$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: evgDXW+QTWy6jKZ5rjeSill8pLiRkg1Vxqc8lZWVeX8= Subject key identifier: 89:7F:25:B9:3A:C7:5E:C3:8A:93:22:62:5D:C2:00:B9:25:57:6F:ED Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0BE1 Signing time: Thu 30 May 2024 19:29:35 +0000 Manifest this update: Thu 30 May 2024 19:29:35 +0000 Manifest next update: Thu 06 Jun 2024 19:29:35 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: yfndaw4b4ZLpFdywX+XtuqJJ/B4Z+i7mHP1YVrCDPIE=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: T2/7+GhD0gC7tHcYOfbrfDJ70g/35K+/3DgLmDK20MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: May 30 19:29:35 2024 GMT Not After : Jun 6 19:29:35 2024 GMT Subject: CN=6658d39f-58e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:5e:05:c1:15:50:11:d1:5a:79:d3:46:3f: 5d:42:a5:79:ce:5f:a9:b7:b8:04:3a:7e:b1:16:35: ab:cc:88:fa:b4:3e:13:95:ea:6f:87:56:15:07:41: ef:ec:36:34:10:24:74:b3:31:44:a9:17:97:cf:26: 01:15:65:ec:7f:a5:62:dc:e6:a7:9a:f9:68:c3:75: b4:c4:43:56:62:c1:45:86:9c:bc:ed:ed:8f:a7:f9: 5a:2e:4a:51:9f:c1:07:3f:d0:2d:f9:72:34:d0:84: 3a:4a:01:11:1d:26:58:bd:95:49:b5:8a:16:67:74: 31:cf:e8:8b:6b:33:75:16:c8:34:30:2c:05:84:f8: 89:86:9e:66:aa:1f:af:88:d7:38:25:85:85:7e:2b: 5f:af:4f:ee:cf:be:56:20:33:0c:8e:28:c2:e5:fe: c3:e1:1f:a9:60:8d:ba:a7:0c:b3:a2:6f:a3:4d:eb: c8:8e:73:e6:2b:71:cc:6c:64:e0:e8:38:ac:cf:f8: 43:f9:54:6a:eb:55:e3:1a:51:4e:57:f5:a1:88:c1: ac:36:ad:d7:3f:7c:92:62:fa:58:cc:15:e7:7a:2b: 0a:3e:0d:3f:be:98:4d:07:b9:63:78:bd:36:cc:cb: 8d:b8:30:6b:78:a2:55:16:cf:a7:23:79:6f:06:9e: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7F:25:B9:3A:C7:5E:C3:8A:93:22:62:5D:C2:00:B9:25:57:6F:ED X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:71:0c:1e:a8:29:40:8d:c7:88:9d:91:4d:61:4d:82:5c:28: c3:e0:0b:a5:0d:7a:af:cf:f1:92:4c:e3:81:7f:f6:d9:d0:09: 96:be:e2:81:b0:06:27:48:54:7a:ed:75:5d:51:87:7f:45:89: b7:0c:3c:63:bf:72:de:29:c6:6f:a3:96:6d:8b:28:f6:a9:37: 36:b9:48:f4:a9:2d:6a:46:b9:bb:e7:52:b7:3c:5c:9a:ca:c8: 89:bb:33:32:6c:87:ea:96:ec:bf:b8:a2:c8:2e:70:44:88:94: 44:49:9e:2d:d3:ee:a5:2e:1e:a3:28:a2:03:8c:d3:8d:df:54: b7:8e:8b:96:a2:de:a3:31:6c:39:30:a5:2c:bd:1f:e1:b4:95: 82:11:c4:1d:eb:0d:5e:18:bf:bf:28:3f:c4:d3:91:4c:04:9f: c9:be:eb:2c:83:a7:40:0c:8b:fe:09:8e:a9:9d:45:15:f6:b1: d5:38:4d:c7:9a:30:1c:26:71:76:c3:e5:eb:da:2c:3b:45:2b: 56:40:aa:8a:3a:81:e8:46:37:fa:a9:4a:11:d9:99:73:3e:5f: 49:0e:55:c5:37:ec:bc:f5:3d:92:1b:6a:eb:7d:0f:df:25:38: 6d:02:80:0f:5c:d7:18:d9:5f:3d:85:6e:e6:19:6f:51:10:a0: 97:12:9e:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjQwNTMwMTkyOTM1WhcNMjQwNjA2MTkyOTM1WjAYMRYwFAYD VQQDEw02NjU4ZDM5Zi01OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVheBcEVUBHRWnnTRj9dQqV5zl+pt7gEOn6xFjWrzIj6tD4Tlepvh1YVB0Hv 7DY0ECR0szFEqReXzyYBFWXsf6Vi3Oanmvlow3W0xENWYsFFhpy87e2Pp/laLkpR n8EHP9At+XI00IQ6SgERHSZYvZVJtYoWZ3Qxz+iLazN1Fsg0MCwFhPiJhp5mqh+v iNc4JYWFfitfr0/uz75WIDMMjijC5f7D4R+pYI26pwyzom+jTevIjnPmK3HMbGTg 6Disz/hD+VRq61XjGlFOV/WhiMGsNq3XP3ySYvpYzBXneisKPg0/vphNB7ljeL02 zMuNuDBreKJVFs+nI3lvBp6cTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl/Jbk6 x17DipMiYl3CALklV2/tMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBcQweqClAjceInZFNYU2CXCjD4AulDXqvz/GSTOOBf/bZ0AmWvuKB sAYnSFR67XVdUYd/RYm3DDxjv3LeKcZvo5Ztiyj2qTc2uUj0qS1qRrm751K3PFya ysiJuzMybIfqluy/uKLILnBEiJRESZ4t0+6lLh6jKKIDjNON31S3jouWot6jMWw5 MKUsvR/htJWCEcQd6w1eGL+/KD/E05FMBJ/Jvussg6dADIv+CY6pnUUV9rHVOE3H mjAcJnF2w+Xr2iw7RStWQKqKOoHoRjf6qUoR2ZlzPl9JDlXFN+y89T2SG2rrfQ/f JThtAoAPXNcY2V89hW7mGW9REKCXEp65 -----END CERTIFICATE-----Generated at Thu May 30 21:49:46 2024 by rpki-client on console-ams.rpki-client.org