$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: JBPiHQ5W2Z88wZlPyEOP0Odi+OOhG4qXVJxJxWKrSag= Subject key identifier: 1B:30:FF:A5:DE:AF:D7:A4:6F:AD:9A:B7:3C:68:49:64:E8:E5:46:98 Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 0438 Signing time: Sun 19 May 2024 01:57:43 +0000 Manifest this update: Sun 19 May 2024 01:57:42 +0000 Manifest next update: Sun 26 May 2024 01:57:42 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: lRgMPDdJrkjhilNLnRX2VGk/cADzY0dPxqdrXVlSRw8=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: NU/mXEsjZYt3HmmEctuU2Qy7YvlDOuPJychpCWTftuo=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: /k6GqrpfG8w24x/8ErEPh5jzjmeIWz0YdooOOMjfoHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: May 19 01:57:42 2024 GMT Not After : May 26 01:57:42 2024 GMT Subject: CN=66495c96-1dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1f:f0:f3:78:7c:66:95:50:28:14:f5:23:09: fa:17:6b:58:0f:37:c0:56:52:a0:46:e9:97:66:b8: 55:f8:43:85:5d:4b:64:98:ae:dd:f0:45:2a:38:fe: 9e:f3:26:bb:5d:b3:1d:6f:85:3f:09:49:9c:f6:8d: e6:95:15:60:a3:50:59:d6:fc:39:f6:99:cd:f6:39: c1:8b:84:ce:a6:62:d2:76:d2:b4:1d:9b:47:44:0d: d6:b3:19:43:ef:ba:1b:5e:88:ad:1a:ed:68:ea:ef: ab:3c:07:ed:df:9f:66:95:a4:e7:08:df:dc:34:c0: d9:95:a7:aa:ef:a6:6a:f3:6f:86:c6:ec:e9:09:02: 2e:6e:4d:18:87:6b:ab:a6:12:e0:8b:6a:36:04:30: 85:7b:5d:2b:92:09:f4:9e:1f:66:3f:1a:b3:43:37: b2:29:9f:ee:86:f8:88:c9:ae:9e:cc:c2:1f:4d:3f: 5a:39:07:ce:7a:60:a6:48:77:ef:c7:d0:42:8f:c8: 2e:8d:4b:50:be:fc:cd:0b:e0:ad:a7:b5:11:cf:63: 66:e9:68:10:af:45:2e:e9:56:19:cb:af:45:47:e3: 99:5c:66:39:a4:c1:a5:2a:5c:61:97:b9:80:33:83: 4f:a0:9c:ee:e8:89:bf:85:43:54:8f:a6:82:c5:bf: af:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:30:FF:A5:DE:AF:D7:A4:6F:AD:9A:B7:3C:68:49:64:E8:E5:46:98 X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:77:1d:2e:d4:45:38:f0:59:03:f9:ef:65:43:8f:cf:65:93: 3d:95:2d:6a:0e:c2:c6:19:bc:3d:80:33:c0:ca:61:9c:7b:ae: 69:96:71:44:a0:64:67:ee:9f:5d:0e:6f:a3:3b:bc:4e:8e:2a: 8d:80:b0:8f:93:d4:0a:b6:f6:7d:ac:33:e1:c3:94:6a:04:5a: 7b:68:dc:25:4e:75:c9:eb:26:94:0f:ce:ed:62:02:b0:49:37: 95:9c:e7:79:10:a6:ff:cd:73:2e:14:1f:68:85:97:36:71:1a: 79:c1:14:f2:50:3f:de:db:04:24:de:70:41:65:92:17:05:2a: 6f:e0:df:85:aa:49:99:b8:91:23:49:0e:34:7d:d3:a3:33:dd: 9b:97:fa:93:0c:87:a4:70:a6:8b:09:99:32:5b:ec:57:cb:1e: 05:06:72:b2:00:18:6f:3e:ea:04:78:a9:1c:7b:44:f8:9d:79: 08:ea:73:cc:72:5b:81:a8:50:a1:db:1b:4c:d7:2d:8e:a0:dc: 40:8a:77:c9:85:0d:c7:97:32:7f:d3:09:36:bf:5c:66:a2:cf: 4c:cb:d1:f0:68:62:5b:f1:b9:2a:f3:ec:31:ce:57:67:ef:ae: 85:8b:6a:eb:1b:8d:b0:67:0f:47:55:a6:95:8d:f4:29:38:44: 28:cf:a7:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjQwNTE5MDE1NzQyWhcNMjQwNTI2MDE1NzQyWjAYMRYwFAYD VQQDEw02NjQ5NWM5Ni0xZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4B/w83h8ZpVQKBT1Iwn6F2tYDzfAVlKgRumXZrhV+EOFXUtkmK7d8EUqOP6e 8ya7XbMdb4U/CUmc9o3mlRVgo1BZ1vw59pnN9jnBi4TOpmLSdtK0HZtHRA3WsxlD 77obXoitGu1o6u+rPAft359mlaTnCN/cNMDZlaeq76Zq82+GxuzpCQIubk0Yh2ur phLgi2o2BDCFe10rkgn0nh9mPxqzQzeyKZ/uhviIya6ezMIfTT9aOQfOemCmSHfv x9BCj8gujUtQvvzNC+Ctp7URz2Nm6WgQr0Uu6VYZy69FR+OZXGY5pMGlKlxhl7mA M4NPoJzu6Im/hUNUj6aCxb+v8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsw/6Xe r9ekb62atzxoSWTo5UaYMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJdx0u1EU48FkD+e9lQ4/PZZM9lS1qDsLGGbw9gDPAymGce65plnFE oGRn7p9dDm+jO7xOjiqNgLCPk9QKtvZ9rDPhw5RqBFp7aNwlTnXJ6yaUD87tYgKw STeVnOd5EKb/zXMuFB9ohZc2cRp5wRTyUD/e2wQk3nBBZZIXBSpv4N+FqkmZuJEj SQ40fdOjM92bl/qTDIekcKaLCZkyW+xXyx4FBnKyABhvPuoEeKkce0T4nXkI6nPM cluBqFCh2xtM1y2OoNxAinfJhQ3HlzJ/0wk2v1xmos9My9HwaGJb8bkq8+wxzldn 766Fi2rrG42wZw9HVaaVjfQpOEQoz6d+ -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org