$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft File: oDlpuv_Weqt11JODf6HHxp_7Jxc.mft (raw, json) Hash identifier: eCfEQqgMOVQYEhWxzi1NSaNquQwsts86oEAIXcNSl/w= Subject key identifier: CA:36:FB:79:14:C3:2B:60:27:B4:06:32:09:D1:ED:D5:02:8D:36:A4 Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17 Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717 Certificate serial: 29D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft Manifest number: 296C Signing time: Mon 24 Jun 2024 15:51:23 +0000 Manifest this update: Mon 24 Jun 2024 15:51:23 +0000 Manifest next update: Mon 01 Jul 2024 15:51:23 +0000 Files and hashes: 1: oDlpuv_Weqt11JODf6HHxp_7Jxc.crl (hash: SQbgwN53/suZyNKi+m1/wAKUBqF0zBUpIwVjHDumZaI=) 2: AD44349A7D3611EE8D160469C4F9AE02.roa (hash: qLr4YELCv5Yu4cKIrEUg1M9vQMRmN1cCqrfQDvi0ors=) 3: 0BD4051C7D3711EE9EB9F669C4F9AE02.roa (hash: GesRT1tEbzs43t+jXLtfAIE93C0WTY3PyoZJusRs8lc=) 4: EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa (hash: dg5P0bOa9bfh+0q6pRKAhwC/a/FidA3if8bbm6m10Kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 15:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10708 (0x29d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717 Validity Not Before: Jun 24 15:51:23 2024 GMT Not After : Jul 1 15:51:23 2024 GMT Subject: CN=667995fb-eb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:a2:03:91:c5:a1:4c:2e:d2:46:98:99:23: a1:2f:20:3f:69:5f:af:d4:04:5f:96:f8:9e:49:68: f8:51:a4:e0:9d:8a:4d:e4:83:6a:e0:63:67:bb:49: 4b:9b:d8:35:b8:41:07:38:81:73:6f:4f:71:5c:33: 28:d2:42:31:8c:b2:a7:b4:95:f4:1c:3e:97:12:f8: d9:fd:3e:98:65:90:dc:0c:70:c4:9f:c5:6c:41:22: c5:6a:73:78:b4:d2:73:de:57:5d:4a:08:bc:7c:0e: 40:47:38:83:89:6e:8a:d5:27:98:eb:89:79:65:af: 4c:e1:6e:f4:d7:4d:7f:80:d7:ed:02:26:fd:d7:19: a6:0a:e8:e1:d2:5b:5c:a2:d0:3f:99:fa:9b:c8:e3: c3:9d:9c:de:60:9d:1b:3e:3b:14:4d:c5:b7:aa:36: e2:b8:7d:3f:c7:b3:ba:95:50:39:6c:e4:d6:60:10: f7:bd:f0:38:6c:e6:41:1d:d0:a8:51:25:c6:06:3d: 24:0d:5a:fb:19:98:a3:84:b9:77:43:03:7d:e8:8c: d3:5b:76:eb:a9:d8:67:01:39:da:58:de:bc:c1:4a: 05:d6:c4:25:81:ba:d4:1f:12:f4:6e:62:15:65:37: ac:7f:31:05:73:c7:e4:5a:6b:de:6e:c8:d7:11:10: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:36:FB:79:14:C3:2B:60:27:B4:06:32:09:D1:ED:D5:02:8D:36:A4 X509v3 Authority Key Identifier: keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1b:a9:56:81:8d:fb:8d:de:86:ac:a8:3a:23:c9:01:38:ab: 