$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json) Hash identifier: 114fmlQkdMHkPaVE/Mwv/gLgSHsIt/8YSG5jY6xEr8k= Subject key identifier: 6A:35:33:68:8A:10:20:8B:90:ED:61:2E:88:7A:1D:D6:5C:A8:FE:1D Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 051F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft Manifest number: 0519 Signing time: Sun 19 May 2024 01:03:26 +0000 Manifest this update: Sun 19 May 2024 01:03:26 +0000 Manifest next update: Sun 26 May 2024 01:03:26 +0000 Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: rFKD7CMvjH8ljsOsFRVZa19COuoUPvmqZbMTyndgW+I=) 2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: fk9bO30yZhfQjn+0VF9i0JM9DergUcdFFDpFTyp3X+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: May 19 01:03:26 2024 GMT Not After : May 26 01:03:26 2024 GMT Subject: CN=66494fde-0619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:ff:1b:8b:4c:1a:65:98:f3:34:0e:65:30: c1:e9:66:72:ca:39:fd:15:8e:77:3b:f1:55:8f:eb: 28:33:9f:f2:2b:ca:5c:b4:7b:e7:c4:10:08:27:bd: d2:b1:75:07:ed:9f:6e:b1:dc:e5:79:56:0e:68:8a: d7:76:f0:7c:42:24:a9:3c:ae:6d:a0:3c:b8:e2:6f: e6:a0:dc:0b:3f:59:5c:ec:fa:41:2e:17:9a:41:b8: 6f:bc:39:60:d5:63:95:45:e3:db:86:10:a2:21:dd: c4:9c:62:af:a9:fb:b6:eb:7a:da:3c:e5:aa:30:10: 53:f6:3a:0d:81:60:cc:0a:50:09:22:dd:0a:da:f3: a8:5b:d8:71:b4:3f:5c:87:97:b0:a1:a4:01:e7:82: 59:3b:bc:93:10:f9:9f:9b:49:6c:58:db:0e:b7:ef: 46:f5:2c:7f:fd:69:d7:d2:cd:c1:77:71:0c:42:62: 61:2f:9a:b8:f0:8e:3e:f8:1d:0c:53:2a:98:e1:cc: 58:95:43:3e:95:93:3f:da:06:ea:12:dd:e7:c0:79: 51:c3:4c:3a:55:d9:fd:15:28:1a:31:66:23:8a:96: 05:6f:c6:0a:92:e1:82:09:80:30:73:49:42:80:37: c9:08:8e:ed:62:38:be:4a:f1:50:3b:3b:1f:60:fc: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:33:68:8A:10:20:8B:90:ED:61:2E:88:7A:1D:D6:5C:A8:FE:1D X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:18:00:c9:59:53:c6:16:54:0a:e1:a9:cf:dd:20:15:e3:96: 93:a1:4d:17:f1:dd:3a:1e:87:6a:79:a5:81:b3:05:1c:5f:6d: c7:40:2c:ca:bf:38:11:f7:f8:56:df:ac:53:fb:d1:5b:b2:2f: 15:2e:3f:61:84:a3:9c:17:12:a5:b7:75:3d:6d:b2:c8:e0:bd: 18:70:74:b4:e0:5a:e7:56:d4:e7:ff:89:47:29:f2:10:a3:f8: f6:cc:17:4c:e5:71:df:cf:be:fe:80:4b:0c:5e:bf:35:26:d0: 9a:a0:f0:bb:f8:24:19:5e:2a:92:c9:97:48:81:bb:1f:3a:10: 33:4e:6a:e6:da:65:39:ea:b3:b9:22:43:aa:63:c5:61:a6:58: b7:40:c3:57:f5:41:39:39:1e:46:9b:6b:f9:3f:18:88:72:c5: 19:8f:63:f1:26:c3:7a:4f:51:48:f2:1f:ea:b9:8e:e0:4e:38: e5:6b:41:07:58:c1:a8:9f:28:ff:e1:d0:0f:79:ab:7f:86:39: 9d:19:9f:03:f2:55:d2:58:31:47:76:72:ed:c4:ff:34:5b:0e: 14:25:1d:d3:63:8a:ee:f4:4d:91:c7:d2:8b:41:69:db:cc:0c: 99:f0:29:40:08:be:af:95:de:23:85:36:27:af:1c:48:08:c8: c5:81:88:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjQwNTE5MDEwMzI2WhcNMjQwNTI2MDEwMzI2WjAYMRYwFAYD VQQDEw02NjQ5NGZkZS0wNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnK//G4tMGmWY8zQOZTDB6WZyyjn9FY53O/FVj+soM5/yK8pctHvnxBAIJ73S sXUH7Z9usdzleVYOaIrXdvB8QiSpPK5toDy44m/moNwLP1lc7PpBLheaQbhvvDlg 1WOVRePbhhCiId3EnGKvqfu263raPOWqMBBT9joNgWDMClAJIt0K2vOoW9hxtD9c h5ewoaQB54JZO7yTEPmfm0lsWNsOt+9G9Sx//WnX0s3Bd3EMQmJhL5q48I4++B0M UyqY4cxYlUM+lZM/2gbqEt3nwHlRw0w6Vdn9FSgaMWYjipYFb8YKkuGCCYAwc0lC gDfJCI7tYji+SvFQOzsfYPym9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo1M2iK ECCLkO1hLoh6HdZcqP4dMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBGADJWVPGFlQK4anP3SAV45aToU0X8d06HodqeaWBswUcX23HQCzK vzgR9/hW36xT+9Fbsi8VLj9hhKOcFxKlt3U9bbLI4L0YcHS04FrnVtTn/4lHKfIQ o/j2zBdM5XHfz77+gEsMXr81JtCaoPC7+CQZXiqSyZdIgbsfOhAzTmrm2mU56rO5 IkOqY8Vhpli3QMNX9UE5OR5Gm2v5PxiIcsUZj2PxJsN6T1FI8h/quY7gTjjla0EH WMGonyj/4dAPeat/hjmdGZ8D8lXSWDFHdnLtxP80Ww4UJR3TY4ru9E2Rx9KLQWnb zAyZ8ClACL6vld4jhTYnrxxICMjFgYhb -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org