$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json) Hash identifier: XPtbCJ6TB9eluMO2u668Eo6NedrbN0wPOSZwj2/eH5Q= Subject key identifier: BB:C0:84:C9:DE:83:9F:52:93:DB:69:85:5A:BA:D1:1F:47:A5:06:FF Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 12C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft Manifest number: 12BC Signing time: Sat 18 May 2024 17:35:27 +0000 Manifest this update: Sat 18 May 2024 17:35:26 +0000 Manifest next update: Sat 25 May 2024 17:35:26 +0000 Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: odDjHGUZ8qpjbzXBseWkFz3MIDV/OZ7VauggqbqrHyk=) 2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: U1R9cY9t8nWkUW0Tj0E9U632yjz6THi+xk17WkXJA3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4803 (0x12c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: May 18 17:35:26 2024 GMT Not After : May 25 17:35:26 2024 GMT Subject: CN=6648e6df-be55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:a2:c1:6c:c6:68:e6:b4:99:23:a3:81:85: 24:c1:4c:38:20:92:c2:db:13:fa:40:b6:4d:aa:c2: 92:eb:a9:78:8f:cd:a7:a7:b7:f8:83:dc:51:43:09: 34:f6:b4:7e:84:24:ea:93:3a:c3:08:55:a3:3d:c5: c4:9d:17:4c:c6:15:28:69:f0:5d:f2:32:60:5d:cc: 0b:c4:58:4f:ad:da:b7:6c:03:d6:41:18:bc:ae:b8: 96:9d:50:c4:a8:82:11:f4:72:ae:21:24:e5:d9:a6: 62:ce:7e:4b:d9:64:a7:65:09:34:dd:b6:f7:2f:1c: 73:7e:93:7a:f0:fd:d8:28:6f:23:6c:81:8e:cd:fc: 9c:50:75:8b:92:ee:e4:65:99:16:a6:7e:35:de:a3: fd:bb:f3:1d:59:f3:7e:80:55:ef:15:b0:11:5b:2c: b5:d3:ea:a9:51:ff:9f:9b:f5:9f:86:fa:60:ec:41: 98:98:d1:4e:45:7d:d0:fa:2b:15:a2:a1:56:f3:45: e0:94:ac:78:a6:d4:a4:0e:da:5f:e6:1b:2b:77:75: ae:26:ea:ec:e0:76:35:63:5a:8c:3c:88:46:ec:84: 28:66:51:c0:51:19:3e:ba:ea:16:10:67:1a:99:03: 34:4f:1b:06:84:ac:90:79:3e:59:d6:2b:fc:e8:32: 6e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C0:84:C9:DE:83:9F:52:93:DB:69:85:5A:BA:D1:1F:47:A5:06:FF X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6c:c8:c2:7e:f7:74:7d:b6:0e:bb:d6:48:df:c9:5d:c5:2f: 3c:eb:21:54:fa:e0:7f:a4:3b:a7:08:5d:8b:28:b7:30:22:33: 13:36:04:21:96:dd:42:96:f6:d7:10:8e:93:6f:cf:28:71:cb: 91:a3:67:21:cb:12:a4:b4:83:01:93:af:4d:53:c1:9a:2b:be: 86:fd:c7:55:8f:d1:61:03:37:df:4e:3d:ea:e0:84:5f:5e:eb: 1f:be:59:74:2e:92:5e:67:1b:bd:a0:92:2e:3f:79:41:b8:db: 2e:43:5f:ee:6c:81:93:c1:8c:3e:ab:9f:a1:2d:17:6e:b9:d9: 39:5c:77:76:7b:90:14:1c:6d:b3:d2:c6:93:df:fc:61:a8:3d: 95:0a:db:a5:4c:6a:e1:30:be:d1:0e:0e:67:83:01:70:e1:97: 52:a7:03:68:e9:98:58:d4:bb:bd:f7:41:8e:b6:db:a2:c1:51: 0e:dd:22:6d:3c:4e:ed:d2:c3:ee:b8:ca:9e:86:fd:de:75:cb: 8e:73:7d:f3:21:f3:3d:16:4f:1d:89:34:60:52:e1:47:3a:5c: 36:70:da:97:19:3e:3f:2c:81:6a:aa:fb:18:68:b1:75:59:b0: 77:00:e2:a8:ed:89:bd:33:d1:4e:0f:3f:db:36:63:91:0d:63: 79:1f:02:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjQwNTE4MTczNTI2WhcNMjQwNTI1MTczNTI2WjAYMRYwFAYD VQQDEw02NjQ4ZTZkZi1iZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4x+iwWzGaOa0mSOjgYUkwUw4IJLC2xP6QLZNqsKS66l4j82np7f4g9xRQwk0 9rR+hCTqkzrDCFWjPcXEnRdMxhUoafBd8jJgXcwLxFhPrdq3bAPWQRi8rriWnVDE qIIR9HKuISTl2aZizn5L2WSnZQk03bb3LxxzfpN68P3YKG8jbIGOzfycUHWLku7k ZZkWpn413qP9u/MdWfN+gFXvFbARWyy10+qpUf+fm/Wfhvpg7EGYmNFORX3Q+isV oqFW80XglKx4ptSkDtpf5hsrd3WuJurs4HY1Y1qMPIhG7IQoZlHAURk+uuoWEGca mQM0TxsGhKyQeT5Z1iv86DJuuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvAhMne g59Sk9tphVq60R9HpQb/MB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUI0RS8yQ0E0NzA2Njk5NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhk WVJTd0gyd3Z5SW9Ycl9TLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUbMjCfvd0fbYOu9ZI38ldxS886yFU+uB/pDunCF2LKLcwIjMTNgQh lt1ClvbXEI6Tb88occuRo2chyxKktIMBk69NU8GaK76G/cdVj9FhAzffTj3q4IRf Xusfvll0LpJeZxu9oJIuP3lBuNsuQ1/ubIGTwYw+q5+hLRduudk5XHd2e5AUHG2z 0saT3/xhqD2VCtulTGrhML7RDg5ngwFw4ZdSpwNo6ZhY1Lu990GOttuiwVEO3SJt PE7t0sPuuMqehv3edcuOc33zIfM9Fk8diTRgUuFHOlw2cNqXGT4/LIFqqvsYaLF1 WbB3AOKo7Ym9M9FODz/bNmORDWN5HwIS -----END CERTIFICATE-----Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org