$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json) Hash identifier: 3sJvA2lc7TPLv+yHAeWzMNUULtkJMQbNwDKJWSDl7go= Subject key identifier: E3:B5:FA:A5:77:7A:EA:CD:D4:7E:0C:CA:D1:11:17:54:A9:25:E6:D8 Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft Manifest number: 0C78 Signing time: Sat 18 May 2024 18:53:14 +0000 Manifest this update: Sat 18 May 2024 18:53:14 +0000 Manifest next update: Sat 25 May 2024 18:53:14 +0000 Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: cFXKWUpRiqJxp/NtrGzCKipzsq61wujaYdvWIT2LR5o=) 2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: r4Nn4V4I8uu965S2bp9gePUlDuw+WitBghKmVxEd5Oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Validity Not Before: May 18 18:53:14 2024 GMT Not After : May 25 18:53:14 2024 GMT Subject: CN=6648f91a-bd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:92:e3:06:41:6f:f1:78:09:10:c4:65:be:45: 75:ae:08:b4:1c:5f:a9:f4:0c:92:96:5e:3c:a7:25: 2a:78:e6:99:fe:6c:d4:d2:03:43:ca:96:a6:b0:3d: 33:43:e8:93:da:9d:cf:33:d9:c7:42:8e:8c:f6:39: 57:f6:68:7d:6d:94:2e:a5:8d:15:da:c9:7d:4f:4e: dd:05:77:91:aa:03:a5:e4:4a:1f:57:6c:fd:e6:e4: 8a:8d:66:42:5d:c4:59:35:a7:88:1b:98:38:fd:e1: 4e:8e:c6:10:b9:83:2a:54:d0:f8:5a:92:9e:3f:44: 94:51:3e:3a:97:f3:6b:cc:d1:78:96:f2:c3:d1:16: 9d:d3:00:06:51:cb:f9:0a:51:63:f2:eb:42:fe:16: a1:32:06:1d:33:35:04:40:2d:d0:d7:31:b6:15:36: 55:c3:43:e7:8d:7b:3f:0e:c2:66:5a:ae:b1:29:c1: 41:fe:97:db:82:87:53:45:6a:5b:10:9e:b4:42:b2: 02:04:18:7d:3e:b6:5b:b0:8c:5f:cf:53:3f:a8:81: 86:5c:76:de:81:3e:68:38:64:93:f1:67:5e:06:55: 4c:36:7f:72:0f:be:78:c4:e7:3b:51:8e:c3:73:87: f3:b8:46:ad:27:76:fa:8d:95:3c:58:69:d9:2f:c3: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B5:FA:A5:77:7A:EA:CD:D4:7E:0C:CA:D1:11:17:54:A9:25:E6:D8 X509v3 Authority Key Identifier: keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e0:66:3d:fe:18:c2:40:29:1f:ab:71:6a:ea:e5:84:04:db: dc:ce:96:14:c2:46:39:fc:85:aa:0d:76:e4:07:0d:dc:3a:ba: 1f:87:23:1f:22:3a:81:67:c0:f7:2f:de:cd:f4:7e:66:97:fb: e5:fd:02:9e:4e:83:5f:8f:97:ea:3c:e6:29:aa:98:27:a7:bc: c3:4e:67:f5:b9:57:ed:7f:1e:56:d4:d1:18:67:e1:b6:18:fe: 73:cf:04:70:0c:57:2b:7f:d0:20:6a:cf:5f:c0:8f:b1:84:a4: ef:6b:6b:f7:d6:f3:d7:52:bb:ae:5f:79:75:66:de:c6:0e:58: 4b:31:9c:8e:ea:02:d1:1a:19:b6:80:2a:49:e7:76:7e:62:48: dc:92:b2:8f:bc:0a:c7:51:43:87:d6:67:e3:91:1b:5f:91:1b: ec:89:a7:a3:13:68:ea:de:30:fe:ae:bc:f7:44:de:14:07:f3: 09:49:fa:f3:62:b5:58:a9:2a:a4:8e:0d:40:c1:e5:03:49:74: c1:11:74:4e:8a:c2:c1:06:6a:fb:c3:ae:7d:95:a7:84:c4:c9: 0a:1c:02:2f:bb:5e:93:8d:90:c2:17:a3:f0:0b:38:cf:78:a0: cd:c7:73:04:eb:bb:db:0b:87:97:17:23:19:7d:e8:24:00:24: e8:41:07:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEEyRjZGNjYxMzEyQzk1QkYwNUEwQjUyMzBCMTM3MUQ0 NjIyRkQ2MjcwHhcNMjQwNTE4MTg1MzE0WhcNMjQwNTI1MTg1MzE0WjAYMRYwFAYD VQQDEw02NjQ4ZjkxYS1iZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZLjBkFv8XgJEMRlvkV1rgi0HF+p9AySll48pyUqeOaZ/mzU0gNDypamsD0z Q+iT2p3PM9nHQo6M9jlX9mh9bZQupY0V2sl9T07dBXeRqgOl5EofV2z95uSKjWZC XcRZNaeIG5g4/eFOjsYQuYMqVND4WpKeP0SUUT46l/NrzNF4lvLD0Rad0wAGUcv5 ClFj8utC/hahMgYdMzUEQC3Q1zG2FTZVw0PnjXs/DsJmWq6xKcFB/pfbgodTRWpb EJ60QrICBBh9PrZbsIxfz1M/qIGGXHbegT5oOGST8WdeBlVMNn9yD754xOc7UY7D c4fzuEatJ3b6jZU8WGnZL8NTvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO1+qV3 eurN1H4MytERF1SpJebYMB8GA1UdIwQYMBaAFKL29mExLJW/BaC1IwsTcdRiL9Yn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yNjFEMjgzMEQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xiOEZvTFVqQ3hOeDFHSXYx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL292YjJZVEVzbGI4Rm9MVWpDeE54MUdJdjFpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yNjFEMjgzMEQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xi OEZvTFVqQ3hOeDFHSXYxaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH4GY9/hjCQCkfq3Fq6uWEBNvczpYUwkY5/IWqDXbkBw3cOrofhyMf IjqBZ8D3L97N9H5ml/vl/QKeToNfj5fqPOYpqpgnp7zDTmf1uVftfx5W1NEYZ+G2 GP5zzwRwDFcrf9Agas9fwI+xhKTva2v31vPXUruuX3l1Zt7GDlhLMZyO6gLRGhm2 gCpJ53Z+YkjckrKPvArHUUOH1mfjkRtfkRvsiaejE2jq3jD+rrz3RN4UB/MJSfrz YrVYqSqkjg1AweUDSXTBEXROisLBBmr7w659laeExMkKHAIvu16TjZDCF6PwCzjP eKDNx3ME67vbC4eXFyMZfegkACToQQdt -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org