$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: XuQKRnQcTsNzcdfyUdPYIDQu6JqXHgWHYWaEamnnm0o= Subject key identifier: 0D:4D:BD:9D:5F:99:06:D7:45:00:BD:B8:1E:D7:01:3B:43:8B:A8:03 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: FA Signing time: Sun 19 May 2024 05:40:32 +0000 Manifest this update: Sun 19 May 2024 05:40:32 +0000 Manifest next update: Sun 26 May 2024 05:40:32 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: G1ut+wJ15whZDdPmoSOhjCktZ4rKz7cYLBL2K9w9JlA=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: Z+8OAsXUqTPdaxZduFocVP1QFHv7C2jepVgKTrjE3Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: May 19 05:40:32 2024 GMT Not After : May 26 05:40:32 2024 GMT Subject: CN=664990d0-1a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1e:d1:ab:a5:2a:53:f7:1e:77:e7:33:a8:ee: f1:88:4a:ff:75:3f:06:89:d7:c7:95:ef:59:d5:5f: e0:e3:7b:ca:bf:da:d9:5c:97:27:57:91:8c:3c:5f: 01:6c:33:ba:fb:70:46:a9:b3:9c:6c:7a:44:77:20: 12:89:6b:58:60:db:89:b8:d4:93:ed:e1:99:c9:1b: dd:63:0c:31:80:45:51:e3:61:98:33:77:03:78:93: 68:9f:7e:f1:3f:52:53:b5:9f:09:eb:79:14:09:3f: b9:7f:46:07:e4:2f:12:89:aa:2c:3a:72:5e:3e:5c: 8f:09:2f:b6:b2:e8:2b:11:cb:84:a3:33:1e:b4:20: 72:e0:10:d8:f6:32:f6:23:48:6c:58:5b:bf:bb:9e: fa:88:26:ad:2e:08:f8:92:47:81:fd:fe:a9:c4:92: 29:5c:58:7c:09:49:12:32:26:3b:62:17:14:d3:9b: af:fe:0f:fe:a7:6f:a1:4b:b5:48:30:d7:96:68:36: 6a:02:19:e3:02:e5:17:ec:e7:9b:19:d4:a1:01:8b: 96:60:36:af:52:8c:8e:e3:f8:4a:e4:f6:81:aa:d7: d6:b3:6c:53:5a:d7:6c:0e:fb:9e:aa:cf:92:43:ff: 40:b0:43:6e:ba:91:d7:16:c0:8d:31:21:50:96:f1: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4D:BD:9D:5F:99:06:D7:45:00:BD:B8:1E:D7:01:3B:43:8B:A8:03 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:83:f0:0e:e0:41:45:7a:c4:a6:d8:6c:93:65:2d:05:68:34: de:3d:8f:f0:ae:62:d7:fc:bb:89:ee:23:80:d0:90:26:05:12: d3:68:54:ab:cd:11:d3:a1:14:9e:c8:6e:fc:f2:77:b4:4c:c2: 05:24:18:cd:bf:99:84:bd:dd:f7:f8:bf:74:37:78:1e:a3:63: fd:3a:7b:f4:3b:92:6b:53:46:56:b3:cb:89:e3:92:e3:6c:19: 4a:03:98:18:db:a6:cd:61:b4:1e:2d:a5:c5:26:26:65:51:86: a6:1e:50:4c:e9:45:10:f9:aa:6b:1c:ce:ab:e2:e8:80:7f:09: 82:c5:86:72:6f:66:7d:5d:70:49:f4:3c:d8:0a:0f:62:6c:20: 77:41:9c:51:67:e6:e1:46:35:e6:e4:f0:a5:67:b0:2e:67:35: 03:a6:50:e5:0f:05:ee:b0:ba:62:0d:2c:97:13:df:0f:1f:28: 3c:d4:62:d7:c4:bf:59:42:fa:79:e0:88:9c:83:71:85:5a:4a: de:b1:ae:4d:37:ba:b6:cd:47:c0:fd:a6:71:39:b0:ad:6c:3a: 89:71:94:69:94:0c:51:d2:35:2c:d8:31:0a:64:35:02:5b:2c: ec:90:d0:11:1f:8d:3a:cb:c4:e3:8d:61:2f:84:a4:56:0f:cf: a8:88:88:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjQwNTE5MDU0MDMyWhcNMjQwNTI2MDU0MDMyWjAYMRYwFAYD VQQDEw02NjQ5OTBkMC0xYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3h7Rq6UqU/ced+czqO7xiEr/dT8GidfHle9Z1V/g43vKv9rZXJcnV5GMPF8B bDO6+3BGqbOcbHpEdyASiWtYYNuJuNST7eGZyRvdYwwxgEVR42GYM3cDeJNon37x P1JTtZ8J63kUCT+5f0YH5C8SiaosOnJePlyPCS+2sugrEcuEozMetCBy4BDY9jL2 I0hsWFu/u576iCatLgj4kkeB/f6pxJIpXFh8CUkSMiY7YhcU05uv/g/+p2+hS7VI MNeWaDZqAhnjAuUX7OebGdShAYuWYDavUoyO4/hK5PaBqtfWs2xTWtdsDvueqs+S Q/9AsENuupHXFsCNMSFQlvFO7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1NvZ1f mQbXRQC9uB7XATtDi6gDMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATg/AO4EFFesSm2GyTZS0FaDTePY/wrmLX/LuJ7iOA0JAmBRLTaFSr zRHToRSeyG788ne0TMIFJBjNv5mEvd33+L90N3geo2P9Onv0O5JrU0ZWs8uJ45Lj bBlKA5gY26bNYbQeLaXFJiZlUYamHlBM6UUQ+aprHM6r4uiAfwmCxYZyb2Z9XXBJ 9DzYCg9ibCB3QZxRZ+bhRjXm5PClZ7AuZzUDplDlDwXusLpiDSyXE98PHyg81GLX xL9ZQvp54Iicg3GFWkresa5NN7q2zUfA/aZxObCtbDqJcZRplAxR0jUs2DEKZDUC WyzskNARH406y8TjjWEvhKRWD8+oiIgr -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org