwMjk1NTRDOEE3OTExRUU4NTQ0MTkxOEM0RjlBRTAyL29lVHduUzlIQjRa OC11Si1qeE1qYWZ1WDBPMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG11e0n4wQ2rZFqyuCHTqhIXRk/Z9aNRAJewObTca0ykFKQznUlr1h8b 7iujLS0S7/A4fZWl3ZWIunzgE75iIuO6M+f1gWM2PM5sW3oUkHEP0X8qbNUdntbM sXKEdbDmOyKSBUJo4/McSlWRjpJWiFdIUf0dq5rTVICGo/HPUNcEvNSNn1eao36I 7ZS7yhNWr9OpeTBKEdJZSicw28iXkPiXk91A+mNmZ6/5as2XwhV9KCIYhSisVSD6 Q4eFGgHMU0z+JSG4BiH58g8svhzNvu0Pt9x51pTQsmejGHGNyfXOyaRI/ZbN+FML BHLNWPCvsKDljpGDdA4RSuhlploprrI= -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org