$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft File: OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json) Hash identifier: hf7Gl19ftBer8VPzctSXq7ykieE0XQMg1NqvJw7/Ze0= Subject key identifier: 52:8B:DF:B0:7E:C8:CB:66:79:80:C9:FE:CC:DB:05:08:32:DC:4C:7A Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 Certificate issuer: /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Certificate serial: 05E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft Manifest number: 05DB Signing time: Sun 19 May 2024 00:02:41 +0000 Manifest this update: Sun 19 May 2024 00:02:41 +0000 Manifest next update: Sun 26 May 2024 00:02:41 +0000 Files and hashes: 1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: JP+M+oDxdkAVrg0We72yX1uFDsLlTNkK99hUh+mjNWw=) 2: 6473BE24979811EB97001639C4F9AE02.roa (hash: nS5LVX8n3qARHdqJ2U4MeWyBJV0vfcED1PtfqbIhaIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1504 (0x5e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Validity Not Before: May 19 00:02:41 2024 GMT Not After : May 26 00:02:41 2024 GMT Subject: CN=664941a1-0a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:92:af:e2:32:f0:ae:7a:3b:3f:2f:24:99: be:a3:9e:07:52:b0:2c:93:9c:90:a2:9d:83:dd:d7: e8:04:7b:fa:f6:6e:45:9a:b7:e0:98:b8:7f:85:46: 42:18:76:2e:5b:aa:98:be:94:82:61:52:3a:16:1c: 7e:71:65:88:ba:4c:35:c8:e6:f4:95:6f:7f:1b:25: 2d:b0:36:4b:7a:34:b7:bf:14:df:9b:c2:26:d0:81: 0b:8b:ed:c8:2b:3f:9c:55:3d:23:48:e1:59:cd:46: 0b:ee:ea:9f:5e:46:43:30:95:20:c5:96:62:df:f6: df:ec:d7:93:c1:55:e6:be:cc:17:69:de:77:0d:7e: 53:63:bc:3d:48:e2:2f:1a:a3:16:63:3e:57:fe:f7: ed:09:78:1f:40:e9:e8:07:27:55:3c:60:32:ca:a9: 5a:50:b6:7b:54:83:fa:14:2e:fe:e0:3c:32:40:f5: fc:26:df:7b:69:b6:43:a7:d0:79:13:71:bb:33:58: 43:8f:be:28:fa:22:d4:44:51:38:b2:f5:92:99:06: 81:8d:37:69:09:c8:44:28:54:8a:0d:52:2d:cf:6e: 6e:05:aa:e0:98:56:8c:d4:25:e4:0d:b3:38:a3:5e: 19:12:8a:6e:fc:fd:95:d0:14:9b:a5:1f:e7:89:30: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:DF:B0:7E:C8:CB:66:79:80:C9:FE:CC:DB:05:08:32:DC:4C:7A X509v3 Authority Key Identifier: keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ad:0f:bb:07:ee:13:78:3d:81:84:4a:46:a1:d0:0c:c6:df: 3a:1a:b7:51:fc:3c:64:5f:77:a8:3a:37:af:9c:d7:ae:d7:c1: 53:39:af:1b:1c:ed:57:91:0c:53:5d:1a:95:0d:2d:45:d8:a8: 3d:8d:72:a4:38:1b:6a:c3:50:36:50:0f:d6:00:9a:74:4e:2d: 4b:fa:09:b2:38:56:2f:0c:47:0f:34:99:1a:4f:49:a0:ba:16: 65:05:dd:aa:46:f4:14:67:78:8b:d5:37:62:53:82:3c:50:f5: ec:9d:09:19:05:e0:3d:5d:fb:55:a0:9b:b7:11:49:dd:59:a2: ab:61:d6:69:aa:d6:50:92:3b:0c:14:12:84:15:0b:0b:f2:df: 84:6a:13:8c:59:2d:86:66:fa:74:58:e4:3c:38:5b:78:a1:7d: 33:24:62:dd:da:6f:5c:31:e6:1c:d4:1d:8a:e6:34:96:e0:ff: 56:73:8d:d8:ac:9d:0a:ef:9a:da:55:9a:e3:d0:cf:2d:2e:ba: ff:a5:c2:2b:84:da:57:34:65:3d:a6:e5:d7:29:5f:e4:0e:9c: 5c:9a:4b:b2:0b:6f:94:ba:34:b4:95:2f:4b:3a:62:0f:21:6c: 8a:28:25:2f:34:61:e8:2d:30:19:29:eb:90:50:65:7f:14:53: d5:7f:50:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1M0UxMTAvBgNVBAUTKDM4Q0UyNzZDODVCNkQyRDBFQUZFOUQzRjhBNUE1MDhD RERCQUI5NjgwHhcNMjQwNTE5MDAwMjQxWhcNMjQwNTI2MDAwMjQxWjAYMRYwFAYD VQQDEw02NjQ5NDFhMS0wYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA286Sr+Iy8K56Oz8vJJm+o54HUrAsk5yQop2D3dfoBHv69m5FmrfgmLh/hUZC GHYuW6qYvpSCYVI6Fhx+cWWIukw1yOb0lW9/GyUtsDZLejS3vxTfm8Im0IELi+3I Kz+cVT0jSOFZzUYL7uqfXkZDMJUgxZZi3/bf7NeTwVXmvswXad53DX5TY7w9SOIv GqMWYz5X/vftCXgfQOnoBydVPGAyyqlaULZ7VIP6FC7+4DwyQPX8Jt97abZDp9B5 E3G7M1hDj74o+iLURFE4svWSmQaBjTdpCchEKFSKDVItz25uBargmFaM1CXkDbM4 o14ZEopu/P2V0BSbpR/niTDAiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKL37B+ yMtmeYDJ/szbBQgy3Ex6MB8GA1UdIwQYMBaAFDjOJ2yFttLQ6v6dP4paUIzdurlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDUzRS80RUVCQzIwODZC NkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0RHFfcDBfaWxwUWpOMjZ1 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NNG5iSVcyMHREcV9wMF9pbHBRak4yNnVXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDUzRS80RUVCQzIwODZCNkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0 RHFfcDBfaWxwUWpOMjZ1V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBErQ+7B+4TeD2BhEpGodAMxt86GrdR/DxkX3eoOjevnNeu18FTOa8b HO1XkQxTXRqVDS1F2Kg9jXKkOBtqw1A2UA/WAJp0Ti1L+gmyOFYvDEcPNJkaT0mg uhZlBd2qRvQUZ3iL1TdiU4I8UPXsnQkZBeA9XftVoJu3EUndWaKrYdZpqtZQkjsM FBKEFQsL8t+EahOMWS2GZvp0WOQ8OFt4oX0zJGLd2m9cMeYc1B2K5jSW4P9Wc43Y rJ0K75raVZrj0M8tLrr/pcIrhNpXNGU9puXXKV/kDpxcmkuyC2+UujS0lS9LOmIP IWyKKCUvNGHoLTAZKeuQUGV/FFPVf1BD -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org