$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: PUAgLqmOYIesL3PwEZRTeXXRR6Hhkwe+Rp1g/e/7WxU= Subject key identifier: BF:BA:C5:7D:CD:1C:9B:BD:B3:5B:18:CF:87:96:69:81:F0:82:DE:0A Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 039B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 0398 Signing time: Fri 03 May 2024 02:41:56 +0000 Manifest this update: Fri 03 May 2024 02:41:56 +0000 Manifest next update: Fri 10 May 2024 02:41:56 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: EIvIbNTwHw+bCETI21bYJKVmpbo5s8MgZh+iER7enmc=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: f1z5jxdFPzBUW6aNRj7CDJE2/ut0mqDu4yUOOLViJNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: May 3 02:41:56 2024 GMT Not After : May 10 02:41:56 2024 GMT Subject: CN=66344ef4-8a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:06:3d:1c:2a:26:db:15:ff:1b:a7:7d:dd:c6: 42:ec:ee:ea:fe:18:90:18:98:29:64:ac:e3:47:07: 9c:06:d2:12:7e:76:28:48:08:cb:53:3e:80:b6:70: 20:b2:ed:13:a6:e1:e1:d3:10:89:ec:28:75:3b:3a: 1f:bb:38:7f:c1:13:f7:d8:e9:47:bb:27:3b:48:eb: 8d:60:c3:aa:cf:a5:d6:24:3c:81:43:d2:64:f3:9f: 74:34:28:ab:c7:c3:01:03:4e:50:7f:62:28:df:10: d6:d6:67:a6:e8:f5:82:8c:c8:a9:3e:bf:c8:3f:d9: cd:49:31:a4:8f:c4:4f:43:05:4a:18:35:81:8e:cb: 11:52:58:ef:db:df:e6:05:53:66:b4:c7:88:1d:2a: e4:b7:c2:0d:a9:b4:9e:24:86:cc:c7:62:69:23:f2: e1:01:ab:26:45:0f:82:93:54:b8:f7:d5:9a:08:00: 6c:56:73:17:d6:f2:d2:cb:24:6f:5a:a4:9e:b5:ac: 10:93:0a:44:63:f7:b0:81:a5:1f:36:e9:07:e4:bc: 6d:78:12:84:03:c4:3b:3e:5f:01:7c:0c:df:32:c8: e5:d6:d4:51:5f:a4:47:14:11:61:04:e5:c3:3c:a0: c4:eb:a7:3e:1b:3e:63:ff:be:f8:98:ee:c6:dc:23: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BA:C5:7D:CD:1C:9B:BD:B3:5B:18:CF:87:96:69:81:F0:82:DE:0A X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:69:14:66:fe:c9:b6:38:53:7e:6d:4f:97:46:0b:84:c1:ab: 61:72:ae:4a:29:0e:ff:98:33:72:56:6b:32:41:f0:57:69:35: 8c:bb:a4:48:d9:5d:2e:ac:00:ac:3a:8c:fa:64:52:90:86:25: d7:05:18:a1:e8:d2:0d:03:37:b5:a9:45:4c:9a:88:06:1e:b8: 2a:9e:ab:e2:5e:6f:eb:2e:07:79:b6:d1:77:e1:f9:3c:6a:24: ec:84:95:e3:81:1d:50:8d:f4:22:85:ba:4f:e7:00:2a:d7:43: 2f:ce:a8:6e:2a:7e:9c:3d:d0:1e:bd:2b:a7:7a:1f:0b:e6:9b: 79:17:1b:49:8b:86:4c:a8:e9:13:8f:e1:37:5f:af:7d:29:39: 02:f9:55:4f:7e:1f:f7:c5:02:73:29:70:f3:f0:88:0f:59:12: 31:ad:17:ee:83:27:99:c1:d4:86:b3:db:59:5d:25:e3:3a:a8: 83:a2:b3:79:fc:53:08:64:fa:ce:e1:e7:7d:d8:31:83:a6:c8: 7e:0e:df:16:28:92:ad:da:56:9c:7e:1c:17:ef:9c:29:fd:59: 93:c2:7e:4e:99:72:4c:3c:a3:6e:47:00:ab:fa:48:4b:b8:d6: 7d:5f:c0:a4:a7:6a:5a:9e:32:fa:67:69:a4:b2:9b:5a:05:ff: 02:95:b7:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjQwNTAzMDI0MTU2WhcNMjQwNTEwMDI0MTU2WjAYMRYwFAYD VQQDEw02NjM0NGVmNC04YTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AY9HCom2xX/G6d93cZC7O7q/hiQGJgpZKzjRwecBtISfnYoSAjLUz6AtnAg su0TpuHh0xCJ7Ch1Ozofuzh/wRP32OlHuyc7SOuNYMOqz6XWJDyBQ9Jk8590NCir x8MBA05Qf2Io3xDW1mem6PWCjMipPr/IP9nNSTGkj8RPQwVKGDWBjssRUljv29/m BVNmtMeIHSrkt8INqbSeJIbMx2JpI/LhAasmRQ+Ck1S499WaCABsVnMX1vLSyyRv WqSetawQkwpEY/ewgaUfNukH5LxteBKEA8Q7Pl8BfAzfMsjl1tRRX6RHFBFhBOXD PKDE66c+Gz5j/774mO7G3COx4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+6xX3N HJu9s1sYz4eWaYHwgt4KMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANaRRm/sm2OFN+bU+XRguEwathcq5KKQ7/mDNyVmsyQfBXaTWMu6RI 2V0urACsOoz6ZFKQhiXXBRih6NINAze1qUVMmogGHrgqnqviXm/rLgd5ttF34fk8 aiTshJXjgR1QjfQihbpP5wAq10MvzqhuKn6cPdAevSuneh8L5pt5FxtJi4ZMqOkT j+E3X699KTkC+VVPfh/3xQJzKXDz8IgPWRIxrRfugyeZwdSGs9tZXSXjOqiDorN5 /FMIZPrO4ed92DGDpsh+Dt8WKJKt2lacfhwX75wp/VmTwn5OmXJMPKNuRwCr+khL uNZ9X8Ckp2panjL6Z2mksptaBf8Clbem -----END CERTIFICATE-----Generated at Fri May 3 04:36:55 2024 by rpki-client on console-ams.rpki-client.org