$ rpki-client -vvf rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft File: oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft (raw, json) Hash identifier: aLQoZ1dLbCqdFOfrD9wjefJ17R9izhtJaKYKrcfq5Lw= Subject key identifier: 0A:D9:6E:9A:13:7B:59:F9:DA:21:24:03:8D:E5:22:AD:B3:CF:E5:A7 Authority key identifier: A3:1A:E4:93:E8:04:C2:6F:23:99:E1:54:26:91:04:DB:24:58:A0:AA Certificate issuer: /CN=A915059B/serialNumber=A31AE493E804C26F2399E154269104DB2458A0AA Certificate serial: 0AEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxrkk-gEwm8jmeFUJpEE2yRYoKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft Manifest number: 1242 Signing time: Sat 04 May 2024 20:13:49 +0000 Manifest this update: Sat 04 May 2024 20:13:49 +0000 Manifest next update: Sat 11 May 2024 20:13:49 +0000 Files and hashes: 1: oxrkk-gEwm8jmeFUJpEE2yRYoKo.crl (hash: EXyePWJ2A+GOTM9DwN0FullHqswNdpWSMsueyLTDUks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.crl rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxrkk-gEwm8jmeFUJpEE2yRYoKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915059B/serialNumber=A31AE493E804C26F2399E154269104DB2458A0AA Validity Not Before: May 4 20:13:49 2024 GMT Not After : May 11 20:13:49 2024 GMT Subject: CN=663696fd-0598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:76:53:64:45:91:83:3f:69:3e:29:52:05: c8:bd:15:9f:cc:ac:0e:1c:72:6a:01:3a:d2:33:01: a1:71:48:4e:91:f2:f6:e2:e0:a6:a8:1c:7f:56:2d: a9:db:7f:41:ac:da:87:89:da:4b:5a:a5:d3:fa:e0: 26:11:84:05:84:1b:aa:9c:26:0e:0d:2c:70:e7:94: af:75:13:cc:d7:6b:af:0b:86:66:b8:08:15:78:19: 50:d3:78:08:c6:c7:ba:44:21:e8:5b:4e:7d:d0:24: f8:3f:c1:b2:05:f7:69:6f:a4:28:7d:1a:e9:6e:14: 12:74:e0:a1:ff:b6:89:54:e6:6f:4f:2d:25:9f:e8: 1c:6d:9c:d4:d1:19:23:6d:e9:3e:06:a7:3d:67:68: 90:ae:90:ed:a7:b0:11:92:95:d7:c8:35:5b:fb:cd: 10:b5:63:77:c9:1a:44:91:61:0f:dc:39:c8:be:28: ec:5b:c2:9e:d7:55:e2:8f:d3:df:fc:38:96:d0:18: f7:6a:56:1c:62:22:76:25:59:39:e0:6c:88:b6:c4: 2b:43:24:fa:5b:86:6f:5b:56:28:1e:5c:45:f1:a8: fb:88:4a:f0:dc:c8:e8:24:42:bd:95:df:a6:29:e7: 71:15:32:4e:35:22:f3:32:81:ca:a3:cd:c5:f8:f1: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D9:6E:9A:13:7B:59:F9:DA:21:24:03:8D:E5:22:AD:B3:CF:E5:A7 X509v3 Authority Key Identifier: keyid:A3:1A:E4:93:E8:04:C2:6F:23:99:E1:54:26:91:04:DB:24:58:A0:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxrkk-gEwm8jmeFUJpEE2yRYoKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/oxrkk-gEwm8jmeFUJpEE2yRYoKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f2:69:dc:fc:0b:85:a6:0d:b5:fe:d8:d2:ce:eb:4e:48:90: 