$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: b6E/FvZJ932NdrmquotfEsok/ABkm2LP2jtU0nObd3A= Subject key identifier: 2D:65:97:C9:84:5C:B0:A8:CD:12:82:C7:08:FF:B0:AF:E8:85:5F:68 Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 0379 Signing time: Wed 29 May 2024 03:08:34 +0000 Manifest this update: Wed 29 May 2024 03:08:34 +0000 Manifest next update: Wed 05 Jun 2024 03:08:34 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: utMZeZZdwvmaemfVPtSU3WYJStsm5XIvRQIGTwTYNeg=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: +D56I4b7nWl9oFXCZLe1V1DGfoh8L2BH9bwrOgGWI6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: May 29 03:08:34 2024 GMT Not After : Jun 5 03:08:34 2024 GMT Subject: CN=66569c32-a437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:e9:ab:5d:89:9d:02:4e:91:fb:fc:96:83: 58:81:7d:99:f4:c5:ae:08:34:86:23:6d:f3:c8:9b: cd:0f:5a:1f:71:32:c2:cf:23:be:3a:7f:0b:01:e9: 63:66:e2:5e:16:a5:0e:08:a1:a8:e0:16:55:23:76: e2:36:3b:14:ae:21:3d:c6:e7:d0:6b:fe:38:c8:6e: 16:eb:49:7e:f9:76:cc:20:40:4f:da:a5:fe:24:f9: 24:f2:b1:09:93:50:03:97:5c:f5:6f:58:d4:77:97: 52:c8:ca:05:9d:9a:2a:70:71:44:dd:de:4c:1c:3d: b6:26:c2:4a:89:a1:85:82:2a:f4:ed:a5:0f:e5:ff: 27:4f:23:3f:a5:c0:6d:bd:ab:29:c0:ef:08:02:ae: 3d:67:f2:7a:71:0b:d8:e4:36:85:e1:5e:75:23:00: 4c:12:76:e5:95:fc:a5:b9:7f:02:41:ae:7c:4a:a6: 1b:c7:44:63:00:f1:4f:56:22:db:d2:a8:5e:c3:96: 09:5f:64:04:fa:e0:aa:c3:ff:26:d7:ac:6b:df:17: e2:ec:2f:67:6b:53:b4:8e:f7:07:18:60:b5:7d:c6: 6b:1f:be:28:2e:af:1d:dc:2c:36:d3:9c:ea:fb:63: e8:9d:54:dc:0f:30:d5:03:13:df:63:a5:87:75:1e: 5c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:65:97:C9:84:5C:B0:A8:CD:12:82:C7:08:FF:B0:AF:E8:85:5F:68 X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:8c:f0:ba:10:c4:24:1d:af:0a:73:eb:d1:df:fc:b4:ad:92: ba:5b:81:23:dd:7f:af:84:2c:e3:aa:1a:17:63:07:0e:a8:cd: 3d:2f:c1:f9:9d:5d:b6:b8:1f:13:46:cc:87:2b:eb:32:4c:b8: f0:ed:f7:4f:86:ef:c9:92:6e:e3:a9:dc:88:f8:71:57:8a:4f: 02:3b:d4:d5:5d:ac:98:ec:b8:f3:78:16:b4:3d:8a:22:ae:e5: 12:0a:ea:83:0e:56:52:8e:a0:4f:12:f5:e2:06:8c:e9:26:9b: b1:8c:64:76:11:1e:f5:95:6b:c3:69:57:41:2e:61:e0:94:25: 4b:5f:ad:f9:b9:a6:6c:0e:40:56:be:04:8b:ad:16:3b:98:a5: f4:6c:72:09:49:4e:4f:13:a8:2b:e3:90:81:0e:c0:ee:44:a0: 7d:d3:21:61:ba:56:5a:3e:b7:b6:89:a5:c3:c0:f1:c9:d4:28: aa:cd:83:e8:b6:41:b0:7d:0e:03:af:a1:99:97:df:60:8a:35: 65:39:60:8d:b9:05:52:34:2d:22:85:c6:62:61:19:7a:ed:10: 4f:a8:f7:2b:7a:51:a1:61:52:72:08:39:f5:86:14:be:6e:7e: e4:6c:9b:d7:c5:77:b4:99:de:b8:f0:d6:15:1d:ab:1b:b3:62: f0:7d:31:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjQwNTI5MDMwODM0WhcNMjQwNjA1MDMwODM0WjAYMRYwFAYD VQQDEw02NjU2OWMzMi1hNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiXpq12JnQJOkfv8loNYgX2Z9MWuCDSGI23zyJvND1ofcTLCzyO+On8LAelj ZuJeFqUOCKGo4BZVI3biNjsUriE9xufQa/44yG4W60l++XbMIEBP2qX+JPkk8rEJ k1ADl1z1b1jUd5dSyMoFnZoqcHFE3d5MHD22JsJKiaGFgir07aUP5f8nTyM/pcBt vaspwO8IAq49Z/J6cQvY5DaF4V51IwBMEnbllfyluX8CQa58SqYbx0RjAPFPViLb 0qhew5YJX2QE+uCqw/8m16xr3xfi7C9na1O0jvcHGGC1fcZrH74oLq8d3Cw205zq +2PonVTcDzDVAxPfY6WHdR5cEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1ll8mE XLCozRKCxwj/sK/ohV9oMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFjPC6EMQkHa8Kc+vR3/y0rZK6W4Ej3X+vhCzjqhoXYwcOqM09L8H5 nV22uB8TRsyHK+syTLjw7fdPhu/Jkm7jqdyI+HFXik8CO9TVXayY7LjzeBa0PYoi ruUSCuqDDlZSjqBPEvXiBozpJpuxjGR2ER71lWvDaVdBLmHglCVLX635uaZsDkBW vgSLrRY7mKX0bHIJSU5PE6gr45CBDsDuRKB90yFhulZaPre2iaXDwPHJ1CiqzYPo tkGwfQ4Dr6GZl99gijVlOWCNuQVSNC0ihcZiYRl67RBPqPcrelGhYVJyCDn1hhS+ bn7kbJvXxXe0md648NYVHasbs2LwfTFW -----END CERTIFICATE-----Generated at Wed May 29 04:02:05 2024 by rpki-client on console-fra.rpki-client.org