$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json) Hash identifier: tlbG7G2UWCkn/dhE9ewhDGt0qtJIqvzw+xKSbD7yn2I= Subject key identifier: 46:90:AF:8E:34:E1:41:16:D5:7C:CA:A4:FD:03:96:45:D2:FD:09:D3 Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1 Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft Manifest number: 01E6 Signing time: Sun 19 May 2024 04:17:50 +0000 Manifest this update: Sun 19 May 2024 04:17:50 +0000 Manifest next update: Sun 26 May 2024 04:17:50 +0000 Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: tIpW3cSS2Dcg2TcRnKFuM3bhI5j0Z9rBSWsMuVZRMzg=) 2: C78C216A070211EDB5178252C4F9AE02.roa (hash: ouOhBb1MnIrW4G1R/KO4qLzK3igr6CnJ0Jb3MNV419U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1 Validity Not Before: May 19 04:17:50 2024 GMT Not After : May 26 04:17:50 2024 GMT Subject: CN=66497d6e-cdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:1d:bb:92:dd:a1:26:0b:57:d1:77:01:a7: 10:82:48:c0:98:95:73:a5:e6:f2:80:7e:dc:8f:89: 8c:5e:26:a6:43:2c:f5:5f:ea:6f:e9:0d:eb:29:3c: e6:c2:98:6e:2e:cf:91:33:92:f2:2e:96:93:b1:ab: 70:b8:59:0d:ba:67:28:be:94:0d:63:47:a8:17:30: 97:d4:63:19:16:38:33:a0:a5:77:15:db:7f:e7:0a: 91:07:58:8e:b8:82:69:81:5a:2a:ae:73:ee:47:d6: fd:72:37:bc:85:49:c7:f0:c8:3d:14:6d:e9:5e:e7: b7:4a:32:c2:40:85:a3:0c:13:7a:de:e3:7e:60:ed: d0:c7:e1:66:64:36:39:1d:c6:67:70:79:5c:5f:70: 4c:b3:bf:1c:7f:c1:2c:81:57:dc:73:d6:4d:ce:e4: b6:da:4c:d6:e0:1c:b1:bd:19:d1:15:f4:79:71:53: 42:d9:4e:a9:f1:31:9f:69:c1:04:0b:b4:56:f3:1f: 67:5b:9b:5e:13:b5:5a:bc:56:fd:6a:7d:3c:83:07: 83:83:28:64:2a:56:0d:9d:d6:3e:88:7c:d1:a1:db: 28:30:34:39:49:fb:3b:1b:3d:a6:ad:ff:ae:49:dd: b9:50:ef:aa:08:5b:c9:4f:b3:fd:3c:3c:be:96:86: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:90:AF:8E:34:E1:41:16:D5:7C:CA:A4:FD:03:96:45:D2:FD:09:D3 X509v3 Authority Key Identifier: keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ba:a9:93:cf:9d:02:4f:95:89:ee:21:fe:b4:1a:36:d5:e3: 9d:8b:06:60:c9:46:ec:e6:c9:d6:7e:ab:50:45:1c:0b:5e:d9: d7:8b:1a:01:40:78:df:bc:fa:54:b7:17:11:19:7e:56:43:99: 55:84:5a:60:ce:cf:40:24:a5:5d:78:8d:ef:08:48:c4:69:d0: 82:03:d4:1d:a9:fe:77:03:3c:57:94:70:1f:87:4a:fc:25:27: 09:33:03:d3:81:02:72:cd:63:95:cc:c0:e5:31:0f:85:e3:03: 86:6b:b2:c7:a4:e5:96:ee:fd:a2:cc:07:49:85:e1:ee:7b:7d: 66:a6:0d:02:ba:27:60:06:7d:b0:04:27:bb:86:15:02:2d:50: 5c:bf:91:d6:e2:4e:92:8d:f2:f2:b7:ac:f5:24:27:89:66:fe: c2:b0:93:c4:75:bd:2e:d7:ef:64:64:81:1d:38:64:cb:9d:bb: 4e:71:92:60:f5:9b:54:80:b5:5d:2b:4b:7d:c2:94:81:25:0a: 01:3c:8b:00:96:a7:ff:95:50:9e:81:12:32:9f:17:ec:fc:fe: 93:42:8e:57:60:74:e4:2c:ef:a4:20:c1:e4:ef:c7:e0:56:3e: 60:3f:1e:1c:dc:1f:05:b1:39:fe:68:51:30:e5:7a:89:f6:35: 8e:31:ac:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4NzMxMTAvBgNVBAUTKDNCNDdBQTBEMDMyMDkxOTVGMDU1NUM2MEFERTMyOTRG MkQzN0EyQTEwHhcNMjQwNTE5MDQxNzUwWhcNMjQwNTI2MDQxNzUwWjAYMRYwFAYD VQQDEw02NjQ5N2Q2ZS1jZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlcdu5LdoSYLV9F3AacQgkjAmJVzpebygH7cj4mMXiamQyz1X+pv6Q3rKTzm wphuLs+RM5LyLpaTsatwuFkNumcovpQNY0eoFzCX1GMZFjgzoKV3Fdt/5wqRB1iO uIJpgVoqrnPuR9b9cje8hUnH8Mg9FG3pXue3SjLCQIWjDBN63uN+YO3Qx+FmZDY5 HcZncHlcX3BMs78cf8EsgVfcc9ZNzuS22kzW4ByxvRnRFfR5cVNC2U6p8TGfacEE C7RW8x9nW5teE7VavFb9an08gweDgyhkKlYNndY+iHzRodsoMDQ5Sfs7Gz2mrf+u Sd25UO+qCFvJT7P9PDy+loZDrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaQr440 4UEW1XzKpP0DlkXS/QnTMB8GA1UdIwQYMBaAFDtHqg0DIJGV8FVcYK3jKU8tN6Kh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg3My8xMTJFQzE5NkZE QjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2taWHdWVnhncmVNcFR5MDNv cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08wZXFEUU1na1pYd1ZWeGdyZU1wVHkwM29xRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzg3My8xMTJFQzE5NkZEQjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2ta WHdWVnhncmVNcFR5MDNvcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiuqmTz50CT5WJ7iH+tBo21eOdiwZgyUbs5snWfqtQRRwLXtnXixoB QHjfvPpUtxcRGX5WQ5lVhFpgzs9AJKVdeI3vCEjEadCCA9Qdqf53AzxXlHAfh0r8 JScJMwPTgQJyzWOVzMDlMQ+F4wOGa7LHpOWW7v2izAdJheHue31mpg0CuidgBn2w BCe7hhUCLVBcv5HW4k6SjfLyt6z1JCeJZv7CsJPEdb0u1+9kZIEdOGTLnbtOcZJg 9ZtUgLVdK0t9wpSBJQoBPIsAlqf/lVCegRIynxfs/P6TQo5XYHTkLO+kIMHk78fg Vj5gPx4c3B8FsTn+aFEw5XqJ9jWOMaxq -----END CERTIFICATE-----Generated at Sun May 19 04:56:56 2024 by rpki-client on console-fra.rpki-client.org