$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft File: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json) Hash identifier: T28+pwkXG144/+tqLYh5nq5TdQOjk7bAs9O6I3VioSY= Subject key identifier: 1E:2B:E2:25:0A:43:9E:D4:98:91:F7:1D:F4:52:7B:83:A7:0E:B4:92 Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Certificate serial: 255B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft Manifest number: 2547 Signing time: Fri 31 May 2024 16:06:33 +0000 Manifest this update: Fri 31 May 2024 16:06:33 +0000 Manifest next update: Fri 07 Jun 2024 16:06:33 +0000 Files and hashes: 1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: 9szBA/LbbwnopeFB7DSIwPq7cdrh5+eXpop5Eh5GFsM=) 2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: rpD6lVHx031UbGaINM8AknhCr7BLzz54zr0nC85gcOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9563 (0x255b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Validity Not Before: May 31 16:06:33 2024 GMT Not After : Jun 7 16:06:33 2024 GMT Subject: CN=6659f589-2721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ff:e1:1d:a7:5d:6d:dd:f4:16:d1:df:c5:2b: e3:68:14:1e:86:f8:2c:8e:a0:52:4d:09:37:ab:89: 0a:e8:8e:42:55:f2:4a:e4:41:8d:45:76:65:79:1a: b9:8a:f7:23:2b:f5:96:55:82:ea:36:d4:27:43:3f: 4f:43:42:7c:3f:91:61:0a:39:e6:8a:66:d0:a0:9b: 33:32:b6:87:de:10:5b:26:44:7b:49:09:f3:ea:36: 62:c1:ed:84:1f:9b:15:8e:58:6d:85:b7:64:37:7d: 37:a2:68:29:1c:11:d9:79:14:15:aa:d8:a2:0e:69: 3f:78:68:c3:1e:c2:86:cf:01:11:4b:0c:ef:eb:7f: 43:98:23:de:5d:2a:6c:0e:31:3b:7f:a6:c7:3b:5f: 68:9a:2c:11:d3:04:5c:16:58:bf:cc:0a:74:f8:8e: 95:c4:9e:26:76:f5:7a:12:1d:4f:5a:3c:08:04:82: f5:57:bc:89:23:97:55:29:ae:a5:14:f9:2b:f9:d0: 6c:36:8b:08:35:0b:78:e6:31:c7:01:b2:4e:85:4e: 64:2d:90:70:dc:3e:16:44:e3:52:1a:a4:ee:fb:ed: 16:30:c1:32:ca:9b:89:d2:89:78:57:2d:40:78:79: 76:68:0e:66:42:cc:22:99:15:1f:61:13:51:ff:fd: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2B:E2:25:0A:43:9E:D4:98:91:F7:1D:F4:52:7B:83:A7:0E:B4:92 X509v3 Authority Key Identifier: keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:4e:39:26:99:bd:b7:d1:57:9c:e0:5a:0e:8d:31:02:0b:ab: 0c:9b:51:de:0d:7b:9e:50:63:89:48:eb:95:3c:8e:75:09:58: ba:60:6b:aa:92:02:01:64:32:06:2c:f2:41:1c:f3:88:8e:e1: c5:a7:2b:aa:43:b9:79:2f:41:24:95:c6:02:f8:b4:70:34:74: 7b:69:c3:1d:6d:3c:0d:11:46:55:42:97:73:8d:99:03:70:b9: 0c:7c:23:26:68:6f:24:5e:bd:20:97:d0:12:40:ae:cb:f3:09: d6:6e:45:d2:3b:de:9c:3d:b9:c3:fe:37:be:f4:65:77:7f:4d: 7a:b2:84:42:2a:6d:7c:c2:27:e4:4c:b8:ff:4b:63:4a:c2:b9: e4:77:6b:2c:2f:d8:d5:8c:cc:69:1f:85:26:54:17:10:b4:9a: 9a:e8:5e:93:b7:22:a2:08:ed:fe:df:35:05:74:63:5a:5f:3c: ad:d9:99:0e:cc:dd:d2:54:88:02:94:b0:4a:e9:9a:9e:d4:dc: bf:60:35:4f:2c:d9:95:db:95:2b:f2:00:36:f0:cc:3c:db:c4: 04:c9:1c:64:5d:b1:21:a3:f6:ad:3a:fa:5b:e0:bf:c7:fb:a2: 7b:0e:b8:c5:19:3c:6b:f2:03:8c:8c:f3:7c:11:4d:92:e0:90: 76:f4:6f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMDIxMTAvBgNVBAUTKDM5QkY5Njk5NEFCNEM1NEM5ODNFRTBGNTEwMzY1RjRG RDk4NDE1NDEwHhcNMjQwNTMxMTYwNjMzWhcNMjQwNjA3MTYwNjMzWjAYMRYwFAYD VQQDEw02NjU5ZjU4OS0yNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5v/hHaddbd30FtHfxSvjaBQehvgsjqBSTQk3q4kK6I5CVfJK5EGNRXZleRq5 ivcjK/WWVYLqNtQnQz9PQ0J8P5FhCjnmimbQoJszMraH3hBbJkR7SQnz6jZiwe2E H5sVjlhthbdkN303omgpHBHZeRQVqtiiDmk/eGjDHsKGzwERSwzv639DmCPeXSps DjE7f6bHO19omiwR0wRcFli/zAp0+I6VxJ4mdvV6Eh1PWjwIBIL1V7yJI5dVKa6l FPkr+dBsNosINQt45jHHAbJOhU5kLZBw3D4WRONSGqTu++0WMMEyypuJ0ol4Vy1A eHl2aA5mQswimRUfYRNR//0/TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4r4iUK Q57UmJH3HfRSe4OnDrSSMB8GA1UdIwQYMBaAFDm/lplKtMVMmD7g9RA2X0/ZhBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMwMi80RUE0OEU4NEZC QTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhVeVlQdUQxRURaZlQ5bUVG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09iLVdtVXEweFV5WVB1RDFFRFpmVDltRUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMwMi80RUE0OEU4NEZCQTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhV eVlQdUQxRURaZlQ5bUVGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkTjkmmb230Vec4FoOjTECC6sMm1HeDXueUGOJSOuVPI51CVi6YGuq kgIBZDIGLPJBHPOIjuHFpyuqQ7l5L0EklcYC+LRwNHR7acMdbTwNEUZVQpdzjZkD cLkMfCMmaG8kXr0gl9ASQK7L8wnWbkXSO96cPbnD/je+9GV3f016soRCKm18wifk TLj/S2NKwrnkd2ssL9jVjMxpH4UmVBcQtJqa6F6TtyKiCO3+3zUFdGNaXzyt2ZkO zN3SVIgClLBK6Zqe1Ny/YDVPLNmV25Ur8gA28Mw828QEyRxkXbEho/atOvpb4L/H +6J7DrjFGTxr8gOMjPN8EU2S4JB29G8e -----END CERTIFICATE-----Generated at Fri May 31 20:34:18 2024 by rpki-client on console-ams.rpki-client.org