$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: pgppFP483Tg1gpm9PXPt5sSN3dA5jPWKWZPe9rq06BE= Subject key identifier: 2A:BC:1B:F7:F1:8B:C4:12:30:B5:06:18:47:8E:D7:9B:82:41:95:45 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 01CC Signing time: Fri 03 May 2024 04:30:43 +0000 Manifest this update: Fri 03 May 2024 04:30:42 +0000 Manifest next update: Fri 10 May 2024 04:30:42 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: oKcJclO/7nwPlOEDcxlr8w0ljugiz4hPXHxEIfkFKXA=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: DbBPo2nZEBZ5YcRd/HuopO6nmST3Nfv9ez8j4kDEnKE=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: XU8GoOZ72W1jv2aNZTnpFiR3dy1NjTUNfF1EjcwQUYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: May 3 04:30:42 2024 GMT Not After : May 10 04:30:42 2024 GMT Subject: CN=66346872-a84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:a8:c0:21:4e:81:6a:55:a3:92:36:bb:c7: 67:fd:4d:55:f0:d8:be:a4:8e:e2:04:b9:bf:82:5e: bc:8b:1e:94:57:de:5c:ce:f6:97:cb:7d:34:9c:16: fb:d8:62:8f:6a:3b:94:04:91:52:0a:5e:72:cb:04: 2b:8f:b3:aa:8b:68:0b:a0:d6:9f:9a:23:cb:f0:6f: dc:4b:f1:72:78:1c:f7:5a:a3:97:22:46:b9:e8:9a: 26:a7:13:3a:15:6c:64:3c:6b:97:5f:d8:01:80:3a: fc:40:74:7b:9f:6e:b6:47:99:10:3d:8a:69:20:27: fb:8d:e2:da:a9:6e:69:f9:1a:23:92:18:6c:1f:5b: 06:23:39:e4:6b:2e:fa:b2:b9:c6:b4:51:61:2c:bd: 11:dd:62:53:55:23:43:72:47:bf:0f:4e:6e:f5:aa: 63:70:3d:ec:b4:5f:65:d5:35:49:0d:9f:6d:2d:8c: 67:26:6d:d1:03:44:89:72:02:bb:80:d4:4f:98:c2: 0c:51:73:79:06:34:67:52:3a:68:0b:9a:d7:c2:16: dd:b8:5f:0a:2d:40:26:ca:b8:8e:2b:8e:d7:ac:8d: b6:ca:ab:09:1a:3d:39:2f:43:42:48:ae:b8:7d:ad: af:b9:e1:43:f4:ca:21:92:94:a3:09:8f:ed:30:e6: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:1B:F7:F1:8B:C4:12:30:B5:06:18:47:8E:D7:9B:82:41:95:45 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:47:33:cd:88:c3:95:6c:cb:bb:0d:42:8c:79:7e:f5:e5:39: 97:ca:ab:2d:53:7d:de:73:e2:57:ea:43:44:14:05:c4:87:46: 64:81:eb:87:b2:40:cc:2b:e7:a3:73:86:34:c4:06:34:81:1a: 0c:af:29:d9:ec:f3:ed:be:51:d7:42:e7:de:df:5d:9c:67:4c: cb:a9:13:9d:58:4e:1a:b6:2d:0a:51:c2:db:02:f1:14:f6:c9: 21:d5:8a:59:0e:c1:1d:03:18:9d:0f:ce:49:5e:95:9c:36:b4: 27:d8:56:1b:73:92:05:bf:1f:a2:ba:30:97:0b:df:8d:f1:1b: 67:40:b6:f2:35:68:58:ed:1c:cd:9a:40:37:f3:eb:b1:52:60: 31:ec:a0:93:6b:08:fa:5e:28:00:25:67:83:e2:08:fe:bc:c7: 0c:bb:c8:53:18:38:1e:2a:93:cc:91:a3:2d:87:5f:c1:62:b7: ad:33:30:cb:99:fa:b7:07:e5:c8:26:ae:df:cf:26:78:aa:e5: f8:98:9b:eb:93:28:b4:52:a3:47:39:9d:5b:d3:cf:5d:4f:9a: 07:ae:b0:13:15:da:b9:06:37:9d:88:3a:23:39:24:6b:17:80: 8a:5b:f4:26:d2:ff:c0:22:0a:cd:ec:a1:34:e4:e0:ee:74:8b: 9a:fd:7c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjQwNTAzMDQzMDQyWhcNMjQwNTEwMDQzMDQyWjAYMRYwFAYD VQQDEw02NjM0Njg3Mi1hODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQeowCFOgWpVo5I2u8dn/U1V8Ni+pI7iBLm/gl68ix6UV95czvaXy300nBb7 2GKPajuUBJFSCl5yywQrj7Oqi2gLoNafmiPL8G/cS/FyeBz3WqOXIka56JompxM6 FWxkPGuXX9gBgDr8QHR7n262R5kQPYppICf7jeLaqW5p+RojkhhsH1sGIznkay76 srnGtFFhLL0R3WJTVSNDcke/D05u9apjcD3stF9l1TVJDZ9tLYxnJm3RA0SJcgK7 gNRPmMIMUXN5BjRnUjpoC5rXwhbduF8KLUAmyriOK47XrI22yqsJGj05L0NCSK64 fa2vueFD9MohkpSjCY/tMOZhrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq8G/fx i8QSMLUGGEeO15uCQZVFMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGRzPNiMOVbMu7DUKMeX715TmXyqstU33ec+JX6kNEFAXEh0ZkgeuH skDMK+ejc4Y0xAY0gRoMrynZ7PPtvlHXQufe312cZ0zLqROdWE4ati0KUcLbAvEU 9skh1YpZDsEdAxidD85JXpWcNrQn2FYbc5IFvx+iujCXC9+N8RtnQLbyNWhY7RzN mkA38+uxUmAx7KCTawj6XigAJWeD4gj+vMcMu8hTGDgeKpPMkaMth1/BYretMzDL mfq3B+XIJq7fzyZ4quX4mJvrkyi0UqNHOZ1b089dT5oHrrATFdq5BjediDojOSRr F4CKW/Qm0v/AIgrN7KE05ODudIua/XwY -----END CERTIFICATE-----Generated at Fri May 3 06:28:39 2024 by rpki-client on console-fra.rpki-client.org