$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: X2cYb68ug/NCx2uhFBOM2cKYLSkRgrQ+ilusfSGcQGM= Subject key identifier: 33:1D:A5:CC:53:FE:B1:FB:7E:C2:67:BF:BC:8D:9C:01:C8:E1:E4:88 Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: F0 Signing time: Fri 17 May 2024 05:56:02 +0000 Manifest this update: Fri 17 May 2024 05:56:01 +0000 Manifest next update: Fri 24 May 2024 05:56:01 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: h4xbxmJdd3S3J0FwY//AcHVdMulA4msIQ0hj/rHmrJo=) 2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: Zu/GkgTDY0t5SCI7wWqSzTovtjd1f4VGPuuLiqKupZw=) 3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: 11PyH5TvXQ0r5ME5Ee83Ppo1yXxDKq4IEnegpCrapA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: May 17 05:56:01 2024 GMT Not After : May 24 05:56:01 2024 GMT Subject: CN=6646f171-fd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:d7:4a:8d:ab:32:27:58:81:ab:b9:6b:ea: 00:41:ff:39:ef:2f:59:3c:f9:a1:3d:33:3b:8b:23: 36:a1:71:8f:ca:a7:dd:4c:d3:50:c0:af:f0:ba:73: 84:ee:65:30:6a:e6:aa:41:3f:18:6f:88:47:ba:9d: 8a:62:c9:ef:b5:44:07:a0:7f:6c:62:5f:03:47:af: fe:5e:58:72:cc:3c:0b:ee:46:e6:23:28:f6:f5:0c: 2e:8f:87:ea:e9:47:73:35:e7:be:46:42:2f:2e:b9: 6b:17:9d:a1:5e:db:aa:59:bf:26:0b:c6:a0:ba:5a: 2d:a4:dd:24:f0:34:22:90:39:c0:6e:32:4b:94:6c: a5:d4:8e:be:7f:89:c0:4e:bb:d3:6d:0e:a0:06:8d: 51:21:64:9a:56:cf:9f:cc:29:71:ce:70:24:26:cc: bb:65:33:d0:3b:49:8d:11:f3:47:2b:7c:01:9e:56: f6:44:47:28:5d:30:2c:db:36:5a:08:20:71:d5:d9: 3e:81:7b:c8:c2:a9:24:6b:f5:4e:a1:20:2d:68:d9: 34:64:67:b9:8a:b3:7a:7c:cf:3a:c5:18:b1:d6:64: 01:f5:fb:2e:9a:60:2d:77:04:cc:83:ab:a0:c7:3c: 8d:97:d5:65:dd:bc:69:35:7f:3f:78:60:6f:74:18: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1D:A5:CC:53:FE:B1:FB:7E:C2:67:BF:BC:8D:9C:01:C8:E1:E4:88 X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bc:41:71:46:34:79:e2:48:99:9a:5e:da:6e:39:93:c6:54: 28:7e:7b:48:a6:04:14:77:16:df:40:74:80:8b:f9:af:28:4e: 4f:f8:22:6b:5c:c9:34:82:35:c9:20:9c:bc:e3:b1:f4:13:12: 4f:11:d0:3d:95:06:d2:62:61:31:14:20:b0:43:7b:2b:d0:6f: 8c:e6:89:b3:49:05:da:40:c2:64:70:c5:3e:9f:bf:de:f4:1c: a4:d1:8f:11:6f:98:86:f5:78:51:7c:d5:57:e5:d1:d3:f5:48: fc:9d:6a:06:6a:a8:0a:63:fb:fc:fc:03:63:8e:9f:e4:6c:e2: 5d:38:ed:46:41:f3:1e:48:b1:28:de:ad:b1:f2:3d:53:0b:17: 3e:39:d9:ae:4a:fb:66:51:43:4c:48:6f:88:bf:62:5e:75:b7: 3b:1d:c1:b1:b4:86:a5:6c:f3:44:68:b6:c5:10:30:55:42:8d: a8:25:88:e6:e3:1f:ab:e7:6c:77:39:8b:ea:5d:e1:b9:fc:48: 2d:32:51:c0:eb:f7:1a:29:9c:3c:12:94:24:39:f9:7e:fd:0c: 43:c0:82:12:06:f1:ae:f8:bf:53:5e:44:ad:e0:6d:ee:fd:a0: f4:4a:06:ba:85:a6:5c:ff:f4:e7:69:f1:e0:e2:65:1f:6b:1f: cb:fe:87:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjQwNTE3MDU1NjAxWhcNMjQwNTI0MDU1NjAxWjAYMRYwFAYD VQQDEw02NjQ2ZjE3MS1mZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjHXSo2rMidYgau5a+oAQf857y9ZPPmhPTM7iyM2oXGPyqfdTNNQwK/wunOE 7mUwauaqQT8Yb4hHup2KYsnvtUQHoH9sYl8DR6/+XlhyzDwL7kbmIyj29Qwuj4fq 6UdzNee+RkIvLrlrF52hXtuqWb8mC8agulotpN0k8DQikDnAbjJLlGyl1I6+f4nA TrvTbQ6gBo1RIWSaVs+fzClxznAkJsy7ZTPQO0mNEfNHK3wBnlb2REcoXTAs2zZa CCBx1dk+gXvIwqkka/VOoSAtaNk0ZGe5irN6fM86xRix1mQB9fsummAtdwTMg6ug xzyNl9Vl3bxpNX8/eGBvdBihTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMdpcxT /rH7fsJnv7yNnAHI4eSIMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9vEFxRjR54kiZml7abjmTxlQofntIpgQUdxbfQHSAi/mvKE5P+CJr XMk0gjXJIJy847H0ExJPEdA9lQbSYmExFCCwQ3sr0G+M5omzSQXaQMJkcMU+n7/e 9Byk0Y8Rb5iG9XhRfNVX5dHT9Uj8nWoGaqgKY/v8/ANjjp/kbOJdOO1GQfMeSLEo 3q2x8j1TCxc+OdmuSvtmUUNMSG+Iv2Jedbc7HcGxtIalbPNEaLbFEDBVQo2oJYjm 4x+r52x3OYvqXeG5/EgtMlHA6/caKZw8EpQkOfl+/QxDwIISBvGu+L9TXkSt4G3u /aD0Sga6haZc//TnafHg4mUfax/L/oc8 -----END CERTIFICATE-----Generated at Fri May 17 06:46:27 2024 by rpki-client on console-ams.rpki-client.org