$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: KBehW1ouONCrPys3N8ngXwr6Ps1K/iQuMAZEn3ZHHNU= Subject key identifier: 78:B2:25:9F:23:6A:3D:32:A1:FE:5D:64:5C:9B:BF:55:8A:57:83:64 Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 0545 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 053E Signing time: Fri 03 May 2024 01:02:44 +0000 Manifest this update: Fri 03 May 2024 01:02:43 +0000 Manifest next update: Fri 10 May 2024 01:02:43 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: 1IVKEgqrsg7ncFF8CT0+yJGon7+awGVsfrSeN2iMBNs=) 2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: CRZ/cxT5SfsQ4BufpXiOYf8Y5Rw6muFScakf5B1HeEk=) 3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: udl3ulbJyJ3IlJl5/C5Vgg5P22N43Ces3X35DxWMKnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Validity Not Before: May 3 01:02:43 2024 GMT Not After : May 10 01:02:43 2024 GMT Subject: CN=663437b4-6242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:31:a5:a9:4a:a4:b2:b7:ff:e8:59:3d:5f: e2:8d:d2:a0:ec:86:1e:36:ec:9a:da:e3:3c:10:fb: d4:29:74:e5:66:2e:47:09:cc:1c:74:15:fe:8e:31: 86:5e:22:61:f9:58:20:c0:55:83:e5:25:3f:f4:49: 82:c2:9e:6f:ea:40:c2:eb:84:ad:55:dc:cc:95:60: 7f:90:1d:8b:62:a0:b0:1e:54:af:c7:e8:4e:e1:f5: 5f:15:5f:5a:f1:cb:bc:43:71:5f:27:ac:55:c4:6b: ae:a7:8e:4d:86:45:e3:36:6d:f7:f1:8e:3f:e4:64: ac:10:88:56:70:60:a5:f1:ee:09:33:1d:e2:5f:45: 4f:87:93:e0:ca:5c:27:2c:e7:ba:ce:04:65:fd:c6: 7c:17:cb:d7:5f:3a:41:21:0e:40:ab:95:67:d1:e3: 36:b3:e9:44:64:f8:96:bc:34:ca:2d:06:49:e1:5e: a6:8e:99:25:d6:fa:0b:a2:82:46:a8:05:8d:27:66: c9:5b:9b:b5:49:a1:a6:b7:f9:52:a1:9d:20:d3:74: a7:27:44:95:73:14:36:a0:73:42:e1:eb:73:1a:4d: 0d:ad:6d:7b:40:d8:a2:d0:fd:38:b7:eb:68:76:39: 76:39:bf:7a:4d:2f:63:b9:09:5f:ad:81:65:c4:66: f2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B2:25:9F:23:6A:3D:32:A1:FE:5D:64:5C:9B:BF:55:8A:57:83:64 X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6b:9f:ff:7d:65:b6:01:6e:91:67:ef:00:77:7d:ac:7a:90: 48:e5:ec:b5:bf:c3:08:cf:c8:03:39:d7:8e:57:26:6a:b5:24: 34:c8:3b:ba:f3:9e:19:41:85:f1:de:74:fb:db:da:3d:56:62: 3e:56:ef:86:c4:d6:c8:d0:a4:10:e3:c8:ee:17:73:84:ea:38: 70:3a:9d:e0:79:b6:19:7e:4b:e3:48:0e:6e:c9:ef:4a:0f:69: e7:e1:ee:0a:d9:9e:5d:0f:bf:d4:a9:a5:49:7f:af:0e:21:d1: e0:88:92:98:6a:b2:66:93:9b:82:db:3a:ee:1c:19:04:1c:c8: 9c:ce:9f:40:36:7c:60:36:f5:77:71:e9:fd:8f:a7:fe:7a:76: f7:40:4e:6b:76:bd:d3:e3:b1:ec:a9:23:82:5f:73:6a:70:af: d0:8e:aa:47:ec:40:ba:bc:56:5b:de:a5:b3:c5:7a:09:a9:96: c7:55:7c:77:84:d1:0f:ab:a2:b8:3e:45:98:92:c0:4d:d4:05: c6:1d:20:44:11:4c:71:4b:8a:ed:b6:50:da:c2:60:9e:1d:1c: 3b:87:92:e4:74:90:c6:00:39:d6:0a:d1:45:92:be:f4:c2:a5: 21:fd:df:ed:dc:c6:31:44:92:3c:9f:19:9a:ae:de:ae:a4:fc: 75:41:16:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjQwNTAzMDEwMjQzWhcNMjQwNTEwMDEwMjQzWjAYMRYwFAYD VQQDEw02NjM0MzdiNC02MjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzwxpalKpLK3/+hZPV/ijdKg7IYeNuya2uM8EPvUKXTlZi5HCcwcdBX+jjGG XiJh+VggwFWD5SU/9EmCwp5v6kDC64StVdzMlWB/kB2LYqCwHlSvx+hO4fVfFV9a 8cu8Q3FfJ6xVxGuup45NhkXjNm338Y4/5GSsEIhWcGCl8e4JMx3iX0VPh5Pgylwn LOe6zgRl/cZ8F8vXXzpBIQ5Aq5Vn0eM2s+lEZPiWvDTKLQZJ4V6mjpkl1voLooJG qAWNJ2bJW5u1SaGmt/lSoZ0g03SnJ0SVcxQ2oHNC4etzGk0NrW17QNii0P04t+to djl2Ob96TS9juQlfrYFlxGbyLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiyJZ8j aj0yof5dZFybv1WKV4NkMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoa5//fWW2AW6RZ+8Ad32sepBI5ey1v8MIz8gDOdeOVyZqtSQ0yDu6 854ZQYXx3nT729o9VmI+Vu+GxNbI0KQQ48juF3OE6jhwOp3gebYZfkvjSA5uye9K D2nn4e4K2Z5dD7/UqaVJf68OIdHgiJKYarJmk5uC2zruHBkEHMiczp9ANnxgNvV3 cen9j6f+enb3QE5rdr3T47HsqSOCX3NqcK/QjqpH7EC6vFZb3qWzxXoJqZbHVXx3 hNEPq6K4PkWYksBN1AXGHSBEEUxxS4rttlDawmCeHRw7h5LkdJDGADnWCtFFkr70 wqUh/d/t3MYxRJI8nxmart6upPx1QRba -----END CERTIFICATE-----Generated at Fri May 3 03:10:54 2024 by rpki-client on console-ams.rpki-client.org