$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json) Hash identifier: nhJSzxAFIkQdmELiTP3q49CtCaInAf4oAoMzuGHiwYk= Subject key identifier: 4A:B2:4F:E1:03:AD:B4:80:60:09:48:53:AA:8C:89:1E:A8:B7:E3:06 Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 324E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft Manifest number: 3200 Signing time: Sat 18 May 2024 15:39:32 +0000 Manifest this update: Sat 18 May 2024 15:39:32 +0000 Manifest next update: Sat 25 May 2024 15:39:32 +0000 Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: TEQpbjC+5gQd8nQkIfyoI/PFzyVIVRMGqH7UhbSyrVg=) 2: FF0E1AA0DE2011EB95EBE879C4F9AE02.roa (hash: WOcupWa3PGrsVMWvpTitYRlNkwsa6ILND0bikrR9/DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12878 (0x324e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: May 18 15:39:32 2024 GMT Not After : May 25 15:39:32 2024 GMT Subject: CN=6648cbb4-8715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:ba:b4:87:b8:87:b1:fc:b4:06:16:e4:ed: 4f:f5:c3:a8:4f:ee:75:a9:cb:bc:ef:a0:57:f7:7a: dd:7a:52:4b:84:97:11:3f:bf:7e:25:61:37:94:65: f1:70:89:ac:48:af:39:8f:9d:ea:f8:9a:30:c7:6c: a9:20:30:1e:31:29:20:a0:88:1d:26:c1:3b:6f:b9: dc:2e:7f:c0:87:1b:51:7b:65:4a:22:47:10:d7:1b: 45:90:f4:1d:53:e5:6f:78:c7:91:f6:ac:79:80:19: 1d:08:dc:f0:da:ec:7a:29:8c:fd:82:27:ab:16:6c: c2:84:06:bd:24:95:1e:23:7f:c2:19:a0:71:eb:ca: fc:fa:2e:2c:d0:f8:ad:3d:70:63:c2:ad:53:17:43: 5b:f3:47:1e:ab:fb:33:cd:07:08:f6:15:11:b1:13: 9c:fc:ea:93:e7:d2:7c:b2:d4:8e:c5:37:40:d6:7f: c6:8f:0e:4e:59:cf:e3:48:a7:a4:5c:49:5d:a6:18: 81:db:a8:1a:fa:62:73:27:e2:71:f7:10:70:f1:8b: 12:26:72:79:ed:fe:24:a6:ca:83:e8:68:5e:5e:ee: c2:3b:e1:6f:c3:a4:51:9d:70:0e:76:f4:59:6c:82: ac:03:cf:38:77:0e:f3:8b:b2:ef:0a:83:b2:1e:2f: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B2:4F:E1:03:AD:B4:80:60:09:48:53:AA:8C:89:1E:A8:B7:E3:06 X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:32:c8:9a:2d:2c:fc:e7:10:eb:48:b5:4d:be:1e:13:bc:ec: 71:13:3a:e2:8b:f7:a5:7e:00:2f:89:3a:82:95:12:ec:16:25: 0e:48:62:54:6b:a3:1b:c3:ea:42:02:66:c0:a2:34:ef:ee:45: aa:95:f9:4c:17:7b:55:ea:0e:d6:c4:c3:b5:29:7c:9d:63:4f: 8f:1f:45:dd:95:62:8c:58:4e:cf:d9:db:85:f1:ca:6e:28:7a: eb:e7:c4:20:c1:89:24:de:f0:54:81:c1:f6:67:3c:62:0b:c2: fb:af:04:70:dc:1b:6f:9c:0f:be:20:7d:9b:b0:98:50:b7:ae: 5f:fa:05:c3:b3:34:85:6b:e8:e1:31:3c:5f:3f:e8:ef:47:cc: 5b:e1:de:b5:7f:a1:1f:b9:e9:9e:5f:78:9d:af:55:2f:0f:66: 33:bc:12:10:ac:7d:c8:06:01:43:ee:54:ce:92:00:f1:96:51: ac:38:0b:d7:c4:b2:14:1d:44:ce:2e:94:1e:ca:30:ca:77:40: 34:30:d3:49:52:a0:bc:66:f4:17:6d:7b:91:65:a6:6f:4e:53: 24:48:a2:1b:d0:4a:16:cb:2a:c3:de:b2:b8:86:b0:08:32:94: f3:90:38:8b:d2:9c:e4:9c:63:38:2b:14:77:83:05:a7:5a:ca: 6d:40:08:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjQwNTE4MTUzOTMyWhcNMjQwNTI1MTUzOTMyWjAYMRYwFAYD VQQDEw02NjQ4Y2JiNC04NzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApd66tIe4h7H8tAYW5O1P9cOoT+51qcu876BX93rdelJLhJcRP79+JWE3lGXx cImsSK85j53q+Jowx2ypIDAeMSkgoIgdJsE7b7ncLn/AhxtRe2VKIkcQ1xtFkPQd U+VveMeR9qx5gBkdCNzw2ux6KYz9gierFmzChAa9JJUeI3/CGaBx68r8+i4s0Pit PXBjwq1TF0Nb80ceq/szzQcI9hURsROc/OqT59J8stSOxTdA1n/Gjw5OWc/jSKek XEldphiB26ga+mJzJ+Jx9xBw8YsSJnJ57f4kpsqD6GheXu7CO+Fvw6RRnXAOdvRZ bIKsA884dw7zi7LvCoOyHi/kvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqyT+ED rbSAYAlIU6qMiR6ot+MGMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p TEs3bVRnejR1akgxcHJrMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASMsiaLSz85xDrSLVNvh4TvOxxEzrii/elfgAviTqClRLsFiUOSGJU a6Mbw+pCAmbAojTv7kWqlflMF3tV6g7WxMO1KXydY0+PH0XdlWKMWE7P2duF8cpu KHrr58QgwYkk3vBUgcH2ZzxiC8L7rwRw3BtvnA++IH2bsJhQt65f+gXDszSFa+jh MTxfP+jvR8xb4d61f6EfuemeX3idr1UvD2YzvBIQrH3IBgFD7lTOkgDxllGsOAvX xLIUHUTOLpQeyjDKd0A0MNNJUqC8ZvQXbXuRZaZvTlMkSKIb0EoWyyrD3rK4hrAI MpTzkDiL0pzknGM4KxR3gwWnWsptQAho -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org