$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: yuFYuAZ8AJFeFxSlylS5oXJkrrnrX+e3q5A+7F97Kqc= Subject key identifier: 7E:1B:23:13:EA:49:9D:D4:AA:BD:ED:38:2A:A5:38:2B:3E:F1:8A:C4 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 33CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 33C8 Signing time: Sat 18 May 2024 14:35:03 +0000 Manifest this update: Sat 18 May 2024 14:35:02 +0000 Manifest next update: Sat 25 May 2024 14:35:02 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: YpCxWJaYTFgz3UffydUz0GVBp4dBp1XWed0Wdb1L1AM=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: fqVmu0CJmNRy0HiTtIc6aH/DbG2CFCT1ZqkJEzOPobQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13258 (0x33ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: May 18 14:35:02 2024 GMT Not After : May 25 14:35:02 2024 GMT Subject: CN=6648bc96-3a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:38:c2:1c:e6:a3:c5:d3:e4:fb:c0:db:93: 3c:59:a1:33:4a:03:6b:20:82:be:12:0a:72:78:1c: c4:1e:b3:77:5f:94:64:5a:16:ab:b9:e8:b5:46:d5: 5b:f8:0e:00:84:cc:59:c2:2b:97:4c:41:a7:ac:02: 0d:00:8d:d6:76:b9:8a:e4:81:51:d1:4c:a2:9d:68: 86:fb:31:a4:3c:90:23:3e:87:9b:5b:f3:b1:b9:7e: b1:23:c8:2f:fc:52:bb:6e:f4:ab:b0:52:e5:28:6a: ef:66:5b:e1:98:81:83:5c:de:cd:cd:e5:b0:e5:13: ac:da:95:d7:e7:47:72:6b:9d:44:f8:f3:1c:a3:27: 81:ae:d8:09:40:7d:b4:b1:be:68:43:a9:a3:d7:1f: 4a:26:3e:b9:21:2e:e1:99:ba:81:e6:af:ee:be:25: b7:d1:0c:db:cd:54:ae:4b:24:69:02:dc:83:5e:16: 8b:e1:b0:22:a3:09:40:4a:a4:40:34:18:e6:ad:ba: 5c:e9:e4:16:e8:2e:0f:68:23:89:65:66:e0:70:cf: 71:ac:18:a8:80:ed:c4:9f:14:c5:48:be:15:13:a3: 91:11:6b:c1:a6:61:ee:00:3b:a4:e6:a6:aa:6d:47: 38:62:4a:fa:10:4a:9b:16:8c:c3:7c:6c:3e:21:10: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:23:13:EA:49:9D:D4:AA:BD:ED:38:2A:A5:38:2B:3E:F1:8A:C4 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f0:e8:23:fc:82:c0:1e:64:a4:7d:63:3b:f8:be:ba:c0:63: 38:f0:54:a6:4f:9f:5f:59:6a:e0:41:54:b4:96:96:4b:26:1d: ef:f1:54:a4:b2:4b:f9:fc:b8:7c:ab:68:3c:50:00:a0:e5:2b: 31:3c:20:52:75:d7:e4:7d:2c:4c:aa:0d:4a:fd:66:77:02:4a: 50:b8:b9:9d:89:c0:cd:0c:04:23:dc:86:9c:67:df:cf:50:2c: eb:1a:f8:b2:14:be:af:fa:c7:40:1e:ea:49:5c:17:29:6e:6e: c3:35:47:79:04:17:1a:87:93:1d:8a:7c:45:3d:93:18:3e:e4: a1:1a:d1:2f:ea:ea:13:e9:cb:a4:7f:c8:ad:76:30:38:02:b8: ce:30:64:ac:75:ab:50:f5:ae:b4:7c:97:18:dd:52:05:71:f0: 43:89:ea:d4:c9:dd:0d:e7:51:4d:56:f1:9e:3a:0f:dd:8a:51: 27:19:ac:a1:28:0b:ba:ee:57:f4:2d:ab:da:e9:15:87:a2:f0: 49:fb:46:c6:2b:b8:a5:01:de:16:c6:8f:f8:1b:b4:89:93:94: d3:9a:c2:3b:9e:89:e9:66:63:04:3e:93:2d:35:5d:db:58:42: ee:31:b6:c0:9b:11:65:96:ad:86:ee:ca:bc:75:6d:1e:58:73: e2:cb:a2:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjQwNTE4MTQzNTAyWhcNMjQwNTI1MTQzNTAyWjAYMRYwFAYD VQQDEw02NjQ4YmM5Ni0zYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFs4whzmo8XT5PvA25M8WaEzSgNrIIK+EgpyeBzEHrN3X5RkWharuei1RtVb +A4AhMxZwiuXTEGnrAINAI3WdrmK5IFR0UyinWiG+zGkPJAjPoebW/OxuX6xI8gv /FK7bvSrsFLlKGrvZlvhmIGDXN7NzeWw5ROs2pXX50dya51E+PMcoyeBrtgJQH20 sb5oQ6mj1x9KJj65IS7hmbqB5q/uviW30QzbzVSuSyRpAtyDXhaL4bAiowlASqRA NBjmrbpc6eQW6C4PaCOJZWbgcM9xrBiogO3EnxTFSL4VE6OREWvBpmHuADuk5qaq bUc4Ykr6EEqbFozDfGw+IRB8hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4bIxPq SZ3Uqr3tOCqlOCs+8YrEMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy8Ogj/ILAHmSkfWM7+L66wGM48FSmT59fWWrgQVS0lpZLJh3v8VSk skv5/Lh8q2g8UACg5SsxPCBSddfkfSxMqg1K/WZ3AkpQuLmdicDNDAQj3IacZ9/P UCzrGviyFL6v+sdAHupJXBcpbm7DNUd5BBcah5MdinxFPZMYPuShGtEv6uoT6cuk f8itdjA4ArjOMGSsdatQ9a60fJcY3VIFcfBDierUyd0N51FNVvGeOg/dilEnGayh KAu67lf0Lava6RWHovBJ+0bGK7ilAd4Wxo/4G7SJk5TTmsI7nonpZmMEPpMtNV3b WELuMbbAmxFllq2G7sq8dW0eWHPiy6Ju -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org