$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json) Hash identifier: jsi3UtiWCdhL9O/62faEjCOiU3/eKzrcEcbhJ5T1f5Q= Subject key identifier: 66:94:8E:B8:0B:5F:1C:4A:0F:8F:78:62:E5:07:DE:06:5B:09:4D:80 Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft Manifest number: 0301 Signing time: Sun 19 May 2024 03:12:26 +0000 Manifest this update: Sun 19 May 2024 03:12:26 +0000 Manifest next update: Sun 26 May 2024 03:12:26 +0000 Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: /2TLBGgUp/1UPmVY8PO0N9Zw2IGCiA9KIqwQoOgunJU=) 2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: Z0WYVQLGbU8d0Q0TLyHt+vPj6pRUXi1JHfpLJ/42HQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Validity Not Before: May 19 03:12:26 2024 GMT Not After : May 26 03:12:26 2024 GMT Subject: CN=66496e1a-2622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:61:97:77:e6:9e:a2:1d:54:bf:07:a6:06: 8c:27:ed:75:9a:c8:9c:60:03:6d:c3:f4:f2:ca:62: 12:74:fb:57:6c:72:18:02:cf:3b:48:3a:72:7d:b9: d7:5a:19:0f:e0:82:36:55:a5:73:e1:c3:7f:3e:b9: 25:62:69:77:9f:87:ea:72:dc:75:4d:4e:d8:bf:c4: dc:ec:fd:a3:c7:3e:01:42:a5:7f:5f:98:86:10:f1: 3c:23:9e:12:80:53:ad:6f:a5:b6:1b:8e:de:9b:9f: 91:e3:98:6e:d0:fd:bb:d1:54:df:d2:c2:4e:87:20: 19:25:df:2c:b5:26:60:cf:77:d9:cc:4f:8d:da:af: 4f:ae:cf:1a:79:90:9e:c6:ec:a2:6a:f9:cd:31:1e: c8:29:be:14:57:28:4e:9e:1a:04:3b:d4:3c:9a:55: 7e:75:91:5b:da:2a:97:77:6c:f1:e0:59:f9:b4:07: ac:bc:59:37:a7:f1:37:2d:7c:a0:e6:3d:d4:5a:f3: 05:fe:e8:dd:70:ed:79:44:28:01:60:3e:26:55:be: 91:25:50:e4:4c:c5:b2:02:86:ee:8c:03:bb:1c:06: d3:eb:d8:7f:68:bc:d0:25:bf:5a:aa:fe:88:d2:98: 55:b2:c9:f2:a0:43:4f:74:36:6c:9e:8f:2e:ce:f3: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:94:8E:B8:0B:5F:1C:4A:0F:8F:78:62:E5:07:DE:06:5B:09:4D:80 X509v3 Authority Key Identifier: keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2d:16:e3:64:df:71:5f:c4:13:5d:a7:28:ec:4f:fa:d6:e3: 95:77:d1:c2:90:8d:96:58:c7:05:32:a2:61:4b:0d:61:83:05: 09:3f:6e:eb:08:80:ec:21:7a:0c:77:b1:a6:78:40:21:69:e5: a8:17:29:87:27:a6:e2:97:eb:37:ff:18:20:ff:47:5f:ab:af: 73:8d:2e:f1:28:4c:62:57:dc:47:c8:36:04:7b:84:1d:be:1a: 7f:a8:50:03:26:a3:cd:98:fd:7c:c3:15:e9:7f:25:f5:32:99: 25:0f:02:e5:ca:8b:a0:e4:f0:ca:d2:97:73:d5:cc:07:2d:02: 6a:58:06:55:9a:1f:4b:5f:77:e1:90:31:b5:af:04:65:de:86: 80:35:eb:8d:64:09:e3:41:bc:7b:de:f0:e8:03:03:3b:f2:a3: d0:81:f5:1c:b9:5c:af:4a:0e:54:d1:a2:f4:8d:3f:0e:2f:0e: e7:43:29:a6:12:51:69:64:9a:10:af:e2:19:3b:25:c3:58:c8: e7:6d:10:3b:7f:c1:0d:79:37:84:9b:d0:b4:e3:e6:c3:7b:4f: 1f:30:9f:b4:fa:1f:dc:87:2a:52:e2:4a:ea:52:e8:9d:09:3a: 7a:eb:a9:d1:26:d5:a0:58:89:ec:6e:84:94:30:7a:d3:ef:b4: a9:b9:5f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5 MkRERUJERkMwHhcNMjQwNTE5MDMxMjI2WhcNMjQwNTI2MDMxMjI2WjAYMRYwFAYD VQQDEw02NjQ5NmUxYS0yNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVVhl3fmnqIdVL8HpgaMJ+11msicYANtw/TyymISdPtXbHIYAs87SDpyfbnX WhkP4II2VaVz4cN/PrklYml3n4fqctx1TU7Yv8Tc7P2jxz4BQqV/X5iGEPE8I54S gFOtb6W2G47em5+R45hu0P270VTf0sJOhyAZJd8stSZgz3fZzE+N2q9Prs8aeZCe xuyiavnNMR7IKb4UVyhOnhoEO9Q8mlV+dZFb2iqXd2zx4Fn5tAesvFk3p/E3LXyg 5j3UWvMF/ujdcO15RCgBYD4mVb6RJVDkTMWyAobujAO7HAbT69h/aLzQJb9aqv6I 0phVssnyoENPdDZsno8uzvNVzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaUjrgL XxxKD494YuUH3gZbCU2AMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj LWhNek1MbU5zMkdTM2V2ZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbLRbjZN9xX8QTXaco7E/61uOVd9HCkI2WWMcFMqJhSw1hgwUJP27r CIDsIXoMd7GmeEAhaeWoFymHJ6bil+s3/xgg/0dfq69zjS7xKExiV9xHyDYEe4Qd vhp/qFADJqPNmP18wxXpfyX1MpklDwLlyoug5PDK0pdz1cwHLQJqWAZVmh9LX3fh kDG1rwRl3oaANeuNZAnjQbx73vDoAwM78qPQgfUcuVyvSg5U0aL0jT8OLw7nQymm ElFpZJoQr+IZOyXDWMjnbRA7f8ENeTeEm9C04+bDe08fMJ+0+h/chypS4krqUuid CTp666nRJtWgWInsboSUMHrT77SpuV/G -----END CERTIFICATE-----Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org