$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json) Hash identifier: tCDL/FI2bBv1/DvTJFvgr+HbeHuEvR+sHZUrjWJSb/I= Subject key identifier: AC:98:DD:F5:00:78:D5:83:49:FC:18:0F:82:12:1D:F7:94:01:13:F5 Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft Manifest number: 0238 Signing time: Tue 07 May 2024 03:35:01 +0000 Manifest this update: Tue 07 May 2024 03:35:00 +0000 Manifest next update: Tue 14 May 2024 03:35:00 +0000 Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: sShtMmWfUTyc5rmZPDq7KbKvHUqsc+G7N2lK7lu4R7Y=) 2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: DmfQ3+8ymZBHNatwkjVgDY8oSbLfHdTsnMMne1LGaYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Validity Not Before: May 7 03:35:00 2024 GMT Not After : May 14 03:35:00 2024 GMT Subject: CN=6639a164-028f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:f9:2c:16:a6:eb:d6:19:d2:2e:09:78:5d: 9c:10:92:5b:18:d5:b8:d7:56:33:a0:1f:78:58:e8: 8e:be:51:34:fe:e3:d9:c3:3e:0f:c0:21:5d:33:1f: bf:89:be:50:b6:81:06:23:b0:62:2c:85:4b:fd:53: ec:24:d1:dd:75:5b:43:7c:34:fc:39:20:62:cf:65: 38:6c:5c:33:83:82:65:90:e6:10:4d:32:e0:d4:ad: 5d:2d:cd:48:9f:a3:9b:95:b7:58:58:a1:bb:38:d1: ee:3b:67:c8:1b:0e:2c:ee:07:20:ef:9e:a7:2f:5f: 3e:36:97:9c:94:06:ba:ba:57:88:62:05:6b:52:87: 16:2f:e1:fd:35:c9:0c:13:ff:8f:1c:54:6b:ed:bb: fc:e7:23:fc:0f:a8:75:c0:61:5f:df:89:45:cc:35: 2c:af:72:e0:40:12:6d:ff:e9:4e:0a:09:cb:aa:cb: fc:d5:53:db:97:a5:ab:33:3f:52:f4:5c:90:04:ea: 8d:d3:a8:89:74:a1:51:0c:7f:3b:2f:4e:aa:b2:b2: 7c:9a:7d:e1:da:1e:00:12:e1:da:b5:88:26:39:06: 05:6d:2a:bb:b9:be:fa:ae:d9:90:e1:8e:49:72:b8: 08:d7:42:f4:d6:4e:5d:f2:d7:d4:07:3b:9e:d4:95: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:DD:F5:00:78:D5:83:49:FC:18:0F:82:12:1D:F7:94:01:13:F5 X509v3 Authority Key Identifier: keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:5b:10:7a:97:15:10:e7:5f:2a:86:de:42:7c:68:98:7a:53: 07:e4:d2:ec:c4:d3:9f:12:f0:dc:f1:2d:8f:66:77:67:a1:65: 93:77:88:5c:6d:d0:80:43:9f:73:3c:ed:af:3d:c8:44:91:bc: 9e:f4:c2:0d:92:28:2c:2e:96:62:f5:14:e6:2b:d3:e6:5c:f0: c2:23:cb:18:fb:e1:00:cc:36:47:de:dd:e0:74:04:17:b7:bc: fc:fc:f9:0e:2c:5d:e7:6b:52:b0:65:a8:82:75:3b:db:6d:ed: a4:21:50:3a:bc:f9:f1:7b:c6:a8:d7:dc:19:a6:a3:70:85:56: 22:9a:be:99:3d:27:0e:71:3e:df:95:2d:f1:70:ed:3f:ee:ad: 6b:34:24:4d:01:47:e0:91:97:f5:ac:3f:cf:81:57:ca:9b:34: de:90:d0:ff:b3:d7:94:4f:43:0a:ab:79:23:d1:dd:be:ae:cc: 03:c6:aa:d9:9c:6e:3d:96:0d:0d:cc:1e:d6:1f:36:40:cc:5b: 4f:27:b7:e0:d5:6b:de:f9:b0:fd:14:3f:f5:55:9f:7f:ca:f5: 77:0f:13:51:9b:7f:99:78:11:80:78:88:ed:55:ba:4a:41:63: 4b:49:4f:33:5d:40:b3:1f:e4:e3:61:ef:15:9f:5c:d2:ac:75: d9:df:4c:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3 RDQ1OUYwOUMwHhcNMjQwNTA3MDMzNTAwWhcNMjQwNTE0MDMzNTAwWjAYMRYwFAYD VQQDEw02NjM5YTE2NC0wMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliz5LBam69YZ0i4JeF2cEJJbGNW411YzoB94WOiOvlE0/uPZwz4PwCFdMx+/ ib5QtoEGI7BiLIVL/VPsJNHddVtDfDT8OSBiz2U4bFwzg4JlkOYQTTLg1K1dLc1I n6OblbdYWKG7ONHuO2fIGw4s7gcg756nL18+NpeclAa6uleIYgVrUocWL+H9NckM E/+PHFRr7bv85yP8D6h1wGFf34lFzDUsr3LgQBJt/+lOCgnLqsv81VPbl6WrMz9S 9FyQBOqN06iJdKFRDH87L06qsrJ8mn3h2h4AEuHatYgmOQYFbSq7ub76rtmQ4Y5J crgI10L01k5d8tfUBzue1JUW8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyY3fUA eNWDSfwYD4ISHfeUARP1MB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC9CMzVFQjUwQ0RCRjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFr cjZ2OUs2TU1pNFY5Ulo4SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRWxB6lxUQ518qht5CfGiYelMH5NLsxNOfEvDc8S2PZndnoWWTd4hc bdCAQ59zPO2vPchEkbye9MINkigsLpZi9RTmK9PmXPDCI8sY++EAzDZH3t3gdAQX t7z8/PkOLF3na1KwZaiCdTvbbe2kIVA6vPnxe8ao19wZpqNwhVYimr6ZPScOcT7f lS3xcO0/7q1rNCRNAUfgkZf1rD/PgVfKmzTekND/s9eUT0MKq3kj0d2+rswDxqrZ nG49lg0NzB7WHzZAzFtPJ7fg1Wve+bD9FD/1VZ9/yvV3DxNRm3+ZeBGAeIjtVbpK QWNLSU8zXUCzH+TjYe8Vn1zSrHXZ30zU -----END CERTIFICATE-----Generated at Tue May 7 04:34:48 2024 by rpki-client on console-fra.rpki-client.org