$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json) Hash identifier: sPSLNBctBWQIe06W3uQhimwdJaAK7MrycddpqJO0d0I= Subject key identifier: C8:03:F4:B6:4C:61:7E:C8:D2:EB:42:EA:35:BF:E6:09:E4:6C:6E:1C Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 3247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft Manifest number: 31F9 Signing time: Sat 04 May 2024 15:41:52 +0000 Manifest this update: Sat 04 May 2024 15:41:51 +0000 Manifest next update: Sat 11 May 2024 15:41:51 +0000 Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: yxEWl6Lomya6b729B5miQuEdv4jaVrRMhMUTBEvI1GQ=) 2: FF0E1AA0DE2011EB95EBE879C4F9AE02.roa (hash: WOcupWa3PGrsVMWvpTitYRlNkwsa6ILND0bikrR9/DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12871 (0x3247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: May 4 15:41:51 2024 GMT Not After : May 11 15:41:51 2024 GMT Subject: CN=66365740-3ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:5d:52:e1:c8:53:cf:73:bf:bb:69:77:48: 7d:d8:47:c6:1d:60:b4:95:66:d1:4f:d5:1b:e5:d4: f0:ed:3e:ad:2d:b6:ad:0c:42:b7:82:9d:7a:fa:ea: a2:81:f9:d3:d4:4a:f2:f3:39:bf:6c:39:36:01:0f: c5:9a:04:0e:58:a8:6f:86:09:6a:68:a0:7c:73:30: 6b:5f:d3:cd:d2:e2:87:c2:fe:5b:b7:ba:8b:4d:3f: 0d:49:99:a1:77:fa:4d:99:11:f9:26:e9:de:59:cc: 8f:a0:74:7c:b5:59:21:7c:da:9e:db:7d:d3:2e:2e: b0:ac:97:e8:e0:d3:c4:12:3e:16:56:b9:87:0f:12: 16:3f:fb:b6:b1:f7:9b:ae:f7:f8:c4:1b:dd:ee:b6: 73:35:b7:8f:66:8f:93:18:5c:48:3c:ef:9b:d2:69: eb:b3:30:e6:ab:d1:c0:c2:db:8b:ec:85:9a:02:64: 76:df:37:74:d8:93:53:ac:e2:45:82:f5:a7:47:12: ef:ad:b0:e5:69:20:5a:53:b8:99:73:78:d8:15:df: d7:25:c1:9e:8e:0a:bc:2b:6d:66:09:c1:7f:09:92: 4b:fc:7b:78:68:bd:06:6c:7d:65:4d:de:67:c6:30: 16:00:fa:fc:36:17:9e:4e:e2:91:30:6f:63:20:55: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:03:F4:B6:4C:61:7E:C8:D2:EB:42:EA:35:BF:E6:09:E4:6C:6E:1C X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6a:6c:5b:45:43:a2:cb:47:18:a7:31:b2:f3:36:86:ff:c6: 8c:ed:66:20:b1:d9:e4:ba:32:6f:35:81:f9:b4:7e:e9:10:3a: c4:f9:ec:89:cb:71:a3:71:c7:5a:0c:a8:1b:d6:af:b6:ba:61: 0c:11:62:a1:36:30:47:88:c9:68:83:21:6d:d7:5e:f6:ea:7d: f7:c7:3b:9a:b9:b0:ce:39:eb:cf:14:f8:d2:13:2c:82:73:86: b3:77:f7:f2:07:99:d9:de:69:08:91:12:b2:b1:b4:9c:f6:75: c7:72:4b:75:19:68:d2:48:19:81:fc:ff:a1:55:ca:98:78:f4: 12:f0:6e:d5:5e:ee:67:bc:78:b1:c5:a0:39:b9:94:e9:65:9d: b4:d5:1e:2c:be:e2:44:f9:8c:32:3e:8e:9a:54:17:46:24:85: 51:91:24:8f:af:96:7b:22:30:99:3e:1b:a2:32:79:11:d1:05: 00:67:54:d9:22:e5:87:43:a4:bd:33:7c:1a:40:97:a1:27:55: 3f:cb:d6:20:42:64:8b:7e:66:32:8d:3f:83:cd:15:1a:38:20: e9:5b:02:cc:a8:36:5d:49:f3:72:78:fe:bf:c3:4c:49:31:4d: 7c:ca:5b:42:71:44:e0:28:3d:c3:84:04:33:94:fa:bc:dd:13: 6b:fb:02:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjQwNTA0MTU0MTUxWhcNMjQwNTExMTU0MTUxWjAYMRYwFAYD VQQDEw02NjM2NTc0MC0zZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6ZdUuHIU89zv7tpd0h92EfGHWC0lWbRT9Ub5dTw7T6tLbatDEK3gp16+uqi gfnT1Ery8zm/bDk2AQ/FmgQOWKhvhglqaKB8czBrX9PN0uKHwv5bt7qLTT8NSZmh d/pNmRH5JuneWcyPoHR8tVkhfNqe233TLi6wrJfo4NPEEj4WVrmHDxIWP/u2sfeb rvf4xBvd7rZzNbePZo+TGFxIPO+b0mnrszDmq9HAwtuL7IWaAmR23zd02JNTrOJF gvWnRxLvrbDlaSBaU7iZc3jYFd/XJcGejgq8K21mCcF/CZJL/Ht4aL0GbH1lTd5n xjAWAPr8NheeTuKRMG9jIFVr3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgD9LZM YX7I0utC6jW/5gnkbG4cMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p TEs3bVRnejR1akgxcHJrMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWamxbRUOiy0cYpzGy8zaG/8aM7WYgsdnkujJvNYH5tH7pEDrE+eyJ y3GjccdaDKgb1q+2umEMEWKhNjBHiMlogyFt11726n33xzuaubDOOevPFPjSEyyC c4azd/fyB5nZ3mkIkRKysbSc9nXHckt1GWjSSBmB/P+hVcqYePQS8G7VXu5nvHix xaA5uZTpZZ201R4svuJE+YwyPo6aVBdGJIVRkSSPr5Z7IjCZPhuiMnkR0QUAZ1TZ IuWHQ6S9M3waQJehJ1U/y9YgQmSLfmYyjT+DzRUaOCDpWwLMqDZdSfNyeP6/w0xJ MU18yltCcUTgKD3DhAQzlPq83RNr+wJN -----END CERTIFICATE-----Generated at Sat May 4 16:34:32 2024 by rpki-client on console-fra.rpki-client.org