$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft File: oR4sIXmzapZHuVH8YC13kwe_rm4.mft (raw, json) Hash identifier: hkst/VUQPWwa/PvcZYlcdp+JvP3iAIGMF5v5Z/D92ks= Subject key identifier: 3A:CB:A8:0B:9E:5E:CA:11:5F:8E:31:93:6C:E4:F1:1D:BD:37:D0:88 Authority key identifier: A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E Certificate issuer: /CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft Manifest number: 089F Signing time: Sat 18 May 2024 21:32:24 +0000 Manifest this update: Sat 18 May 2024 21:32:23 +0000 Manifest next update: Sat 25 May 2024 21:32:23 +0000 Files and hashes: 1: oR4sIXmzapZHuVH8YC13kwe_rm4.crl (hash: oQksF0RhzlQZlhi8aWUgBnLX1qmSJ7wqZQqqKi7+XWU=) 2: 0CF8405C95CD11EA8D1B0C65C4F9AE02.roa (hash: L2FQdcEAehehi36iTYlNTu2HzMsF5TyknQqhhyP6lwI=) 3: F5231922306A11ECAC7AA64DC4F9AE02.roa (hash: vYnaxmsn5vsppe/5G2I+RF+3dKEs/plENyq4vTimQDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E Validity Not Before: May 18 21:32:23 2024 GMT Not After : May 25 21:32:23 2024 GMT Subject: CN=66491e68-c2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:40:ae:79:f0:3f:19:7d:52:e6:40:c9:a1:a8: 93:e3:67:7a:ba:e0:4c:b4:c5:1a:c8:f4:d0:d0:c1: d0:6d:88:15:d0:85:8b:66:61:a0:46:b5:93:cf:b2: 19:6b:c4:45:5d:06:3e:8c:da:72:4e:34:bd:54:dc: a5:5c:d7:b9:a2:2b:bf:ec:78:ad:d5:e3:3b:a3:36: 29:51:c6:5a:50:c2:a1:52:d5:7a:62:99:66:a1:c7: db:e8:cd:61:99:c2:ad:2f:49:65:77:cb:5d:f5:5b: 13:8c:41:e8:99:e0:a9:7a:c6:fb:7a:5d:aa:12:f1: f0:84:3d:7d:10:c4:bd:4b:5f:58:98:3c:38:5f:c5: f2:a7:ed:26:09:06:a3:e1:60:1c:6f:e5:02:31:ac: d9:fb:1c:46:00:43:bc:55:ed:ee:8b:11:e4:66:ff: 46:75:5c:89:b7:e6:d5:08:26:72:3d:9a:7d:05:27: d4:4b:c2:ab:66:a3:b3:8b:c0:1a:30:06:fd:6b:a4: 6c:fd:5a:dc:88:8b:76:11:44:4c:17:c6:69:b1:9e: 2b:18:55:da:e6:70:47:62:1c:00:92:39:4d:d6:cb: 02:b9:44:c2:82:8e:81:a2:66:50:e6:0b:2c:64:da: 0a:0e:61:0e:dc:cf:82:4a:37:08:8c:1e:b7:9c:73: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CB:A8:0B:9E:5E:CA:11:5F:8E:31:93:6C:E4:F1:1D:BD:37:D0:88 X509v3 Authority Key Identifier: keyid:A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a1:d6:e1:41:8d:d2:fc:c2:b3:5b:9a:24:62:91:00:d0:eb: 93:02:d5:40:83:5f:a2:ab:5b:ff:b9:93:b2:8b:22:87:3d:5c: ed:81:25:43:ac:d9:21:de:69:bf:84:89:f5:b6:f0:fd:7c:a2: f5:62:63:25:a8:bc:f3:94:4b:39:29:26:7a:fa:fb:ca:e6:76: 42:61:18:d0:85:75:e3:f6:46:6e:3b:6c:cb:f7:57:b0:bc:d4: 52:3b:f4:c2:86:c7:76:69:f9:01:ef:2c:87:88:df:9f:af:4b: 2d:fe:d8:d7:52:a1:92:47:33:3f:0f:28:94:27:dd:24:95:25: 65:ff:b3:85:54:ef:09:49:24:c4:13:96:46:c5:c0:68:c6:66: 11:27:e2:35:eb:83:46:6d:ca:85:59:09:2c:c6:2d:13:12:0e: 4a:5f:5e:e4:1f:f3:38:41:df:17:ba:39:62:24:c4:c6:5c:a2: ad:1b:9b:3f:c5:68:b2:dc:77:53:bf:5e:1b:76:11:bb:ba:c6: 7c:31:52:6b:94:6e:31:72:04:15:00:09:34:6c:37:4e:3d:4e: f5:8e:8c:0f:b9:f9:6a:31:4f:7e:03:0c:7c:07:3f:ef:18:b9: 2b:b3:58:88:30:40:b1:5e:64:db:44:6e:a7:54:f5:fc:46:5d: c9:c2:53:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RkExMTAvBgNVBAUTKEExMUUyQzIxNzlCMzZBOTY0N0I5NTFGQzYwMkQ3Nzkz MDdCRkFFNkUwHhcNMjQwNTE4MjEzMjIzWhcNMjQwNTI1MjEzMjIzWjAYMRYwFAYD VQQDEw02NjQ5MWU2OC1jMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ECuefA/GX1S5kDJoaiT42d6uuBMtMUayPTQ0MHQbYgV0IWLZmGgRrWTz7IZ a8RFXQY+jNpyTjS9VNylXNe5oiu/7Hit1eM7ozYpUcZaUMKhUtV6Yplmocfb6M1h mcKtL0lld8td9VsTjEHomeCpesb7el2qEvHwhD19EMS9S19YmDw4X8Xyp+0mCQaj 4WAcb+UCMazZ+xxGAEO8Ve3uixHkZv9GdVyJt+bVCCZyPZp9BSfUS8KrZqOzi8Aa MAb9a6Rs/VrciIt2EURMF8ZpsZ4rGFXa5nBHYhwAkjlN1ssCuUTCgo6BomZQ5gss ZNoKDmEO3M+CSjcIjB63nHNVXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrLqAue XsoRX44xk2zk8R29N9CIMB8GA1UdIwQYMBaAFKEeLCF5s2qWR7lR/GAtd5MHv65u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhGQS9BRENCMTVGRTk1 QzMxMUVBQUU2MjAxNDlDNEY5QUUwMi9vUjRzSVhtemFwWkh1Vkg4WUMxM2t3ZV9y bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29SNHNJWG16YXBaSHVWSDhZQzEza3dlX3JtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDhGQS9BRENCMTVGRTk1QzMxMUVBQUU2MjAxNDlDNEY5QUUwMi9vUjRzSVhtemFw Wkh1Vkg4WUMxM2t3ZV9ybTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgodbhQY3S/MKzW5okYpEA0OuTAtVAg1+iq1v/uZOyiyKHPVztgSVD rNkh3mm/hIn1tvD9fKL1YmMlqLzzlEs5KSZ6+vvK5nZCYRjQhXXj9kZuO2zL91ew vNRSO/TChsd2afkB7yyHiN+fr0st/tjXUqGSRzM/DyiUJ90klSVl/7OFVO8JSSTE E5ZGxcBoxmYRJ+I164NGbcqFWQksxi0TEg5KX17kH/M4Qd8XujliJMTGXKKtG5s/ xWiy3HdTv14bdhG7usZ8MVJrlG4xcgQVAAk0bDdOPU71jowPuflqMU9+Awx8Bz/v GLkrs1iIMECxXmTbRG6nVPX8Rl3JwlMF -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org