$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json) Hash identifier: Y7Dd4YLkX/1G7RtcBZ80ro5NXhMlPo/j3rplnEmSIX8= Subject key identifier: D1:F1:36:55:AF:AD:7B:25:E6:B3:1E:9A:5D:C0:98:5F:BC:5C:29:3E Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Certificate serial: 02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft Manifest number: 02F9 Signing time: Wed 01 May 2024 03:32:05 +0000 Manifest this update: Wed 01 May 2024 03:32:04 +0000 Manifest next update: Wed 08 May 2024 03:32:04 +0000 Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: /HdC9WpXOwTAT1aD2jVtTPuLNRI3txZMVp3f6W4eIcg=) 2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: Z0WYVQLGbU8d0Q0TLyHt+vPj6pRUXi1JHfpLJ/42HQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Validity Not Before: May 1 03:32:04 2024 GMT Not After : May 8 03:32:04 2024 GMT Subject: CN=6631b7b5-87ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f6:ed:32:92:b7:45:fd:0f:c0:36:f9:0d:36: cf:b2:f9:b2:67:44:78:12:68:16:d3:39:11:c8:84: 57:ca:7a:90:6a:29:dd:b9:46:42:86:ca:8a:9a:0c: d3:04:d1:6d:eb:36:9b:68:36:c5:65:c5:99:fd:40: 15:37:55:31:4f:80:89:12:59:9c:32:95:71:bd:2c: d0:6e:5e:d5:ae:ac:2e:00:1b:55:8a:ee:5b:f7:88: 45:c8:be:51:36:12:52:e2:3c:16:db:1c:cd:4e:19: 59:f0:fa:65:f4:94:29:be:a4:7c:c6:92:96:31:9a: ed:3e:ad:3e:c5:8c:f7:9f:d4:fb:c4:04:58:63:aa: e0:c2:b1:b5:76:14:6f:57:25:89:ca:96:d4:33:08: cc:56:11:9d:51:e1:26:66:ef:43:35:3d:44:91:76: fc:b7:3b:04:6f:74:df:f1:96:a4:08:ef:a6:eb:9d: c7:a5:20:91:ff:a6:d6:19:bc:02:b8:b1:c4:20:82: 13:08:d6:78:58:d4:97:46:bb:c6:cc:67:52:97:83: fc:53:2b:8a:39:13:fc:9e:f0:cb:ef:82:f9:32:a9: e3:1f:c8:e5:3f:d8:24:ff:55:83:1d:09:bc:db:37: 90:47:c5:44:b2:3b:39:db:da:a5:8b:4f:af:85:ee: af:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F1:36:55:AF:AD:7B:25:E6:B3:1E:9A:5D:C0:98:5F:BC:5C:29:3E X509v3 Authority Key Identifier: keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f5:73:4c:e3:31:58:3d:8b:0d:47:95:b4:11:4a:b4:4f:7f: b3:db:93:77:56:85:71:da:f5:38:56:77:ae:7f:70:b3:c4:ef: 0a:dd:43:c2:5b:35:58:9b:94:d9:88:61:a6:7c:54:58:f1:74: b2:b0:ed:a2:c6:c9:9b:75:44:99:5b:88:81:78:e3:59:a8:a1: ca:ed:18:a0:4d:e6:73:16:f1:c7:99:af:6f:85:62:fa:69:52: 31:e4:0a:95:d1:d5:95:21:d6:51:38:ac:52:2b:6b:2e:28:59: 0c:c5:7b:ed:c0:94:7c:e6:91:33:f7:db:6c:71:e9:20:e8:de: a5:31:68:9d:48:c6:c2:68:da:4c:d6:2e:e4:32:ee:b9:5e:ac: 59:9b:37:ba:f1:e4:21:93:9c:c8:71:46:9c:84:81:e8:69:66: db:17:b6:d7:42:08:28:fe:f0:65:11:e6:a7:c2:4b:08:f7:04: 79:08:02:ae:35:b5:ac:36:ec:b0:fb:4e:65:f0:97:58:82:f6: 46:2a:cb:86:43:af:f8:a0:7b:e7:ce:c9:77:59:31:9c:6c:a8: b4:a4:47:5a:c3:7b:1e:25:b8:6e:47:80:71:68:c0:80:a3:cd: 68:2a:29:6f:ef:82:30:d6:df:aa:e2:64:79:14:41:46:e0:6b: 25:31:9c:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5 MkRERUJERkMwHhcNMjQwNTAxMDMzMjA0WhcNMjQwNTA4MDMzMjA0WjAYMRYwFAYD VQQDEw02NjMxYjdiNS04N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+fbtMpK3Rf0PwDb5DTbPsvmyZ0R4EmgW0zkRyIRXynqQainduUZChsqKmgzT BNFt6zabaDbFZcWZ/UAVN1UxT4CJElmcMpVxvSzQbl7VrqwuABtViu5b94hFyL5R NhJS4jwW2xzNThlZ8Ppl9JQpvqR8xpKWMZrtPq0+xYz3n9T7xARYY6rgwrG1dhRv VyWJypbUMwjMVhGdUeEmZu9DNT1EkXb8tzsEb3Tf8ZakCO+m653HpSCR/6bWGbwC uLHEIIITCNZ4WNSXRrvGzGdSl4P8UyuKORP8nvDL74L5MqnjH8jlP9gk/1WDHQm8 2zeQR8VEsjs529qli0+vhe6vxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHxNlWv rXsl5rMeml3AmF+8XCk+MB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj LWhNek1MbU5zMkdTM2V2ZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA79XNM4zFYPYsNR5W0EUq0T3+z25N3VoVx2vU4Vneuf3CzxO8K3UPC WzVYm5TZiGGmfFRY8XSysO2ixsmbdUSZW4iBeONZqKHK7RigTeZzFvHHma9vhWL6 aVIx5AqV0dWVIdZROKxSK2suKFkMxXvtwJR85pEz99tscekg6N6lMWidSMbCaNpM 1i7kMu65XqxZmze68eQhk5zIcUachIHoaWbbF7bXQggo/vBlEeanwksI9wR5CAKu NbWsNuyw+05l8JdYgvZGKsuGQ6/4oHvnzsl3WTGcbKi0pEdaw3seJbhuR4BxaMCA o81oKilv74Iw1t+q4mR5FEFG4GslMZyq -----END CERTIFICATE-----Generated at Wed May 1 04:49:29 2024 by rpki-client on console-ams.rpki-client.org