$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json) Hash identifier: JsQHcjaZaEgmP8UOuT2aS1Jy+3wseZcV1KAHuqObmRk= Subject key identifier: 6A:41:AA:CC:95:A8:A2:E4:CE:35:1A:6D:32:80:6E:D2:DB:9A:EB:EF Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft Manifest number: 01EB Signing time: Fri 03 May 2024 04:22:09 +0000 Manifest this update: Fri 03 May 2024 04:22:09 +0000 Manifest next update: Fri 10 May 2024 04:22:09 +0000 Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: 0Anf2abnnBgRgV8qWaCp4wzhLa4bcQvkkasFnK9uH9o=) 2: 4E1203088C1411EDA66E4F28C4F9AE02.roa (hash: 0amE5+aro/fZmIxW9AjraFMlhEgv6beQEmk80z0hSig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Validity Not Before: May 3 04:22:09 2024 GMT Not After : May 10 04:22:09 2024 GMT Subject: CN=66346671-7ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:1a:73:6f:c6:48:50:06:49:0b:96:0f:9c: 27:5c:99:1f:0b:22:b9:03:1e:a1:7f:40:81:c4:8b: d4:77:22:21:a4:41:bd:fa:07:84:2c:0c:e5:a1:cd: f5:3c:ba:79:55:aa:3a:66:ea:f4:06:f1:98:49:99: 09:62:43:94:dc:cf:fc:df:2d:0b:14:1d:b3:38:89: ba:2c:3f:24:eb:3f:29:f9:a8:d3:a5:54:7f:8d:8b: a5:03:4b:30:b4:04:77:31:b6:5d:fa:eb:ed:73:d2: 99:41:03:b1:7e:24:26:89:87:3c:e6:6e:18:f4:0d: 49:9e:6d:01:fb:9a:58:7f:f9:07:c4:f0:d0:60:3c: 76:9d:c3:17:ac:66:cb:c0:15:92:f0:0a:51:07:18: f3:b5:25:96:6f:0d:bd:51:54:9e:1e:28:8d:be:02: 70:b1:b2:bd:3b:57:b3:b0:bf:be:76:f4:57:b1:19: 97:7f:4f:aa:02:69:24:e6:d0:31:a2:81:5f:01:3b: 81:3e:72:0b:ac:76:89:6a:36:bb:ca:5d:7c:9e:ab: 89:74:54:9e:53:a5:90:ea:ea:60:a9:62:22:8a:43: 6d:f8:72:a5:02:5a:10:1b:67:b7:72:08:20:64:3b: 39:41:8b:17:94:53:ce:1c:86:34:b7:08:b1:50:7a: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:41:AA:CC:95:A8:A2:E4:CE:35:1A:6D:32:80:6E:D2:DB:9A:EB:EF X509v3 Authority Key Identifier: keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4d:a2:a4:c4:16:18:5d:74:1c:c5:f1:81:d4:33:5d:73:6f: 26:e8:67:69:02:e3:8d:27:f1:a0:fe:bc:74:81:cc:81:d6:5a: a0:67:68:a3:6c:03:dc:31:5c:f1:34:03:36:e7:4d:a3:65:41: b8:61:eb:54:4b:ea:f8:86:31:54:ba:4b:d1:24:03:e5:b4:a4: 84:13:20:ea:91:7b:b2:8e:29:db:c4:8e:9b:96:6f:04:f2:1f: 73:c0:74:d0:22:40:df:13:b5:82:da:ee:63:ab:4c:16:17:9e: 31:71:ed:1b:9f:4b:d4:42:cb:2e:43:04:84:c6:6b:08:90:33: b8:e5:ee:8f:30:f8:94:df:c6:f1:c8:3f:b8:30:11:1f:de:11: 6a:d9:a6:30:a8:2d:31:66:eb:7c:c8:07:c2:19:03:66:32:d0: 49:d3:ed:2f:e4:d1:b6:64:d8:17:37:1a:06:b2:fc:81:09:75: d0:d5:8a:83:85:90:0b:15:16:bc:65:2d:ed:7e:ca:16:dd:f7: cf:c8:64:bc:75:37:48:98:11:00:97:e6:a3:e8:2f:62:5c:52: cf:30:51:e0:14:ed:e4:9a:b1:a7:37:34:36:96:cd:15:d4:5a: a9:78:46:9e:cb:fe:90:5d:57:6b:23:88:9d:b6:03:db:41:c8: 40:b9:c3:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1NUMxMTAvBgNVBAUTKEExREExNUJBMkIzQkI2NjJBMTc4RTI2RDk2NjgxNUEy MkEyRTQ2OTkwHhcNMjQwNTAzMDQyMjA5WhcNMjQwNTEwMDQyMjA5WjAYMRYwFAYD VQQDEw02NjM0NjY3MS03Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR4ac2/GSFAGSQuWD5wnXJkfCyK5Ax6hf0CBxIvUdyIhpEG9+geELAzloc31 PLp5Vao6Zur0BvGYSZkJYkOU3M/83y0LFB2zOIm6LD8k6z8p+ajTpVR/jYulA0sw tAR3MbZd+uvtc9KZQQOxfiQmiYc85m4Y9A1Jnm0B+5pYf/kHxPDQYDx2ncMXrGbL wBWS8ApRBxjztSWWbw29UVSeHiiNvgJwsbK9O1ezsL++dvRXsRmXf0+qAmkk5tAx ooFfATuBPnILrHaJaja7yl18nquJdFSeU6WQ6upgqWIiikNt+HKlAloQG2e3cggg ZDs5QYsXlFPOHIY0twixUHo5QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpBqsyV qKLkzjUabTKAbtLbmuvvMB8GA1UdIwQYMBaAFKHaFborO7ZioXjibZZoFaIqLkaZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjU1Qy9FOTE2RDJFRUY4 NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3RtS2hlT0p0bG1nVm9pb3VS cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kb1Z1aXM3dG1LaGVPSnRsbWdWb2lvdVJway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjU1Qy9FOTE2RDJFRUY4NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3Rt S2hlT0p0bG1nVm9pb3VScGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1TaKkxBYYXXQcxfGB1DNdc28m6GdpAuONJ/Gg/rx0gcyB1lqgZ2ij bAPcMVzxNAM2502jZUG4YetUS+r4hjFUukvRJAPltKSEEyDqkXuyjinbxI6blm8E 8h9zwHTQIkDfE7WC2u5jq0wWF54xce0bn0vUQssuQwSExmsIkDO45e6PMPiU38bx yD+4MBEf3hFq2aYwqC0xZut8yAfCGQNmMtBJ0+0v5NG2ZNgXNxoGsvyBCXXQ1YqD hZALFRa8ZS3tfsoW3ffPyGS8dTdImBEAl+aj6C9iXFLPMFHgFO3kmrGnNzQ2ls0V 1FqpeEaey/6QXVdrI4idtgPbQchAucMQ -----END CERTIFICATE-----Generated at Fri May 3 05:32:32 2024 by rpki-client on console-ams.rpki-client.org