$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: rnfdlHdeoeKenm6T19w4DQBZA2iP/lMcfptrSzJvuf0= Subject key identifier: 37:94:E0:34:98:3C:2B:F8:62:EA:B8:AC:99:87:44:41:0F:2E:85:48 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 061B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 0601 Signing time: Sat 18 May 2024 23:58:09 +0000 Manifest this update: Sat 18 May 2024 23:58:08 +0000 Manifest next update: Sat 25 May 2024 23:58:08 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: kRrYuX+xq30A63oxQUhyEPBAdJzLCUNpS8nXRcGqaEI=) 2: AE2B3BD221BD11ECA88ED95BC4F9AE02.roa (hash: +CtDubk59Sw48O8Ouf2tA+TlSw7n0l4E3ftM+xsc3kE=) 3: 59DE107A14CF11EE81C44276C4F9AE02.roa (hash: QChoGjnLjAp9YKfe/RgOAvv2YrmkaQ/Duip+YO5yYGE=) 4: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: NHN79Wm41KubiZEhgiInohGXuUSrK9jksrgtJrn4WhI=) 5: BCC1E04E33C011EE83E9A61BC4F9AE02.roa (hash: VHcDjEgGrxMAnz0M1AHjoOM+XstVXi2tMMysfxDWz/U=) 6: BC41A65E33C011EE83E9A61BC4F9AE02.roa (hash: CS93G7RcWD5+qr4AoKfyZNjTKuN7GWxR2yfMPswfmRg=) 7: B76C776472E411ED833AE326C4F9AE02.roa (hash: 8ESr5AHaLU3ScgTHpRgo6a6bq6KGpzQvfWDCdvjEYds=) 8: B8D1689472E411ED833AE326C4F9AE02.roa (hash: 3aUgrXp7CupXz9su0B0dRhTdHv7O9ZjKupP1E4BnrMs=) 9: 2B96A18867EE11EEAC50B63FC4F9AE02.roa (hash: Qzz8y1dnxu5SEAcZtVkeuaWIWi/sRZC5mM5VqwrsOf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: May 18 23:58:08 2024 GMT Not After : May 25 23:58:08 2024 GMT Subject: CN=66494090-ba58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:48:38:4d:ac:3a:9b:8d:cb:5e:ca:11:06: 93:b4:f9:b6:6a:8b:a2:04:9b:0d:71:3a:66:cd:17: a7:9c:d8:2e:a3:46:fc:6b:45:6f:5c:6f:5a:f3:7c: 1a:c3:3b:73:95:89:79:4f:4f:2b:30:a6:c6:19:3c: 54:84:37:09:03:eb:16:82:25:51:17:8f:6d:55:05: 29:f3:95:71:17:6e:b9:58:f9:26:59:6c:d1:4c:21: 67:5e:b7:73:1d:c2:94:1b:eb:19:ac:84:15:ae:29: eb:02:d0:ec:03:04:65:88:32:40:5d:37:78:3b:73: 12:a1:1e:e2:e4:81:99:fd:b9:43:63:a4:b2:f4:27: d5:93:2f:c2:80:5b:ac:8d:b4:0a:5a:73:a1:ea:7e: 7c:de:1d:c6:05:9b:99:66:bc:1b:dc:73:57:80:01: ff:76:11:f3:47:1b:5f:12:0d:a7:14:47:48:e8:6b: cc:82:33:f6:c4:a1:3f:32:8e:b6:05:30:ef:bb:ba: 9c:28:51:71:79:82:f7:f6:a9:41:8b:76:22:e1:3a: 6e:4e:82:44:ab:42:cf:61:9b:8d:76:5d:8b:a1:46: 27:41:5c:66:01:67:76:18:b2:7e:ee:d2:47:25:ff: 4d:19:f0:9d:d7:a8:ca:cf:b5:f6:93:c3:c6:65:62: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:94:E0:34:98:3C:2B:F8:62:EA:B8:AC:99:87:44:41:0F:2E:85:48 X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:77:de:f4:e6:43:25:33:ba:9d:28:6f:e1:1d:dc:5c:d8:a0: 21:96:a4:c6:ac:12:a0:6a:21:6a:b5:f7:ab:17:3f:3d:62:8c: 60:3d:97:e6:b7:c3:0e:74:81:8c:96:3c:07:55:3d:b4:5b:7d: 23:eb:70:70:19:1c:49:07:a4:5e:46:bf:7a:f5:e7:39:3d:e8: b8:f6:7b:8e:c1:2f:13:7a:c7:8f:c9:80:60:c5:2a:4b:6b:7b: 81:8f:09:5e:d0:69:3c:4c:93:d1:f4:65:54:cf:82:ad:51:7f: dd:1f:1e:bc:b3:78:29:ac:1d:ef:c2:54:1f:97:23:64:63:18: 40:ae:43:56:bd:9e:d8:dc:49:c2:36:e9:5e:a4:2d:e3:78:48: 0a:39:72:79:8a:50:86:42:cc:d6:b4:e2:ba:ce:bf:7f:07:61: d0:c8:93:b0:83:fc:21:bc:25:a8:ad:c8:d9:1e:d1:83:13:5c: b0:0d:81:db:05:43:08:e9:5c:8e:72:41:b9:b1:24:f0:b1:2c: c1:9a:45:5a:e0:35:b7:d7:06:72:c1:8c:de:44:0c:9f:3f:b3: 93:d3:0e:fd:10:15:9d:00:44:75:fc:95:1a:a1:e3:74:46:dd: f7:4d:65:e3:71:eb:63:8f:f6:ca:16:15:43:51:ba:cc:08:bf: ee:5e:ff:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjQwNTE4MjM1ODA4WhcNMjQwNTI1MjM1ODA4WjAYMRYwFAYD VQQDEw02NjQ5NDA5MC1iYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9RIOE2sOpuNy17KEQaTtPm2aouiBJsNcTpmzRennNguo0b8a0VvXG9a83wa wztzlYl5T08rMKbGGTxUhDcJA+sWgiVRF49tVQUp85VxF265WPkmWWzRTCFnXrdz HcKUG+sZrIQVrinrAtDsAwRliDJAXTd4O3MSoR7i5IGZ/blDY6Sy9CfVky/CgFus jbQKWnOh6n583h3GBZuZZrwb3HNXgAH/dhHzRxtfEg2nFEdI6GvMgjP2xKE/Mo62 BTDvu7qcKFFxeYL39qlBi3Yi4TpuToJEq0LPYZuNdl2LoUYnQVxmAWd2GLJ+7tJH Jf9NGfCd16jKz7X2k8PGZWK6cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeU4DSY PCv4Yuq4rJmHREEPLoVIMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPd9705kMlM7qdKG/hHdxc2KAhlqTGrBKgaiFqtferFz89YoxgPZfm t8MOdIGMljwHVT20W30j63BwGRxJB6ReRr969ec5Pei49nuOwS8TesePyYBgxSpL a3uBjwle0Gk8TJPR9GVUz4KtUX/dHx68s3gprB3vwlQflyNkYxhArkNWvZ7Y3EnC NulepC3jeEgKOXJ5ilCGQszWtOK6zr9/B2HQyJOwg/whvCWorcjZHtGDE1ywDYHb BUMI6VyOckG5sSTwsSzBmkVa4DW31wZywYzeRAyfP7OT0w79EBWdAER1/JUaoeN0 Rt33TWXjcetjj/bKFhVDUbrMCL/uXv+o -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org