$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json) Hash identifier: q2Yjuh0PRlz7MU3W3RfsB4HoUeNyPDZud421cJfjQb8= Subject key identifier: 3F:8A:5A:E0:88:54:D8:69:A8:DC:A0:DA:B0:D5:9B:1B:ED:6F:FC:DA Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft Manifest number: A0 Signing time: Sun 19 May 2024 06:57:52 +0000 Manifest this update: Sun 19 May 2024 06:57:51 +0000 Manifest next update: Sun 26 May 2024 06:57:51 +0000 Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: 3LEJGEK1oMwHKPSG02nwCB3/ss83e0xEZiM67n6+XtY=) 2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: q89V2avvhB7Iwplh7NyUyrL6aq+UrYnzPqsGrW4jEQY=) 3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: YLljpcgVza4aEkRlWwBtUcVJcPwkkfQvpW29KioX8zc=) 4: 9CF488DE366311EEB376DC3AC4F9AE02.roa (hash: uTBMkO8X0+hgj07rreOkXeexnxszo8LTNsZGrQnzIOU=) 5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: ybrHY7tqvISNr1jWGzlVCMiSS4kkQr8URzMMIWkYhoc=) 6: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: TWpk8DoUqQF/8iOz+PKjMIg0Nh067E7GVCT+hwUz+LY=) 7: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: G5SoPEVEMsa2P0+CI+OK9qKg3YXnhG5CNGyejs2VzS0=) 8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: Gn0R+ynFNN1GakSbPgaa4CNevCbLowDZ1oQGYxlW1ts=) 9: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: eJ1OGfu/Sa8nXax9ZTvjUTGAsfGfJhddwxE8jMBxRT4=) 10: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: VuPq2QJnuU6OxGLXNW4hYWhelxq74I3XFCLL6IKvwZY=) 11: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: BYplY/wntciUA2J0T8T8FVcwE4PqqVE8ReSEUDiKaLI=) 12: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: Dg9mh7HwyYsAwEClWWq+T6qHrBlJ7sm7KMM7PypqYVo=) 13: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: hIcEiGJ2a4OVzLsXtVkwEhPxu5xaUEycLTVFqEClbUI=) 14: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: 2cxC9Yp78DtP2pwmC8blaN4EJOD1Ex9DOQ/MmaJtlHU=) 15: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: IGq0IE6/t/ToMAAUgfvTKUVFFnrfc7ekD/34Dq5JLeM=) 16: 9F624142366311EEB376DC3AC4F9AE02.roa (hash: Q9Tb2O5ygm+wQndmZ7m1YCSjYxvgNqrLPM/NUOTh0b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: May 19 06:57:51 2024 GMT Not After : May 26 06:57:51 2024 GMT Subject: CN=6649a2f0-20e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:55:d7:7c:16:9a:99:01:09:f4:8a:3a:96:a3: cf:e2:17:8e:59:d7:28:4f:ac:f3:80:4b:bf:b9:58: c9:f5:d8:79:e6:ec:17:e6:62:df:0e:92:a5:c8:41: fc:57:d1:23:3d:7c:1a:fe:d4:ef:f8:b1:5c:46:00: 08:53:b4:49:34:2c:31:a0:af:a1:43:fa:42:1f:1e: 9e:34:f4:aa:f2:ea:15:98:45:2c:f5:24:64:b6:bd: