$ rpki-client -vvf rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft File: OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft (raw, json) Hash identifier: VFxoeMGyTKQ7FoKVSwHd0cVFUFfdrVWiZQ6RQ2f+A7k= Subject key identifier: 78:09:CB:15:D5:EA:B4:56:1D:CA:A0:CA:A0:49:DE:96:92:6E:58:76 Authority key identifier: 3A:83:02:42:E8:4E:DC:76:5A:07:31:20:AC:24:F0:40:0E:4F:60:46 Certificate issuer: /CN=A91C984B/serialNumber=3A830242E84EDC765A073120AC24F0400E4F6046 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft Manifest number: 01DC Signing time: Fri 31 May 2024 04:56:45 +0000 Manifest this update: Fri 31 May 2024 04:56:45 +0000 Manifest next update: Fri 07 Jun 2024 04:56:45 +0000 Files and hashes: 1: OoMCQuhO3HZaBzEgrCTwQA5PYEY.crl (hash: IvxM8EPZYOtOQXyR7Aubl2u7jUrIS2cQ4FT+GJgR8o0=) 2: 2AF3B12C01DC11EDA4B7F257C4F9AE02.roa (hash: XPZd1/IDR9dHakpClFsD84nVB6EMbijOytinlCp4Qkg=) 3: 2A3E4DF001DC11EDA4B7F257C4F9AE02.roa (hash: 56BPGPWaqRhhCkZAdHvAAee9wYzaL61TQ1IWobBaQTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.crl rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C984B/serialNumber=3A830242E84EDC765A073120AC24F0400E4F6046 Validity Not Before: May 31 04:56:45 2024 GMT Not After : Jun 7 04:56:45 2024 GMT Subject: CN=6659588d-04ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:1c:9f:a9:69:7c:ec:d5:4b:46:f2:72:9f: e2:6b:b1:d6:90:3d:71:55:06:f9:5c:7a:74:b5:b7: ae:f8:16:80:d7:c1:8c:18:62:59:23:5a:48:70:96: ca:6b:de:68:f9:15:40:5a:bc:a5:77:42:37:8d:4f: 10:93:d0:e8:c9:eb:21:9a:bc:4f:dd:02:1f:8d:3c: 92:b6:10:b1:a0:bb:7f:64:a4:4e:e2:2c:3c:78:6b: 56:2d:91:7a:bf:2a:1f:0b:5d:ee:e4:d5:d7:61:78: b6:e7:1d:5d:bf:71:61:da:c0:93:aa:6a:87:5b:78: 8c:47:fa:af:e8:fd:6d:20:46:cd:ca:4a:d5:cb:82: bb:40:aa:09:54:7f:e9:e9:8a:26:d6:f7:be:28:4e: d3:fd:79:99:e4:83:c1:05:72:f7:7b:8f:89:fc:d4: f1:33:8a:43:dc:aa:cc:86:08:5d:5d:73:2e:6a:91: 13:3d:1e:61:69:4a:0a:26:a7:8d:ba:12:98:0e:00: e6:07:26:53:6a:ce:2c:82:c9:ff:d9:37:8c:49:1d: a5:4d:6f:30:2a:3b:0f:18:e1:d8:42:ec:57:ec:ad: c8:98:18:c3:a8:7d:e0:74:13:f2:fc:db:05:04:a9: fd:3b:6b:46:e6:63:4d:ec:53:df:21:c3:17:fe:33: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:09:CB:15:D5:EA:B4:56:1D:CA:A0:CA:A0:49:DE:96:92:6E:58:76 X509v3 Authority Key Identifier: keyid:3A:83:02:42:E8:4E:DC:76:5A:07:31:20:AC:24:F0:40:0E:4F:60:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e7:a1:91:b0:9e:65:c1:ac:c3:77:f0:b6:1e:49:7c:0e:a5: 