$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: 9uFy55zBS5DYp2vx1g+5+xBfN4AAht2V82R0i23J1Hc= Subject key identifier: 9A:1C:C6:DC:C5:39:EB:73:49:E5:00:6F:02:6A:7A:98:6D:C5:7A:AD Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 069A Signing time: Sat 04 May 2024 23:28:36 +0000 Manifest this update: Sat 04 May 2024 23:28:35 +0000 Manifest next update: Sat 11 May 2024 23:28:35 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: y8x9durrjqIDFWZnBp90ux88vnuIn9jmEV8XRcA0fh0=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: PQ9NQeFdUaem1pY4JLa9xvVBF10d7nB4VY0exGkqJTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: May 4 23:28:35 2024 GMT Not After : May 11 23:28:35 2024 GMT Subject: CN=6636c4a3-8578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:9c:30:f4:eb:b4:36:d8:cf:2b:8e:ce:9d: c2:2c:f5:2a:c5:7f:f4:0d:ef:43:f7:8a:3e:b0:18: b8:f2:1c:ec:0f:dc:72:8f:b1:a9:d8:29:51:05:48: 03:50:d3:09:a1:24:5b:77:9b:c4:62:4f:52:e6:f5: df:b9:7f:6d:00:31:2f:89:c5:b5:05:8f:c1:55:47: e4:25:40:03:ce:38:c5:b6:73:d7:cb:e1:01:24:ae: f1:8b:51:31:89:09:47:92:33:2f:8f:32:ca:28:cf: 3e:71:ab:44:0d:92:a9:32:e1:a8:d7:e4:13:77:31: b0:c0:b1:63:e7:93:6d:29:00:2d:ce:0f:6a:2e:cf: 9f:5e:2b:83:14:65:d0:25:9f:fc:90:03:62:27:a2: c7:1d:0b:40:78:6a:af:9d:d9:e2:89:d0:2c:ec:60: 34:49:bf:92:4b:53:b2:c9:6e:57:7f:7b:45:ab:66: 0d:ac:0c:7f:ad:02:ef:40:f6:95:78:9e:cd:28:9e: d1:dc:2f:cd:c2:a1:ff:23:d0:bb:48:bc:70:42:f5: 7a:0b:ad:62:16:a4:42:28:3f:33:4b:a9:53:b3:d8: f7:93:2f:c9:ec:99:08:b4:64:c1:2f:73:93:a9:e9: bd:fd:b5:68:18:67:fd:85:ae:f5:df:4e:fc:8a:b8: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1C:C6:DC:C5:39:EB:73:49:E5:00:6F:02:6A:7A:98:6D:C5:7A:AD X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:6f:81:ce:47:ea:f3:8c:b2:c4:a1:3a:08:5e:b9:bc:da:39: f8:99:49:69:fc:1b:61:f0:3a:ba:a6:6a:97:59:23:d4:34:eb: 79:fa:06:0f:4d:86:16:d2:76:50:3d:5b:87:9c:96:09:22:02: f6:42:ed:f0:5f:a9:8a:e7:7b:ba:7b:eb:cc:eb:22:ed:1e:3c: c7:74:ca:5c:b3:54:89:38:e1:3b:7f:41:26:a4:54:11:e4:8b: a2:a1:28:68:b5:ba:0f:51:68:94:70:9d:6e:88:43:0b:e8:31: 93:8d:64:68:bd:98:6b:eb:72:ec:c2:d3:6b:e9:7a:e7:63:13: 12:69:67:ef:b0:2e:58:7c:aa:db:54:6a:ce:18:65:a1:0b:6d: df:49:a7:e7:6f:3a:8e:af:64:4c:cd:6a:f3:9b:5a:3c:3b:94: 27:77:43:0a:9d:54:8a:54:0d:6a:25:f9:24:ba:36:0a:b4:9c: 2e:f7:15:6f:5b:86:9a:ac:f4:e6:c6:8d:7f:8b:60:b6:35:26: 82:4c:a2:a5:4b:ae:ab:7e:8d:e2:8e:8d:81:3d:8f:90:8f:70: b3:d0:f7:83:f8:8b:7f:f9:7b:3d:08:14:5e:ee:e8:51:00:29: 7d:b4:a9:1e:2e:42:61:cf:98:33:c9:00:f4:1a:20:6e:39:a9: 5b:3e:31:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjQwNTA0MjMyODM1WhcNMjQwNTExMjMyODM1WjAYMRYwFAYD VQQDEw02NjM2YzRhMy04NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKucMPTrtDbYzyuOzp3CLPUqxX/0De9D94o+sBi48hzsD9xyj7Gp2ClRBUgD UNMJoSRbd5vEYk9S5vXfuX9tADEvicW1BY/BVUfkJUADzjjFtnPXy+EBJK7xi1Ex iQlHkjMvjzLKKM8+catEDZKpMuGo1+QTdzGwwLFj55NtKQAtzg9qLs+fXiuDFGXQ JZ/8kANiJ6LHHQtAeGqvndniidAs7GA0Sb+SS1OyyW5Xf3tFq2YNrAx/rQLvQPaV eJ7NKJ7R3C/NwqH/I9C7SLxwQvV6C61iFqRCKD8zS6lTs9j3ky/J7JkItGTBL3OT qem9/bVoGGf9ha713078irihFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJocxtzF OetzSeUAbwJqephtxXqtMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTb4HOR+rzjLLEoToIXrm82jn4mUlp/Bth8Dq6pmqXWSPUNOt5+gYP TYYW0nZQPVuHnJYJIgL2Qu3wX6mK53u6e+vM6yLtHjzHdMpcs1SJOOE7f0EmpFQR 5IuioShotboPUWiUcJ1uiEML6DGTjWRovZhr63LswtNr6XrnYxMSaWfvsC5YfKrb VGrOGGWhC23fSafnbzqOr2RMzWrzm1o8O5Qnd0MKnVSKVA1qJfkkujYKtJwu9xVv W4aarPTmxo1/i2C2NSaCTKKlS66rfo3ijo2BPY+Qj3Cz0PeD+It/+Xs9CBRe7uhR ACl9tKkeLkJhz5gzyQD0GiBuOalbPjHG -----END CERTIFICATE-----Generated at Sun May 5 00:12:21 2024 by rpki-client on console-fra.rpki-client.org