$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: 2udXN/BTR3fTVXXgSBH5qHkbD/ujUKnAF41AKbJ7fKM= Subject key identifier: 97:B4:B8:43:1A:2C:2A:3F:C1:C5:D7:38:8E:4A:09:43:CD:42:41:CD Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 026B Signing time: Sun 19 May 2024 03:47:45 +0000 Manifest this update: Sun 19 May 2024 03:47:45 +0000 Manifest next update: Sun 26 May 2024 03:47:44 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: ApuSFSrDmvwILNSEx6t7b3GlA9jaSOhamMgO9kcmyyE=) 2: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: BzAAxjTRsJSvOIzTUZdQYKNW9cKBeqhAOD3TKuN2o/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: May 19 03:47:45 2024 GMT Not After : May 26 03:47:44 2024 GMT Subject: CN=66497661-4574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:70:e7:9c:ad:2f:14:d5:b7:5b:29:09:4b:0b: 45:89:6a:dc:8e:2c:22:1d:52:93:10:fc:cb:0f:d0: 6a:59:c6:ad:f7:4f:7e:6f:6f:d5:db:d6:d9:55:22: 0f:35:85:54:b1:27:14:46:9f:b7:85:f0:86:88:8a: 22:8b:10:d8:e7:b9:b3:48:db:57:7b:cd:d6:d7:db: e8:f9:09:ac:29:11:6e:27:8e:f4:af:cc:18:d4:4d: 4f:5e:a4:ee:1a:e5:2d:39:fe:f5:95:e4:4e:f0:4c: 95:19:20:d7:f3:2b:46:42:7d:3e:71:f7:f9:35:9d: d0:1c:3d:c3:af:f8:7f:58:34:79:8a:0c:65:c1:f5: a5:1c:e9:90:d0:ff:b7:dc:d7:6c:6d:e6:bb:52:49: d8:2b:92:ac:6e:97:65:19:88:9a:02:c0:f0:b4:2d: ae:50:bb:23:ce:76:fd:c2:74:59:a6:88:68:77:20: ea:f8:69:92:bd:a1:25:40:df:02:c4:5e:34:5c:08: 18:6e:9a:a5:40:3c:12:a1:2a:91:12:07:69:09:f2: e1:26:eb:b4:bf:5c:c2:16:a7:68:a9:7d:0b:4b:90: e5:86:bb:0d:91:5b:7d:e0:02:19:6b:7e:03:8d:91: 08:3e:d9:d9:ac:ec:8c:90:05:92:28:26:d9:f2:e9: 4d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B4:B8:43:1A:2C:2A:3F:C1:C5:D7:38:8E:4A:09:43:CD:42:41:CD X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d2:35:06:4f:ad:d0:d9:17:c1:9f:aa:92:5a:58:02:fa:7b: 75:ca:62:a2:24:62:3d:cd:40:c8:7c:c3:1a:1b:3a:43:ba:31: 0b:24:a3:14:1b:30:0e:35:cb:e3:34:10:f5:16:b0:31:71:41: cd:8d:30:f7:81:4b:a5:a3:f4:52:43:00:55:43:3f:c3:4c:30: f0:82:f3:b1:63:63:10:9f:3a:d8:b1:29:65:72:44:76:57:0f: 61:af:ff:00:4c:92:f0:d3:5a:6f:15:94:5c:4a:c8:d9:45:29: 59:5a:1f:f4:d0:1e:1c:7b:f4:9c:d3:74:92:fe:28:23:23:82: e7:e1:d5:8a:8f:14:8a:33:8b:94:1a:c4:2b:8a:15:f6:80:2b: 6e:b8:dd:d7:6e:4a:96:5c:2c:71:4d:ed:42:23:00:b3:fe:b4: e7:e6:ce:73:5f:42:6a:5b:c4:65:27:06:28:cb:54:03:48:69: 55:a0:71:50:4d:9d:12:a7:c7:cf:74:41:f6:09:1c:ca:fc:a0: 8d:2b:14:b5:71:88:77:95:fe:2e:5f:97:85:39:4c:80:04:12: 4b:7e:f1:95:4a:65:34:18:a2:09:c5:54:cd:b9:b4:23:97:20: 37:9c:97:09:46:7b:fc:ba:ae:35:77:c7:a1:10:23:a2:f6:bc: dc:08:d8:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjQwNTE5MDM0NzQ1WhcNMjQwNTI2MDM0NzQ0WjAYMRYwFAYD VQQDEw02NjQ5NzY2MS00NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XDnnK0vFNW3WykJSwtFiWrcjiwiHVKTEPzLD9BqWcat909+b2/V29bZVSIP NYVUsScURp+3hfCGiIoiixDY57mzSNtXe83W19vo+QmsKRFuJ470r8wY1E1PXqTu GuUtOf71leRO8EyVGSDX8ytGQn0+cff5NZ3QHD3Dr/h/WDR5igxlwfWlHOmQ0P+3 3Ndsbea7UknYK5KsbpdlGYiaAsDwtC2uULsjznb9wnRZpohodyDq+GmSvaElQN8C xF40XAgYbpqlQDwSoSqREgdpCfLhJuu0v1zCFqdoqX0LS5DlhrsNkVt94AIZa34D jZEIPtnZrOyMkAWSKCbZ8ulNAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJe0uEMa LCo/wcXXOI5KCUPNQkHNMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD0jUGT63Q2RfBn6qSWlgC+nt1ymKiJGI9zUDIfMMaGzpDujELJKMU GzAONcvjNBD1FrAxcUHNjTD3gUulo/RSQwBVQz/DTDDwgvOxY2MQnzrYsSllckR2 Vw9hr/8ATJLw01pvFZRcSsjZRSlZWh/00B4ce/Sc03SS/igjI4Ln4dWKjxSKM4uU GsQrihX2gCtuuN3XbkqWXCxxTe1CIwCz/rTn5s5zX0JqW8RlJwYoy1QDSGlVoHFQ TZ0Sp8fPdEH2CRzK/KCNKxS1cYh3lf4uX5eFOUyABBJLfvGVSmU0GKIJxVTNubQj lyA3nJcJRnv8uq41d8ehECOi9rzcCNjc -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org