$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft File: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft (raw, json) Hash identifier: ppFOq0pbD3poRui/m3En5OcfhJoqgFPUJENHpRccHxc= Subject key identifier: C7:50:2B:03:81:76:91:C9:48:56:C1:76:07:B8:F8:8B:DD:AD:ED:68 Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft Manifest number: 0664 Signing time: Sat 18 May 2024 23:33:26 +0000 Manifest this update: Sat 18 May 2024 23:33:25 +0000 Manifest next update: Sat 25 May 2024 23:33:25 +0000 Files and hashes: 1: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl (hash: vEApfbgTm7o4gInEX+r9Tu9Zh1BoL8cGWkN0qIXRiOk=) 2: 9F46C468355711EBA5B81020C4F9AE02.roa (hash: 1vFGeejegvhcdJGYYXFyr/32PUVJ2Vw2WMC3jg847VA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Validity Not Before: May 18 23:33:25 2024 GMT Not After : May 25 23:33:25 2024 GMT Subject: CN=66493ac6-19ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:5b:f6:6e:bf:e8:a8:70:e3:31:b0:c7:43: e3:3d:a5:ce:9c:72:01:01:07:22:58:3e:87:f1:66: af:02:c2:f2:08:d7:a9:2c:1e:ed:7d:cc:90:c0:16: 51:8e:90:85:71:15:ea:90:f4:af:cf:ee:ba:bd:a2: d5:88:44:e2:e2:bc:f3:dc:dd:91:e5:de:fb:47:3e: b6:e4:b2:27:0e:b4:62:4f:3a:91:6b:d5:cf:cc:3b: d5:ac:a5:21:29:4f:f7:46:93:0c:21:65:b5:9b:1a: fe:2c:7b:07:7e:4c:8a:26:ed:f8:de:54:06:bc:5c: 72:40:42:e2:4a:f8:89:be:f6:8b:21:32:ba:b9:59: 3a:9a:6a:cf:ac:2a:c8:0f:8f:72:a0:bd:36:b8:df: 2c:13:92:41:87:e6:4f:9f:19:4a:79:47:0d:78:1b: a9:42:d1:6c:07:de:46:21:15:6f:fa:e5:9d:15:25: 53:d4:83:6e:72:39:b4:2f:ae:e6:90:c1:65:cf:d3: 51:b2:20:2a:df:dd:7e:e8:95:b6:67:ba:00:85:45: 1a:b3:23:6a:41:1c:c7:d6:3a:9e:39:d5:81:73:92: e0:16:dc:c4:2e:a0:81:a8:19:0e:84:3e:ba:37:00: 72:1a:53:48:5c:d4:e1:19:35:29:ec:d4:cc:2c:a6: 75:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:50:2B:03:81:76:91:C9:48:56:C1:76:07:B8:F8:8B:DD:AD:ED:68 X509v3 Authority Key Identifier: keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d3:3b:c0:ae:2e:8a:a6:84:d1:e6:31:51:0d:71:86:dc:cc: 0b:f6:2a:d8:bf:39:54:07:c2:e0:21:94:80:bd:bb:93:44:64: b6:9a:8e:05:c3:78:fd:d7:1d:b8:8d:b1:6b:44:a8:e8:cf:fc: 7c:db:ba:b7:44:dd:6f:74:17:57:cf:b5:f1:26:51:1d:a0:36: 2b:b3:2c:e6:2f:7f:70:03:0d:3d:7b:37:e1:fe:79:9e:7e:b2: 04:de:8a:c3:59:5f:fd:b8:e7:0e:b8:cc:15:c4:24:58:1c:b2: 30:cb:c7:63:c4:93:ae:be:b2:a3:f7:31:ea:a3:e1:ba:82:b3: 70:0a:70:3c:a0:07:1c:74:a5:75:51:d7:d5:68:1f:a7:e1:1d: 7b:11:63:2b:da:f3:11:1b:84:9f:55:8c:ea:8d:46:3f:89:b3: 52:ee:df:72:36:df:b3:77:5e:70:5b:8a:2e:c4:ac:62:ab:4d: c2:72:78:aa:8b:27:ad:fb:47:73:cd:bd:02:09:97:77:69:07: ef:2a:32:ad:b8:e4:a0:58:9c:90:6c:33:e7:49:9e:a6:6e:00: 5d:e8:f2:d8:c5:b7:a0:36:55:40:73:37:93:e7:de:77:4a:f7: 63:11:44:89:88:0d:2b:24:e6:78:d7:06:db:02:3b:86:a6:10: 20:3d:0a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE4ODcxMTAvBgNVBAUTKEUwRTlCOTM5OUI4QTRBNUZEQ0RFMjA5RkM1QkVDMDc4 QUY5NUNGN0IwHhcNMjQwNTE4MjMzMzI1WhcNMjQwNTI1MjMzMzI1WjAYMRYwFAYD VQQDEw02NjQ5M2FjNi0xOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvixb9m6/6Khw4zGwx0PjPaXOnHIBAQciWD6H8WavAsLyCNepLB7tfcyQwBZR jpCFcRXqkPSvz+66vaLViETi4rzz3N2R5d77Rz625LInDrRiTzqRa9XPzDvVrKUh KU/3RpMMIWW1mxr+LHsHfkyKJu343lQGvFxyQELiSviJvvaLITK6uVk6mmrPrCrI D49yoL02uN8sE5JBh+ZPnxlKeUcNeBupQtFsB95GIRVv+uWdFSVT1INucjm0L67m kMFlz9NRsiAq391+6JW2Z7oAhUUasyNqQRzH1jqeOdWBc5LgFtzELqCBqBkOhD66 NwByGlNIXNThGTUp7NTMLKZ1iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdQKwOB dpHJSFbBdge4+Ivdre1oMB8GA1UdIwQYMBaAFODpuTmbikpf3N4gn8W+wHivlc97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTg4Ny84NEVFOEI2MDM1 NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1NsX2MzaUNmeGI3QWVLLVZ6 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRPbTVPWnVLU2xfYzNpQ2Z4YjdBZUstVnozcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTg4Ny84NEVFOEI2MDM1NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1Ns X2MzaUNmeGI3QWVLLVZ6M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi0zvAri6KpoTR5jFRDXGG3MwL9irYvzlUB8LgIZSAvbuTRGS2mo4F w3j91x24jbFrRKjoz/x827q3RN1vdBdXz7XxJlEdoDYrsyzmL39wAw09ezfh/nme frIE3orDWV/9uOcOuMwVxCRYHLIwy8djxJOuvrKj9zHqo+G6grNwCnA8oAccdKV1 UdfVaB+n4R17EWMr2vMRG4SfVYzqjUY/ibNS7t9yNt+zd15wW4ouxKxiq03Ccniq iyet+0dzzb0CCZd3aQfvKjKtuOSgWJyQbDPnSZ6mbgBd6PLYxbegNlVAczeT5953 SvdjEUSJiA0rJOZ41wbbAjuGphAgPQoj -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org