$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: k+l+tbJdVBSnw06dVyREYBlflYQVi2NYYHt0lRFFKFg= Subject key identifier: 95:DD:0A:53:5E:A6:DB:A6:9A:A2:AF:0A:90:D8:34:09:B2:93:1A:08 Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 91 Signing time: Sun 19 May 2024 06:59:45 +0000 Manifest this update: Sun 19 May 2024 06:59:44 +0000 Manifest next update: Sun 26 May 2024 06:59:44 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: UKgK/sNLMu5U1Rf5p9sJ95FHvVU2XBTGwwfpmbKSbZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: May 19 06:59:44 2024 GMT Not After : May 26 06:59:44 2024 GMT Subject: CN=6649a360-2df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:8d:39:10:ea:7d:ac:20:d7:79:13:8f:cb: a7:b6:56:1b:fa:ba:32:4b:2d:4b:f4:7e:4d:9c:c3: 62:07:97:d9:5a:d7:37:e6:c4:cb:af:1d:50:e6:ab: 83:87:c4:7f:00:00:fb:d4:a3:0e:bc:97:d8:af:c1: de:2b:25:6a:3b:03:e3:fe:bf:5a:d4:5a:01:81:5f: 4b:f9:36:25:ba:b9:ed:05:c5:9e:d2:01:e4:06:dd: 86:62:b8:1c:de:6e:95:c5:ec:c8:95:f2:d6:3e:ec: 95:30:b9:f8:8f:9b:1d:95:a1:5e:87:c5:cd:24:05: fa:d4:7e:98:c9:f1:ed:2c:42:e2:46:3e:2b:6d:b3: 0a:15:17:83:60:8f:4b:a7:29:f9:19:34:b3:04:90: e6:28:b8:bc:ed:01:1d:15:ad:78:00:51:4c:8c:3c: aa:bf:8e:16:f0:df:e0:a4:24:dd:8b:70:08:13:01: 1b:39:5e:90:2e:11:d9:37:d2:4d:60:c9:1d:94:5c: 39:33:ac:c2:41:94:04:9d:9b:4b:8e:9b:c1:d7:cc: 8c:49:86:b0:f2:07:38:9b:03:09:76:7d:1b:eb:64: db:83:06:de:b8:c0:5f:75:1d:46:26:99:ae:cd:cd: 93:cc:ed:6f:58:96:b8:ce:ce:25:b4:f5:f2:8d:90: 9a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DD:0A:53:5E:A6:DB:A6:9A:A2:AF:0A:90:D8:34:09:B2:93:1A:08 X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:62:0b:0c:de:1e:4f:ad:70:6e:e0:33:8b:92:2c:42:ef:48: cf:95:4b:22:fd:41:37:41:36:74:ed:03:80:9b:1e:88:66:1d: c6:b6:21:7e:b2:e6:f0:7d:05:12:1c:4d:2f:de:a0:f8:b3:fc: bb:fa:3d:d0:2d:44:fe:b9:5e:b7:73:49:2d:1d:c2:05:14:7e: e1:80:f3:24:26:0f:bf:ee:54:7c:1d:f2:86:fc:1f:25:c2:31: 06:44:5b:cf:5f:fb:e4:e0:db:ac:d1:e7:8e:85:f2:8e:db:3f: ed:5f:ef:05:88:25:bf:08:a1:67:8c:33:26:65:50:2c:24:da: 23:94:16:03:f7:3a:1c:f2:ca:ae:53:40:c6:11:f5:c0:94:39: ee:44:27:5b:1f:28:6a:da:04:1f:46:9b:a7:bf:9a:64:d4:73: 0d:67:1b:99:0d:b2:8f:1d:4e:f4:e1:91:95:50:04:90:d4:bb: b0:ff:ae:7c:4d:f2:77:0c:e6:ba:4e:37:81:3c:67:2c:d5:f9: d9:2b:bc:bf:f7:b7:eb:50:c9:25:38:0a:fb:f2:85:a2:4b:c7: f4:06:48:19:1e:fc:b5:fa:f5:9a:ff:ff:48:84:ba:c2:09:90: af:47:47:6a:60:16:30:55:22:f2:ad:6a:8a:6a:29:17:56:bb: ff:8a:ba:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjQwNTE5MDY1OTQ0WhcNMjQwNTI2MDY1OTQ0WjAYMRYwFAYD VQQDEw02NjQ5YTM2MC0yZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIGNORDqfawg13kTj8untlYb+roySy1L9H5NnMNiB5fZWtc35sTLrx1Q5quD h8R/AAD71KMOvJfYr8HeKyVqOwPj/r9a1FoBgV9L+TYlurntBcWe0gHkBt2GYrgc 3m6VxezIlfLWPuyVMLn4j5sdlaFeh8XNJAX61H6YyfHtLELiRj4rbbMKFReDYI9L pyn5GTSzBJDmKLi87QEdFa14AFFMjDyqv44W8N/gpCTdi3AIEwEbOV6QLhHZN9JN YMkdlFw5M6zCQZQEnZtLjpvB18yMSYaw8gc4mwMJdn0b62TbgwbeuMBfdR1GJpmu zc2TzO1vWJa4zs4ltPXyjZCagQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXdClNe ptummqKvCpDYNAmykxoIMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUYgsM3h5PrXBu4DOLkixC70jPlUsi/UE3QTZ07QOAmx6IZh3GtiF+ subwfQUSHE0v3qD4s/y7+j3QLUT+uV63c0ktHcIFFH7hgPMkJg+/7lR8HfKG/B8l wjEGRFvPX/vk4Nus0eeOhfKO2z/tX+8FiCW/CKFnjDMmZVAsJNojlBYD9zoc8squ U0DGEfXAlDnuRCdbHyhq2gQfRpunv5pk1HMNZxuZDbKPHU704ZGVUASQ1Luw/658 TfJ3DOa6TjeBPGcs1fnZK7y/97frUMklOAr78oWiS8f0BkgZHvy1+vWa//9IhLrC CZCvR0dqYBYwVSLyrWqKaikXVrv/irph -----END CERTIFICATE-----Generated at Sun May 19 08:25:11 2024 by rpki-client on console-ams.rpki-client.org