$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft File: oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json) Hash identifier: H4oJONUnvqVQDIqUyQDAtaU0cmQ5BuY+7K3rCP6Wx+E= Subject key identifier: 19:4C:F0:74:6E:18:1B:9D:C3:A5:AC:1D:2B:43:7C:13:D3:D6:95:28 Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft Manifest number: 0716 Signing time: Sat 18 May 2024 22:35:05 +0000 Manifest this update: Sat 18 May 2024 22:35:05 +0000 Manifest next update: Sat 25 May 2024 22:35:05 +0000 Files and hashes: 1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: AHcvYwRDipJ+1ZeeTmTyhvgbjDLgOwNbtmN+XWxUBhU=) 2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: D3ma4u6sODLuLAngk8FcCD8+uVZql4Y+2zbRzUVe9cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Validity Not Before: May 18 22:35:05 2024 GMT Not After : May 25 22:35:05 2024 GMT Subject: CN=66492d19-4b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:6a:52:c2:d4:6c:e6:56:d5:f8:3a:6e:ea: e2:a8:4f:d2:bf:4b:7c:0b:e5:2f:06:37:12:7b:9a: 28:75:a1:6d:53:61:18:13:1d:28:af:96:42:d0:76: c1:7b:34:bd:d4:f3:65:1a:28:23:54:56:78:90:9e: 53:10:94:11:7e:4b:83:24:b1:77:a9:d6:6d:ec:c6: 6f:ac:09:22:dc:7d:ea:76:84:ca:1e:94:0f:8e:aa: d6:68:55:9f:21:d6:94:60:53:08:a3:4f:94:48:5b: a5:bd:2c:a3:ab:b4:89:e6:95:bf:74:ef:8f:51:14: 5f:57:56:3f:83:b7:8d:dd:33:2a:68:3f:3e:16:00: fe:3f:9d:5a:4a:9a:07:fe:d6:65:e2:d1:cc:cb:bc: be:44:fd:80:a8:2c:1c:7f:ee:eb:2e:25:ef:af:2a: 15:70:f1:cc:fd:5c:3c:8d:f8:58:b4:ae:28:72:f9: 72:f5:01:33:b1:f1:20:fb:e2:a4:2a:e4:6b:73:5c: a2:ad:1c:d7:27:13:6f:28:17:24:2c:37:54:86:e7: 2d:67:b0:fe:7f:74:24:4d:f2:fc:9c:eb:62:b0:76: 8f:46:eb:e5:30:60:e6:93:ff:7f:75:82:50:81:77: a1:4f:55:46:82:7c:98:92:52:18:6d:79:c6:60:0c: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4C:F0:74:6E:18:1B:9D:C3:A5:AC:1D:2B:43:7C:13:D3:D6:95:28 X509v3 Authority Key Identifier: keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e5:af:cb:36:3f:ab:4d:96:7a:cf:1f:88:7a:03:14:34:24: 4c:b4:e7:25:c1:16:61:0f:88:8f:28:a6:fe:a5:1a:da:f1:24: c7:92:c2:01:ef:89:d0:21:92:9e:7e:7f:05:ad:1a:d9:4f:22: d4:69:b7:76:5c:99:c9:01:5a:9c:a5:51:98:e0:27:8c:41:2a: fa:b2:23:d2:d0:89:7c:be:21:f4:d5:bb:27:a0:76:2b:f5:c9: a9:b2:d3:af:af:04:a2:51:6a:f4:1f:52:c6:92:b3:24:d1:fb: 8f:8a:80:23:3e:1d:84:08:3f:10:a3:60:81:f8:aa:33:af:c0: 7c:a2:a1:c0:c6:e1:f0:ba:4c:28:6e:a8:d8:b1:0f:68:b5:72: 48:36:e2:60:89:c2:1b:db:e8:33:79:b2:0b:c1:a7:50:9b:61: 39:ff:2e:a9:31:5d:47:9a:4e:06:fe:27:8b:00:08:ed:e9:6c: fd:88:17:6a:c9:5f:f2:66:a5:0e:ae:70:8d:ce:50:c8:61:da: 73:d8:d6:32:f7:91:cd:71:f2:49:62:8f:2c:cc:5e:f3:e3:85: d0:11:30:5a:67:14:22:0e:fb:6f:ea:25:ac:61:fa:6c:11:b0: 0f:b7:7b:04:dd:e8:63:fb:9b:80:d2:a1:f2:c0:a3:0b:a9:34: 0d:a9:b9:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4 NTcwMkRBQjEwHhcNMjQwNTE4MjIzNTA1WhcNMjQwNTI1MjIzNTA1WjAYMRYwFAYD VQQDEw02NjQ5MmQxOS00YjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tdqUsLUbOZW1fg6buriqE/Sv0t8C+UvBjcSe5oodaFtU2EYEx0or5ZC0HbB ezS91PNlGigjVFZ4kJ5TEJQRfkuDJLF3qdZt7MZvrAki3H3qdoTKHpQPjqrWaFWf IdaUYFMIo0+USFulvSyjq7SJ5pW/dO+PURRfV1Y/g7eN3TMqaD8+FgD+P51aSpoH /tZl4tHMy7y+RP2AqCwcf+7rLiXvryoVcPHM/Vw8jfhYtK4ocvly9QEzsfEg++Kk KuRrc1yirRzXJxNvKBckLDdUhuctZ7D+f3QkTfL8nOtisHaPRuvlMGDmk/9/dYJQ gXehT1VGgnyYklIYbXnGYAzZ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlM8HRu GBudw6WsHStDfBPT1pUoMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAyNC9EMzNBNDc5NEYxODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04w MENaX3AyU04wXy1GY0MyckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn5a/LNj+rTZZ6zx+IegMUNCRMtOclwRZhD4iPKKb+pRra8STHksIB 74nQIZKefn8FrRrZTyLUabd2XJnJAVqcpVGY4CeMQSr6siPS0Il8viH01bsnoHYr 9cmpstOvrwSiUWr0H1LGkrMk0fuPioAjPh2ECD8Qo2CB+Kozr8B8oqHAxuHwukwo bqjYsQ9otXJINuJgicIb2+gzebILwadQm2E5/y6pMV1Hmk4G/ieLAAjt6Wz9iBdq yV/yZqUOrnCNzlDIYdpz2NYy95HNcfJJYo8szF7z44XQETBaZxQiDvtv6iWsYfps EbAPt3sE3ehj+5uA0qHywKMLqTQNqbnD -----END CERTIFICATE-----Generated at Sun May 19 00:16:21 2024 by rpki-client on console-fra.rpki-client.org