$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: 0vq/M5ePBvJaSiPU3qvUM1hdHZzPUA+ke4f9VbMteUc= Subject key identifier: B6:2C:D3:8A:E7:3A:C1:CF:1B:2F:9A:7E:DA:79:2F:B9:24:EE:B1:8E Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 0823 Signing time: Sat 18 May 2024 21:48:30 +0000 Manifest this update: Sat 18 May 2024 21:48:30 +0000 Manifest next update: Sat 25 May 2024 21:48:30 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: RzKVX4IhRyAhzgWMCpyk6WBKRD4ENCyQ5w/2byE/l1s=) 2: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: 6wF0CgZY02NzZdzcs6vnE5ugZS9H1iOH5CjmO2OFDgU=) 3: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: 2hXoFkdj6txe7JTJ/bKaw4+LMSDowumxt9riNKekk1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: May 18 21:48:30 2024 GMT Not After : May 25 21:48:30 2024 GMT Subject: CN=6649222e-212f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1a:04:b7:ac:66:2d:3d:72:0d:08:a7:85:4a: 11:c8:c4:b7:6d:7b:91:3f:41:bb:0b:34:d2:0c:ab: ff:c3:6b:ca:ef:ab:61:77:a8:26:a7:7d:ef:61:be: 2d:37:90:ec:4e:fa:1e:19:63:a8:d0:16:32:15:5e: 65:82:8d:27:52:0f:d5:5a:92:bb:7e:ab:48:ee:6a: 68:99:a6:5a:5e:2c:de:2a:c8:4c:1f:72:c1:7b:ea: 23:6c:f1:4e:bd:99:c5:57:36:32:18:f5:a4:e9:8a: fb:ac:23:a6:29:51:c2:54:34:c3:87:65:41:6b:0d: d4:43:00:71:19:9c:88:b5:01:9d:ca:5c:99:8e:04: 8e:1a:23:74:01:35:11:65:d2:9e:28:34:b5:c1:b1: 55:6d:9c:5f:90:1c:04:e3:cc:6f:a1:31:18:27:6b: 42:63:f9:50:70:33:42:3b:e9:4b:cf:f0:ed:3b:71: 6c:8b:f6:98:e7:90:17:11:f5:93:6d:d2:bd:f1:82: e3:55:ba:95:7a:47:0e:90:10:84:05:71:f0:94:18: 90:0b:1d:ab:a6:b7:df:3b:49:e8:b5:42:54:a8:d8: 72:0c:a0:8a:54:a0:62:6f:e7:7b:d4:da:22:05:89: 7c:87:3a:f3:cf:78:e9:36:a9:d5:99:e7:54:db:55: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2C:D3:8A:E7:3A:C1:CF:1B:2F:9A:7E:DA:79:2F:B9:24:EE:B1:8E X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:52:1e:1f:00:f6:9b:e2:fc:d1:49:e7:79:8d:40:09:13:d8: 29:85:31:8a:cd:dc:12:f6:23:f1:99:7d:7a:2d:f3:e4:66:25: c3:ac:c8:1c:bb:50:af:c0:e4:e2:0f:92:a1:d0:a1:8e:4f:d3: c7:d2:3c:6d:fb:65:6e:74:9f:33:76:42:c9:28:cd:ca:27:38: 86:c4:7c:d3:ff:a4:42:58:56:88:e1:10:d3:bb:15:e2:9c:db: 40:a0:21:02:6f:c3:b0:4a:7a:ac:72:e2:4a:28:43:9d:c8:2c: 84:0c:ef:da:d0:2a:7f:3a:71:86:6f:9d:6a:14:56:27:5f:95: 05:94:b2:2b:0b:18:c3:e9:0c:43:66:82:c7:1a:6e:b2:41:40: 9c:2a:5c:f1:e5:d0:52:99:3a:53:fa:21:2d:42:fa:85:a1:dd: 98:76:95:b5:e9:56:9e:6c:a3:e3:f8:9d:5d:c1:39:30:6f:07: f2:e1:a6:50:04:e4:f0:55:21:cc:78:5a:fb:db:c4:70:a7:49: 02:eb:b4:45:6a:9d:60:0b:3d:9a:29:35:1e:6b:45:66:83:cb: 1d:74:9f:4a:67:af:6c:5c:dd:28:aa:50:35:d9:20:9d:29:25: 91:c3:95:98:00:d7:1f:34:f9:70:b1:5d:76:8c:38:68:fd:d5: 6e:ab:93:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjQwNTE4MjE0ODMwWhcNMjQwNTI1MjE0ODMwWjAYMRYwFAYD VQQDEw02NjQ5MjIyZS0yMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RoEt6xmLT1yDQinhUoRyMS3bXuRP0G7CzTSDKv/w2vK76thd6gmp33vYb4t N5DsTvoeGWOo0BYyFV5lgo0nUg/VWpK7fqtI7mpomaZaXizeKshMH3LBe+ojbPFO vZnFVzYyGPWk6Yr7rCOmKVHCVDTDh2VBaw3UQwBxGZyItQGdylyZjgSOGiN0ATUR ZdKeKDS1wbFVbZxfkBwE48xvoTEYJ2tCY/lQcDNCO+lLz/DtO3Fsi/aY55AXEfWT bdK98YLjVbqVekcOkBCEBXHwlBiQCx2rprffO0notUJUqNhyDKCKVKBib+d71Noi BYl8hzrzz3jpNqnVmedU21VXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYs04rn OsHPGy+aftp5L7kk7rGOMB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnUh4fAPab4vzRSed5jUAJE9gphTGKzdwS9iPxmX16LfPkZiXDrMgc u1CvwOTiD5Kh0KGOT9PH0jxt+2VudJ8zdkLJKM3KJziGxHzT/6RCWFaI4RDTuxXi nNtAoCECb8OwSnqscuJKKEOdyCyEDO/a0Cp/OnGGb51qFFYnX5UFlLIrCxjD6QxD ZoLHGm6yQUCcKlzx5dBSmTpT+iEtQvqFod2YdpW16VaebKPj+J1dwTkwbwfy4aZQ BOTwVSHMeFr728Rwp0kC67RFap1gCz2aKTUea0Vmg8sddJ9KZ69sXN0oqlA12SCd KSWRw5WYANcfNPlwsV12jDho/dVuq5M6 -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org