$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft File: 0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json) Hash identifier: ozhIzehVfnolAYSYsJF0I+7TYex0D4TSpynZD1hVXBE= Subject key identifier: 3B:AB:4F:59:07:56:B2:BE:FB:A3:BB:63:61:CC:50:F5:D9:8E:5D:BB Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 Certificate issuer: /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Certificate serial: 3309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft Manifest number: 32FD Signing time: Sat 18 May 2024 15:35:47 +0000 Manifest this update: Sat 18 May 2024 15:35:47 +0000 Manifest next update: Sat 25 May 2024 15:35:47 +0000 Files and hashes: 1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: CzNUescOj98zNYtXtjh9zGHXjyNI2hNB9tAzZc12tJg=) 2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Cbhj9KrYPhruE2DO+tG+S1gBEmTKHE45Wb/ySBI1jmo=) 3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: qgk+fzy5+bJ/P0TG94jLIDzU/wj1mkJDF7MO6OIp0JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13065 (0x3309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Validity Not Before: May 18 15:35:47 2024 GMT Not After : May 25 15:35:47 2024 GMT Subject: CN=6648cad3-5e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:75:29:92:d0:8f:38:f0:ae:60:72:12:a1: e6:43:6b:c2:f3:86:f0:4d:5e:10:6c:f4:0d:85:e3: 65:e3:3e:c8:5e:5f:ef:50:d5:09:b5:fd:6f:8c:03: 13:dc:7f:fe:76:40:28:44:c0:b0:66:29:ee:88:62: 50:55:0d:3d:f2:03:61:31:8d:19:d5:62:f4:b2:37: e2:f3:f7:8f:c8:65:b4:b9:7a:71:c5:d5:bf:6a:0d: c6:9f:27:b0:49:65:be:82:45:61:9b:4d:c5:6d:67: 2d:46:b2:7a:0a:a0:ba:1a:c1:63:d9:31:31:5a:92: 66:d8:12:3c:46:dd:2f:e3:8d:eb:dc:91:a6:71:4d: 6e:98:c5:d6:41:e9:13:5e:44:c6:df:dd:c6:fa:46: 1f:51:39:7a:86:d2:87:9f:f3:b1:cf:f5:c9:39:91: d4:98:3c:ba:e1:5b:e3:38:2d:44:3c:58:ab:0e:4a: 21:67:91:b7:d2:e1:f4:2e:78:c9:8c:d8:6a:61:91: e7:d6:ef:28:10:c5:58:d4:7f:5e:db:1b:cc:24:f9: f7:47:f3:f8:66:4c:40:c2:60:50:60:a7:b4:da:92: 3f:70:6e:6f:db:25:92:97:c8:bd:62:f3:93:8d:3d: e7:2d:42:98:91:26:bb:84:19:53:0c:b9:f5:8c:2c: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AB:4F:59:07:56:B2:BE:FB:A3:BB:63:61:CC:50:F5:D9:8E:5D:BB X509v3 Authority Key Identifier: keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f3:99:c3:e6:09:ca:90:63:8b:a6:0d:cd:93:4c:84:ac:de: 7c:4f:a4:8c:e9:78:ec:02:41:9c:6b:2d:88:08:be:21:a5:cc: 1e:59:cc:d6:d6:07:10:e4:f4:9a:dd:26:04:92:d5:cb:a0:59: f8:7a:e8:c8:8d:a1:4c:55:92:b0:bd:8d:b3:ac:20:d1:49:18: e9:da:b9:dc:61:b4:ec:79:65:19:93:a1:9d:83:be:44:4b:b7: 80:c2:a3:43:87:aa:9d:99:dc:ce:e7:aa:9c:21:bf:32:63:09: 00:1d:0c:4e:a7:07:9e:29:13:eb:59:78:ae:93:2a:a3:5c:a8: e4:6e:d5:5c:67:33:df:97:57:68:b0:4d:2d:b2:ff:a4:7b:96: 44:04:8a:b7:4a:89:26:0a:20:84:f5:e1:60:67:86:7c:ca:dc: 0e:33:ba:89:8a:4b:5a:43:09:75:d1:d5:a9:35:16:d0:4f:6e: 5e:75:1c:ca:ac:27:bd:6c:54:bb:28:d3:9d:6e:75:73:f3:f5: ba:5e:a3:cf:6d:fd:86:fc:25:cc:ac:4d:14:47:f3:a1:42:dc: 85:78:66:02:5c:43:a2:47:28:d8:61:f9:ad:34:2b:13:2a:e6: 62:8e:cc:9d:25:be:10:66:6e:0b:16:b5:7b:66:9f:c0:87:ea: 2c:22:d7:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3 QTkwOUMzRjYwHhcNMjQwNTE4MTUzNTQ3WhcNMjQwNTI1MTUzNTQ3WjAYMRYwFAYD VQQDEw02NjQ4Y2FkMy01ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jZ1KZLQjzjwrmByEqHmQ2vC84bwTV4QbPQNheNl4z7IXl/vUNUJtf1vjAMT 3H/+dkAoRMCwZinuiGJQVQ098gNhMY0Z1WL0sjfi8/ePyGW0uXpxxdW/ag3Gnyew SWW+gkVhm03FbWctRrJ6CqC6GsFj2TExWpJm2BI8Rt0v443r3JGmcU1umMXWQekT XkTG393G+kYfUTl6htKHn/Oxz/XJOZHUmDy64VvjOC1EPFirDkohZ5G30uH0LnjJ jNhqYZHn1u8oEMVY1H9e2xvMJPn3R/P4ZkxAwmBQYKe02pI/cG5v2yWSl8i9YvOT jT3nLUKYkSa7hBlTDLn1jCzc+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDurT1kH VrK++6O7Y2HMUPXZjl27MB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0 QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp NXIwOGdzXzZtRTU2a0p3X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC85nD5gnKkGOLpg3Nk0yErN58T6SM6XjsAkGcay2ICL4hpcweWczW 1gcQ5PSa3SYEktXLoFn4eujIjaFMVZKwvY2zrCDRSRjp2rncYbTseWUZk6Gdg75E S7eAwqNDh6qdmdzO56qcIb8yYwkAHQxOpweeKRPrWXiukyqjXKjkbtVcZzPfl1do sE0tsv+ke5ZEBIq3SokmCiCE9eFgZ4Z8ytwOM7qJiktaQwl10dWpNRbQT25edRzK rCe9bFS7KNOdbnVz8/W6XqPPbf2G/CXMrE0UR/OhQtyFeGYCXEOiRyjYYfmtNCsT KuZijsydJb4QZm4LFrV7Zp/Ah+osItcW -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org