67:89:5c:6a:b7:2e:03:61:37:47:f7:6f:74:69:58:15:8d:99: 26:3e:07:24:4b:81:a4:96:3c:3c:78:8a:6c:09:f9:bf:1c:99: a8:4c:ed:41:03:9d:71:fb:d6:62:d9:fd:3d:43:ed:1d:7b:69: 88:79:d9:03:38:0b:ca:98:4e:03:86:aa:6d:60:41:a8:b3:22: c5:43:dd:c8:86:4d:7e:e6:22:f7:34:88:4f:bc:3a:e8:0f:75: 0a:c4:ae:e7:b9:f9:f8:d3:bc:e5:8f:c9:8b:47:18:35:a3:4e: fb:ad:43:87:7a:33:6f:b8:ab:63:36:38:34:fa:88:49:de:8d: 7a:bd:94:85:9e:00:19:7f:ce:5b:ac:31:c3:d6:87:1d:46:7a: b9:d0:b4:9b:c2:0a:d8:be:bc:04:ba:4d:5c:db:35:a1:fd:81: 28:d4:4d:e8:bf:42:2b:37:99:8a:53:a7:52:e2:81:4c:57:08: aa:c0:eb:8c:bb:c0:e6:f9:d4:68:2c:60:aa:40:39:5f:29:72: ec:6e:51:d6:f8:d5:98:26:01:6b:2c:5b:2a:6b:69:e4:8f:59: 95:a6:29:8d:07:52:a9:45:f7:e8:d8:b9:e8:40:8f:f3:b7:91: b4:84:a9:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1OUIxMTAvBgNVBAUTKEEzMUFFNDkzRTgwNEMyNkYyMzk5RTE1NDI2OTEwNERC MjQ1OEEwQUEwHhcNMjQwNTA0MjAxMzQ5WhcNMjQwNTExMjAxMzQ5WjAYMRYwFAYD VQQDEw02NjM2OTZmZC0wNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr592U2RFkYM/aT4pUgXIvRWfzKwOHHJqATrSMwGhcUhOkfL24uCmqBx/Vi2p 239BrNqHidpLWqXT+uAmEYQFhBuqnCYODSxw55SvdRPM12uvC4ZmuAgVeBlQ03gI xse6RCHoW0590CT4P8GyBfdpb6QofRrpbhQSdOCh/7aJVOZvTy0ln+gcbZzU0Rkj bek+Bqc9Z2iQrpDtp7ARkpXXyDVb+80QtWN3yRpEkWEP3DnIvijsW8Ke11Xij9Pf /DiW0Bj3alYcYiJ2JVk54GyItsQrQyT6W4ZvW1YoHlxF8aj7iErw3MjoJEK9ld+m KedxFTJONSLzMoHKo83F+PFmXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArZbpoT e1n52iEkA43lIq2zz+WnMB8GA1UdIwQYMBaAFKMa5JPoBMJvI5nhVCaRBNskWKCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDU5Qi83NEZCNDJBODIy NzMxMUVBOEEwRjM4MjJDNEY5QUUwMi9veHJray1nRXdtOGptZUZVSnBFRTJ5Ullv S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294cmtrLWdFd204am1lRlVKcEVFMnlSWW9Lby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDU5Qi83NEZCNDJBODIyNzMxMUVBOEEwRjM4MjJDNEY5QUUwMi9veHJray1nRXdt OGptZUZVSnBFRTJ5UllvS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv8mnc/AuFpg21/tjSzutOSJBniVxqty4DYTdH9290aVgVjZkmPgck S4Gkljw8eIpsCfm/HJmoTO1BA51x+9Zi2f09Q+0de2mIedkDOAvKmE4DhqptYEGo syLFQ93Ihk1+5iL3NIhPvDroD3UKxK7nufn407zlj8mLRxg1o077rUOHejNvuKtj Njg0+ohJ3o16vZSFngAZf85brDHD1ocdRnq50LSbwgrYvrwEuk1c2zWh/YEo1E3o v0IrN5mKU6dS4oFMVwiqwOuMu8Dm+dRoLGCqQDlfKXLsblHW+NWYJgFrLFsqa2nk j1mVpimNB1KpRffo2LnoQI/zt5G0hKmZ -----END CERTIFICATE-----Generated at Sat May 4 21:19:28 2024 by rpki-client on console-ams.rpki-client.org