$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: i7v2FCW3bIXRF60ww9Ola7zcmlVNbzgu8HAlS+yIhww= Subject key identifier: 1B:36:A9:39:70:96:3B:84:6C:E2:3B:77:4F:36:86:83:FF:35:E9:04 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 01E0 Signing time: Wed 01 May 2024 04:40:03 +0000 Manifest this update: Wed 01 May 2024 04:40:03 +0000 Manifest next update: Wed 08 May 2024 04:40:03 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: 7WwwSKU6zcS4GFKh6qGztqtPTuceWWliv4jDuhGQIJ8=) 2: C833DC72966011EEB5335A1FC4F9AE02.roa (hash: kGJ3dFyy3ARAEzH3ycJC5QnmVIogv3ecSLmfWzCpM6g=) 3: E75995749FBB11EE9CC97552C4F9AE02.roa (hash: MEHcU9VIbpKf49NrA3vNKmN4BNGS8hFH/iMxEtoiIkg=) 4: 369904CE214211EEBA1B697AC4F9AE02.roa (hash: rmmRWoAn85F1vB7M51VTpiJz6tiwPhlt+YZ57n6t9So=) 5: 376972E4214211EEBA1B697AC4F9AE02.roa (hash: x4UMUB4QYBCgti3WnEsVyZpJvDmgyrBc+Ed7Ne4bCNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: May 1 04:40:03 2024 GMT Not After : May 8 04:40:03 2024 GMT Subject: CN=6631c7a3-73e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:24:ea:61:cc:5e:da:fc:6d:86:40:ef:d2: 72:e4:b4:3e:78:54:f3:39:30:86:a0:7e:bb:01:8d: cb:ca:c9:51:bc:65:4c:a0:7c:22:c2:16:d9:c5:73: 1a:2e:2d:71:41:f6:9a:0f:7d:82:9c:5d:a2:f0:1f: dd:a4:b4:3b:85:98:46:b3:72:d5:dc:8d:74:a6:08: 2f:3d:d7:50:bb:29:f1:52:7c:33:5c:dc:5f:f9:31: c4:28:cf:a7:cc:31:28:ad:13:81:dd:c3:fb:da:ac: bd:b6:fb:9e:46:61:85:dd:47:b4:9c:bf:24:e2:a4: a3:b5:70:b2:09:0a:f5:e9:20:34:da:9d:85:66:68: cd:97:7b:43:d6:aa:43:ff:cc:63:6c:3e:e2:60:34: 34:30:16:55:9a:f9:84:89:d6:b1:39:63:70:c9:38: 0e:1a:95:69:ff:d1:5d:75:d8:e9:14:98:57:4d:c2: 75:8b:1d:35:d7:2d:bf:fb:7c:78:7b:11:f1:b5:37: ab:62:8b:75:a5:13:44:42:0b:67:99:84:25:9b:cb: d8:b1:b9:0a:2c:56:0d:db:f2:06:6c:cf:18:14:f4: d4:54:d8:2d:58:a4:d4:6c:5e:7a:ea:71:95:2c:bd: 70:7f:6f:a1:93:c0:0b:b2:21:00:9a:b6:6c:22:c2: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:36:A9:39:70:96:3B:84:6C:E2:3B:77:4F:36:86:83:FF:35:E9:04 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:f1:2d:21:64:af:8f:24:cb:ab:37:25:65:13:8c:46:4e:ce: 10:73:fe:33:8a:38:60:6e:fe:74:9b:45:cd:fa:b3:98:1e:0e: 3d:3f:5e:5a:b4:4b:91:86:83:52:7b:cb:54:76:be:58:f1:25: d3:93:ea:1c:5b:b6:1e:43:bd:19:d6:9a:3c:e2:a4:bd:d3:e7: 8a:19:1c:5b:45:e1:81:cf:d1:ea:06:b6:c3:9c:ac:04:6e:ef: 86:4b:92:f3:18:36:63:94:47:70:60:d0:9e:28:45:7a:38:e7: 30:89:8b:64:7f:d5:77:28:10:77:0f:e7:0c:c3:f0:74:3a:ec: 4b:8e:e6:95:9e:05:27:d1:58:94:4f:26:f1:ad:ac:3a:da:dc: 6d:d7:bf:9c:4a:25:5f:b5:2a:da:bf:12:a4:c7:df:31:fc:fb: 1d:02:8b:b0:3f:59:f3:83:49:82:13:57:90:00:14:05:a8:19: 06:d8:6b:7d:ec:63:f6:f3:e0:1b:cc:a3:93:19:1d:07:1d:a8: 45:ad:87:09:e4:3b:cc:b8:61:aa:fc:b9:e3:ea:1e:74:db:46: 01:5e:b9:c8:aa:9b:d9:33:11:ba:8b:97:05:7a:fd:bd:5a:2f: 26:f1:d6:cc:88:68:91:06:da:31:69:63:7e:c6:eb:cb:29:cb: e6:39:85:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjQwNTAxMDQ0MDAzWhcNMjQwNTA4MDQ0MDAzWjAYMRYwFAYD VQQDEw02NjMxYzdhMy03M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWgk6mHMXtr8bYZA79Jy5LQ+eFTzOTCGoH67AY3LyslRvGVMoHwiwhbZxXMa Li1xQfaaD32CnF2i8B/dpLQ7hZhGs3LV3I10pggvPddQuynxUnwzXNxf+THEKM+n zDEorROB3cP72qy9tvueRmGF3Ue0nL8k4qSjtXCyCQr16SA02p2FZmjNl3tD1qpD /8xjbD7iYDQ0MBZVmvmEidaxOWNwyTgOGpVp/9FdddjpFJhXTcJ1ix011y2/+3x4 exHxtTerYot1pRNEQgtnmYQlm8vYsbkKLFYN2/IGbM8YFPTUVNgtWKTUbF566nGV LL1wf2+hk8ALsiEAmrZsIsKOvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs2qTlw ljuEbOI7d082hoP/NekEMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH8S0hZK+PJMurNyVlE4xGTs4Qc/4zijhgbv50m0XN+rOYHg49P15a tEuRhoNSe8tUdr5Y8SXTk+ocW7YeQ70Z1po84qS90+eKGRxbReGBz9HqBrbDnKwE bu+GS5LzGDZjlEdwYNCeKEV6OOcwiYtkf9V3KBB3D+cMw/B0OuxLjuaVngUn0ViU Tybxraw62txt17+cSiVftSravxKkx98x/PsdAouwP1nzg0mCE1eQABQFqBkG2Gt9 7GP28+AbzKOTGR0HHahFrYcJ5DvMuGGq/Lnj6h5020YBXrnIqpvZMxG6i5cFev29 Wi8m8dbMiGiRBtoxaWN+xuvLKcvmOYXe -----END CERTIFICATE-----Generated at Wed May 1 05:55:46 2024 by rpki-client on console-ams.rpki-client.org