$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: Xbw0aHCjBLnNdJK4BYxM7LPJkwTl+eLv3ybG9p0cxAg= Subject key identifier: 3B:17:93:7B:05:CF:4C:15:3C:4E:EB:C6:0D:9D:96:36:3F:EB:62:61 Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 0709 Signing time: Sat 04 May 2024 22:51:36 +0000 Manifest this update: Sat 04 May 2024 22:51:36 +0000 Manifest next update: Sat 11 May 2024 22:51:36 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: 1DFQVUJGct0euO9lhiP805p9DLb/GJzjGMmesH1WcsU=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: Cxxl6EybkIAOT6d8CueqSL+8i5OFG+G+yJXvm0dYWPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: May 4 22:51:36 2024 GMT Not After : May 11 22:51:36 2024 GMT Subject: CN=6636bbf8-1d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:7f:64:dd:b1:55:03:58:0f:a7:3b:8a:01: f6:78:b2:cd:28:aa:6b:63:8c:8a:27:ca:22:2c:0a: b0:90:9b:5b:7e:6f:20:0b:a9:19:f5:e1:d5:14:10: 0d:8e:22:47:c7:b1:2b:06:2a:94:0a:5b:c8:68:5b: 8b:23:35:2e:4f:c8:2a:70:1a:3d:fd:da:d3:eb:4c: af:9c:69:d1:7e:cc:63:a6:fa:93:b6:db:d9:db:48: d4:f4:24:be:c3:f9:48:44:3b:75:c8:a5:ae:a7:b8: ee:d1:04:b1:58:6f:88:ac:f3:5e:8b:b2:2a:a2:52: 28:36:b4:9a:27:a6:1a:78:21:c6:ff:e3:0e:04:83: 0b:4f:c8:34:cb:c1:93:b4:16:d8:fd:ff:b6:84:60: 50:66:b9:ff:3b:48:9b:48:56:c6:70:9a:9c:56:ce: cf:3d:69:fa:31:20:e1:88:b7:f0:ac:d9:26:13:ab: 40:5e:cb:a8:1e:5a:56:ff:e6:84:d9:b4:9c:c6:48: 68:32:c2:5b:df:f8:71:37:e7:56:ab:25:46:5e:08: f5:18:c0:7f:42:e6:93:d5:40:46:29:c7:c2:44:0c: 9f:16:95:d6:40:66:14:c9:c3:f7:94:a0:cd:0d:3d: 3e:3e:72:47:14:cc:4e:69:1f:8a:e5:57:5d:16:3b: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:17:93:7B:05:CF:4C:15:3C:4E:EB:C6:0D:9D:96:36:3F:EB:62:61 X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b7:6d:e3:e5:07:3e:d2:c3:71:52:75:a5:22:a9:93:9e:d4: 95:0c:fc:c0:7e:13:c2:10:32:44:89:6e:32:6d:2e:7b:80:8a: 10:aa:0c:d9:31:1a:b6:61:40:b6:f5:96:57:14:fb:d4:6e:9b: 33:ba:ea:70:b7:39:54:3f:2a:f4:9c:1e:e0:b2:c2:49:29:28: 70:6b:8b:9a:13:de:04:3a:2b:c4:07:ce:dc:da:5b:e4:2f:ae: b2:da:02:1b:4c:29:c9:fc:50:22:d8:10:1b:fd:cc:fb:4f:e0: 6e:0b:10:40:df:1b:67:16:7c:75:ed:6c:1d:7d:d8:12:72:a3: 85:c3:d4:6b:f0:5c:9b:7f:3a:74:7f:0d:b5:03:b9:21:77:01: f9:17:25:b9:65:8d:e5:81:23:17:84:dc:1c:f1:df:50:09:83: 10:d7:8b:bc:2c:38:4d:9e:8a:92:02:88:b3:62:23:fd:0a:a7: f1:26:15:90:02:b6:74:8b:85:56:ea:bb:59:84:fc:24:54:a8: c5:fd:9b:6c:b0:8d:d1:6f:3f:af:8c:60:fc:7f:59:ff:fc:a8: 16:eb:3e:29:da:da:6f:20:98:99:14:ac:d9:80:30:61:25:e6: 95:e5:98:45:99:6e:2b:ca:44:b8:af:03:d7:13:14:00:e4:f4: 08:e2:b1:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjQwNTA0MjI1MTM2WhcNMjQwNTExMjI1MTM2WjAYMRYwFAYD VQQDEw02NjM2YmJmOC0xZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugp/ZN2xVQNYD6c7igH2eLLNKKprY4yKJ8oiLAqwkJtbfm8gC6kZ9eHVFBAN jiJHx7ErBiqUClvIaFuLIzUuT8gqcBo9/drT60yvnGnRfsxjpvqTttvZ20jU9CS+ w/lIRDt1yKWup7ju0QSxWG+IrPNei7IqolIoNrSaJ6YaeCHG/+MOBIMLT8g0y8GT tBbY/f+2hGBQZrn/O0ibSFbGcJqcVs7PPWn6MSDhiLfwrNkmE6tAXsuoHlpW/+aE 2bScxkhoMsJb3/hxN+dWqyVGXgj1GMB/QuaT1UBGKcfCRAyfFpXWQGYUycP3lKDN DT0+PnJHFMxOaR+K5VddFjvKawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsXk3sF z0wVPE7rxg2dljY/62JhMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBat23j5Qc+0sNxUnWlIqmTntSVDPzAfhPCEDJEiW4ybS57gIoQqgzZ MRq2YUC29ZZXFPvUbpszuupwtzlUPyr0nB7gssJJKShwa4uaE94EOivEB87c2lvk L66y2gIbTCnJ/FAi2BAb/cz7T+BuCxBA3xtnFnx17WwdfdgScqOFw9Rr8Fybfzp0 fw21A7khdwH5FyW5ZY3lgSMXhNwc8d9QCYMQ14u8LDhNnoqSAoizYiP9CqfxJhWQ ArZ0i4VW6rtZhPwkVKjF/ZtssI3Rbz+vjGD8f1n//KgW6z4p2tpvIJiZFKzZgDBh JeaV5ZhFmW4rykS4rwPXExQA5PQI4rF8 -----END CERTIFICATE-----Generated at Sun May 5 00:14:41 2024 by rpki-client on console-ams.rpki-client.org