$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json) Hash identifier: FjU1Hl1w/XAxmKJqtLdZo6B/FkQQbApZuDdZh9eBPxc= Subject key identifier: 1B:37:19:40:C7:51:65:4A:6E:C5:41:E6:83:91:E3:3B:B4:1D:B1:9A Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft Manifest number: 019E Signing time: Sun 19 May 2024 04:37:45 +0000 Manifest this update: Sun 19 May 2024 04:37:44 +0000 Manifest next update: Sun 26 May 2024 04:37:44 +0000 Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: ouoA3HAoGbzE6/OhgHQGYMiLRS8hD15VbUPVMfKsCoM=) 2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: OsTujzLQvpN+2NneGG4ei52oKIG3u6OrMHQ+vwAbyH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B Validity Not Before: May 19 04:37:44 2024 GMT Not After : May 26 04:37:44 2024 GMT Subject: CN=66498219-0b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ad:2f:1b:1a:00:25:23:12:98:fd:f9:e9:1a: cd:c8:58:22:4f:6c:05:33:4b:43:ae:0c:24:7a:47: f7:43:ad:32:eb:a9:40:74:38:77:46:34:00:6f:2c: b5:a8:d6:1e:ca:df:30:5f:25:de:d8:58:83:25:8a: 00:80:c1:62:eb:29:5c:b2:fc:be:d5:de:ad:cb:b6: 94:48:f4:e2:3f:38:73:5b:d5:5b:c2:cc:2f:a3:14: 4b:3a:e5:df:37:9b:fd:d2:0b:de:a7:2c:72:c6:13: 1b:97:1b:33:12:d8:c5:f0:27:c3:7b:02:b1:ac:40: ac:b9:ef:ad:ae:3f:f4:2f:38:45:82:6a:f5:00:69: 29:10:a1:93:ba:e4:6d:10:a1:71:ac:5a:7d:a1:bf: ca:79:21:5d:49:92:ec:f5:68:f6:54:a6:00:4b:69: fe:d1:78:1c:b7:72:bc:e2:85:53:6e:0c:ad:e5:f8: b3:ee:f0:d6:62:d4:f7:51:f8:12:0b:ae:d5:a2:9e: b6:b5:11:60:4a:ff:67:85:00:c2:b0:63:d1:28:bc: fd:94:a8:0c:54:28:a9:62:43:38:42:bb:4e:8f:d0: 9c:23:3e:a3:f5:43:f1:6c:26:1b:66:6e:15:ab:a3: 1a:7c:f0:f1:6f:8f:61:8e:3b:2d:57:bd:1e:fa:38: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:19:40:C7:51:65:4A:6E:C5:41:E6:83:91:E3:3B:B4:1D:B1:9A X509v3 Authority Key Identifier: keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:30:dd:81:1b:08:21:28:1a:81:a3:80:57:aa:be:6b:c3:9d: 90:66:4a:dd:7d:61:63:4d:81:b2:46:e2:78:90:dd:8e:2b:43: 85:d1:f5:22:19:a4:1a:99:b2:3c:75:21:52:90:17:43:a3:9e: 34:fc:3a:06:b6:50:2e:07:a7:45:13:03:ab:ce:f4:ed:e3:9a: c2:83:0d:0e:1b:15:8c:df:0a:4a:55:52:37:67:c4:47:6c:1e: 71:08:4c:65:cf:02:e0:4a:64:f7:0f:87:82:11:75:21:03:91: 1f:94:10:77:43:66:1c:28:0e:91:36:a6:2e:29:94:5b:93:f5: 6a:e3:6a:38:9b:1f:1f:f3:9c:50:62:09:56:46:8d:97:fe:20: b5:ae:c5:14:2a:f2:16:af:1a:5c:8f:b1:df:ca:bb:cc:68:63: d0:98:e8:4d:69:75:e7:d7:19:15:45:d6:c9:86:b0:19:e6:4a: 52:ef:e2:99:4d:73:cf:dc:65:f2:3c:9b:71:6e:ae:60:5a:74: 6a:47:cb:70:43:47:ef:4b:be:69:21:5a:32:82:ac:54:1f:26: a3:39:13:22:0f:d5:62:f5:15:0d:20:da:f8:12:a2:91:86:97: 08:b8:8a:c5:2a:73:b8:b0:87:4e:6c:21:d9:e3:e6:10:a9:f7: ea:67:cf:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZENTUxMTAvBgNVBAUTKEExOENEM0ZFODJBRDIxODAzQzFGMEIxMzJEQUQ4M0Qx QzM1NDkzNEIwHhcNMjQwNTE5MDQzNzQ0WhcNMjQwNTI2MDQzNzQ0WjAYMRYwFAYD VQQDEw02NjQ5ODIxOS0wYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3q0vGxoAJSMSmP356RrNyFgiT2wFM0tDrgwkekf3Q60y66lAdDh3RjQAbyy1 qNYeyt8wXyXe2FiDJYoAgMFi6ylcsvy+1d6ty7aUSPTiPzhzW9VbwswvoxRLOuXf N5v90gvepyxyxhMblxszEtjF8CfDewKxrECsue+trj/0LzhFgmr1AGkpEKGTuuRt EKFxrFp9ob/KeSFdSZLs9Wj2VKYAS2n+0Xgct3K84oVTbgyt5fiz7vDWYtT3UfgS C67Vop62tRFgSv9nhQDCsGPRKLz9lKgMVCipYkM4QrtOj9CcIz6j9UPxbCYbZm4V q6MafPDxb49hjjstV70e+jg7eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs3GUDH UWVKbsVB5oOR4zu0HbGaMB8GA1UdIwQYMBaAFKGM0/6CrSGAPB8LEy2tg9HDVJNL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ1NS8yQkE3Mzk1RTE2 QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZQThId3NUTGEyRDBjTlVr MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZelRfb0t0SVlBOEh3c1RMYTJEMGNOVWswcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ1NS8yQkE3Mzk1RTE2QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZ QThId3NUTGEyRDBjTlVrMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFMN2BGwghKBqBo4BXqr5rw52QZkrdfWFjTYGyRuJ4kN2OK0OF0fUi GaQambI8dSFSkBdDo540/DoGtlAuB6dFEwOrzvTt45rCgw0OGxWM3wpKVVI3Z8RH bB5xCExlzwLgSmT3D4eCEXUhA5EflBB3Q2YcKA6RNqYuKZRbk/Vq42o4mx8f85xQ YglWRo2X/iC1rsUUKvIWrxpcj7HfyrvMaGPQmOhNaXXn1xkVRdbJhrAZ5kpS7+KZ TXPP3GXyPJtxbq5gWnRqR8twQ0fvS75pIVoygqxUHyajORMiD9Vi9RUNINr4EqKR hpcIuIrFKnO4sIdObCHZ4+YQqffqZ89V -----END CERTIFICATE-----Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org