$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: XubgFpqGbucwzYYJmGSzOI9BqgAlSlikC/mx+a8t+fs= Subject key identifier: 6A:47:2C:A8:D7:44:50:8B:21:E6:9F:41:7C:5E:6C:42:8F:27:A6:B8 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 01E9 Signing time: Sun 19 May 2024 04:19:07 +0000 Manifest this update: Sun 19 May 2024 04:19:06 +0000 Manifest next update: Sun 26 May 2024 04:19:06 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: SHPzKeWXTIKdN/+3pdd8SZk9c7vOzfbq8zjDxTPSac4=) 2: C833DC72966011EEB5335A1FC4F9AE02.roa (hash: kGJ3dFyy3ARAEzH3ycJC5QnmVIogv3ecSLmfWzCpM6g=) 3: E75995749FBB11EE9CC97552C4F9AE02.roa (hash: MEHcU9VIbpKf49NrA3vNKmN4BNGS8hFH/iMxEtoiIkg=) 4: 369904CE214211EEBA1B697AC4F9AE02.roa (hash: rmmRWoAn85F1vB7M51VTpiJz6tiwPhlt+YZ57n6t9So=) 5: 376972E4214211EEBA1B697AC4F9AE02.roa (hash: x4UMUB4QYBCgti3WnEsVyZpJvDmgyrBc+Ed7Ne4bCNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: May 19 04:19:06 2024 GMT Not After : May 26 04:19:06 2024 GMT Subject: CN=66497dba-a439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:fb:9d:c2:df:1c:32:73:36:4c:ce:2a:18: 6b:0f:65:01:1b:f4:37:66:7f:30:05:83:51:db:a3: ce:20:54:eb:14:bf:93:fe:06:53:21:34:06:e5:77: b8:0f:d4:ec:3d:a8:a2:62:15:c6:4d:96:56:51:4b: 8f:2f:0c:36:20:2c:8b:f6:86:1d:0c:e4:e7:a5:50: 04:3c:24:ff:dc:88:34:c5:cb:78:8d:63:d7:36:f9: 3c:34:79:bb:22:bd:f2:c8:73:74:ea:44:da:b4:c7: 6a:5d:2c:82:1e:07:b8:49:8a:ca:6b:20:20:7e:f2: e7:1e:b1:46:bb:c4:2c:0c:ae:66:60:ee:73:58:87: 94:97:fd:ad:7b:ee:20:9c:c5:5d:34:68:f0:c7:a1: 2c:c5:3e:30:d0:57:1f:9b:ab:34:81:f2:6a:b0:37: b9:04:7e:75:74:24:e2:82:a5:fe:75:9e:37:a9:50: a3:39:e2:a0:ae:c9:45:37:7a:fd:66:4b:f5:ea:32: bc:3e:1f:5c:1a:25:0f:0f:43:07:ee:4b:e3:76:e5: 69:52:1e:53:57:f6:3b:e6:06:c9:f1:c4:05:2e:39: 8a:a9:23:e0:e6:11:85:84:8d:e5:a4:ca:42:5b:05: 96:a1:38:64:4b:24:76:65:e2:8b:fa:9f:62:cd:ef: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:47:2C:A8:D7:44:50:8B:21:E6:9F:41:7C:5E:6C:42:8F:27:A6:B8 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:75:22:d6:8a:40:03:c0:10:8c:4b:fc:2b:4c:91:cc:c6:28: 6d:63:a5:c4:90:a4:65:6b:48:8f:95:fd:95:36:17:02:cc:db: c9:22:a8:7a:73:3e:03:17:04:1b:da:1d:4d:df:c9:f3:88:40: ed:52:28:56:cb:da:ad:0a:74:91:43:59:80:a1:44:21:50:d3: f0:fa:21:ef:d4:09:15:a0:f7:25:be:ec:e1:90:90:ac:b1:17: 95:b8:5b:a2:61:b5:4e:12:ac:31:2d:84:6c:d2:b6:3a:e6:05: b7:33:0e:81:c2:11:29:3b:6e:a1:01:65:c7:ff:fe:92:a0:8b: 0c:ce:2d:25:ec:89:46:11:de:74:6b:3e:bd:63:7b:4a:db:76: 22:e9:22:90:eb:5e:27:ec:ba:72:07:c5:54:09:e3:a2:fd:24: 76:bc:ef:5c:68:7c:d2:e9:89:a1:43:8d:a3:df:26:01:6e:0d: d3:ff:4d:84:1f:3f:4d:13:9c:c8:3b:c6:54:6c:50:c4:ac:50: 7b:14:89:d0:8e:c7:36:4d:0a:7d:c1:73:fd:7b:f0:6a:66:64: cc:66:69:16:5b:7a:88:f8:41:3b:02:eb:61:ac:8b:c6:d5:be: 2f:fc:13:4a:f4:e0:12:54:69:b6:ff:52:79:ce:dc:49:3b:49: ec:d3:b4:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjQwNTE5MDQxOTA2WhcNMjQwNTI2MDQxOTA2WjAYMRYwFAYD VQQDEw02NjQ5N2RiYS1hNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6L7ncLfHDJzNkzOKhhrD2UBG/Q3Zn8wBYNR26POIFTrFL+T/gZTITQG5Xe4 D9TsPaiiYhXGTZZWUUuPLww2ICyL9oYdDOTnpVAEPCT/3Ig0xct4jWPXNvk8NHm7 Ir3yyHN06kTatMdqXSyCHge4SYrKayAgfvLnHrFGu8QsDK5mYO5zWIeUl/2te+4g nMVdNGjwx6EsxT4w0Fcfm6s0gfJqsDe5BH51dCTigqX+dZ43qVCjOeKgrslFN3r9 Zkv16jK8Ph9cGiUPD0MH7kvjduVpUh5TV/Y75gbJ8cQFLjmKqSPg5hGFhI3lpMpC WwWWoThkSyR2ZeKL+p9ize+seQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpHLKjX RFCLIeafQXxebEKPJ6a4MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAodSLWikADwBCMS/wrTJHMxihtY6XEkKRla0iPlf2VNhcCzNvJIqh6 cz4DFwQb2h1N38nziEDtUihWy9qtCnSRQ1mAoUQhUNPw+iHv1AkVoPclvuzhkJCs sReVuFuiYbVOEqwxLYRs0rY65gW3Mw6BwhEpO26hAWXH//6SoIsMzi0l7IlGEd50 az69Y3tK23Yi6SKQ614n7LpyB8VUCeOi/SR2vO9caHzS6YmhQ42j3yYBbg3T/02E Hz9NE5zIO8ZUbFDErFB7FInQjsc2TQp9wXP9e/BqZmTMZmkWW3qI+EE7AuthrIvG 1b4v/BNK9OASVGm2/1J5ztxJO0ns07RG -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org