$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: IzgCtBtznWYJWwVbuqpF+I/yp1hueQ2oIp4v3Yss1IE= Subject key identifier: 42:A5:5E:9E:F1:A8:5C:17:F3:08:2A:94:5F:45:42:D9:DD:48:01:A1 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 2113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 20D8 Signing time: Sun 26 May 2024 16:17:17 +0000 Manifest this update: Sun 26 May 2024 16:17:17 +0000 Manifest next update: Sun 02 Jun 2024 16:17:17 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: H01ouPeCY7ZE3u9/kxvrMfhAGNWI3/hisGep9iLJ3S0=) 2: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: E2AOiCzgxsLKBTynZ4crXCu8PKZqVtSAJ3spxDFUx2E=) 3: 5EDC2B56F27E11EE8704D12FC4F9AE02.roa (hash: 2W3oJ+QedRAztUpfSm+tuoCImEjQqqaPV0aL9qo5r3Y=) 4: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: XiqM4iGTnXpFWDG16thfGvjUKORVfmwpRddiqwnC71I=) 5: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: 0Ucpgjhaf7kx+WxYXGSsBaFJZkKCARop7bQf83/hNh8=) 6: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: zAVjBd+c0m9DCMJ+np/cO5W5zk4CfWcDtkInem5xeLI=) 7: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9tFXAmM4OkPs0CLNO+5szMsstp127SsFTTf21T1G9Wk=) 8: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: WHD8ucoKeZ1K97J6qkuwoCcKwch7wYg6344jbdnFRDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8467 (0x2113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: May 26 16:17:17 2024 GMT Not After : Jun 2 16:17:17 2024 GMT Subject: CN=6653608d-8cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:03:ad:a0:20:35:bf:08:ad:06:70:5d:c0: c7:40:d1:0e:02:8d:58:d2:a1:ce:ee:c7:99:eb:db: e0:7f:e6:16:c7:a9:08:71:28:34:0a:c0:fe:f9:e1: 49:c7:8d:b2:ae:4e:23:ad:d9:d7:41:95:1b:b8:d5: 55:d5:f1:eb:ee:a8:74:54:79:4d:bf:70:62:c5:b2: 3e:93:83:c5:e2:54:f5:71:68:39:8b:d9:35:b1:4a: 44:49:d7:fe:59:74:fc:6b:02:88:f7:cd:21:54:3c: 3c:d8:d6:16:3a:1e:af:c8:d1:47:6c:05:bb:bb:2b: ae:92:85:ed:cc:33:64:6d:01:d8:01:86:18:10:96: ca:c0:03:8e:89:fd:75:16:7d:09:2d:62:e7:fc:35: dd:62:f6:3d:4a:b5:b1:e3:ac:f3:f4:96:c6:e2:28: aa:27:65:98:5b:e3:f8:0d:53:c7:55:f6:98:56:c5: 56:89:71:7c:89:85:29:af:31:76:79:a1:7f:c8:99: 12:54:0f:00:5c:a6:59:7c:1b:23:fc:b3:e6:a2:50: d6:f0:95:dc:f1:a9:62:71:ce:13:47:31:75:4f:28: 1b:07:92:fb:b1:82:6c:b1:b3:ca:83:0d:19:3e:23: ab:66:5c:94:6f:c1:eb:4a:19:86:30:b5:20:82:63: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:5E:9E:F1:A8:5C:17:F3:08:2A:94:5F:45:42:D9:DD:48:01:A1 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e2:04:c6:80:ec:c6:e2:7f:27:d8:5b:8b:56:63:8b:a3:1b: 9d:14:fe:4a:c1:b3:7f:3f:2c:55:80:3d:94:63:f7:8f:9e:39: 04:1f:38:25:3f:82:07:48:a6:dd:a4:16:8e:13:39:ed:d5:7b: 7f:b8:f6:2e:37:60:43:dc:a0:09:93:c0:3b:b0:d9:d9:13:ac: 04:b3:0b:f8:3e:9d:cd:3e:32:02:63:e2:72:05:2a:11:a5:e2: 44:8f:a0:57:b5:90:92:9e:a7:c6:87:37:52:66:0d:2c:a4:80: 9c:8e:19:fc:2e:09:b6:6c:34:00:51:75:c9:08:c0:a9:fb:4c: 67:98:bd:12:10:07:62:78:55:3d:75:06:c0:87:64:b9:68:52: 3f:67:f5:7d:30:60:78:67:5d:70:5a:c4:8d:9b:b1:d2:4c:6c: 5e:20:2b:6e:a8:ef:cc:4e:79:f3:e3:45:9c:c0:e5:c6:83:94: 0c:7f:a3:ca:8c:22:ed:79:09:58:d8:9f:8e:23:71:f3:bb:84: 2b:ec:08:0a:3e:73:71:1b:de:87:30:b6:16:83:0c:b4:e8:99: 35:77:02:1c:ef:19:2b:89:c7:71:4f:64:82:59:75:65:e6:1a: 7a:e2:6e:46:cf:c3:66:f7:fe:77:62:8e:ab:c5:2d:c4:65:62: cd:50:92:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjQwNTI2MTYxNzE3WhcNMjQwNjAyMTYxNzE3WjAYMRYwFAYD VQQDEw02NjUzNjA4ZC04Y2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqUDraAgNb8IrQZwXcDHQNEOAo1Y0qHO7seZ69vgf+YWx6kIcSg0CsD++eFJ x42yrk4jrdnXQZUbuNVV1fHr7qh0VHlNv3BixbI+k4PF4lT1cWg5i9k1sUpESdf+ WXT8awKI980hVDw82NYWOh6vyNFHbAW7uyuukoXtzDNkbQHYAYYYEJbKwAOOif11 Fn0JLWLn/DXdYvY9SrWx46zz9JbG4iiqJ2WYW+P4DVPHVfaYVsVWiXF8iYUprzF2 eaF/yJkSVA8AXKZZfBsj/LPmolDW8JXc8alicc4TRzF1TygbB5L7sYJssbPKgw0Z PiOrZlyUb8HrShmGMLUggmOV/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKlXp7x qFwX8wgqlF9FQtndSAGhMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA4gTGgOzG4n8n2FuLVmOLoxudFP5KwbN/PyxVgD2UY/ePnjkEHzgl P4IHSKbdpBaOEznt1Xt/uPYuN2BD3KAJk8A7sNnZE6wEswv4Pp3NPjICY+JyBSoR peJEj6BXtZCSnqfGhzdSZg0spICcjhn8Lgm2bDQAUXXJCMCp+0xnmL0SEAdieFU9 dQbAh2S5aFI/Z/V9MGB4Z11wWsSNm7HSTGxeICtuqO/MTnnz40WcwOXGg5QMf6PK jCLteQlY2J+OI3Hzu4Qr7AgKPnNxG96HMLYWgwy06Jk1dwIc7xkricdxT2SCWXVl 5hp64m5Gz8Nm9/53Yo6rxS3EZWLNUJJL -----END CERTIFICATE-----Generated at Sun May 26 19:11:46 2024 by rpki-client on console-ams.rpki-client.org