$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: 2Mv0sordLqxarMgJnhWGx13ZpdHdtJUGJldTI8wmv/Y= Subject key identifier: 0C:25:DB:83:DE:28:C4:09:28:4F:95:E5:E7:0A:56:69:DD:E0:FB:A5 Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 0430 Signing time: Wed 01 May 2024 02:18:08 +0000 Manifest this update: Wed 01 May 2024 02:18:07 +0000 Manifest next update: Wed 08 May 2024 02:18:07 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: Cg9iiVVYAa2Hm6J7EOzr/sIOSWM+6uQYy5pHZJiZ3kI=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: NU/mXEsjZYt3HmmEctuU2Qy7YvlDOuPJychpCWTftuo=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: /k6GqrpfG8w24x/8ErEPh5jzjmeIWz0YdooOOMjfoHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: May 1 02:18:07 2024 GMT Not After : May 8 02:18:07 2024 GMT Subject: CN=6631a65f-9962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:8c:a6:06:87:48:af:1a:fe:75:d2:36:1e: 76:30:9e:63:6b:f3:6c:5d:4e:bf:cb:f9:79:09:5b: ec:0a:76:38:6f:8d:a6:22:eb:c0:97:6e:80:56:1e: f0:f9:38:65:01:c1:c8:30:b8:34:f5:bc:7d:7b:a5: aa:bd:19:f3:cf:95:cf:ec:85:ea:b3:63:73:43:09: c6:ed:6f:08:11:a0:7b:1f:10:5f:86:24:ef:bc:38: 17:50:f1:48:5e:e9:84:03:c0:d2:4e:fe:33:c2:7c: 73:76:f7:f9:f0:f8:65:b4:48:fe:e7:65:94:e5:5e: 49:26:04:06:93:82:ed:81:22:df:d8:fa:de:b6:dc: b4:ca:31:34:16:9f:ee:1b:9a:cd:6d:8f:7e:84:46: 56:71:fb:fa:3e:98:51:6d:e3:ef:f3:eb:d7:bb:69: e3:1e:d5:26:65:c2:4b:56:25:57:4c:77:54:91:32: 42:3d:9a:21:3b:c7:03:93:44:02:e8:84:cb:3e:31: 34:5b:b7:59:e1:51:db:63:d9:4a:a7:bd:98:54:2d: 4b:e5:42:28:1d:5b:af:3e:3a:2e:c9:37:0f:3a:a3: f6:d7:96:40:27:37:b0:dc:58:9f:f6:9a:f8:6f:69: 2f:53:d7:6c:c9:e1:49:0a:65:2e:cc:cc:fc:2e:9f: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:25:DB:83:DE:28:C4:09:28:4F:95:E5:E7:0A:56:69:DD:E0:FB:A5 X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:47:6f:3a:6f:ac:99:12:97:45:35:53:67:91:f9:a3:26:64: d3:43:3d:91:bb:61:cd:43:dc:eb:5d:aa:28:70:1f:a0:fc:2d: 98:5f:8c:41:a3:30:ae:83:ab:64:19:89:69:9a:b0:43:14:25: b4:8e:53:8d:06:a2:28:12:46:bb:fc:bb:47:da:e5:86:0d:37: d8:b2:72:55:c3:0c:17:43:d2:2f:63:a3:a4:01:69:c5:8f:c3: 10:fc:87:ac:f1:c0:5d:8b:6d:87:2c:2e:51:45:60:93:4e:95: 8a:b5:56:c8:f9:81:4e:0d:44:49:6c:e7:44:55:c6:fe:5d:06: 05:3b:11:3f:18:ad:4b:94:f0:de:b4:42:63:bf:4d:7e:da:9c: 37:53:8c:d6:3d:c1:be:be:aa:2d:de:87:c0:d0:e0:a4:56:f5: 62:9b:20:ca:03:14:36:ec:22:e6:f6:70:23:8d:70:60:f7:eb: c0:f0:42:66:53:d1:bd:d5:28:a6:74:30:da:4a:3d:d4:d5:55: 5f:f0:d7:69:78:8e:20:c2:8d:e1:d7:66:f2:b0:cb:82:b6:f5: 29:be:d3:b4:b3:2d:ed:9e:1d:a6:bf:28:5b:ee:63:a5:01:58: f1:df:a3:7f:e8:f2:93:b6:21:d9:24:98:02:1f:e3:a9:ee:63: a5:23:26:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjQwNTAxMDIxODA3WhcNMjQwNTA4MDIxODA3WjAYMRYwFAYD VQQDEw02NjMxYTY1Zi05OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2qMpgaHSK8a/nXSNh52MJ5ja/NsXU6/y/l5CVvsCnY4b42mIuvAl26AVh7w +ThlAcHIMLg09bx9e6WqvRnzz5XP7IXqs2NzQwnG7W8IEaB7HxBfhiTvvDgXUPFI XumEA8DSTv4zwnxzdvf58PhltEj+52WU5V5JJgQGk4LtgSLf2Pretty0yjE0Fp/u G5rNbY9+hEZWcfv6PphRbePv8+vXu2njHtUmZcJLViVXTHdUkTJCPZohO8cDk0QC 6ITLPjE0W7dZ4VHbY9lKp72YVC1L5UIoHVuvPjouyTcPOqP215ZAJzew3Fif9pr4 b2kvU9dsyeFJCmUuzMz8Lp+MGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwl24Pe KMQJKE+V5ecKVmnd4PulMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbR286b6yZEpdFNVNnkfmjJmTTQz2Ru2HNQ9zrXaoocB+g/C2YX4xB ozCug6tkGYlpmrBDFCW0jlONBqIoEka7/LtH2uWGDTfYsnJVwwwXQ9IvY6OkAWnF j8MQ/Ies8cBdi22HLC5RRWCTTpWKtVbI+YFODURJbOdEVcb+XQYFOxE/GK1LlPDe tEJjv01+2pw3U4zWPcG+vqot3ofA0OCkVvVimyDKAxQ27CLm9nAjjXBg9+vA8EJm U9G91SimdDDaSj3U1VVf8NdpeI4gwo3h12bysMuCtvUpvtO0sy3tnh2mvyhb7mOl AVjx36N/6PKTtiHZJJgCH+Op7mOlIyaF -----END CERTIFICATE-----Generated at Wed May 1 04:49:26 2024 by rpki-client on console-ams.rpki-client.org