$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: ynGroOxIhYbPM4uqw9Ii+vs03CU/JQQHs63Y474VYRs= Subject key identifier: CC:ED:29:48:F7:A3:E5:64:47:39:AC:38:DC:18:5E:F3:CF:8B:01:B8 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 060F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 05F5 Signing time: Tue 23 Apr 2024 00:07:01 +0000 Manifest this update: Tue 23 Apr 2024 00:07:00 +0000 Manifest next update: Tue 30 Apr 2024 00:07:00 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: Udx8MqE8C5a8X4BeBJNNHLA94lx9O15XRKruNEySV/k=) 2: AE2B3BD221BD11ECA88ED95BC4F9AE02.roa (hash: +CtDubk59Sw48O8Ouf2tA+TlSw7n0l4E3ftM+xsc3kE=) 3: 59DE107A14CF11EE81C44276C4F9AE02.roa (hash: QChoGjnLjAp9YKfe/RgOAvv2YrmkaQ/Duip+YO5yYGE=) 4: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: NHN79Wm41KubiZEhgiInohGXuUSrK9jksrgtJrn4WhI=) 5: BCC1E04E33C011EE83E9A61BC4F9AE02.roa (hash: VHcDjEgGrxMAnz0M1AHjoOM+XstVXi2tMMysfxDWz/U=) 6: BC41A65E33C011EE83E9A61BC4F9AE02.roa (hash: CS93G7RcWD5+qr4AoKfyZNjTKuN7GWxR2yfMPswfmRg=) 7: B76C776472E411ED833AE326C4F9AE02.roa (hash: 8ESr5AHaLU3ScgTHpRgo6a6bq6KGpzQvfWDCdvjEYds=) 8: B8D1689472E411ED833AE326C4F9AE02.roa (hash: 3aUgrXp7CupXz9su0B0dRhTdHv7O9ZjKupP1E4BnrMs=) 9: 2B96A18867EE11EEAC50B63FC4F9AE02.roa (hash: Qzz8y1dnxu5SEAcZtVkeuaWIWi/sRZC5mM5VqwrsOf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Apr 23 00:07:00 2024 GMT Not After : Apr 30 00:07:00 2024 GMT Subject: CN=6626fba5-1c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:76:d6:e9:fa:6a:ac:0f:f5:0c:f0:a0:63: 97:60:19:9f:fe:39:88:5b:a8:ae:af:3a:2a:39:f0: 70:39:df:b3:2e:4a:dc:5a:23:e6:c7:87:16:16:8a: 62:70:e8:94:a3:b1:90:f6:06:21:12:13:88:40:13: 56:b7:8c:8b:87:64:ab:1a:82:56:1e:fd:3a:72:f7: 2b:aa:05:9f:82:96:a1:d6:03:11:bc:00:58:65:f4: 92:18:92:5c:33:1c:7b:49:cd:14:c0:42:a2:e8:75: 7e:4a:5a:05:7d:e3:76:83:9a:80:05:89:0e:f7:9d: d1:34:ae:c8:f0:63:61:c2:45:15:9a:5c:15:98:ff: a2:e5:62:64:7e:f2:ae:65:3c:95:75:09:2f:ed:c9: 99:76:f6:ba:e9:eb:9b:61:7d:62:fb:37:65:a1:4e: 3f:90:01:ab:f9:c4:84:0e:c1:84:de:91:f2:7b:3b: 8e:95:94:71:91:5d:75:9c:cf:b2:6b:c8:3a:e2:62: c6:5f:0b:62:ac:71:01:66:bb:8d:32:1c:67:1e:60: 4e:59:ab:5c:e9:8b:c1:6c:eb:92:48:89:86:54:05: b3:3b:39:15:c8:00:ff:4b:a3:87:84:05:2b:21:a0: 13:c0:44:49:35:ba:91:a3:d3:5e:05:69:6a:f8:54: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:ED:29:48:F7:A3:E5:64:47:39:AC:38:DC:18:5E:F3:CF:8B:01:B8 X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:40:26:80:00:c6:19:76:41:3e:96:2b:c2:41:bb:13:11:82: 84:4d:4e:fe:dd:99:e0:58:86:10:39:af:02:9f:04:2a:b5:06: e7:5f:cc:4f:41:13:2f:b2:7b:75:3a:0a:90:9e:1f:22:b5:da: 4c:c7:de:d1:7b:b2:6e:36:24:b2:78:5e:5c:04:c2:02:38:aa: ab:2c:37:24:fd:f6:88:39:c8:7c:36:be:73:21:35:84:a8:f4: 56:0e:ff:c2:a5:0d:8c:24:cb:fc:22:03:1c:0b:c4:d0:dd:c9: 16:41:16:f7:57:95:e9:09:92:a2:3e:82:f3:cf:6a:5a:0e:75: b2:86:5f:18:b2:e5:3e:24:ec:d9:be:30:c5:eb:d3:db:c9:46: 11:8a:18:2a:e0:f8:5e:e6:cf:4a:80:19:63:b6:61:4d:c5:2d: ef:ef:f0:e5:2e:14:81:3d:12:12:ac:a6:1f:b0:e1:4d:0c:cc: 83:f8:10:80:48:b9:10:fe:05:23:39:fc:db:ba:98:fb:76:2a: d3:72:91:94:30:64:24:37:64:38:98:39:67:bf:2c:c4:6c:bf: 99:24:a6:30:99:d0:6a:86:c5:7b:0f:37:df:f6:34:37:9f:e9: d5:bb:4a:59:62:d1:b1:4c:81:9b:68:4b:0e:8f:c9:b3:43:e8: 3b:6a:f4:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjQwNDIzMDAwNzAwWhcNMjQwNDMwMDAwNzAwWjAYMRYwFAYD VQQDEw02NjI2ZmJhNS0xYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6l21un6aqwP9QzwoGOXYBmf/jmIW6iurzoqOfBwOd+zLkrcWiPmx4cWFopi cOiUo7GQ9gYhEhOIQBNWt4yLh2SrGoJWHv06cvcrqgWfgpah1gMRvABYZfSSGJJc Mxx7Sc0UwEKi6HV+SloFfeN2g5qABYkO953RNK7I8GNhwkUVmlwVmP+i5WJkfvKu ZTyVdQkv7cmZdva66eubYX1i+zdloU4/kAGr+cSEDsGE3pHyezuOlZRxkV11nM+y a8g64mLGXwtirHEBZruNMhxnHmBOWatc6YvBbOuSSImGVAWzOzkVyAD/S6OHhAUr IaATwERJNbqRo9NeBWlq+FTfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMztKUj3 o+VkRzmsONwYXvPPiwG4MB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbQCaAAMYZdkE+livCQbsTEYKETU7+3ZngWIYQOa8CnwQqtQbnX8xP QRMvsnt1OgqQnh8itdpMx97Re7JuNiSyeF5cBMICOKqrLDck/faIOch8Nr5zITWE qPRWDv/CpQ2MJMv8IgMcC8TQ3ckWQRb3V5XpCZKiPoLzz2paDnWyhl8YsuU+JOzZ vjDF69PbyUYRihgq4Phe5s9KgBljtmFNxS3v7/DlLhSBPRISrKYfsOFNDMyD+BCA SLkQ/gUjOfzbupj7dirTcpGUMGQkN2Q4mDlnvyzEbL+ZJKYwmdBqhsV7Dzff9jQ3 n+nVu0pZYtGxTIGbaEsOj8mzQ+g7avSo -----END CERTIFICATE-----Generated at Tue Apr 23 18:44:34 2024 by rpki-client on console-ams.rpki-client.org