88:8a:9d:e7:97:2a:6c:32:3a:68:9c:ac:95:4d:5f:a6:bb:f5: 42:3c:f5:b1:36:97:76:22:aa:11:f4:e5:bd:59:f2:fa:20:4a: 6b:ac:fe:45:9b:d4:39:0a:8d:43:2e:cc:0f:18:a7:0d:c1:9e: da:df:c8:a2:eb:ac:06:35:f8:ba:41:3b:34:93:44:71:05:f7: 7a:b8:31:14:6f:29:c6:26:4f:2c:f1:e1:e9:1d:59:9f:6c:85: c1:99:1a:c1:05:da:1b:1d:d9:33:a7:5b:79:02:69:d5:19:e3: fd:9c:91:79:ac:b8:28:bd:b4:34:a6:e8:de:6e:1f:c6:ca:4c: a1:45:c5:a8:83:ba:43:68:82:3e:85:2f:e5:74:7a:66:aa:a5: 05:d7:7c:a8:bc:d2:54:e1:22:0f:82:cc:a6:f2:23:9a:69:e0: 29:cf:ca:86:95:a0:2c:8b:d8:de:3b:53:62:75:f3:2a:30:78: aa:70:37:f5:50:29:45:41:c2:18:58:15:58:d9:74:fe:16:8d: 1f:8b:10:cb:83:3a:d7:ac:f3:31:00:c7:5d:21:d9:e1:48:37: 3a:17:24:29:f3:fb:b8:8b:3e:ae:31:c3:43:9e:0f:7d:6c:bd: 9a:2e:1d:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk4NEIxMTAvBgNVBAUTKDNBODMwMjQyRTg0RURDNzY1QTA3MzEyMEFDMjRGMDQw MEU0RjYwNDYwHhcNMjQwNTMxMDQ1NjQ1WhcNMjQwNjA3MDQ1NjQ1WjAYMRYwFAYD VQQDEw02NjU5NTg4ZC0wNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxykcn6lpfOzVS0bycp/ia7HWkD1xVQb5XHp0tbeu+BaA18GMGGJZI1pIcJbK a95o+RVAWryld0I3jU8Qk9DoyeshmrxP3QIfjTySthCxoLt/ZKRO4iw8eGtWLZF6 vyofC13u5NXXYXi25x1dv3Fh2sCTqmqHW3iMR/qv6P1tIEbNykrVy4K7QKoJVH/p 6Yom1ve+KE7T/XmZ5IPBBXL3e4+J/NTxM4pD3KrMhghdXXMuapETPR5haUoKJqeN uhKYDgDmByZTas4sgsn/2TeMSR2lTW8wKjsPGOHYQuxX7K3ImBjDqH3gdBPy/NsF BKn9O2tG5mNN7FPfIcMX/jNw/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgJyxXV 6rRWHcqgyqBJ3paSblh2MB8GA1UdIwQYMBaAFDqDAkLoTtx2WgcxIKwk8EAOT2BG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTg0Qi9GMzJGMDAxNDAx RDgxMUVEOUM4NUY4NTFDNEY5QUUwMi9Pb01DUXVoTzNIWmFCekVnckNUd1FBNVBZ RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vTUNRdWhPM0haYUJ6RWdyQ1R3UUE1UFlFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTg0Qi9GMzJGMDAxNDAxRDgxMUVEOUM4NUY4NTFDNEY5QUUwMi9Pb01DUXVoTzNI WmFCekVnckNUd1FBNVBZRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw56GRsJ5lwazDd/C2Hkl8DqWIip3nlypsMjponKyVTV+mu/VCPPWx Npd2IqoR9OW9WfL6IEprrP5Fm9Q5Co1DLswPGKcNwZ7a38ii66wGNfi6QTs0k0Rx Bfd6uDEUbynGJk8s8eHpHVmfbIXBmRrBBdobHdkzp1t5AmnVGeP9nJF5rLgovbQ0 pujebh/GykyhRcWog7pDaII+hS/ldHpmqqUF13yovNJU4SIPgsym8iOaaeApz8qG laAsi9jeO1NidfMqMHiqcDf1UClFQcIYWBVY2XT+Fo0fixDLgzrXrPMxAMddIdnh SDc6FyQp8/u4iz6uMcNDng99bL2aLh24 -----END CERTIFICATE-----Generated at Fri May 31 06:49:26 2024 by rpki-client on console-ams.rpki-client.org