$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: n+RgmbZlOg0GZucs3VdFd06oNppYNdrvbV35xtA7E7k= Subject key identifier: 6F:1D:F7:47:C9:D1:B2:CF:E2:3D:F4:2F:5F:24:AD:9E:79:47:48:FA Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 16D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 16C8 Signing time: Sat 18 May 2024 17:06:45 +0000 Manifest this update: Sat 18 May 2024 17:06:44 +0000 Manifest next update: Sat 25 May 2024 17:06:44 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: Ne6JoWrUlMSGqcRfn9mmKYPWi4orD+Ilq3BOVdRq1nM=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: Lsp36uN6r4N8/1l9UkZLjN+RdaoTsddxUG/MhDgoNk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5840 (0x16d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: May 18 17:06:44 2024 GMT Not After : May 25 17:06:44 2024 GMT Subject: CN=6648e024-cf41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:27:6a:e4:0d:a6:23:0e:ed:b2:15:4e:90:84: 1b:1a:6b:ca:93:d3:45:2f:c2:3a:52:7c:d1:54:5b: f1:5b:24:06:2c:ca:c1:af:cc:61:12:f4:b5:cd:65: c7:66:13:90:92:a4:4e:1c:db:4e:f2:3b:02:47:0f: fe:5e:83:13:5b:92:43:c1:fc:61:57:99:85:b0:aa: ac:0f:b5:0f:75:b6:f7:b7:49:d5:9c:7c:5a:a2:d4: da:c6:05:7c:3d:25:8c:6c:20:65:26:de:e6:6a:c1: c7:39:28:f4:ec:f6:8a:07:d6:34:58:40:17:2c:6b: 9b:44:61:f3:b0:12:49:23:8d:9c:20:73:a3:cc:e1: 00:44:a9:3f:7a:c6:fa:aa:2d:e6:7a:1b:ba:46:07: ea:55:b5:91:1f:b6:1c:ff:ba:bf:86:b3:83:6e:01: 81:63:ba:f7:45:ce:4b:3c:a8:a3:6e:a5:fc:dc:cd: bd:f1:91:2c:48:8b:6c:9a:c0:de:21:e1:16:a0:d5: e3:21:6d:75:aa:ac:ec:1c:15:3d:f3:dd:2f:78:5f: 3f:a7:19:57:ba:28:3c:de:1d:65:7b:59:6f:01:8c: 53:a9:14:e6:4f:85:b7:88:5a:14:08:17:5d:49:1d: d2:b8:66:97:7a:e4:5b:4b:cf:89:9c:20:7f:d3:cf: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1D:F7:47:C9:D1:B2:CF:E2:3D:F4:2F:5F:24:AD:9E:79:47:48:FA X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b4:ba:51:0a:e5:a4:aa:ba:32:cc:06:fe:e5:bb:33:e8:27: 60:a7:da:d0:89:39:78:c7:84:38:0d:a8:a0:1b:0a:7f:fa:94: ef:3c:ab:96:d8:70:63:7f:cf:ea:66:f2:05:de:d2:9e:ce:3b: 26:10:30:39:d7:45:b7:e3:2b:17:d5:fa:23:af:ab:da:a5:06: c4:0d:bc:17:29:79:00:dc:4a:1e:04:8e:19:58:eb:a9:6f:2f: 91:50:8a:8d:23:c1:21:ce:60:fc:16:f0:c1:c3:31:27:c0:2f: 47:cb:64:2c:1f:6f:c1:68:64:7c:00:3c:34:c7:4c:f3:22:63: ac:a1:4b:43:0f:2f:b5:1a:c0:f5:52:60:93:69:94:b9:5b:08: be:b6:22:f0:92:6c:0a:d1:03:d3:05:83:68:d5:ae:6a:37:1a: c6:60:4a:30:7d:8b:fa:13:13:80:eb:09:50:c4:1c:56:90:61: 71:cf:80:99:d9:ea:9e:8a:1e:cf:99:4d:bc:5f:a6:d8:e6:d0: 74:07:f3:78:93:05:6f:e9:b7:ea:21:33:30:cd:d4:cb:ab:5f: 14:03:30:4c:c9:e5:02:47:71:75:3c:80:62:25:10:15:e8:db: 09:bd:44:c8:2f:80:21:f1:f2:8e:78:ce:c1:c4:12:eb:eb:69: 9c:64:d0:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjQwNTE4MTcwNjQ0WhcNMjQwNTI1MTcwNjQ0WjAYMRYwFAYD VQQDEw02NjQ4ZTAyNC1jZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Cdq5A2mIw7tshVOkIQbGmvKk9NFL8I6UnzRVFvxWyQGLMrBr8xhEvS1zWXH ZhOQkqROHNtO8jsCRw/+XoMTW5JDwfxhV5mFsKqsD7UPdbb3t0nVnHxaotTaxgV8 PSWMbCBlJt7masHHOSj07PaKB9Y0WEAXLGubRGHzsBJJI42cIHOjzOEARKk/esb6 qi3mehu6RgfqVbWRH7Yc/7q/hrODbgGBY7r3Rc5LPKijbqX83M298ZEsSItsmsDe IeEWoNXjIW11qqzsHBU9890veF8/pxlXuig83h1le1lvAYxTqRTmT4W3iFoUCBdd SR3SuGaXeuRbS8+JnCB/08/LTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8d90fJ 0bLP4j30L18krZ55R0j6MB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbtLpRCuWkqroyzAb+5bsz6Cdgp9rQiTl4x4Q4DaigGwp/+pTvPKuW 2HBjf8/qZvIF3tKezjsmEDA510W34ysX1fojr6vapQbEDbwXKXkA3EoeBI4ZWOup by+RUIqNI8EhzmD8FvDBwzEnwC9Hy2QsH2/BaGR8ADw0x0zzImOsoUtDDy+1GsD1 UmCTaZS5Wwi+tiLwkmwK0QPTBYNo1a5qNxrGYEowfYv6ExOA6wlQxBxWkGFxz4CZ 2eqeih7PmU28X6bY5tB0B/N4kwVv6bfqITMwzdTLq18UAzBMyeUCR3F1PIBiJRAV 6NsJvUTIL4Ah8fKOeM7BxBLr62mcZND2 -----END CERTIFICATE-----Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org