$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft File: oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json) Hash identifier: 72gjXNy5oAYRLE5lf8aRJZaTjI4Q8Qnhgw9epXNGNBs= Subject key identifier: 22:7B:CB:82:4B:90:71:71:EC:E4:D0:88:76:DB:63:DF:73:17:11:55 Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E Certificate issuer: /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft Manifest number: 5C Signing time: Fri 31 May 2024 08:39:36 +0000 Manifest this update: Fri 31 May 2024 08:39:35 +0000 Manifest next update: Fri 07 Jun 2024 08:39:35 +0000 Files and hashes: 1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: YyLBwx1VCVprA+yAdCgptol4DqjofxGLsDPxAYq97cs=) 2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: 3VSO1DsF8NSUCMtvq8jLtZKfSta520bTk+okzz1kgCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E Validity Not Before: May 31 08:39:35 2024 GMT Not After : Jun 7 08:39:35 2024 GMT Subject: CN=66598cc8-3d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:46:ad:0e:7d:db:54:8a:55:40:af:3e:1b:c8: 34:be:d2:fc:e7:bb:6e:1b:84:1e:21:e1:e4:07:e6: 05:59:c3:88:6f:5e:86:53:40:87:34:0f:f2:90:1b: fb:c3:8a:66:47:17:2f:09:3d:5f:59:86:ff:49:4c: a4:ce:22:1a:21:44:04:d0:70:6b:03:4c:bb:56:db: b8:f8:a1:68:3d:5b:cf:85:c7:24:27:f3:a0:ab:67: c5:5d:8a:26:37:d6:38:d6:d5:96:fe:89:01:0d:71: 7c:85:0f:30:6b:fc:b2:09:53:97:ee:a9:f9:09:3e: f2:61:ad:f0:51:88:49:29:bc:c3:4c:30:6f:9d:b5: 2d:9b:ba:eb:cd:64:38:51:81:bf:d3:34:ed:87:64: d9:4d:aa:12:ab:40:4f:e9:d5:bb:be:aa:9a:7c:c4: c0:d5:60:e2:c0:fd:7a:f3:f5:11:2d:01:cf:27:3f: 0f:40:70:49:57:e7:38:f4:ac:36:48:0c:fc:aa:ce: 52:27:07:b8:b7:e9:4e:f7:e8:f5:48:f6:80:4f:d4: 4b:61:34:4b:42:de:93:fc:5c:4f:77:cf:22:fb:a3: f9:e8:95:1c:0e:df:1b:b8:62:9d:1a:77:a7:3e:71: 50:8b:8e:46:bb:27:37:a9:73:7e:01:3c:fa:be:11: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7B:CB:82:4B:90:71:71:EC:E4:D0:88:76:DB:63:DF:73:17:11:55 X509v3 Authority Key Identifier: keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ce:ee:14:5d:6c:02:d9:68:a5:8c:91:fe:4d:4f:c3:cf:20: 74:b3:e4:d7:d5:44:86:1d:27:e3:e2:7a:67:9b:e5:8d:91:a3: 2b:c1:d6:e7:a1:bd:6e:31:56:a6:37:e3:54:46:71:ad:6a:a3: 5b:2b:31:48:ff:67:fd:02:67:13:5e:f7:af:87:b0:d3:51:00: e3:b2:89:19:cb:1d:9d:ef:ea:30:82:fb:60:66:35:ce:a6:9a: 67:ea:b8:cf:84:45:c2:59:f9:d6:d6:56:b0:3e:c7:6a:b0:a5: 65:dc:29:54:51:3c:db:fb:ee:e0:e2:6d:6c:2d:42:74:ba:85: f3:c5:86:37:74:34:91:3e:e8:f9:24:c9:b6:74:fa:d5:d1:2e: 84:2f:0e:92:66:9b:d8:0f:6d:c5:1f:78:45:34:9c:74:79:81: 6e:9b:91:25:52:b1:21:fb:bb:93:fd:61:5a:e3:89:f0:85:c3: 1a:dd:5d:f6:19:88:9f:73:bf:52:f3:5d:73:92:42:dd:76:f7: 78:bb:4c:78:ed:f7:9b:d1:92:0c:da:4a:f0:59:0f:44:bd:a0: a5:22:80:e8:49:24:43:0f:41:17:67:4d:3c:7b:41:fb:ab:3e: 1e:89:c0:47:f7:12:6b:73:f0:52:7b:44:a1:08:d3:c1:77:65: 70:53:6f:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTYyMDExMC8GA1UEBRMoQTE2QzNGODcyNDFBODNEMUFBNTQ4MEQ0MkE3NEY0RjdE MUNFNUQyRTAeFw0yNDA1MzEwODM5MzVaFw0yNDA2MDcwODM5MzVaMBgxFjAUBgNV BAMTDTY2NTk4Y2M4LTNkMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnRq0OfdtUilVArz4byDS+0vznu24bhB4h4eQH5gVZw4hvXoZTQIc0D/KQG/vD imZHFy8JPV9Zhv9JTKTOIhohRATQcGsDTLtW27j4oWg9W8+FxyQn86CrZ8VdiiY3 1jjW1Zb+iQENcXyFDzBr/LIJU5fuqfkJPvJhrfBRiEkpvMNMMG+dtS2buuvNZDhR gb/TNO2HZNlNqhKrQE/p1bu+qpp8xMDVYOLA/Xrz9REtAc8nPw9AcElX5zj0rDZI DPyqzlInB7i36U736PVI9oBP1EthNEtC3pP8XE93zyL7o/nolRwO3xu4Yp0ad6c+ cVCLjka7Jzepc34BPPq+EejRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUInvLgkuQ cXHs5NCIdttj33MXEVUwHwYDVR0jBBgwFoAUoWw/hyQag9GqVIDUKnT099HOXS4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNjIwLzNBQTU5QURDOTE5 MDExRUU4N0ZFRTAwQkM0RjlBRTAyL29Xd19oeVFhZzlHcVZJRFVLblQwOTlIT1hT NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1d3X2h5UWFnOUdxVklEVUtuVDA5OUhPWFM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NjIwLzNBQTU5QURDOTE5MDExRUU4N0ZFRTAwQkM0RjlBRTAyL29Xd19oeVFhZzlH cVZJRFVLblQwOTlIT1hTNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG7O7hRdbALZaKWMkf5NT8PPIHSz5NfVRIYdJ+Piemeb5Y2RoyvB1ueh vW4xVqY341RGca1qo1srMUj/Z/0CZxNe96+HsNNRAOOyiRnLHZ3v6jCC+2BmNc6m mmfquM+ERcJZ+dbWVrA+x2qwpWXcKVRRPNv77uDibWwtQnS6hfPFhjd0NJE+6Pkk ybZ0+tXRLoQvDpJmm9gPbcUfeEU0nHR5gW6bkSVSsSH7u5P9YVrjifCFwxrdXfYZ iJ9zv1LzXXOSQt1293i7THjt95vRkgzaSvBZD0S9oKUigOhJJEMPQRdnTTx7Qfur Ph6JwEf3Emtz8FJ7RKEI08F3ZXBTb58= -----END CERTIFICATE-----Generated at Fri May 31 10:42:51 2024 by rpki-client on console-fra.rpki-client.org