$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft File: oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json) Hash identifier: 44VFgj5izcDUt0L7e8nb3wr+HnvC3De5g92G90V868U= Subject key identifier: 64:4D:0A:E8:C7:C9:F0:87:5A:A2:24:EB:34:54:FB:CC:52:38:38:5E Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Certificate serial: 1110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft Manifest number: 10F8 Signing time: Sat 18 May 2024 17:52:10 +0000 Manifest this update: Sat 18 May 2024 17:52:10 +0000 Manifest next update: Sat 25 May 2024 17:52:10 +0000 Files and hashes: 1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: 8wHP10vgxdasN0X/0B/W4Wo3/A+I2KbTtYKfaqQTV1M=) 2: 5E66667ED3AE11EB908D6529C4F9AE02.roa (hash: BQMNUmRe28V3TXqPHfb6OyHLsVMCwjRHcSKj/c+/mxU=) 3: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: xM0SE9z5KPqdffwEGBCF2GJ0F/e0j8kXILwt1Y0ESZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4368 (0x1110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Validity Not Before: May 18 17:52:10 2024 GMT Not After : May 25 17:52:10 2024 GMT Subject: CN=6648eaca-d113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:fa:47:f1:ae:96:db:7a:07:f3:e8:49:c4: b6:a9:99:9c:95:49:b9:5f:ff:41:20:ec:34:8d:ef: 5c:b9:1b:d4:00:56:af:b0:95:b3:74:20:b6:12:2c: 01:48:8b:9f:b5:34:1c:98:70:16:5e:8f:9c:b5:b7: 89:52:0c:32:65:22:c3:b2:e0:22:54:44:54:5d:49: 46:10:fd:52:28:f0:80:19:5c:eb:87:a7:61:8d:93: a3:5a:95:35:f9:ea:2e:ae:79:22:b2:f4:56:dd:c8: 26:dc:d2:5e:ee:22:52:a4:b2:82:45:ba:92:04:77: 0e:ec:7d:f6:d3:09:c3:8a:f8:f5:8f:4b:4d:4b:00: b6:55:65:5c:ea:61:fb:94:ac:37:72:39:3b:78:73: 82:f7:1c:47:1b:59:f4:d6:ec:29:00:db:1d:92:a3: 4b:43:dc:06:07:46:d5:49:9e:16:1b:a8:06:e6:2a: de:d0:54:b0:fa:8f:8c:56:85:f5:6b:05:6e:24:1f: b6:54:49:66:79:cc:d3:86:91:99:67:6d:52:a3:94: 61:ee:0c:d3:51:b7:ac:ab:2d:b2:ba:f7:b5:1a:da: c1:9b:97:66:f1:26:54:4d:ae:f1:c1:48:bb:52:a0: d1:93:5b:e2:8c:36:e1:9c:07:eb:87:25:a1:12:5b: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4D:0A:E8:C7:C9:F0:87:5A:A2:24:EB:34:54:FB:CC:52:38:38:5E X509v3 Authority Key Identifier: keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b9:39:46:1c:d6:8b:49:e0:19:05:f4:36:7c:0a:6f:52:01: b5:fe:1c:14:66:1a:a0:9c:68:64:c8:64:3e:b9:90:4a:b0:e5: c4:cd:4a:d8:cf:f2:c3:98:f0:27:25:1d:58:46:40:e8:d1:fc: fb:7c:43:1a:b5:ce:73:11:73:74:ea:de:74:68:5e:1e:6a:5a: 5b:d5:4a:0d:ad:c8:8b:d6:fe:df:83:87:e7:75:12:09:a2:9a: 87:d9:2d:8c:d8:62:74:8c:cd:fc:f2:e6:bb:4e:b0:8b:bc:fa: cf:ce:e1:35:22:e1:e5:de:9f:97:76:d8:51:2b:86:74:e4:d9: c5:3a:43:0e:c6:eb:6f:53:0c:b9:36:24:96:36:e8:a3:33:0d: 4b:d8:c2:e9:a8:1f:83:c2:6d:fc:75:c8:08:93:c9:d3:a6:00: 32:10:9e:2a:3f:ef:eb:f7:e3:20:05:0d:0b:d2:c2:41:68:5d: ea:02:de:0f:e1:26:60:a7:a8:a7:67:3d:10:03:a0:43:73:5b: 55:2c:49:bc:87:6f:be:c2:c0:02:7c:cb:de:5d:74:9a:67:38: 20:eb:fd:af:5a:67:d3:df:f2:96:fd:10:46:48:3b:d7:1c:14: 37:f6:c0:c2:24:ca:da:e9:c4:b1:e7:88:cc:41:66:73:79:bb: 15:be:bd:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKEExN0M4ODdFRTk1QTc0QjNENzM4QzE1QzcwOEZFQ0ZE NkJCOEM2NkEwHhcNMjQwNTE4MTc1MjEwWhcNMjQwNTI1MTc1MjEwWjAYMRYwFAYD VQQDEw02NjQ4ZWFjYS1kMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u/6R/Gultt6B/PoScS2qZmclUm5X/9BIOw0je9cuRvUAFavsJWzdCC2EiwB SIuftTQcmHAWXo+ctbeJUgwyZSLDsuAiVERUXUlGEP1SKPCAGVzrh6dhjZOjWpU1 +eournkisvRW3cgm3NJe7iJSpLKCRbqSBHcO7H320wnDivj1j0tNSwC2VWVc6mH7 lKw3cjk7eHOC9xxHG1n01uwpANsdkqNLQ9wGB0bVSZ4WG6gG5ire0FSw+o+MVoX1 awVuJB+2VElmeczThpGZZ21So5Rh7gzTUbesqy2yuve1GtrBm5dm8SZUTa7xwUi7 UqDRk1vijDbhnAfrhyWhElvDbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRNCujH yfCHWqIk6zRU+8xSODheMB8GA1UdIwQYMBaAFKF8iH7pWnSz1zjBXHCP7P1ruMZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9EOTJERDAzOEY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRMUFhPTUZjY0lfc19XdTR4 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29YeUlmdWxhZExQWE9NRmNjSV9zX1d1NHhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9EOTJERDAzOEY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRM UFhPTUZjY0lfc19XdTR4bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjuTlGHNaLSeAZBfQ2fApvUgG1/hwUZhqgnGhkyGQ+uZBKsOXEzUrY z/LDmPAnJR1YRkDo0fz7fEMatc5zEXN06t50aF4ealpb1UoNrciL1v7fg4fndRIJ opqH2S2M2GJ0jM388ua7TrCLvPrPzuE1IuHl3p+XdthRK4Z05NnFOkMOxutvUwy5 NiSWNuijMw1L2MLpqB+Dwm38dcgIk8nTpgAyEJ4qP+/r9+MgBQ0L0sJBaF3qAt4P 4SZgp6inZz0QA6BDc1tVLEm8h2++wsACfMveXXSaZzgg6/2vWmfT3/KW/RBGSDvX HBQ39sDCJMra6cSx54jMQWZzebsVvr1T -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org