$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: 1nlwnhgCz+wU6ppBB+mkjrlXqk36BV9opT1HrvCuWSA= Subject key identifier: 69:65:74:C5:14:A1:3E:59:8D:AF:9B:D4:E8:E8:0C:68:EB:F0:57:5B Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 0F99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 0F92 Signing time: Sat 04 May 2024 18:15:22 +0000 Manifest this update: Sat 04 May 2024 18:15:22 +0000 Manifest next update: Sat 11 May 2024 18:15:22 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: Z/XhNbeFqJ9QDFYSldP6X9x0/ge752w/JxwK71xODk4=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: 6FqgiZMUxa33Dx66ztigBXPwvboVUKr0rBQAO7+tpXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3993 (0xf99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: May 4 18:15:22 2024 GMT Not After : May 11 18:15:22 2024 GMT Subject: CN=66367b3a-9bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:61:42:a7:b0:b3:3d:07:0b:9b:82:06:de: 3d:cd:ce:04:56:71:54:05:2b:1d:8a:00:82:44:41: d7:ac:d5:73:98:7f:8d:6e:1e:a7:9f:07:dd:a2:74: a1:32:33:8c:b1:ec:e6:d9:b5:27:47:55:29:b3:3a: b7:b1:d0:09:2f:f8:42:e2:41:6b:18:f2:f8:4b:5a: f7:6a:0f:0e:6e:5a:26:1a:46:46:62:b4:e7:8f:f6: 21:38:59:3f:da:f6:be:88:46:c4:ad:01:dd:9f:e8: 8d:bd:53:a8:a8:5b:5d:96:87:4a:af:48:d3:ae:c4: cc:29:d0:94:c9:fb:90:a3:81:2e:5c:6f:92:a4:b9: 8a:e3:72:e1:30:a0:f1:4a:49:b2:64:c9:41:69:e5: 30:07:f1:2d:ab:d1:96:b2:a4:bc:67:6c:9d:35:eb: 13:8a:21:36:7b:75:26:88:05:41:44:74:7b:ff:3b: 03:3f:ee:b4:e5:38:15:17:00:a1:24:f1:bc:69:c9: 3a:9b:18:95:3e:6e:29:c3:57:58:af:a7:31:89:ab: 86:26:6f:02:b3:bd:eb:bc:92:9a:08:b8:28:f0:8d: 9a:87:7c:d5:38:6a:18:bf:8a:e9:9c:ca:2c:1f:b8: 59:e6:9e:1f:0a:9d:05:1b:eb:ab:ec:85:d1:d2:51: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:65:74:C5:14:A1:3E:59:8D:AF:9B:D4:E8:E8:0C:68:EB:F0:57:5B X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:51:35:3d:03:ab:53:32:8f:11:d5:21:a7:95:e7:6c:77:35: 60:72:a8:13:50:7e:02:e9:6d:c3:2b:40:c5:ce:bf:32:b7:b0: b6:e7:54:63:bf:ab:e4:da:1f:2f:30:54:bd:9d:18:ed:bb:4c: 08:be:c6:69:6e:50:e5:a4:db:48:53:6a:84:02:09:25:40:2f: 33:ce:2e:fb:ed:e7:aa:88:e1:df:33:34:bd:12:96:a6:c6:7d: b2:5a:dc:eb:23:0b:c6:7e:f9:16:c0:45:df:8e:21:8f:58:08: 8c:03:09:c1:ee:94:af:f7:fd:ff:ed:1f:3b:dc:f8:d7:b0:48: c2:76:3a:8f:c1:be:14:86:ce:d7:4c:06:65:83:ff:8f:aa:a0: 27:b9:da:87:71:38:de:c6:c3:f8:72:1f:df:bf:eb:7d:06:d6: 68:d3:46:24:97:5f:28:70:55:6c:3f:bd:a2:62:6b:bf:76:7a: b4:21:1d:d7:79:53:a6:6c:f7:2c:2b:99:e1:d6:f7:c8:3b:68: 23:1d:8b:d9:0c:62:40:31:5e:3b:3d:68:74:1c:12:90:6c:c9: 69:f6:52:8e:2e:0d:80:f8:26:0a:71:6b:42:7c:f6:32:3f:b2: 22:5a:02:f3:17:80:77:41:40:c4:53:17:29:18:23:bc:9b:31: 6f:d0:d8:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjQwNTA0MTgxNTIyWhcNMjQwNTExMTgxNTIyWjAYMRYwFAYD VQQDEw02NjM2N2IzYS05YmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCthQqewsz0HC5uCBt49zc4EVnFUBSsdigCCREHXrNVzmH+Nbh6nnwfdonSh MjOMsezm2bUnR1Upszq3sdAJL/hC4kFrGPL4S1r3ag8OblomGkZGYrTnj/YhOFk/ 2va+iEbErQHdn+iNvVOoqFtdlodKr0jTrsTMKdCUyfuQo4EuXG+SpLmK43LhMKDx SkmyZMlBaeUwB/Etq9GWsqS8Z2ydNesTiiE2e3UmiAVBRHR7/zsDP+605TgVFwCh JPG8ack6mxiVPm4pw1dYr6cxiauGJm8Cs73rvJKaCLgo8I2ah3zVOGoYv4rpnMos H7hZ5p4fCp0FG+ur7IXR0lHJjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlldMUU oT5Zja+b1OjoDGjr8FdbMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqUTU9A6tTMo8R1SGnledsdzVgcqgTUH4C6W3DK0DFzr8yt7C251Rj v6vk2h8vMFS9nRjtu0wIvsZpblDlpNtIU2qEAgklQC8zzi777eeqiOHfMzS9Epam xn2yWtzrIwvGfvkWwEXfjiGPWAiMAwnB7pSv9/3/7R873PjXsEjCdjqPwb4Uhs7X TAZlg/+PqqAnudqHcTjexsP4ch/fv+t9BtZo00Ykl18ocFVsP72iYmu/dnq0IR3X eVOmbPcsK5nh1vfIO2gjHYvZDGJAMV47PWh0HBKQbMlp9lKOLg2A+CYKcWtCfPYy P7IiWgLzF4B3QUDEUxcpGCO8mzFv0Nhu -----END CERTIFICATE-----Generated at Sat May 4 20:37:19 2024 by rpki-client on console-fra.rpki-client.org