$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: 3XlYvROqV8S+BoD9Go7PGkSVKrB8VIK/nrmn0kGRmSs= Subject key identifier: CA:88:37:2A:E1:1D:3C:03:93:DA:86:52:9F:84:01:C8:A8:8D:3F:C6 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 14 Signing time: Wed 15 May 2024 08:59:27 +0000 Manifest this update: Wed 15 May 2024 08:59:26 +0000 Manifest next update: Wed 22 May 2024 08:59:26 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: oHLLZpqGFTo52H1KSM70SPmqi++tYXQ9gbTzgeHVeLc=) 2: 41629902FBB611EE90C0D57BC4F9AE02.roa (hash: GHPy6zz7qNXp7wmj4Pm+t1lbhI7cFy3Y7mctHg1Q9xE=) 3: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: pka10Uc6nzlxGkED9VZp9bJBwLv9g+b02qwlKzxKN2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: May 15 08:59:26 2024 GMT Not After : May 22 08:59:26 2024 GMT Subject: CN=6644796f-d06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:71:2e:ff:fe:d3:03:bf:f6:78:19:c7:1f: dc:ea:23:fc:d0:37:63:84:d6:c9:dc:17:db:9e:e8: ec:6e:52:7c:c5:53:ac:05:94:0e:fb:56:a2:d2:7d: b6:77:f6:26:a3:88:f4:77:16:ad:6a:f2:51:0b:d3: 59:bb:95:97:a8:cb:bc:3a:23:b5:b4:8d:77:c5:c8: d1:28:b3:91:24:91:a3:34:f1:4b:c0:6c:1d:0e:72: 65:ea:e5:d7:eb:df:7c:2f:a0:21:41:ad:7b:c0:1d: a6:a4:64:13:0e:f0:d9:c8:20:a9:71:d3:0c:d9:9d: 5b:3c:73:d1:9a:87:64:cc:00:9d:4e:c6:1b:2f:e4: 3d:d7:e5:65:73:d7:24:55:7c:a4:f7:28:05:97:c6: 3f:99:8b:40:a6:5c:86:0d:11:b7:ce:c1:e0:78:3d: 36:9d:7c:68:f4:af:3c:42:40:f1:9c:64:47:4d:61: b1:56:5d:1a:c5:2b:a8:98:57:ad:e0:6a:fe:ee:e3: 6f:23:d6:69:d7:a4:95:a5:a1:30:ee:d2:78:77:0e: bc:33:cb:c5:3f:94:bc:08:7e:2b:49:16:91:7e:55: 47:d6:8a:b6:d4:e4:d4:40:f0:42:16:d2:97:22:83: ba:07:bc:72:2e:24:86:35:b2:c2:86:d5:ba:68:54: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:88:37:2A:E1:1D:3C:03:93:DA:86:52:9F:84:01:C8:A8:8D:3F:C6 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cf:3d:72:46:7d:61:fa:e7:9a:e1:c9:48:db:87:bf:31:ec: d5:f5:3a:a4:bd:42:f1:b1:30:a6:ce:58:ac:74:3d:98:27:ab: ce:13:f4:62:51:98:42:9c:f9:b0:15:17:a6:f8:ef:88:58:b9: 24:6d:a8:a0:81:ad:5b:8a:fa:22:67:49:a7:a9:1e:53:3c:e2: 2d:d6:6d:33:3a:a8:64:94:e5:01:7f:49:db:f8:70:be:3c:15: 8c:5c:8b:1a:c2:4f:e4:21:0b:3e:3d:e2:d5:b7:13:d4:dc:44: 41:de:33:db:61:f0:36:a5:6c:58:8a:47:12:af:99:2f:33:66: b2:3a:08:a2:c3:eb:81:7f:58:36:ba:e9:fe:20:f5:3b:d8:f5: e8:ea:f1:58:61:10:5b:d2:94:73:36:ca:0b:38:5c:fa:ee:10: 5f:e1:c3:51:6d:6f:8b:dd:c2:b8:24:cf:fd:ff:98:2c:9f:34: d7:38:7d:8f:65:d2:f3:a3:79:83:66:6f:fd:52:53:55:37:c4: f3:d7:71:e0:c4:30:d9:6a:8e:68:70:5a:47:ba:47:39:75:90: d3:1b:6b:a7:ed:45:a1:82:af:4c:d1:d0:03:59:d0:0a:d4:96: 0b:5c:62:f4:b7:38:3e:74:1d:0b:95:11:b0:3c:52:9a:a4:9f: 01:dd:91:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODhFRTExMC8GA1UEBRMoM0FFREE4MDQwN0Q3N0JCNTI4NDhBQkQ5RjcyNTlCRDgw N0E1RDM2MDAeFw0yNDA1MTUwODU5MjZaFw0yNDA1MjIwODU5MjZaMBgxFjAUBgNV BAMTDTY2NDQ3OTZmLWQwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg83Eu//7TA7/2eBnHH9zqI/zQN2OE1sncF9ue6OxuUnzFU6wFlA77VqLSfbZ3 9iajiPR3Fq1q8lEL01m7lZeoy7w6I7W0jXfFyNEos5EkkaM08UvAbB0OcmXq5dfr 33wvoCFBrXvAHaakZBMO8NnIIKlx0wzZnVs8c9Gah2TMAJ1Oxhsv5D3X5WVz1yRV fKT3KAWXxj+Zi0CmXIYNEbfOweB4PTadfGj0rzxCQPGcZEdNYbFWXRrFK6iYV63g av7u428j1mnXpJWloTDu0nh3Drwzy8U/lLwIfitJFpF+VUfWirbU5NRA8EIW0pci g7oHvHIuJIY1ssKG1bpoVFyDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyog3KuEd PAOT2oZSn4QByKiNP8YwHwYDVR0jBBgwFoAUOu2oBAfXe7UoSKvZ9yWb2Ael02Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4OEVFLzMyMDk3MzFBRkJB RjExRUVBNkJDMzk1MkM0RjlBRTAyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAy QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3Uyb0JBZlhlN1VvU0t2Wjl5V2IyQWVsMDJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 OEVFLzMyMDk3MzFBRkJBRjExRUVBNkJDMzk1MkM0RjlBRTAyL091Mm9CQWZYZTdV b1NLdlo5eVdiMkFlbDAyQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABzPPXJGfWH655rhyUjbh78x7NX1OqS9QvGxMKbOWKx0PZgnq84T9GJR mEKc+bAVF6b474hYuSRtqKCBrVuK+iJnSaepHlM84i3WbTM6qGSU5QF/Sdv4cL48 FYxcixrCT+QhCz494tW3E9TcREHeM9th8DalbFiKRxKvmS8zZrI6CKLD64F/WDa6 6f4g9TvY9ejq8VhhEFvSlHM2ygs4XPruEF/hw1Ftb4vdwrgkz/3/mCyfNNc4fY9l 0vOjeYNmb/1SU1U3xPPXceDEMNlqjmhwWke6Rzl1kNMba6ftRaGCr0zR0ANZ0ArU lgtcYvS3OD50HQuVEbA8UpqknwHdkR4= -----END CERTIFICATE-----Generated at Wed May 15 11:17:40 2024 by rpki-client on console-ams.rpki-client.org