ae:10:99:7b:0b:23:c3:74:62:da:1b:bb:55:be:58: 9c:97:74:e7:47:e3:07:55:d4:a6:52:b9:fa:f4:16: cd:2b:7d:7f:d0:ad:fc:13:f6:b8:50:81:04:71:f2: ab:b9:62:ae:92:f1:ed:c6:3f:29:cc:db:3a:95:87: a0:9c:aa:7c:b4:7c:f3:12:d5:49:cb:be:68:e1:d9: 79:94:29:44:e8:cc:0a:f5:9e:5d:ca:e1:a0:72:c0: ec:ff:80:05:98:c2:7c:69:e4:40:71:df:0f:4f:b2: 0b:a2:27:4d:f0:ec:df:30:d6:79:89:aa:56:bf:81: fe:cc:61:48:03:b7:bb:aa:a5:93:11:13:01:c6:98: 8b:9e:5b:38:95:9a:4d:1f:bc:e5:dc:fe:48:6b:d3: 82:1a:77:80:5a:73:83:75:4e:37:5d:b6:04:a5:b3: a9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8A:5A:E0:88:54:D8:69:A8:DC:A0:DA:B0:D5:9B:1B:ED:6F:FC:DA X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:04:cd:4d:53:ca:8b:56:98:ab:e0:db:5d:22:1c:c0:58:1e: 9c:40:98:24:36:d0:26:d4:c6:67:39:d8:51:ef:8b:0b:e7:4d: 07:c3:94:82:71:30:b6:95:a3:b5:e6:21:41:f3:e6:63:44:ea: a5:70:4b:9d:ac:f6:06:f6:07:c0:37:f5:d1:63:fe:82:a1:22: a1:56:52:8e:9a:f6:81:10:e8:74:36:a2:73:9a:36:82:c0:78: 3c:fd:bc:c8:b0:ca:da:63:24:62:e3:02:16:a4:79:ff:46:c0: 5e:60:12:f1:2a:72:31:8e:30:2a:fe:87:68:0b:05:38:be:a3: 49:96:fa:93:71:57:cd:df:b6:05:48:87:21:35:7a:47:c7:28: b8:af:79:00:13:22:d8:47:18:80:54:ca:c1:c8:f6:a1:63:52: 98:ef:19:5f:60:d2:8d:64:a0:4e:43:3f:f3:29:46:c8:09:dd: df:89:94:8e:fc:3e:69:e0:30:9b:77:75:91:6d:a5:be:89:bf: 8a:ec:c8:1a:e9:87:78:54:1e:b6:cb:6d:e9:4b:0d:4d:17:45: 35:97:be:5b:6a:4d:6d:62:bd:43:50:6e:fb:a2:cb:7a:dd:63: df:7a:57:42:e6:dc:e6:e4:3b:c3:52:f3:e2:45:d5:fc:5b:42: 3b:29:bf:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjQwNTE5MDY1NzUxWhcNMjQwNTI2MDY1NzUxWjAYMRYwFAYD VQQDEw02NjQ5YTJmMC0yMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8lXXfBaamQEJ9Io6lqPP4heOWdcoT6zzgEu/uVjJ9dh55uwX5mLfDpKlyEH8 V9EjPXwa/tTv+LFcRgAIU7RJNCwxoK+hQ/pCHx6eNPSq8uoVmEUs9SRktr2uEJl7 CyPDdGLaG7tVvlicl3TnR+MHVdSmUrn69BbNK31/0K38E/a4UIEEcfKruWKukvHt xj8pzNs6lYegnKp8tHzzEtVJy75o4dl5lClE6MwK9Z5dyuGgcsDs/4AFmMJ8aeRA cd8PT7ILoidN8OzfMNZ5iapWv4H+zGFIA7e7qqWTERMBxpiLnls4lZpNH7zl3P5I a9OCGneAWnODdU43XbYEpbOpzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+KWuCI VNhpqNyg2rDVmxvtb/zaMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEBM1NU8qLVpir4NtdIhzAWB6cQJgkNtAm1MZnOdhR74sL500Hw5SC cTC2laO15iFB8+ZjROqlcEudrPYG9gfAN/XRY/6CoSKhVlKOmvaBEOh0NqJzmjaC wHg8/bzIsMraYyRi4wIWpHn/RsBeYBLxKnIxjjAq/odoCwU4vqNJlvqTcVfN37YF SIchNXpHxyi4r3kAEyLYRxiAVMrByPahY1KY7xlfYNKNZKBOQz/zKUbICd3fiZSO /D5p4DCbd3WRbaW+ib+K7Mga6Yd4VB62y23pSw1NF0U1l75bak1tYr1DUG77ost6 3WPfeldC5tzm5DvDUvPiRdX8W0I7Kb8m -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org