$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json) Hash identifier: wplty9++sXGKKoeOX8/rvnwxtdNjOUvowryUC166h/8= Subject key identifier: F8:0B:12:97:25:55:9C:B9:A3:C1:EC:51:28:1C:E3:15:FE:19:B7:4E Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft Manifest number: 01CC Signing time: Sun 19 May 2024 04:23:55 +0000 Manifest this update: Sun 19 May 2024 04:23:54 +0000 Manifest next update: Sun 26 May 2024 04:23:54 +0000 Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: M+h3MYNm54Nz3SVUISDrEFs63zm2CHJTRIvQ19Fo/VM=) 2: 98D755EC05B311ED99658959C4F9AE02.roa (hash: uwLp1/Q6G+FuSFkcfPepkB3cVRgLufL9+AUBfneegzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Validity Not Before: May 19 04:23:54 2024 GMT Not After : May 26 04:23:54 2024 GMT Subject: CN=66497edb-dda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:17:e0:eb:9b:a5:b3:f7:46:b8:a4:87:e2: 9a:d5:3d:67:07:79:19:0c:59:a3:b8:b6:c3:ad:ee: bd:aa:b3:5f:46:b6:47:8c:7f:95:ce:b4:50:31:1f: 5a:29:82:a3:46:3f:45:0b:04:2a:22:a4:e1:a6:1f: 39:a0:50:83:05:0f:84:89:02:59:41:94:e2:e7:75: 9c:c1:62:c8:10:20:b2:06:33:ac:12:87:a1:08:a6: ea:9d:fe:29:2d:ce:a0:6c:ef:1d:66:c3:eb:bc:a9: a6:65:0d:bb:11:90:22:eb:13:5f:9c:01:eb:06:84: 51:98:b1:5a:1b:7a:56:95:61:ff:22:8e:7e:9d:49: 06:93:d2:15:c1:b0:c9:b7:df:7b:22:f6:98:f3:51: ae:5d:ca:c6:d1:b4:6b:cd:f4:7d:b8:4b:47:b9:29: 5e:3d:89:e1:e7:3e:a1:3f:41:fd:55:e0:f0:64:e9: a7:f0:63:d9:fb:92:c6:ed:05:f6:8b:8b:15:e4:86: 94:e9:f1:ae:6e:a8:f8:8e:fc:aa:90:31:28:92:5b: 76:80:f8:be:e3:50:70:4d:23:01:ac:04:cf:48:45: 37:72:59:d3:7c:90:48:02:8b:e7:36:3f:97:3c:37: 5b:d7:6f:dc:9c:06:cc:e1:e9:a0:01:6e:8e:94:57: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:12:97:25:55:9C:B9:A3:C1:EC:51:28:1C:E3:15:FE:19:B7:4E X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:99:93:0f:e9:64:45:ab:85:85:55:98:59:c0:11:e3:f3:f4: 32:b9:bd:36:17:8e:d8:27:35:88:a4:98:8f:e5:81:94:e2:ef: 16:58:7a:9a:a9:b8:be:d0:99:65:a5:99:ce:ed:76:fe:07:0c: cb:fd:79:70:8d:36:0b:af:f4:6e:5e:98:44:dc:97:59:ec:f6: a1:61:bd:c0:e2:bb:f2:e8:20:51:db:c3:9e:7b:46:62:41:c0: ab:57:92:18:16:5c:c9:44:95:1d:44:1b:e5:a8:45:c7:24:8b: 52:7f:f7:4c:11:6b:84:bb:b8:1f:c3:5f:31:3b:84:15:10:f6: f0:59:0c:60:6c:e5:fb:9b:91:ab:36:be:9f:6b:d4:66:3e:24: f2:3f:a3:09:60:3c:1b:93:6f:e7:b1:15:aa:8e:ea:de:1c:0d: 6b:82:82:e7:9a:3d:d7:98:3c:b0:08:f4:de:9a:f6:39:00:44: 7b:2d:92:35:83:7a:8a:e3:b3:4a:10:62:21:06:7f:b8:a0:a5: 4b:df:c3:10:1a:82:c4:b6:dd:21:cd:39:47:29:d1:7c:19:e5: 4f:b8:5f:af:6a:f3:a4:e3:9e:24:3c:22:9b:f3:27:43:ea:73: 0f:ce:29:0d:4f:53:72:56:73:b8:c5:30:f4:b6:ab:52:dc:0b: 93:ea:87:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjQwNTE5MDQyMzU0WhcNMjQwNTI2MDQyMzU0WjAYMRYwFAYD VQQDEw02NjQ5N2VkYi1kZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbIX4OubpbP3Rrikh+Ka1T1nB3kZDFmjuLbDre69qrNfRrZHjH+VzrRQMR9a KYKjRj9FCwQqIqThph85oFCDBQ+EiQJZQZTi53WcwWLIECCyBjOsEoehCKbqnf4p Lc6gbO8dZsPrvKmmZQ27EZAi6xNfnAHrBoRRmLFaG3pWlWH/Io5+nUkGk9IVwbDJ t997IvaY81GuXcrG0bRrzfR9uEtHuSlePYnh5z6hP0H9VeDwZOmn8GPZ+5LG7QX2 i4sV5IaU6fGubqj4jvyqkDEoklt2gPi+41BwTSMBrATPSEU3clnTfJBIAovnNj+X PDdb12/cnAbM4emgAW6OlFfb1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgLEpcl VZy5o8HsUSgc4xX+GbdOMB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j eDJRcGRMcko0VkFyblBndEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEmZMP6WRFq4WFVZhZwBHj8/Qyub02F47YJzWIpJiP5YGU4u8WWHqa qbi+0JllpZnO7Xb+BwzL/XlwjTYLr/RuXphE3JdZ7PahYb3A4rvy6CBR28Oee0Zi QcCrV5IYFlzJRJUdRBvlqEXHJItSf/dMEWuEu7gfw18xO4QVEPbwWQxgbOX7m5Gr Nr6fa9RmPiTyP6MJYDwbk2/nsRWqjureHA1rgoLnmj3XmDywCPTemvY5AER7LZI1 g3qK47NKEGIhBn+4oKVL38MQGoLEtt0hzTlHKdF8GeVPuF+vavOk454kPCKb8ydD 6nMPzikNT1NyVnO4xTD0tqtS3AuT6odW -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org