$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: NNKdvI6G0VDcJ25aCkA+wHpwhBX5HUrkyb910mjBdis= Subject key identifier: 72:C7:9C:87:22:47:5F:6D:84:E4:B4:BB:08:C7:B0:B8:7A:3B:1E:C7 Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0282 Signing time: Wed 01 May 2024 03:59:44 +0000 Manifest this update: Wed 01 May 2024 03:59:43 +0000 Manifest next update: Wed 08 May 2024 03:59:43 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: 8C2lRQ0aiEB6CTipxNuTWTtmYkS+Vptw0Rp/2z59dRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: May 1 03:59:43 2024 GMT Not After : May 8 03:59:43 2024 GMT Subject: CN=6631be30-dea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:84:41:94:db:e8:fb:7f:20:10:41:de:59: f6:bd:91:76:5a:bb:69:86:fd:d8:7d:6b:fc:47:ac: d2:74:eb:0b:cc:e0:d7:52:33:c2:f7:6f:b7:28:81: 3a:4f:6f:9f:1a:65:8a:0c:d8:ce:cd:3f:9e:21:93: 6d:8a:e5:41:ef:23:c0:8c:48:5b:1f:4f:c6:28:90: 38:28:dd:26:d6:dd:ca:f3:9c:8b:8b:8a:f1:43:3e: 5e:42:ee:ad:b0:24:8e:21:2e:e8:36:ee:d4:80:29: 26:b1:36:a6:19:9b:95:8d:a9:6d:94:91:d9:2a:a7: 80:91:46:bc:f7:58:e8:cf:9a:f3:5f:d2:4a:23:cf: 1a:7e:f4:af:c2:71:97:34:36:9d:d7:24:8b:b7:40: c5:78:be:65:ea:c0:93:cb:66:5b:d9:fd:a9:c0:ad: b8:a0:79:67:45:95:db:7d:34:3b:47:42:82:1f:bb: f8:11:3a:6e:99:9f:d5:4c:31:78:aa:34:e5:35:2c: 75:1f:95:41:63:82:b8:f1:f7:b3:73:a1:ba:a7:0a: 59:4a:8f:e1:8d:61:e3:20:a4:7a:cc:ee:46:74:16: 3a:3d:73:d6:31:c2:d2:1f:9d:f6:f3:14:f3:b2:51: 46:6f:e0:90:ff:8b:4e:ff:a3:2f:d5:88:62:58:50: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C7:9C:87:22:47:5F:6D:84:E4:B4:BB:08:C7:B0:B8:7A:3B:1E:C7 X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ec:77:52:b6:75:63:e6:c5:07:f9:f0:9d:c4:19:c0:d1:8c: 44:b9:f0:72:7f:59:10:ab:b4:75:58:63:b9:d5:62:41:ef:41: 56:9c:99:d5:ba:dd:7b:13:7e:a2:44:32:76:a0:62:bf:93:d2: 1f:dc:c4:06:28:4d:1a:bb:03:b9:15:13:a5:28:46:a5:e8:4e: a5:7e:2d:ee:b0:05:73:b3:84:d8:58:36:1a:68:52:2e:9a:61: c3:7b:0d:6c:cf:7e:c6:4f:e0:92:00:57:b2:c4:c0:55:79:03: 48:9b:df:0c:fd:8b:70:2c:2f:0e:23:0e:54:74:0a:1c:34:d6: 6c:e1:5f:0f:d5:42:1c:10:c0:29:04:6a:6c:c8:37:f9:6f:05: e7:d8:fd:22:ec:78:b2:d3:1b:22:5f:c2:7b:f5:5b:fd:79:00: aa:95:07:01:87:1c:e2:a2:64:0b:0f:8b:6b:11:40:8d:71:63: 23:ac:0e:6a:14:04:43:55:9d:39:47:99:c0:9e:48:4a:6b:5d: c3:65:e1:b4:3c:2d:4d:8e:7c:e5:fb:b1:1b:6b:da:4f:71:14: e5:69:8d:ef:2c:c8:17:5d:e2:36:0c:f9:39:d7:e5:80:10:b5: 4c:cb:f3:b3:78:86:0a:04:21:67:61:cc:4a:2a:52:a2:a6:21: 85:f4:0f:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjQwNTAxMDM1OTQzWhcNMjQwNTA4MDM1OTQzWjAYMRYwFAYD VQQDEw02NjMxYmUzMC1kZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxviEQZTb6Pt/IBBB3ln2vZF2Wrtphv3YfWv8R6zSdOsLzODXUjPC92+3KIE6 T2+fGmWKDNjOzT+eIZNtiuVB7yPAjEhbH0/GKJA4KN0m1t3K85yLi4rxQz5eQu6t sCSOIS7oNu7UgCkmsTamGZuVjaltlJHZKqeAkUa891joz5rzX9JKI88afvSvwnGX NDad1ySLt0DFeL5l6sCTy2Zb2f2pwK24oHlnRZXbfTQ7R0KCH7v4ETpumZ/VTDF4 qjTlNSx1H5VBY4K48fezc6G6pwpZSo/hjWHjIKR6zO5GdBY6PXPWMcLSH5328xTz slFGb+CQ/4tO/6Mv1YhiWFCYRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLHnIci R19thOS0uwjHsLh6Ox7HMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg7HdStnVj5sUH+fCdxBnA0YxEufByf1kQq7R1WGO51WJB70FWnJnV ut17E36iRDJ2oGK/k9If3MQGKE0auwO5FROlKEal6E6lfi3usAVzs4TYWDYaaFIu mmHDew1sz37GT+CSAFeyxMBVeQNIm98M/YtwLC8OIw5UdAocNNZs4V8P1UIcEMAp BGpsyDf5bwXn2P0i7Hiy0xsiX8J79Vv9eQCqlQcBhxziomQLD4trEUCNcWMjrA5q FARDVZ05R5nAnkhKa13DZeG0PC1Njnzl+7Eba9pPcRTlaY3vLMgXXeI2DPk51+WA ELVMy/OzeIYKBCFnYcxKKlKipiGF9A8V -----END CERTIFICATE-----Generated at Wed May 1 04:49:25 2024 by rpki-client on console-ams.rpki-client.org