$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft File: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json) Hash identifier: qzytXwXQuLEaRMQdJCVueU/OopOhVh5tQPua+OKgbII= Subject key identifier: 64:09:97:39:E7:4C:F3:EE:ED:14:1F:8B:EF:0D:87:D4:2B:49:31:4C Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Certificate serial: 254C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft Manifest number: 2538 Signing time: Thu 02 May 2024 16:03:40 +0000 Manifest this update: Thu 02 May 2024 16:03:39 +0000 Manifest next update: Thu 09 May 2024 16:03:39 +0000 Files and hashes: 1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: 8kFnxkHsA0BewLWjhhNfSc4sUnv/RuFjZmXe6gIibmI=) 2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: rpD6lVHx031UbGaINM8AknhCr7BLzz54zr0nC85gcOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9548 (0x254c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Validity Not Before: May 2 16:03:39 2024 GMT Not After : May 9 16:03:39 2024 GMT Subject: CN=6633b95b-064c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:0c:07:f0:a8:1d:36:49:0d:8c:2c:ba:50: 8f:8b:f1:e9:33:03:56:61:4f:f5:db:81:a9:b2:c9: 07:93:e5:8c:6d:8d:fb:2e:39:28:c9:19:0e:46:09: 5f:e7:16:25:b1:d1:8b:16:5a:94:94:34:d0:26:08: 8a:82:2e:a6:d0:c3:36:2d:f5:14:8d:21:ed:d8:1f: f0:87:d6:6a:ef:51:b9:44:48:60:51:0d:f1:19:b3: e4:1b:4a:df:88:14:97:34:38:7b:f4:5d:c8:43:05: 0d:90:65:ba:e6:bc:ce:8d:b7:50:db:51:b7:6d:62: 77:45:f8:83:44:80:11:9e:98:5d:00:9b:4c:15:26: c8:26:cc:10:0a:06:27:41:8f:b6:99:60:23:61:4b: 78:b2:2d:be:08:98:69:8d:44:fc:9c:41:22:52:d4: d1:e1:87:3f:80:b9:ef:44:66:94:bd:9e:69:af:ab: d7:9d:7b:cd:7d:31:f3:22:82:a0:9f:75:e7:c3:d1: f6:b5:02:e8:ad:76:16:a4:61:9b:3b:03:b9:2b:23: a1:b8:b0:04:4b:52:33:d0:e8:90:ad:86:24:f8:f5: da:23:a0:ff:ad:d4:a0:f8:1c:55:ee:d6:31:9a:02: 2d:ac:d0:6c:8d:dd:5d:79:2d:4f:b6:51:e5:62:9e: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:09:97:39:E7:4C:F3:EE:ED:14:1F:8B:EF:0D:87:D4:2B:49:31:4C X509v3 Authority Key Identifier: keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:85:bd:8c:d0:d7:38:41:0a:87:e0:5f:e0:66:3a:f8:1e:7b: 11:c9:ce:1c:ef:a8:e3:f3:7b:df:fe:81:cf:02:6b:5d:b0:e7: 75:19:44:54:7c:74:88:70:10:2c:4b:55:34:40:89:8f:ef:4e: a3:cb:67:5a:51:b0:c5:0a:e3:9d:21:0f:54:42:63:04:97:45: 33:c4:9d:43:3b:3d:21:49:1f:f5:d4:b1:17:b1:89:98:26:3c: ab:40:eb:c5:a9:95:09:59:28:a9:78:41:df:80:50:79:a0:87: 30:19:69:d4:a1:3a:d0:10:aa:fe:f1:9a:e9:93:e2:1e:67:72: 42:6a:29:aa:ef:df:5e:49:a0:2a:4c:38:f8:d0:71:b4:79:16: 5f:69:8f:85:12:f9:02:74:cf:73:d0:b7:10:3a:75:52:44:41: 12:0a:77:99:cb:5c:27:a4:12:92:76:93:bb:0c:36:1b:45:4e: d0:bb:ba:91:02:b9:89:8d:a0:fb:2f:fb:3d:2a:8c:ea:c5:54: df:76:f0:a3:71:1c:b6:55:61:13:e9:07:b7:b2:9e:40:2f:63: b3:2a:28:e7:12:6d:af:43:ad:18:a5:5a:20:2b:a7:e8:da:7b: 88:e4:3c:c4:cb:e0:a3:f7:b5:7c:54:24:47:d0:78:79:dd:58: 19:28:26:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMDIxMTAvBgNVBAUTKDM5QkY5Njk5NEFCNEM1NEM5ODNFRTBGNTEwMzY1RjRG RDk4NDE1NDEwHhcNMjQwNTAyMTYwMzM5WhcNMjQwNTA5MTYwMzM5WjAYMRYwFAYD VQQDEw02NjMzYjk1Yi0wNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfQMB/CoHTZJDYwsulCPi/HpMwNWYU/124GpsskHk+WMbY37LjkoyRkORglf 5xYlsdGLFlqUlDTQJgiKgi6m0MM2LfUUjSHt2B/wh9Zq71G5REhgUQ3xGbPkG0rf iBSXNDh79F3IQwUNkGW65rzOjbdQ21G3bWJ3RfiDRIARnphdAJtMFSbIJswQCgYn QY+2mWAjYUt4si2+CJhpjUT8nEEiUtTR4Yc/gLnvRGaUvZ5pr6vXnXvNfTHzIoKg n3Xnw9H2tQLorXYWpGGbOwO5KyOhuLAES1Iz0OiQrYYk+PXaI6D/rdSg+BxV7tYx mgItrNBsjd1deS1PtlHlYp66VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQJlznn TPPu7RQfi+8Nh9QrSTFMMB8GA1UdIwQYMBaAFDm/lplKtMVMmD7g9RA2X0/ZhBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMwMi80RUE0OEU4NEZC QTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhVeVlQdUQxRURaZlQ5bUVG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09iLVdtVXEweFV5WVB1RDFFRFpmVDltRUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMwMi80RUE0OEU4NEZCQTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhV eVlQdUQxRURaZlQ5bUVGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBshb2M0Nc4QQqH4F/gZjr4HnsRyc4c76jj83vf/oHPAmtdsOd1GURU fHSIcBAsS1U0QImP706jy2daUbDFCuOdIQ9UQmMEl0UzxJ1DOz0hSR/11LEXsYmY JjyrQOvFqZUJWSipeEHfgFB5oIcwGWnUoTrQEKr+8Zrpk+IeZ3JCaimq799eSaAq TDj40HG0eRZfaY+FEvkCdM9z0LcQOnVSREESCneZy1wnpBKSdpO7DDYbRU7Qu7qR ArmJjaD7L/s9KozqxVTfdvCjcRy2VWET6Qe3sp5AL2OzKijnEm2vQ60YpVogK6fo 2nuI5DzEy+Cj97V8VCRH0Hh53VgZKCZG -----END CERTIFICATE-----Generated at Thu May 2 17:18:57 2024 by rpki-client on console-ams.rpki-client.org