$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: 0uOimEkM18z2CWOE74ehJrXprhOybf410jUPkiHgbv8= Subject key identifier: 8E:C5:D7:A7:2F:5F:66:7F:F4:74:B9:5B:6F:F6:CA:E2:B5:6D:F5:11 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 33D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 33CF Signing time: Sat 18 May 2024 14:33:41 +0000 Manifest this update: Sat 18 May 2024 14:33:41 +0000 Manifest next update: Sat 25 May 2024 14:33:41 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: 04yz2ftYycWpxupaDArzGP5Z/qg8Yzm1WFQk71TM/C0=) 2: EEDE81122E1F11EBB84D5E5BC4F9AE02.roa (hash: S0cZ3UCYU+mid6af6GRVdhGlHRTv/LuOF/lRxv7Qj2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13271 (0x33d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: May 18 14:33:41 2024 GMT Not After : May 25 14:33:41 2024 GMT Subject: CN=6648bc45-3040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:f7:5c:9f:31:c2:30:4d:36:28:e0:8d:f6: 48:c6:17:bd:57:b5:52:e3:b3:7a:5a:64:e1:cf:ed: 0e:14:35:b7:a9:81:c4:78:b8:70:43:66:bd:f8:dc: 5a:59:32:0a:c7:1e:16:b7:fe:5b:c7:64:2b:1b:dc: eb:59:74:d3:a0:34:90:78:15:9c:a8:eb:bf:7d:74: ff:06:1b:63:f4:3b:6f:7c:0e:c7:d6:bc:3e:b2:56: 8c:75:e1:27:af:98:75:35:c3:f2:c9:80:07:2a:55: 5b:4f:db:99:7f:6c:90:1e:18:16:d7:72:03:e8:6b: 21:9d:5e:4f:9d:d0:7f:01:d2:21:8f:9b:0d:4e:7d: 62:8b:2c:82:ef:e2:42:65:87:1c:a5:9b:1f:65:23: 07:f9:f0:1c:36:b1:d0:6b:9a:a5:dc:44:ab:cc:bd: a7:28:27:28:98:fb:01:3d:93:ae:27:ff:a7:05:c9: 81:89:7a:7d:a0:66:c9:50:67:73:14:26:ce:d2:44: b7:e6:35:14:9d:69:fb:59:27:1c:c1:f7:43:bc:1b: 16:8e:a2:9c:40:57:99:83:d9:55:d7:5d:e1:cf:66: 1d:a4:21:d8:d4:cc:7e:43:54:6e:ea:28:a6:a0:f6: b5:b7:99:b3:fe:f5:ae:d8:38:a0:f8:89:3e:84:5e: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C5:D7:A7:2F:5F:66:7F:F4:74:B9:5B:6F:F6:CA:E2:B5:6D:F5:11 X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:55:5f:c1:6c:a1:68:14:fb:a1:42:95:0a:6c:31:9f:d2:09: a8:7f:53:52:3b:5c:19:3d:4a:45:73:d0:f4:3a:80:90:9f:19: 51:93:b2:f2:5f:00:b5:97:b5:37:e5:2f:c0:6f:81:bf:49:26: e7:d1:4b:b3:95:73:84:48:5d:4f:57:8f:f0:7d:50:03:c2:f0: ee:bc:55:19:a3:4c:47:a0:ef:1b:c1:00:54:0f:5d:75:cd:f1: 57:b4:00:af:11:1c:f4:56:d6:3a:29:17:b2:ed:7b:f7:45:9d: e8:4b:47:af:09:35:c9:35:9e:fb:34:ef:81:51:3c:b3:39:f5: c3:c2:67:5f:5c:0f:04:80:1d:04:68:71:c2:d3:87:1b:77:49: f7:77:5d:07:a4:55:ff:e1:91:f5:0f:94:7f:27:d9:17:73:ee: bd:11:e4:e9:c6:5a:c0:1e:17:48:f0:d6:83:0d:07:ee:3c:ae: 0e:fc:fc:84:b7:dd:4f:c0:76:c0:1c:b5:e6:fd:ed:83:a0:63: 0b:2c:53:e5:a7:db:3b:a6:e9:fa:93:da:f8:3a:6b:8c:05:f1: 5e:93:1b:c9:39:1e:dd:c7:0d:ca:60:23:1a:60:61:45:15:f7: f5:5d:58:76:f8:8a:dc:0e:d7:4b:1a:c4:39:5f:43:4a:95:92: 19:db:91:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjQwNTE4MTQzMzQxWhcNMjQwNTI1MTQzMzQxWjAYMRYwFAYD VQQDEw02NjQ4YmM0NS0zMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5L3XJ8xwjBNNijgjfZIxhe9V7VS47N6WmThz+0OFDW3qYHEeLhwQ2a9+Nxa WTIKxx4Wt/5bx2QrG9zrWXTToDSQeBWcqOu/fXT/Bhtj9DtvfA7H1rw+slaMdeEn r5h1NcPyyYAHKlVbT9uZf2yQHhgW13ID6GshnV5PndB/AdIhj5sNTn1iiyyC7+JC ZYccpZsfZSMH+fAcNrHQa5ql3ESrzL2nKCcomPsBPZOuJ/+nBcmBiXp9oGbJUGdz FCbO0kS35jUUnWn7WSccwfdDvBsWjqKcQFeZg9lV113hz2YdpCHY1Mx+Q1Ru6iim oPa1t5mz/vWu2Dig+Ik+hF52qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7F16cv X2Z/9HS5W2/2yuK1bfURMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRVV/BbKFoFPuhQpUKbDGf0gmof1NSO1wZPUpFc9D0OoCQnxlRk7Ly XwC1l7U35S/Ab4G/SSbn0UuzlXOESF1PV4/wfVADwvDuvFUZo0xHoO8bwQBUD111 zfFXtACvERz0VtY6KRey7Xv3RZ3oS0evCTXJNZ77NO+BUTyzOfXDwmdfXA8EgB0E aHHC04cbd0n3d10HpFX/4ZH1D5R/J9kXc+69EeTpxlrAHhdI8NaDDQfuPK4O/PyE t91PwHbAHLXm/e2DoGMLLFPlp9s7pun6k9r4OmuMBfFekxvJOR7dxw3KYCMaYGFF Fff1XVh2+IrcDtdLGsQ5X0NKlZIZ25F6 -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org