$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: /bea0YdFp0Rk9hwmwOhvE/2qzom/ZaUraI99IcCmxTs= Subject key identifier: C7:F5:C2:DA:6F:FE:18:12:52:11:BC:0B:22:7B:50:DD:E8:56:6A:FE Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: FB Signing time: Sun 19 May 2024 05:39:54 +0000 Manifest this update: Sun 19 May 2024 05:39:53 +0000 Manifest next update: Sun 26 May 2024 05:39:53 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: v3GbUQcenGIieciqQOjn/vr2gqhileX9RAdyKH6liBA=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: CqHtyxNfgtR6scFLatHhD2VlzFmB7JLLHd+3DwpASNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: May 19 05:39:53 2024 GMT Not After : May 26 05:39:53 2024 GMT Subject: CN=664990aa-e6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:01:2f:d8:41:c0:57:81:cb:1e:7a:0e:a7: bf:7b:f8:71:30:3e:c5:46:b8:2d:bc:67:d6:18:91: b0:6a:2b:55:fb:43:d4:d5:3e:0d:23:04:7c:18:73: 13:5e:e9:57:70:2b:10:3c:3b:48:24:30:55:3a:72: 54:e1:5e:69:60:3d:b0:eb:f6:1f:c5:ce:1b:aa:69: bb:9e:e9:88:2a:e9:a0:f0:e8:d5:b3:9a:47:d0:38: 27:44:b0:4f:fe:be:90:b6:c2:3b:91:9c:fc:a8:88: 3f:74:94:04:c4:64:ce:d1:19:9e:f5:a9:30:52:a0: ff:a1:6c:7f:e2:73:fb:a2:6b:68:82:58:e2:8d:c6: dc:1d:81:2f:58:a9:c1:e9:ad:c4:db:76:a2:7c:8a: 94:71:57:92:13:b5:c9:e4:60:09:4d:20:e0:33:fe: 2d:d5:0b:5d:b2:70:dd:38:71:ee:ff:49:19:e3:48: 0a:0a:81:43:28:bc:d4:af:7c:8a:82:8d:23:fe:9d: 6a:28:06:95:50:15:e3:2e:c5:c8:83:9f:0d:52:7e: 05:21:34:85:20:a1:ff:06:73:3f:79:4c:e3:75:a5: cd:5e:43:1f:be:d3:ea:ec:89:35:cd:aa:0e:67:35: 2b:7f:c9:10:19:98:b3:75:27:7b:c4:db:ec:fe:79: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F5:C2:DA:6F:FE:18:12:52:11:BC:0B:22:7B:50:DD:E8:56:6A:FE X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:65:72:7a:e8:30:35:2e:dc:fd:15:c9:81:71:be:a1:3d:cb: d5:df:b6:e7:17:64:70:40:55:68:32:22:53:a7:c3:0f:44:e7: 40:47:90:eb:ab:c5:ff:37:ec:cb:c5:8e:16:7d:4d:4d:db:8b: 57:8e:7c:6a:5f:88:b6:02:6d:85:ca:3d:a7:06:91:89:20:e6: a2:6f:98:93:50:98:11:ad:b6:a7:84:bf:88:5f:28:da:f6:1d: d5:cc:e6:a7:91:77:b8:cd:4a:e1:59:c5:7b:29:42:89:22:50: e8:ed:30:c1:d4:be:64:72:da:d9:82:41:ff:3e:49:3c:af:31: 7b:64:e5:31:06:ba:ca:c5:3f:ae:55:9f:17:a6:34:60:d5:38: 5a:6c:80:a4:7a:6b:40:dc:a2:bd:b3:12:76:29:1d:73:07:67: f8:12:1e:4b:5f:5f:44:35:4c:49:1a:d3:89:8f:c3:2c:6b:e8: 91:1c:55:9b:e5:ae:d2:c2:fb:bf:75:32:23:ea:fb:1d:28:c7: 52:ee:56:86:31:e1:03:d3:2f:5b:c3:2b:2d:53:1b:ce:13:a6: bd:a4:bc:e2:0f:b4:1d:9b:1f:67:1c:c4:01:65:b8:97:df:a5: 4a:ce:fc:bd:2b:38:ae:4c:a7:d0:e7:7a:77:5e:15:6c:a5:fd: 4e:a6:9e:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjQwNTE5MDUzOTUzWhcNMjQwNTI2MDUzOTUzWjAYMRYwFAYD VQQDEw02NjQ5OTBhYS1lNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqIBL9hBwFeByx56Dqe/e/hxMD7FRrgtvGfWGJGwaitV+0PU1T4NIwR8GHMT XulXcCsQPDtIJDBVOnJU4V5pYD2w6/Yfxc4bqmm7numIKumg8OjVs5pH0DgnRLBP /r6QtsI7kZz8qIg/dJQExGTO0Rme9akwUqD/oWx/4nP7omtogljijcbcHYEvWKnB 6a3E23aifIqUcVeSE7XJ5GAJTSDgM/4t1QtdsnDdOHHu/0kZ40gKCoFDKLzUr3yK go0j/p1qKAaVUBXjLsXIg58NUn4FITSFIKH/BnM/eUzjdaXNXkMfvtPq7Ik1zaoO ZzUrf8kQGZizdSd7xNvs/nnN1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf1wtpv /hgSUhG8CyJ7UN3oVmr+MB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABZXJ66DA1Ltz9FcmBcb6hPcvV37bnF2RwQFVoMiJTp8MPROdAR5Dr q8X/N+zLxY4WfU1N24tXjnxqX4i2Am2Fyj2nBpGJIOaib5iTUJgRrbanhL+IXyja 9h3VzOankXe4zUrhWcV7KUKJIlDo7TDB1L5kctrZgkH/Pkk8rzF7ZOUxBrrKxT+u VZ8XpjRg1ThabICkemtA3KK9sxJ2KR1zB2f4Eh5LX19ENUxJGtOJj8Msa+iRHFWb 5a7Swvu/dTIj6vsdKMdS7laGMeED0y9bwystUxvOE6a9pLziD7Qdmx9nHMQBZbiX 36VKzvy9KziuTKfQ53p3XhVspf1Opp6D -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org