$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: j6FOyh0VnYN6ZH/EVEAlPljLBrsfI/qJbMSTly2rS+o= Subject key identifier: 82:57:0D:C6:65:C4:87:35:6D:7D:DD:B5:F4:49:E5:00:B7:6E:4A:A7 Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 028A Signing time: Sun 19 May 2024 03:38:45 +0000 Manifest this update: Sun 19 May 2024 03:38:45 +0000 Manifest next update: Sun 26 May 2024 03:38:45 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: drTQiEylIE3jAKiOVOYqAJ26YYFaLVgka8UH6dpyRPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: May 19 03:38:45 2024 GMT Not After : May 26 03:38:45 2024 GMT Subject: CN=66497445-1f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:73:22:3d:eb:58:65:04:2f:7d:8a:4f:5b: 19:b4:ba:1a:c4:34:cf:1f:8e:86:26:c4:82:be:65: e4:51:3e:8e:0b:65:b7:61:0c:d9:42:d8:d5:b4:04: ba:0d:86:f8:21:ed:67:4b:80:18:09:bc:8d:00:7a: d7:4a:76:55:13:7b:24:95:43:08:d0:b5:c8:d1:84: a3:1e:26:40:e1:d0:d8:ee:c2:44:e3:0a:e2:11:9d: d7:0c:10:ca:b1:c6:89:17:b7:2a:77:44:66:77:5b: 03:3b:b3:6c:44:6f:0d:ba:33:98:b4:a1:3d:ad:d6: 2d:e3:7c:d1:ec:0e:a7:49:ce:fa:ad:f3:e2:02:a5: 23:51:d2:9d:6e:eb:a0:07:f3:7c:d6:62:99:05:85: 0e:cc:ef:0b:61:c7:f2:c4:2d:f8:09:95:ca:39:5e: de:ba:88:74:d2:62:85:14:d9:3b:b2:90:0c:60:86: 7e:e5:5d:92:0d:4b:a2:af:f9:6b:8e:98:74:c0:6d: fa:de:6d:f7:64:f1:f2:3e:fd:12:30:81:e0:a1:ab: 1e:8c:3e:b0:50:0d:8e:f8:16:bc:f3:6f:7e:36:bf: bf:9c:dc:00:47:32:f9:75:b8:ec:07:07:12:13:64: c7:66:48:ab:60:ef:01:e5:8b:af:e1:41:24:ab:5f: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:57:0D:C6:65:C4:87:35:6D:7D:DD:B5:F4:49:E5:00:B7:6E:4A:A7 X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a7:3c:74:66:f7:34:6a:ce:ef:89:f5:cb:28:4a:8e:8f:60: 7c:98:2f:35:09:df:ab:68:48:b3:c1:92:98:e9:37:25:11:dc: b3:80:29:46:d6:cb:1c:7c:74:09:73:4e:16:93:c0:a8:a6:63: 0f:ff:d2:33:b7:b7:55:33:be:57:ec:94:5d:57:64:57:9c:54: 58:bc:a3:02:d7:2a:fd:3e:10:09:46:5d:77:2c:3c:8c:cb:ca: b0:5b:8b:3c:2a:6b:4d:2a:9b:88:b3:1c:14:5c:2a:ca:5d:ea: 4a:9c:fe:9a:18:e3:89:19:52:32:5e:c4:3c:2e:b9:f5:13:48: 39:6c:62:5f:62:16:da:6b:5f:89:d9:1a:05:4a:92:45:a0:b3: b9:43:74:15:2e:df:53:20:71:c3:a3:d5:96:0f:c9:97:4c:04: a1:9a:a6:9e:2d:b0:8c:7d:14:9c:49:a9:b5:6e:65:bb:51:b9: d5:ea:a9:3d:29:e0:e8:18:6b:a1:b3:ac:ef:89:0c:f5:e4:e7: 28:02:73:e4:c2:e8:de:66:d8:0d:42:6d:82:be:ea:a9:18:9c: ef:2c:a7:9a:b1:87:9b:9b:c0:40:a1:ff:09:e0:45:6a:d4:92: 71:87:92:94:9d:e5:7c:fd:81:44:43:6e:f5:6f:10:c7:26:d5: e5:eb:49:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjQwNTE5MDMzODQ1WhcNMjQwNTI2MDMzODQ1WjAYMRYwFAYD VQQDEw02NjQ5NzQ0NS0xZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNNzIj3rWGUEL32KT1sZtLoaxDTPH46GJsSCvmXkUT6OC2W3YQzZQtjVtAS6 DYb4Ie1nS4AYCbyNAHrXSnZVE3sklUMI0LXI0YSjHiZA4dDY7sJE4wriEZ3XDBDK scaJF7cqd0Rmd1sDO7NsRG8NujOYtKE9rdYt43zR7A6nSc76rfPiAqUjUdKdbuug B/N81mKZBYUOzO8LYcfyxC34CZXKOV7euoh00mKFFNk7spAMYIZ+5V2SDUuir/lr jph0wG363m33ZPHyPv0SMIHgoasejD6wUA2O+Ba8829+Nr+/nNwARzL5dbjsBwcS E2THZkirYO8B5Yuv4UEkq1/4FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJXDcZl xIc1bX3dtfRJ5QC3bkqnMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZpzx0Zvc0as7vifXLKEqOj2B8mC81Cd+raEizwZKY6TclEdyzgClG 1sscfHQJc04Wk8CopmMP/9Izt7dVM75X7JRdV2RXnFRYvKMC1yr9PhAJRl13LDyM y8qwW4s8KmtNKpuIsxwUXCrKXepKnP6aGOOJGVIyXsQ8Lrn1E0g5bGJfYhbaa1+J 2RoFSpJFoLO5Q3QVLt9TIHHDo9WWD8mXTAShmqaeLbCMfRScSam1bmW7UbnV6qk9 KeDoGGuhs6zviQz15OcoAnPkwujeZtgNQm2CvuqpGJzvLKeasYebm8BAof8J4EVq 1JJxh5KUneV8/YFEQ271bxDHJtXl60nD -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org