$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft File: opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json) Hash identifier: r6PlVcyY+AtMQpW3NXukjNrm5WAw3Sm4QyhIc8ptKCo= Subject key identifier: 5E:80:58:01:C6:A4:8F:C7:60:11:9F:B2:D7:49:AC:99:FB:43:29:ED Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD Certificate issuer: /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft Manifest number: 064F Signing time: Sat 18 May 2024 23:38:09 +0000 Manifest this update: Sat 18 May 2024 23:38:09 +0000 Manifest next update: Sat 25 May 2024 23:38:09 +0000 Files and hashes: 1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: CygKwv9tSlIdbj7fmkcvMolNhpNaxzTkQNaB4K4I01k=) 2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wTOucgnQdcWSg4zNn+r7FfCOl0y4GnQzP32e9h9ng3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD Validity Not Before: May 18 23:38:09 2024 GMT Not After : May 25 23:38:09 2024 GMT Subject: CN=66493be1-eefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:0c:a3:6e:8f:97:c1:8c:17:71:45:42:38: b6:69:ad:7b:40:b3:57:d0:f0:ce:08:00:02:43:d2: ff:98:6e:6d:08:f5:fc:59:76:dd:73:bb:7e:72:c8: 7d:47:d6:ef:2e:85:be:52:fb:ba:16:28:c5:96:2e: 26:c6:09:22:cc:a1:4f:95:a5:b4:e8:a5:dc:83:59: 4e:0e:9c:5d:34:e4:58:8d:26:10:32:fb:01:0a:aa: 94:4e:8a:7d:7d:98:90:0c:40:06:1a:46:a1:4c:66: c4:1f:58:be:ae:ad:d5:b3:d7:4b:79:d3:fa:6f:06: f4:b9:c0:b0:de:4e:05:52:e0:f5:46:1a:c6:a8:d2: ed:ec:87:b5:0c:e2:9e:09:76:26:ce:71:5f:99:9e: 81:87:fe:e5:7b:c9:53:b2:bd:f2:e8:5a:41:bf:d0: c8:53:17:64:9f:a8:e8:8a:91:e5:55:ad:15:1c:32: 34:9a:e9:81:49:16:15:7e:91:e4:2e:06:ab:90:76: df:37:a4:d4:d0:35:41:66:3e:49:7f:9c:79:de:fb: 11:c5:79:da:f7:39:3a:01:24:35:b0:0a:8d:9d:02: 0f:2d:84:e8:1f:b8:ae:4b:66:28:05:f8:e0:72:fa: a0:9f:5e:48:dd:9e:ae:be:d3:7a:a2:91:35:ee:80: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:80:58:01:C6:A4:8F:C7:60:11:9F:B2:D7:49:AC:99:FB:43:29:ED X509v3 Authority Key Identifier: keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3c:cd:32:eb:2f:bc:3b:70:0d:85:a6:51:e6:51:dc:27:07: 6e:26:63:32:65:3f:0f:73:54:e2:07:79:35:6f:b8:ff:3d:92: 33:97:c8:c4:1a:b2:4e:e4:3d:c9:db:e9:11:5a:18:07:f4:ba: f6:f5:ab:bf:0c:3d:fa:b1:a2:72:3b:ff:a6:62:79:69:bd:9f: 4c:66:50:07:2c:c6:09:75:53:da:22:e2:02:3e:15:55:e5:ac: 12:70:cf:fd:eb:4c:68:c0:ce:dc:5d:9d:ef:f7:3e:58:17:ef: cd:dd:30:dc:b6:5b:34:8d:9d:77:6a:c4:39:06:74:26:c7:a7: af:ba:63:9b:04:48:b1:b1:43:bc:d7:ce:1a:3d:e2:dc:74:2b: 60:8b:00:3c:e5:27:50:81:46:b9:25:76:92:38:c4:cf:f0:7e: 21:7e:44:39:29:f4:8f:f6:8a:82:88:ff:4b:aa:85:59:04:e9: 85:a6:ba:2c:53:80:d1:6d:49:e5:b5:09:9e:fc:ae:e9:4c:d1: a8:71:d8:58:61:d7:f3:a2:14:28:d2:47:50:97:b2:31:c2:3f: 7b:98:5f:6a:7c:70:db:aa:ab:5c:bc:62:04:13:72:8d:bf:a9: 3d:3a:c8:28:da:6c:aa:b4:c1:62:7e:10:31:4e:3b:2a:97:97: 0b:d0:fe:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFDODIxMTAvBgNVBAUTKEEyOTdBMkIwOTMzODJFNDUwODZDQTA3Q0VFNkM5N0Iz NkJFNEMyQ0QwHhcNMjQwNTE4MjMzODA5WhcNMjQwNTI1MjMzODA5WjAYMRYwFAYD VQQDEw02NjQ5M2JlMS1lZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDEMo26Pl8GMF3FFQji2aa17QLNX0PDOCAACQ9L/mG5tCPX8WXbdc7t+csh9 R9bvLoW+Uvu6FijFli4mxgkizKFPlaW06KXcg1lODpxdNORYjSYQMvsBCqqUTop9 fZiQDEAGGkahTGbEH1i+rq3Vs9dLedP6bwb0ucCw3k4FUuD1RhrGqNLt7Ie1DOKe CXYmznFfmZ6Bh/7le8lTsr3y6FpBv9DIUxdkn6joipHlVa0VHDI0mumBSRYVfpHk LgarkHbfN6TU0DVBZj5Jf5x53vsRxXna9zk6ASQ1sAqNnQIPLYToH7iuS2YoBfjg cvqgn15I3Z6uvtN6opE17oCXZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6AWAHG pI/HYBGfstdJrJn7QyntMB8GA1UdIwQYMBaAFKKXorCTOC5FCGygfO5sl7Nr5MLN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUM4Mi8xOEREQkZEMjNE RTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExrVUliS0I4N215WHMydmt3 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZWlzSk00TGtVSWJLQjg3bXlYczJ2a3dzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUM4Mi8xOEREQkZEMjNERTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExr VUliS0I4N215WHMydmt3czAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUPM0y6y+8O3ANhaZR5lHcJwduJmMyZT8Pc1TiB3k1b7j/PZIzl8jE GrJO5D3J2+kRWhgH9Lr29au/DD36saJyO/+mYnlpvZ9MZlAHLMYJdVPaIuICPhVV 5awScM/960xowM7cXZ3v9z5YF+/N3TDctls0jZ13asQ5BnQmx6evumObBEixsUO8 184aPeLcdCtgiwA85SdQgUa5JXaSOMTP8H4hfkQ5KfSP9oqCiP9LqoVZBOmFpros U4DRbUnltQme/K7pTNGocdhYYdfzohQo0kdQl7Ixwj97mF9qfHDbqqtcvGIEE3KN v6k9Osgo2myqtMFifhAxTjsql5cL0P5m -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org