$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft File: OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json) Hash identifier: eAjdzbg/nkXNqhxm94okTfRbCx7WRwK7pvdoAdOgl44= Subject key identifier: 3B:01:56:8B:7A:8F:4C:82:7C:01:57:CF:2E:07:C8:5F:D1:DF:9A:24 Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 Certificate issuer: /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft Manifest number: 05D5 Signing time: Sun 05 May 2024 00:13:50 +0000 Manifest this update: Sun 05 May 2024 00:13:49 +0000 Manifest next update: Sun 12 May 2024 00:13:49 +0000 Files and hashes: 1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: XdkIOoZCY55adFxg9b9lxDtmXj/lU9DOkETj4SCBkEw=) 2: 6473BE24979811EB97001639C4F9AE02.roa (hash: nS5LVX8n3qARHdqJ2U4MeWyBJV0vfcED1PtfqbIhaIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Validity Not Before: May 5 00:13:49 2024 GMT Not After : May 12 00:13:49 2024 GMT Subject: CN=6636cf3d-c74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:01:43:e1:72:48:5d:c1:55:16:ba:1f:20: 90:4e:d5:b9:b8:7c:34:a0:ce:8b:48:02:b1:22:a6: fb:83:35:20:6f:65:af:cf:8e:71:8e:01:dc:06:c4: cd:13:47:f7:bc:c3:d2:33:f5:a3:1f:91:2d:96:a4: 01:6b:bf:5a:b7:ae:53:e4:d4:51:23:83:5e:fe:bc: e0:f0:f9:6c:76:1b:af:5b:be:46:42:14:db:b2:cb: 99:99:d9:0d:f2:45:04:5e:03:5b:00:4d:ec:13:2a: e7:e3:49:27:60:8e:69:b0:58:c1:95:61:32:01:36: 47:6d:35:ea:da:5d:ca:e9:c4:be:14:2b:5d:4b:69: 9f:e6:c5:b7:ac:fb:f9:06:08:82:55:e8:ec:3d:78: 4e:9d:84:65:d4:04:54:e1:f9:cf:7b:e5:29:10:c8: c7:eb:61:ba:e3:a4:bf:52:3f:02:70:21:3a:38:dd: cb:73:50:97:ae:f1:33:93:4e:a6:4d:04:50:53:fd: 5f:dc:54:26:5f:76:28:cb:9f:c6:a4:12:d7:63:38: 53:40:9d:7f:d8:c3:c5:5e:f1:10:86:99:03:db:c2: e6:60:44:b5:51:2a:b8:58:5d:69:7a:71:ea:58:86: 7f:c3:78:e5:43:60:73:29:48:6d:60:9b:06:81:54: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:01:56:8B:7A:8F:4C:82:7C:01:57:CF:2E:07:C8:5F:D1:DF:9A:24 X509v3 Authority Key Identifier: keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:33:64:c7:36:7e:88:c4:40:2b:b7:f5:b3:b7:29:f9:cf:d0: d2:1a:70:98:af:25:e4:d9:15:d2:a6:4a:c5:dc:da:bb:b3:4e: 6a:53:64:36:62:1e:5c:b8:29:87:32:9d:de:ec:79:f1:ae:92: 66:3b:98:dc:4c:c0:a3:f6:6e:9f:36:bc:76:d5:99:89:2e:ec: 02:01:e5:ba:1f:c0:a2:f7:a4:27:5d:21:70:5c:aa:17:81:f4: 2a:fa:ac:ef:b2:9f:33:83:22:1c:14:bc:66:c7:57:02:ee:5a: bc:b3:6e:46:ce:7d:0e:8c:9e:98:c8:eb:8f:6e:b2:42:9c:fa: 88:cb:c7:87:ce:6d:28:25:02:fc:24:39:e2:cf:79:2e:9f:f7: 57:cb:66:1d:23:cf:9a:cb:88:eb:c3:96:c6:35:8a:46:c1:56: 0d:20:79:c4:b1:b7:e9:7f:e7:a9:db:f5:7b:b9:da:9c:96:1f: e8:5b:5a:96:16:32:f2:c9:be:4c:2a:5d:50:a1:54:75:d0:5c: 02:88:b1:ad:23:be:e2:20:97:33:d9:21:af:68:94:a9:36:e0: ee:67:b1:9b:2e:5b:8b:77:e6:3f:72:3c:1b:0f:7c:e4:4d:ca: e3:87:60:4d:1f:02:25:14:6a:54:2c:9a:bd:89:a4:f8:53:a1: d5:11:d5:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1M0UxMTAvBgNVBAUTKDM4Q0UyNzZDODVCNkQyRDBFQUZFOUQzRjhBNUE1MDhD RERCQUI5NjgwHhcNMjQwNTA1MDAxMzQ5WhcNMjQwNTEyMDAxMzQ5WjAYMRYwFAYD VQQDEw02NjM2Y2YzZC1jNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RMBQ+FySF3BVRa6HyCQTtW5uHw0oM6LSAKxIqb7gzUgb2Wvz45xjgHcBsTN E0f3vMPSM/WjH5EtlqQBa79at65T5NRRI4Ne/rzg8PlsdhuvW75GQhTbssuZmdkN 8kUEXgNbAE3sEyrn40knYI5psFjBlWEyATZHbTXq2l3K6cS+FCtdS2mf5sW3rPv5 BgiCVejsPXhOnYRl1ARU4fnPe+UpEMjH62G646S/Uj8CcCE6ON3Lc1CXrvEzk06m TQRQU/1f3FQmX3Yoy5/GpBLXYzhTQJ1/2MPFXvEQhpkD28LmYES1USq4WF1penHq WIZ/w3jlQ2BzKUhtYJsGgVSDCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsBVot6 j0yCfAFXzy4HyF/R35okMB8GA1UdIwQYMBaAFDjOJ2yFttLQ6v6dP4paUIzdurlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDUzRS80RUVCQzIwODZC NkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0RHFfcDBfaWxwUWpOMjZ1 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NNG5iSVcyMHREcV9wMF9pbHBRak4yNnVXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDUzRS80RUVCQzIwODZCNkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0 RHFfcDBfaWxwUWpOMjZ1V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVM2THNn6IxEArt/Wztyn5z9DSGnCYryXk2RXSpkrF3Nq7s05qU2Q2 Yh5cuCmHMp3e7HnxrpJmO5jcTMCj9m6fNrx21ZmJLuwCAeW6H8Ci96QnXSFwXKoX gfQq+qzvsp8zgyIcFLxmx1cC7lq8s25Gzn0OjJ6YyOuPbrJCnPqIy8eHzm0oJQL8 JDniz3kun/dXy2YdI8+ay4jrw5bGNYpGwVYNIHnEsbfpf+ep2/V7udqclh/oW1qW FjLyyb5MKl1QoVR10FwCiLGtI77iIJcz2SGvaJSpNuDuZ7GbLluLd+Y/cjwbD3zk Tcrjh2BNHwIlFGpULJq9iaT4U6HVEdWN -----END CERTIFICATE-----Generated at Sun May 5 01:13:21 2024 by rpki-client on console-ams.rpki-client.org