$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: 7jCNpWUBUUnYEIWMortRdgYwMwCO0b52AhSbnr0+w+8= Subject key identifier: 7A:6F:58:1A:58:1C:CF:07:E8:87:5E:17:8F:30:C3:19:B9:86:67:30 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 03FE Signing time: Fri 17 May 2024 02:19:33 +0000 Manifest this update: Fri 17 May 2024 02:19:33 +0000 Manifest next update: Fri 24 May 2024 02:19:33 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: IAIi5o3FhZU+LRg5VgoKqJK16QAD/qDFo72TMzIbWpk=) 2: 48110772C3FC11ED8526FC28C4F9AE02.roa (hash: lrpXKi3mGPsB79UaD5dfLuX8qjMPpmHFOMrl0dP1nAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: May 17 02:19:33 2024 GMT Not After : May 24 02:19:33 2024 GMT Subject: CN=6646beb5-eb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:f0:9a:77:20:95:8e:5d:d5:5c:34:ba:25: de:f0:5c:10:24:2d:65:b2:c7:d4:67:7a:cc:fd:16: c9:0a:0d:52:78:1d:36:50:ee:0f:ce:b7:8d:d1:22: 43:32:7b:1e:ca:21:52:eb:ad:d3:2b:aa:df:3f:b0: bb:87:b6:db:ec:a9:e6:d2:31:04:38:95:c8:c8:80: 72:02:96:9d:c6:9a:df:40:fb:06:bf:b5:1f:57:d9: 95:ef:8c:92:7c:be:fd:c2:ae:ff:9e:46:d1:03:87: f9:dd:76:2d:24:e5:b8:b1:ff:b3:17:63:85:4a:29: 89:6a:07:60:67:8f:3d:46:f4:df:98:a5:72:1e:1d: da:75:ee:ab:2a:70:15:ae:e9:43:29:8b:0a:6d:73: 4a:5d:c3:48:2f:86:72:a5:0f:81:e8:fb:38:04:5c: 20:59:2f:52:01:6d:9b:b7:08:0c:e1:39:55:b9:7e: fa:b4:86:7f:81:b0:da:80:30:78:1f:ca:0b:b5:6a: 0a:ae:a8:58:78:6d:71:02:5d:cf:a4:aa:85:64:2e: 87:fa:1e:7e:46:fe:7f:ee:07:fd:5d:f4:c0:ee:a5: 64:72:fb:fe:8c:24:aa:ad:97:c4:72:e9:df:d5:f7: 6b:6e:7d:a4:59:c1:2e:f9:61:e7:99:b0:c8:d8:ab: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6F:58:1A:58:1C:CF:07:E8:87:5E:17:8F:30:C3:19:B9:86:67:30 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:9c:66:1d:82:da:1f:db:35:19:b0:9a:68:98:d6:c6:16:47: e5:68:2b:2f:62:36:61:40:11:8d:82:ff:99:a9:0d:ea:47:89: 88:f7:f6:eb:76:dd:3f:08:45:a1:7e:cb:9a:86:7d:b9:92:63: f5:98:39:19:0e:5e:fc:67:23:9c:33:54:28:10:e7:5b:d6:c2: 2f:bc:9c:06:6c:1b:0d:cf:f9:09:36:2e:46:fc:63:b8:95:26: d9:d1:6e:11:34:b1:3a:35:b3:22:be:a7:f5:bd:36:8e:7e:eb: 45:87:d1:7d:25:10:96:17:fa:7b:b5:43:cc:b6:55:9a:af:04: df:f0:29:7c:f6:0d:f2:ec:8a:f9:ac:97:f8:7d:d9:9a:6b:93: f1:a4:35:e7:ba:a3:3b:6e:8f:1b:93:dd:52:7c:23:5d:66:bb: dc:3a:5c:8b:f3:1f:70:74:96:e8:84:af:9e:ea:df:b8:e5:71: 91:c8:f3:cd:71:0b:45:e9:55:ba:a1:4b:72:1d:6c:7d:7b:0d: 6a:58:bb:24:55:14:60:75:12:03:61:1b:02:c4:43:56:46:16: ca:40:b2:13:ad:6c:6c:eb:b6:d1:83:94:e4:26:ea:3a:d7:30: 55:6b:20:1c:41:e7:9f:40:2a:55:e7:f8:d4:fa:c6:1c:3a:88: 42:d6:33:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjQwNTE3MDIxOTMzWhcNMjQwNTI0MDIxOTMzWjAYMRYwFAYD VQQDEw02NjQ2YmViNS1lYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf7wmncglY5d1Vw0uiXe8FwQJC1lssfUZ3rM/RbJCg1SeB02UO4PzreN0SJD MnseyiFS663TK6rfP7C7h7bb7Knm0jEEOJXIyIByApadxprfQPsGv7UfV9mV74yS fL79wq7/nkbRA4f53XYtJOW4sf+zF2OFSimJagdgZ489RvTfmKVyHh3ade6rKnAV rulDKYsKbXNKXcNIL4ZypQ+B6Ps4BFwgWS9SAW2btwgM4TlVuX76tIZ/gbDagDB4 H8oLtWoKrqhYeG1xAl3PpKqFZC6H+h5+Rv5/7gf9XfTA7qVkcvv+jCSqrZfEcunf 1fdrbn2kWcEu+WHnmbDI2Kt4CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpvWBpY HM8H6IdeF48wwxm5hmcwMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACnGYdgtof2zUZsJpomNbGFkflaCsvYjZhQBGNgv+ZqQ3qR4mI9/br dt0/CEWhfsuahn25kmP1mDkZDl78ZyOcM1QoEOdb1sIvvJwGbBsNz/kJNi5G/GO4 lSbZ0W4RNLE6NbMivqf1vTaOfutFh9F9JRCWF/p7tUPMtlWarwTf8Cl89g3y7Ir5 rJf4fdmaa5PxpDXnuqM7bo8bk91SfCNdZrvcOlyL8x9wdJbohK+e6t+45XGRyPPN cQtF6VW6oUtyHWx9ew1qWLskVRRgdRIDYRsCxENWRhbKQLITrWxs67bRg5TkJuo6 1zBVayAcQeefQCpV5/jU+sYcOohC1jMI -----END CERTIFICATE-----Generated at Fri May 17 03:16:59 2024 by rpki-client on console-fra.rpki-client.org