$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: 8+Tkeg9dPSv3M6hqWbkmY6ljFi+nmfjO32c8qmAl/Fk= Subject key identifier: 1E:73:4C:CB:7B:BF:E4:4E:BC:15:CB:98:E1:CB:F3:9C:C7:E4:16:44 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: 37 Signing time: Fri 17 May 2024 08:25:44 +0000 Manifest this update: Fri 17 May 2024 08:25:44 +0000 Manifest next update: Fri 24 May 2024 08:25:44 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: e6vMWpytgIYCsh+ZTeAPFoTCMUedi7POvoqL2W9Xdlg=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: 6CbYeGlMHWXdRnPvFBNIYVUzG6hSH7sytwhXDvb3oGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: May 17 08:25:44 2024 GMT Not After : May 24 08:25:44 2024 GMT Subject: CN=66471488-d379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:93:71:4a:eb:02:78:56:d2:cd:11:7c:41: da:f1:37:48:29:59:c0:0e:87:d8:32:b4:60:77:ba: 07:5f:c6:50:a9:9b:92:68:c8:f0:ba:f4:a4:ef:15: 80:0b:5b:d8:1d:9c:f6:e6:25:25:64:a6:24:26:c6: 3f:40:00:15:73:27:1e:43:0a:65:cb:5b:5a:c5:72: 78:a3:fd:82:80:90:88:23:4e:59:4d:6c:59:d1:c2: 7d:1c:81:c6:07:83:28:8d:fc:b7:a4:d9:ce:93:d3: 93:14:d2:eb:57:a0:7f:3d:c6:7e:25:1c:04:2c:06: 2a:58:b1:bc:4a:65:ed:dc:8f:1c:15:80:66:13:c2: 16:82:2f:7f:87:04:41:f6:1c:4a:94:31:d5:96:9f: 29:89:bb:b8:93:91:7d:6f:59:33:54:89:e9:03:ab: 43:6b:d1:86:bc:9a:04:af:b8:70:71:5a:6c:a7:b7: 90:eb:65:e1:c7:53:a4:3c:99:a5:f4:49:20:ae:7b: 65:eb:32:f0:16:93:85:bd:74:61:8f:70:c2:0a:90: 44:0c:2a:12:2d:2c:bf:f7:05:8f:8c:b4:45:c0:e1: ee:c4:31:f8:89:88:a6:73:49:97:36:ef:45:ca:55: d3:88:c1:85:ae:ca:30:b2:ae:0d:cd:2c:c8:7a:6d: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:4C:CB:7B:BF:E4:4E:BC:15:CB:98:E1:CB:F3:9C:C7:E4:16:44 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:94:08:c0:00:2f:06:e6:97:97:af:90:88:e2:7b:d4:80:68: d0:a6:a4:c6:4f:b7:cf:88:64:f0:03:25:5f:52:0d:e2:df:7d: 7c:65:c5:58:bd:4b:f6:71:95:d9:0c:e0:21:3a:a4:39:dd:52: 10:a3:23:26:d6:ba:9c:1c:0d:79:05:23:54:80:b2:1e:6e:4d: 38:c0:0f:66:4b:b8:3c:9d:64:57:be:fd:b7:ca:8b:a7:cf:7c: 4b:5d:d7:1b:88:92:dc:68:dd:51:53:69:5b:5f:ab:a7:5b:3a: dd:5d:5a:b4:9b:5d:40:be:f3:99:a2:ce:dd:da:5e:93:cc:41: 95:07:24:18:79:aa:40:03:47:5a:29:5c:21:01:65:6c:4f:33: 31:ae:c5:fa:bc:c6:4a:29:84:4a:21:b0:52:6f:99:7b:be:aa: 97:42:71:46:9b:d5:5b:75:7d:2b:fb:99:a3:ed:7e:30:a1:a2: 80:0e:1b:c3:df:3d:13:69:6b:6a:1c:cd:f2:fe:dc:70:0f:e2: d8:1f:a4:cc:fa:1e:72:c5:84:e7:d0:4f:d8:7b:0d:1a:f2:a7: d0:50:3c:e4:eb:f0:e1:6b:b8:b9:96:f6:6a:23:b4:ad:13:df: f3:cd:20:0d:65:98:d6:74:36:a6:0e:e1:46:9f:b7:7d:79:a4: 34:27:c3:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTJDMTExMC8GA1UEBRMoQTMxNTRFQzcxQUZGMENFQzM2OEM3OTZEMjU3QzNBOUMw NTg5QTNGRjAeFw0yNDA1MTcwODI1NDRaFw0yNDA1MjQwODI1NDRaMBgxFjAUBgNV BAMTDTY2NDcxNDg4LWQzNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXf5NxSusCeFbSzRF8QdrxN0gpWcAOh9gytGB3ugdfxlCpm5JoyPC69KTvFYAL W9gdnPbmJSVkpiQmxj9AABVzJx5DCmXLW1rFcnij/YKAkIgjTllNbFnRwn0cgcYH gyiN/Lek2c6T05MU0utXoH89xn4lHAQsBipYsbxKZe3cjxwVgGYTwhaCL3+HBEH2 HEqUMdWWnymJu7iTkX1vWTNUiekDq0Nr0Ya8mgSvuHBxWmynt5DrZeHHU6Q8maX0 SSCue2XrMvAWk4W9dGGPcMIKkEQMKhItLL/3BY+MtEXA4e7EMfiJiKZzSZc270XK VdOIwYWuyjCyrg3NLMh6bXlvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHnNMy3u/ 5E68FcuY4cvznMfkFkQwHwYDVR0jBBgwFoAUoxVOxxr/DOw2jHltJXw6nAWJo/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBMkMxLzdGRkRGQjY0QzA5 RTExRUVBRDNCODU1NEM0RjlBRTAyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9f OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3hWT3h4cl9ET3cyakhsdEpYdzZuQVdKb184LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB MkMxLzdGRkRGQjY0QzA5RTExRUVBRDNCODU1NEM0RjlBRTAyL294Vk94eHJfRE93 MmpIbHRKWHc2bkFXSm9fOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJeUCMAALwbml5evkIjie9SAaNCmpMZPt8+IZPADJV9SDeLffXxlxVi9 S/ZxldkM4CE6pDndUhCjIybWupwcDXkFI1SAsh5uTTjAD2ZLuDydZFe+/bfKi6fP fEtd1xuIktxo3VFTaVtfq6dbOt1dWrSbXUC+85mizt3aXpPMQZUHJBh5qkADR1op XCEBZWxPMzGuxfq8xkophEohsFJvmXu+qpdCcUab1Vt1fSv7maPtfjChooAOG8Pf PRNpa2oczfL+3HAP4tgfpMz6HnLFhOfQT9h7DRryp9BQPOTr8OFruLmW9mojtK0T 3/PNIA1lmNZ0NqYO4Uaft315pDQnw5Q= -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org