$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft File: Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json) Hash identifier: OR9SuHzVzM2XIcHhy3k9eaXpAvki1PEeyj3PyWsMPfo= Subject key identifier: 4B:32:46:C1:92:5C:68:3D:C0:E7:96:2D:6A:AE:1D:6F:88:F1:4E:B2 Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC Certificate issuer: /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft Manifest number: 0294 Signing time: Sun 19 May 2024 03:38:36 +0000 Manifest this update: Sun 19 May 2024 03:38:35 +0000 Manifest next update: Sun 26 May 2024 03:38:35 +0000 Files and hashes: 1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: wEqWVom9u4smQ1COKHVDVcVLhf5cPe2/fFfIIbRnO1w=) 2: 8FA9D71068D611EEAD2D927FC4F9AE02.roa (hash: 6tlBwsncsPFDS2KjOCcMlnxZ6xN1xmgFM4Emgr76J4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC Validity Not Before: May 19 03:38:35 2024 GMT Not After : May 26 03:38:35 2024 GMT Subject: CN=6649743c-d9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:8c:54:0e:40:8c:89:d3:04:00:26:0f:0f: 3d:60:69:34:19:cb:15:8d:b5:54:fe:cc:3f:00:f7: 8f:0d:b2:c9:bf:7c:af:c0:02:b3:2a:ec:54:b4:be: aa:43:f8:00:ff:39:57:59:05:b6:66:d6:25:88:3e: 70:4b:8b:26:e0:d2:e7:da:82:85:0b:7f:ff:8a:26: c6:62:ca:1f:4b:19:22:a4:b0:b4:46:04:e1:50:1e: d1:43:9f:c6:15:b9:63:b2:64:8c:07:95:72:73:94: f0:46:a3:21:2b:f3:35:f2:59:85:dd:e8:f7:31:77: ce:ed:78:3d:d3:34:cf:5d:3d:c1:56:7e:43:92:9a: 47:3e:c1:53:61:b4:8d:dc:3a:41:e8:ae:5f:ef:a1: c2:88:4a:0e:04:67:7e:69:52:ea:1e:2c:6b:aa:2d: 2f:3f:7e:08:4f:a3:e5:5b:21:60:6f:36:36:54:93: 19:ff:f8:bf:60:22:d0:0c:58:e2:18:13:61:4c:de: 2b:66:70:5a:d4:b9:5e:b4:ab:2a:57:c7:ee:e0:07: da:96:28:b5:70:e3:14:d0:80:4b:5e:38:c4:69:f4: ee:a6:09:d6:2b:fd:31:2b:e4:ad:11:f8:b1:33:43: 78:67:53:85:a6:a5:52:dc:c6:29:58:d1:f9:aa:a0: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:46:C1:92:5C:68:3D:C0:E7:96:2D:6A:AE:1D:6F:88:F1:4E:B2 X509v3 Authority Key Identifier: keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:3b:de:a1:62:0e:81:e5:a9:ce:4d:9b:6b:75:93:7c:25:d0: fc:b7:d3:18:30:fd:20:89:11:54:7a:b0:f6:a5:51:2e:3f:2e: 3f:bc:30:99:4a:dd:cf:3f:34:e6:c7:e0:26:82:34:0d:cc:31: e5:17:d1:e0:80:a5:41:32:82:2b:45:33:a5:f3:e5:06:35:cd: c8:e7:69:ec:a0:c4:8a:4a:40:bd:c9:53:db:2c:77:e0:a3:06: cb:60:60:20:c4:ce:06:e5:25:12:75:b2:67:44:81:e9:28:53: f5:e4:a3:ed:fc:22:3f:da:f8:5f:62:a9:ab:ba:6f:66:07:1e: ef:bb:be:8f:8f:d1:cb:be:f6:28:e6:b3:07:2f:da:97:b6:51: c3:9f:83:fa:07:cd:a0:c6:62:2c:5f:f1:2e:fc:99:c1:82:db: e8:88:09:f4:03:6a:9e:1b:cf:ee:93:67:65:d3:02:2c:a0:98: 3c:d5:fd:53:89:9e:d5:56:ab:b6:3e:e4:76:38:92:4b:aa:3c: 87:91:3c:17:27:e6:c8:16:3e:d6:69:a6:0b:63:87:16:96:55: 40:82:9e:56:14:6f:e6:90:b3:b6:bd:09:17:fe:66:05:ca:43: 5a:5c:8a:dd:23:a3:82:1b:45:f5:31:8d:f4:15:88:7c:df:d6: 47:54:c2:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCMkQxMTAvBgNVBAUTKDM5REQ2MzM1Mzk5RjEyQjgxOTIxMUNFOTFBQTdEQ0Y2 MkY2RDgxQkMwHhcNMjQwNTE5MDMzODM1WhcNMjQwNTI2MDMzODM1WjAYMRYwFAYD VQQDEw02NjQ5NzQzYy1kOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKmMVA5AjInTBAAmDw89YGk0GcsVjbVU/sw/APePDbLJv3yvwAKzKuxUtL6q Q/gA/zlXWQW2ZtYliD5wS4sm4NLn2oKFC3//iibGYsofSxkipLC0RgThUB7RQ5/G FbljsmSMB5Vyc5TwRqMhK/M18lmF3ej3MXfO7Xg90zTPXT3BVn5DkppHPsFTYbSN 3DpB6K5f76HCiEoOBGd+aVLqHixrqi0vP34IT6PlWyFgbzY2VJMZ//i/YCLQDFji GBNhTN4rZnBa1LletKsqV8fu4Afalii1cOMU0IBLXjjEafTupgnWK/0xK+StEfix M0N4Z1OFpqVS3MYpWNH5qqBIeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsyRsGS XGg9wOeWLWquHW+I8U6yMB8GA1UdIwQYMBaAFDndYzU5nxK4GSEc6Rqn3PYvbYG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkIyRC85NjVCRDU3RUI4 OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVyZ1pJUnpwR3FmYzlpOXRn YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kMWpOVG1mRXJnWklSenBHcWZjOWk5dGdidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkIyRC85NjVCRDU3RUI4OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVy Z1pJUnpwR3FmYzlpOXRnYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/O96hYg6B5anOTZtrdZN8JdD8t9MYMP0giRFUerD2pVEuPy4/vDCZ St3PPzTmx+AmgjQNzDHlF9HggKVBMoIrRTOl8+UGNc3I52nsoMSKSkC9yVPbLHfg owbLYGAgxM4G5SUSdbJnRIHpKFP15KPt/CI/2vhfYqmrum9mBx7vu76Pj9HLvvYo 5rMHL9qXtlHDn4P6B82gxmIsX/Eu/JnBgtvoiAn0A2qeG8/uk2dl0wIsoJg81f1T iZ7VVqu2PuR2OJJLqjyHkTwXJ+bIFj7WaaYLY4cWllVAgp5WFG/mkLO2vQkX/mYF ykNaXIrdI6OCG0X1MY30FYh839ZHVMJk -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org