$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft File: Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json) Hash identifier: 7HzM7r+Bc9dDdhyMw1lxhBxKhKX/4AeH0pLNZ5PLNXE= Subject key identifier: E3:AF:FF:15:E5:24:3E:F3:21:F0:E1:4B:3C:DF:75:46:E5:B8:E6:F0 Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft Manifest number: 3441 Signing time: Fri 31 May 2024 14:57:14 +0000 Manifest this update: Fri 31 May 2024 14:57:14 +0000 Manifest next update: Fri 07 Jun 2024 14:57:14 +0000 Files and hashes: 1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: Swhdc5XOfBTiReDOt2LzIk7qT12pfnOZVYMDW6Mcv0E=) 2: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: GkEbPkSC+QT9/jHyDhftlTk72Onx7dag9CG0TAc5ngA=) 3: 6F1612BE562511EB9470B150C4F9AE02.roa (hash: MtkEeyTu1ekXIdBLddYZlROZCkGRHxBCDUt1X1Vlb9M=) 4: 5A318E06F6A111EBB6318B7EC4F9AE02.roa (hash: TCLXExfkmuO4Dtzy4n4E0hd2z7bRoZNQTGBqPkoceig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: May 31 14:57:14 2024 GMT Not After : Jun 7 14:57:14 2024 GMT Subject: CN=6659e54a-e2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:25:7e:f9:91:5d:38:99:f3:37:e1:03:3b: 21:55:a4:1b:62:68:49:0d:84:5e:cc:17:58:37:b3: d3:b5:8e:4e:76:c8:eb:b2:41:a7:45:d0:98:c8:1a: c0:50:04:5f:fe:60:ed:bc:55:b8:73:71:9b:13:5f: 7e:4d:38:e9:26:c6:87:c9:f5:46:8f:37:4a:4e:af: c0:55:96:f6:4f:e7:a9:75:24:d8:22:8d:c1:59:9c: aa:15:bb:87:38:22:ce:a6:64:5d:1c:f2:18:d9:17: b1:91:4d:ff:75:0b:38:a0:bd:4c:d3:e9:f4:ed:0d: fa:77:df:09:ef:9d:a1:e6:83:0c:b0:de:48:b9:c9: d7:2d:35:44:57:74:0f:79:e1:42:29:56:b3:98:4f: 68:7f:8f:77:89:a7:a8:84:a8:60:ba:ae:9b:98:37: a1:44:74:89:b4:36:b7:33:56:0f:78:8d:9f:b5:fb: 6c:56:09:bd:e5:28:d7:54:92:a9:57:35:6d:06:59: ea:0d:3f:85:46:54:71:a7:6d:f3:b1:7d:ad:95:d6: 56:60:dd:12:0d:6f:a9:3d:0f:51:af:21:cf:2b:08: af:70:9a:bb:d7:d6:9d:68:8e:83:66:62:02:7d:43: b7:bc:42:52:16:cc:ce:b0:07:96:af:36:92:90:16: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:FF:15:E5:24:3E:F3:21:F0:E1:4B:3C:DF:75:46:E5:B8:E6:F0 X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:77:e6:6f:a5:9b:53:78:de:8f:9b:df:06:5a:e0:05:23:8f: d6:d0:70:47:7f:91:5c:27:cc:e7:22:4d:7c:f2:44:0d:83:f8: d0:8d:ba:d1:67:23:e4:2f:0d:eb:ef:88:aa:52:5f:43:23:b2: 9d:eb:48:e9:20:1b:a2:c6:4e:ba:28:ba:27:f5:ca:76:38:d9: 78:b1:54:73:a2:30:5b:8c:9d:a4:c1:1f:33:b8:cc:92:d6:54: 2f:3c:0e:cd:42:f7:dd:32:d5:9b:d2:be:a8:8f:d9:0c:9a:69: 5a:ea:ff:e6:8f:54:eb:f4:36:1b:90:85:ba:ac:37:80:d7:ee: a9:69:cd:59:86:42:7b:2e:3b:19:35:46:c4:0d:2f:e1:68:f1: 3b:9f:20:ec:47:48:6d:f5:10:53:2f:d7:da:e0:7e:8a:52:bf: 5f:0b:54:96:95:22:29:31:8f:c5:7c:ab:e6:b3:b7:81:32:c1: cc:43:88:96:e3:78:8a:41:03:7d:62:01:5d:c1:c0:b9:6d:8e: 59:ca:a1:9c:ed:a0:01:8b:50:ae:b1:ad:9e:a0:ad:53:b0:98: 3a:7a:00:58:e6:dc:04:f8:df:d9:4a:76:e1:63:46:5b:62:7c: 37:36:6a:38:8e:cd:14:ae:2d:8c:f3:99:df:4a:b7:2a:a2:08: fd:6e:16:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjQwNTMxMTQ1NzE0WhcNMjQwNjA3MTQ1NzE0WjAYMRYwFAYD VQQDEw02NjU5ZTU0YS1lMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA8lfvmRXTiZ8zfhAzshVaQbYmhJDYRezBdYN7PTtY5OdsjrskGnRdCYyBrA UARf/mDtvFW4c3GbE19+TTjpJsaHyfVGjzdKTq/AVZb2T+epdSTYIo3BWZyqFbuH OCLOpmRdHPIY2RexkU3/dQs4oL1M0+n07Q36d98J752h5oMMsN5IucnXLTVEV3QP eeFCKVazmE9of493iaeohKhguq6bmDehRHSJtDa3M1YPeI2ftftsVgm95SjXVJKp VzVtBlnqDT+FRlRxp23zsX2tldZWYN0SDW+pPQ9RryHPKwivcJq719adaI6DZmIC fUO3vEJSFszOsAeWrzaSkBZ+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOv/xXl JD7zIfDhSzzfdUbluObwMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYwNi83NkUxQzQ3RTFEOTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01 VWxzenZCTTF1d2xjTFNlS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKd+ZvpZtTeN6Pm98GWuAFI4/W0HBHf5FcJ8znIk188kQNg/jQjbrR ZyPkLw3r74iqUl9DI7Kd60jpIBuixk66KLon9cp2ONl4sVRzojBbjJ2kwR8zuMyS 1lQvPA7NQvfdMtWb0r6oj9kMmmla6v/mj1Tr9DYbkIW6rDeA1+6pac1ZhkJ7LjsZ NUbEDS/haPE7nyDsR0ht9RBTL9fa4H6KUr9fC1SWlSIpMY/FfKvms7eBMsHMQ4iW 43iKQQN9YgFdwcC5bY5ZyqGc7aABi1Cusa2eoK1TsJg6egBY5twE+N/ZSnbhY0Zb Ynw3Nmo4js0Uri2M85nfSrcqogj9bhaJ -----END CERTIFICATE-----Generated at Fri May 31 17:44:52 2024 by rpki-client on console-fra.rpki-client.org