4c:ab:a3:48:9d:9b:f4:b4:db:18:22:21:66:63:74:a1:a6:60: 46:37:1e:96:82:53:8c:8e:6f:3d:33:9d:ac:2f:28:a6:58:c2: b9:77:ea:18:f6:e3:13:8a:e8:6d:9c:ca:09:5f:55:2d:25:9a: bd:09:e5:c1:41:4e:4e:4d:00:4b:be:bc:c3:30:a1:30:cc:43: ac:a0:07:4e:d1:b5:49:22:03:d5:c1:8c:68:7e:fe:e0:ae:ea: e5:c0:79:21:51:de:10:d7:10:b1:66:15:9d:f9:72:29:5f:aa: f0:81:96:ad:b5:7d:fa:97:a9:b3:83:12:b3:eb:e4:26:82:c5: c8:81:76:12:5d:87:6e:50:c5:3b:3f:bb:b4:51:af:2c:4c:cd: d5:88:da:51:56:5c:61:61:3e:57:a7:60:8f:5e:30:b1:59:b7: b2:e1:2b:3e:69:d6:c9:98:0d:ca:0a:80:a6:92:a2:6b:65:d8: d7:3a:04:e9:d0:bf:c1:a2:9d:88:95:b0:56:72:cc:f9:b0:13: 3c:04:82:78:60:a7:ff:29:a6:89:34:d1:ad:c3:b0:8d:3d:93: b4:2e:33:b2:ea:a3:e1:44:06:a3:b8:f0:c0:b8:b1:61:8a:9d: 5b:84:f8:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E0OTYxMTAvBgNVBAUTKEEwMzk2OUJBRkZENjdBQUI3NUQ0OTM4MzdGQTFDN0M2 OUZGQjI3MTcwHhcNMjQwNjI0MTU1MTIzWhcNMjQwNzAxMTU1MTIzWjAYMRYwFAYD VQQDEw02Njc5OTVmYi1lYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+KiA5HFoUwu0kaYmSOhLyA/aV+v1ARflvieSWj4UaTgnYpN5INq4GNnu0lL m9g1uEEHOIFzb09xXDMo0kIxjLKntJX0HD6XEvjZ/T6YZZDcDHDEn8VsQSLFanN4 tNJz3lddSgi8fA5ARziDiW6K1SeY64l5Za9M4W70101/gNftAib91xmmCujh0ltc otA/mfqbyOPDnZzeYJ0bPjsUTcW3qjbiuH0/x7O6lVA5bOTWYBD3vfA4bOZBHdCo USXGBj0kDVr7GZijhLl3QwN96IzTW3brqdhnATnaWN68wUoF1sQlgbrUHxL0bmIV ZTesfzEFc8fkWmvebsjXERDMAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo2+3kU wytgJ7QGMgnR7dUCjTakMB8GA1UdIwQYMBaAFKA5abr/1nqrddSTg3+hx8af+ycX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTQ5Ni9GQjEyQTI3ODND MEYxMUU0Qjc4OEZGNEFDNEY5QUUwMi9vRGxwdXZfV2VxdDExSk9EZjZISHhwXzdK eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29EbHB1dl9XZXF0MTFKT0RmNkhIeHBfN0p4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTQ5Ni9GQjEyQTI3ODNDMEYxMUU0Qjc4OEZGNEFDNEY5QUUwMi9vRGxwdXZfV2Vx dDExSk9EZjZISHhwXzdKeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuG6lWgY37jd6GrKg6I8kBOKtMq6NInZv0tNsYIiFmY3ShpmBGNx6W glOMjm89M52sLyimWMK5d+oY9uMTiuhtnMoJX1UtJZq9CeXBQU5OTQBLvrzDMKEw zEOsoAdO0bVJIgPVwYxofv7grurlwHkhUd4Q1xCxZhWd+XIpX6rwgZattX36l6mz gxKz6+QmgsXIgXYSXYduUMU7P7u0Ua8sTM3ViNpRVlxhYT5Xp2CPXjCxWbey4Ss+ adbJmA3KCoCmkqJrZdjXOgTp0L/Bop2IlbBWcsz5sBM8BIJ4YKf/KaaJNNGtw7CN PZO0LjOy6qPhRAajuPDAuLFhip1bhPja -----END CERTIFICATE-----Generated at Mon Jun 24 18:32:48 2024 by rpki-client on console-fra.rpki-client.org