$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: r9zIQjMGXdwOatl3QHWz2Va1rMdtFS9ZB3/N1gnd8yo= Subject key identifier: 43:DB:61:B0:D8:8A:CC:D5:D0:C8:BE:AE:F9:D3:B9:1C:B8:59:11:AF Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 078A Signing time: Sat 18 May 2024 22:13:25 +0000 Manifest this update: Sat 18 May 2024 22:13:24 +0000 Manifest next update: Sat 25 May 2024 22:13:24 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: 4dyub+rzlwCdEHcSJ42KAQRfQmh4X/5Ad16XKktTAOI=) 2: C286BE40C4C711EDAFA9AF17C4F9AE02.roa (hash: o5ElATdFUamvgkAbNdj0d/AuLokfdwQFacvAfNCRrNU=) 3: 032132A0E0D011ECAF88A30DC4F9AE02.roa (hash: FkwKjd0cjTkO39Y5Lyp/hKN4auqwagZ/64vYY3VAepk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: May 18 22:13:24 2024 GMT Not After : May 25 22:13:24 2024 GMT Subject: CN=66492804-19a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:c8:90:01:65:71:30:d9:59:ff:a2:bb:dd: 83:b6:4b:19:af:be:1d:d2:d2:b5:14:aa:22:65:52: b7:d4:9b:7c:4c:e9:39:52:04:2c:9b:97:9b:8b:b2: 62:eb:35:ed:b0:98:e7:c1:79:27:d3:2f:f0:35:09: 19:22:cc:ac:0d:13:be:c0:48:5a:1c:42:57:36:a3: 67:f2:ec:cb:70:46:5f:2f:2c:c3:6e:90:9b:5b:34: 34:f2:d6:31:1b:10:75:a9:68:14:20:23:ef:71:df: 43:2e:2a:bc:27:e9:4d:6f:73:48:a3:d9:db:d1:42: 7a:87:91:60:97:b7:4f:9c:ee:a3:d0:5b:4e:4d:15: dd:17:3c:3e:dc:29:aa:15:93:9a:d4:50:a1:dd:b1: 0f:1d:4a:98:6c:52:9a:20:f4:fa:ed:0f:f0:f9:fd: ed:5d:78:00:85:91:ee:a5:b5:49:c2:4c:e3:90:a8: 81:af:fa:6f:68:99:f0:5e:eb:d7:26:ce:e3:41:b5: e4:0a:ae:44:f7:a5:39:04:0f:8a:31:c1:1f:5a:b2: bd:51:c0:12:60:29:70:7a:5f:89:37:ff:0a:86:23: 53:a8:0b:99:dd:13:61:5a:30:18:d7:f5:f3:5d:07: 05:ad:a4:48:66:ab:ec:41:51:f6:5a:a3:6a:78:77: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:61:B0:D8:8A:CC:D5:D0:C8:BE:AE:F9:D3:B9:1C:B8:59:11:AF X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:70:03:96:41:80:93:f5:5b:b7:59:40:3a:14:a3:e6:18:8d: f5:2c:a8:34:c2:cc:f2:66:f2:8e:4f:c3:9e:00:16:a5:a8:83: 51:41:5e:a8:b7:42:bf:4c:74:9a:ca:8b:2e:28:47:0e:71:7f: 2a:4b:7e:75:05:ea:fa:b1:39:8b:38:df:38:56:f1:8b:d8:fb: 39:37:2c:aa:fe:e7:d3:f0:81:7c:6c:d0:a5:dd:17:70:ae:f9: 8d:da:db:96:2a:60:49:16:4c:c6:50:77:92:22:20:7a:85:1c: 99:8c:01:43:a5:e2:39:dd:77:0d:0d:99:c1:e0:ff:4a:40:df: b5:be:0e:41:74:48:6e:3d:fa:fa:20:10:a2:c6:36:bf:17:4c: 50:97:44:5c:b1:20:df:1c:ea:60:13:f1:7e:f0:b0:12:d9:70: 1b:17:c0:60:c2:8f:17:95:b6:ad:6d:95:ca:3e:1f:e0:3e:35: b3:bd:21:af:0e:94:3a:36:ab:9c:ac:05:df:a0:61:11:d6:8b: 94:33:2d:67:4c:2d:92:ca:4f:af:bb:3e:64:54:02:be:5d:3e: 17:b6:56:18:9e:90:78:1e:65:43:5c:3b:10:66:34:03:8e:21: 6b:c4:eb:6f:3b:e0:11:62:d8:f4:f5:7f:0a:3c:3a:9c:7c:08: 52:c9:f6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjQwNTE4MjIxMzI0WhcNMjQwNTI1MjIxMzI0WjAYMRYwFAYD VQQDEw02NjQ5MjgwNC0xOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLbIkAFlcTDZWf+iu92DtksZr74d0tK1FKoiZVK31Jt8TOk5UgQsm5ebi7Ji 6zXtsJjnwXkn0y/wNQkZIsysDRO+wEhaHEJXNqNn8uzLcEZfLyzDbpCbWzQ08tYx GxB1qWgUICPvcd9DLiq8J+lNb3NIo9nb0UJ6h5Fgl7dPnO6j0FtOTRXdFzw+3Cmq FZOa1FCh3bEPHUqYbFKaIPT67Q/w+f3tXXgAhZHupbVJwkzjkKiBr/pvaJnwXuvX Js7jQbXkCq5E96U5BA+KMcEfWrK9UcASYClwel+JN/8KhiNTqAuZ3RNhWjAY1/Xz XQcFraRIZqvsQVH2WqNqeHf5WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPbYbDY iszV0Mi+rvnTuRy4WRGvMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBicAOWQYCT9Vu3WUA6FKPmGI31LKg0wszyZvKOT8OeABalqINRQV6o t0K/THSayosuKEcOcX8qS351Ber6sTmLON84VvGL2Ps5Nyyq/ufT8IF8bNCl3Rdw rvmN2tuWKmBJFkzGUHeSIiB6hRyZjAFDpeI53XcNDZnB4P9KQN+1vg5BdEhuPfr6 IBCixja/F0xQl0RcsSDfHOpgE/F+8LAS2XAbF8Bgwo8XlbatbZXKPh/gPjWzvSGv DpQ6NqucrAXfoGER1ouUMy1nTC2Syk+vuz5kVAK+XT4XtlYYnpB4HmVDXDsQZjQD jiFrxOtvO+ARYtj09X8KPDqcfAhSyfZK -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org