$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json) Hash identifier: 2MubT91D0AK43A6fGowMUZl2YGBus4/WxoBE0tRHkUA= Subject key identifier: B3:86:12:34:D3:05:1B:95:6E:9D:51:DA:51:7C:DF:7E:3A:35:3B:B0 Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft Manifest number: 0420 Signing time: Sun 19 May 2024 02:04:27 +0000 Manifest this update: Sun 19 May 2024 02:04:26 +0000 Manifest next update: Sun 26 May 2024 02:04:26 +0000 Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: uIPGYtbkv+20wOlUkicHyOlb/i5TL0aYd7n7IfUUrf8=) 2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: vx8I2rAt4ngN3ULXvENDY57ElXBQm5UO3w1gKIgmYDM=) 3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: lO67gx11y7LRP3TT7EpxGiQlsSTO09ZeqHZQUPRePIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Validity Not Before: May 19 02:04:26 2024 GMT Not After : May 26 02:04:26 2024 GMT Subject: CN=66495e2a-f592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:df:dc:9f:ac:69:c2:a5:a6:2e:8f:5b:23:c0: 56:a0:e5:9e:a7:25:fe:1e:11:cc:bf:76:5c:f4:be: 4a:9f:67:bf:c4:09:1e:39:8d:41:13:18:ec:fb:7e: 90:68:90:6b:82:49:39:95:ee:ae:2c:50:86:5b:fd: 79:16:a7:c3:46:a2:b1:61:04:b0:bf:04:c9:1f:13: c1:d8:e1:b9:c5:ce:cb:39:27:d1:58:9a:6e:2d:5f: 11:5f:90:a8:31:54:74:16:a1:c1:fe:d5:a2:37:c0: 0f:a6:bf:b4:9e:81:4a:a8:30:a8:5c:9b:9d:66:db: 41:f4:a5:70:c3:ed:df:44:2e:06:69:fb:ac:cc:72: bf:87:b5:58:0a:59:3c:ab:f8:b7:de:10:ff:11:d2: 3a:64:a1:88:f8:48:45:ab:23:c0:e6:da:b9:4b:6d: 09:97:34:3d:7f:d0:fc:30:d0:72:50:76:d5:18:f8: b3:3b:9a:20:49:9d:36:f8:60:59:51:14:4b:1d:75: a9:84:4c:40:43:3a:20:cb:a0:15:2b:72:99:03:ba: 32:d6:b0:df:6b:91:2c:04:fe:ad:b4:c6:f1:2e:c3: a7:7f:1a:47:20:f7:33:d1:55:64:58:4a:bd:70:25: 37:b5:c5:48:f3:a9:7c:95:9b:b0:88:2b:1f:69:e2: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:86:12:34:D3:05:1B:95:6E:9D:51:DA:51:7C:DF:7E:3A:35:3B:B0 X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:94:f9:ac:6a:be:b8:a9:91:fb:df:0e:2f:ed:d0:72:5e:bd: eb:5a:1f:ff:d4:d2:15:88:33:3e:94:40:e1:2b:3b:9d:bd:52: f6:37:35:a0:3f:21:17:4b:2c:25:e1:b6:c1:c1:13:ab:27:74: 79:51:23:c8:6e:65:94:9f:65:35:07:72:9e:31:85:02:e4:19: 3b:38:a5:29:0d:63:9f:e3:a8:5d:fd:de:a7:d3:11:e0:ef:82: 68:cb:b1:a1:eb:dc:36:c8:7c:cd:f5:36:f0:9c:db:de:2c:63: 9b:01:8c:57:00:59:8f:36:1a:b4:dc:82:65:9e:62:86:51:7f: 17:ab:be:ea:77:a5:26:8c:06:28:d2:7b:a2:44:da:0c:d1:7b: 6b:a8:4c:ba:24:48:c8:45:47:e5:9e:d8:07:eb:f6:c0:87:a4: d0:e5:c0:16:8d:43:06:2b:36:1c:8b:11:27:6d:64:9d:35:ed: 9a:3e:c3:0f:75:9f:1c:54:30:cd:12:cf:d4:fd:d9:ea:aa:a2: e9:97:03:d7:c4:d4:9b:73:df:fa:d4:ea:e8:e7:d3:19:5b:82: 5b:0b:6c:5b:40:2d:d5:95:9b:e3:72:32:46:a2:dc:0d:75:40: fd:36:a1:d2:a0:37:3d:8b:d2:8e:af:41:be:44:4a:be:d9:96: ea:bd:9c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjQwNTE5MDIwNDI2WhcNMjQwNTI2MDIwNDI2WjAYMRYwFAYD VQQDEw02NjQ5NWUyYS1mNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4t/cn6xpwqWmLo9bI8BWoOWepyX+HhHMv3Zc9L5Kn2e/xAkeOY1BExjs+36Q aJBrgkk5le6uLFCGW/15FqfDRqKxYQSwvwTJHxPB2OG5xc7LOSfRWJpuLV8RX5Co MVR0FqHB/tWiN8APpr+0noFKqDCoXJudZttB9KVww+3fRC4GafuszHK/h7VYClk8 q/i33hD/EdI6ZKGI+EhFqyPA5tq5S20JlzQ9f9D8MNByUHbVGPizO5ogSZ02+GBZ URRLHXWphExAQzogy6AVK3KZA7oy1rDfa5EsBP6ttMbxLsOnfxpHIPcz0VVkWEq9 cCU3tcVI86l8lZuwiCsfaeKGIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOGEjTT BRuVbp1R2lF83346NTuwMB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODNGRS8zMjk1RjkwMjFEQjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJs TmRrZ1E0SzRTWFR4T3d5VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzlPmsar64qZH73w4v7dByXr3rWh//1NIViDM+lEDhKzudvVL2NzWg PyEXSywl4bbBwROrJ3R5USPIbmWUn2U1B3KeMYUC5Bk7OKUpDWOf46hd/d6n0xHg 74Joy7Gh69w2yHzN9TbwnNveLGObAYxXAFmPNhq03IJlnmKGUX8Xq77qd6UmjAYo 0nuiRNoM0XtrqEy6JEjIRUflntgH6/bAh6TQ5cAWjUMGKzYcixEnbWSdNe2aPsMP dZ8cVDDNEs/U/dnqqqLplwPXxNSbc9/61Oro59MZW4JbC2xbQC3VlZvjcjJGotwN dUD9NqHSoDc9i9KOr0G+REq+2ZbqvZwp -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org