$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json) Hash identifier: Z55qulwRkkTkhK4F+Jch7KRgyazx7NiKsoO5/mMY/+Y= Subject key identifier: 96:F5:97:7F:C1:A6:A7:3B:2C:9F:1A:CA:55:DD:B3:9A:C8:FC:81:EB Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft Manifest number: 12 Signing time: Sun 19 May 2024 08:49:50 +0000 Manifest this update: Sun 19 May 2024 08:49:49 +0000 Manifest next update: Sun 26 May 2024 08:49:49 +0000 Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: XbpieIVS2pQFjtPQUb5Y7CXa3wYj8OJpPyXdYmWLSAI=) 2: 3C9EEAEAFD7F11EE80AFB05DC4F9AE02.roa (hash: pABTBanLSYzAhPD0hBNEEi3ewEmiL4cKfhpiegHFtgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Validity Not Before: May 19 08:49:49 2024 GMT Not After : May 26 08:49:49 2024 GMT Subject: CN=6649bd2e-b9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:58:84:13:3c:b5:59:67:84:eb:c8:bb:f2: d6:79:9a:0b:f7:8d:5d:7f:bf:1b:ad:88:55:d0:dd: 38:5b:95:65:f6:c6:96:57:ce:26:e2:22:93:58:d4: 7f:2c:6f:e3:76:95:08:28:72:02:66:fc:04:8c:78: 5b:a3:c9:f8:33:78:d5:ab:6f:1f:06:01:03:c3:d0: ba:c6:ff:3e:da:28:3e:ea:4a:61:bf:91:bf:5b:09: d2:0f:a9:c9:99:db:4f:f3:e3:16:2e:2c:c3:a8:54: fb:44:2e:c5:fc:0f:67:e9:72:f3:56:ed:0b:79:14: e3:13:5a:95:e9:62:1b:1a:09:41:54:63:61:5b:48: 11:94:de:1e:7e:2c:76:24:c1:bf:24:fc:c8:22:b6: 6d:a5:11:6d:2a:d1:d6:19:e3:0e:92:28:cf:a9:27: b8:f7:38:d5:70:d2:d3:e4:f3:ec:29:91:30:76:56: c0:ed:d2:4a:29:18:6f:00:09:95:f1:99:bb:ec:0d: 9f:f8:7c:88:92:ea:e9:66:6e:98:33:4c:63:11:c4: 51:9a:98:ed:0c:af:3b:b3:08:13:ba:4d:70:43:72: 25:53:9d:e0:5d:ed:60:09:a8:90:68:b8:e0:d9:b0: bd:e0:10:b6:c8:f7:54:4d:68:d4:75:97:62:f9:63: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F5:97:7F:C1:A6:A7:3B:2C:9F:1A:CA:55:DD:B3:9A:C8:FC:81:EB X509v3 Authority Key Identifier: keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9c:7e:8f:d5:aa:9d:50:49:cc:1b:7c:69:15:88:70:51:70: cc:b3:bc:ed:59:7b:87:87:6d:c3:5b:9e:ba:d2:a0:28:fe:73: eb:1c:69:e6:81:0c:e1:fa:a5:10:f6:0d:ac:b0:e6:18:0d:e3: 40:02:c7:fb:aa:57:e4:eb:aa:78:cc:90:49:7f:7e:1d:5f:10: b2:32:d4:06:3d:7f:f1:75:5d:ed:a9:34:1c:fe:4f:62:f9:d4: a8:d4:05:c1:c6:26:6c:42:27:b3:61:9f:05:82:f0:bd:d6:33: 39:da:c6:fb:db:46:d7:97:99:1e:5a:8c:0a:5a:01:cb:55:6a: f1:71:8c:9b:03:f0:4c:6f:7a:89:1b:bc:f8:fd:05:0e:47:3f: b0:5e:1b:f5:4b:ff:2b:49:c5:ad:7b:c1:57:4f:e1:bf:2a:d4: b5:d9:0c:0e:ee:ce:0d:69:ab:cd:cc:ab:28:3b:25:53:49:cc: 5e:64:4a:7e:80:16:45:85:5e:93:5b:ae:5c:05:d3:49:6e:c2: 7e:f3:2e:7e:f1:84:7d:d3:b9:45:a1:f2:b7:27:ee:ca:12:bd: a6:78:03:4a:7f:f6:9c:71:ea:92:4b:ba:9d:72:63:85:5e:64: 39:52:9e:30:9c:24:cd:25:62:d3:0f:4e:e9:10:62:82:c0:8d: 5a:49:86:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzBGMjExMC8GA1UEBRMoQTAwMzNGNDk0MzYzMERDOTRFMkRERjVGMkE2Qjg4RTg2 NjQ2MUFFNzAeFw0yNDA1MTkwODQ5NDlaFw0yNDA1MjYwODQ5NDlaMBgxFjAUBgNV BAMTDTY2NDliZDJlLWI5ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+LliEEzy1WWeE68i78tZ5mgv3jV1/vxutiFXQ3ThblWX2xpZXzibiIpNY1H8s b+N2lQgocgJm/ASMeFujyfgzeNWrbx8GAQPD0LrG/z7aKD7qSmG/kb9bCdIPqcmZ 20/z4xYuLMOoVPtELsX8D2fpcvNW7Qt5FOMTWpXpYhsaCUFUY2FbSBGU3h5+LHYk wb8k/Mgitm2lEW0q0dYZ4w6SKM+pJ7j3ONVw0tPk8+wpkTB2VsDt0kopGG8ACZXx mbvsDZ/4fIiS6ulmbpgzTGMRxFGamO0MrzuzCBO6TXBDciVTneBd7WAJqJBouODZ sL3gELbI91RNaNR1l2L5Ywq7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlvWXf8Gm pzssnxrKVd2zmsj8geswHwYDVR0jBBgwFoAUoAM/SUNjDclOLd9fKmuI6GZGGucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDMEYyLzdGMzNFRTI0RkQ3 RTExRUVBMUIzNTM1Q0M0RjlBRTAyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0FNX1NVTmpEY2xPTGQ5ZkttdUk2R1pHR3VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD MEYyLzdGMzNFRTI0RkQ3RTExRUVBMUIzNTM1Q0M0RjlBRTAyL29BTV9TVU5qRGNs T0xkOWZLbXVJNkdaR0d1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACycfo/Vqp1QScwbfGkViHBRcMyzvO1Ze4eHbcNbnrrSoCj+c+scaeaB DOH6pRD2Dayw5hgN40ACx/uqV+TrqnjMkEl/fh1fELIy1AY9f/F1Xe2pNBz+T2L5 1KjUBcHGJmxCJ7NhnwWC8L3WMznaxvvbRteXmR5ajApaActVavFxjJsD8Exveokb vPj9BQ5HP7BeG/VL/ytJxa17wVdP4b8q1LXZDA7uzg1pq83Mqyg7JVNJzF5kSn6A FkWFXpNbrlwF00luwn7zLn7xhH3TuUWh8rcn7soSvaZ4A0p/9pxx6pJLup1yY4Ve ZDlSnjCcJM0lYtMPTukQYoLAjVpJhq8= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org