$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json) Hash identifier: O42FPpBaJk9HYUcx0rTCYy6sAMtaeewAedRQnxYXTsA= Subject key identifier: 1B:CE:DA:2F:CC:4C:26:86:2E:26:7E:47:FB:E8:03:6B:AC:1D:EE:19 Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft Manifest number: 0336 Signing time: Sun 19 May 2024 02:59:31 +0000 Manifest this update: Sun 19 May 2024 02:59:30 +0000 Manifest next update: Sun 26 May 2024 02:59:30 +0000 Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: ql4A7Db/AXikS7rqtQQVoepxB9BpRpfyw7YZXl48x2k=) 2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: KW8CZ9txs3YwrvV7wO0SOgdBrRNOn4AvsdkMNqvWRYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B Validity Not Before: May 19 02:59:30 2024 GMT Not After : May 26 02:59:30 2024 GMT Subject: CN=66496b13-b0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:d6:f1:06:ff:04:44:2a:29:ec:53:c0:e7: 7f:0d:f3:ad:9c:a9:55:55:d4:48:95:b2:ab:3d:88: 43:5c:c0:e7:4a:9d:e1:c4:8a:3d:10:be:8e:f5:42: e0:75:e1:1b:6f:75:d7:19:bb:f5:10:33:97:6d:05: 1a:43:2a:94:0d:2a:3e:01:f6:77:c5:83:15:24:dc: c4:f0:0e:80:31:b0:f6:0a:61:4a:0d:71:36:9e:18: b9:0a:00:f3:38:55:40:2c:1c:50:cf:50:2e:b5:a9: 66:3c:46:25:4b:34:b4:46:36:3c:fa:24:93:f9:db: 05:62:93:b6:37:64:50:7b:a1:95:95:ef:dd:73:2b: 52:c2:09:6b:67:d7:60:9b:05:e2:70:49:2c:f4:ee: b5:9d:18:38:24:b6:c8:71:f2:f2:75:82:9e:b9:78: 0b:ad:ea:75:7e:73:a4:9c:40:23:8d:7c:8b:53:da: c7:06:5d:ae:98:6d:3a:94:d7:80:81:17:5b:eb:92: 4c:b4:3b:3e:72:0f:a1:74:a5:9a:8c:95:a9:fe:cc: 78:d1:29:71:2d:2c:62:3b:fc:8a:e7:f5:07:d4:bf: 29:2f:74:fe:48:1f:7d:54:08:e4:63:60:10:78:1c: a6:e3:1b:86:c9:b6:9e:77:a6:b1:c0:fa:24:e4:28: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:DA:2F:CC:4C:26:86:2E:26:7E:47:FB:E8:03:6B:AC:1D:EE:19 X509v3 Authority Key Identifier: keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:92:58:22:63:51:4b:d8:12:96:fd:12:90:dc:db:ed:d4:f4: 77:de:eb:ae:83:49:ac:a4:41:9a:64:01:15:95:c5:cd:ea:f9: eb:83:3d:23:34:cc:be:48:4b:62:88:97:7b:3b:2d:32:68:65: 52:a2:ec:30:9c:40:cf:8b:e0:f5:4a:7c:1d:26:09:74:4d:6d: b1:da:bf:d7:e6:b6:6d:a9:51:d4:cb:8e:50:3b:7f:6d:8b:f3: 2b:63:62:21:a6:88:60:9d:60:b2:54:ce:d2:e1:45:c7:11:1b: 39:a4:fb:c2:6e:01:be:a1:c2:d4:1a:cf:73:a8:36:b6:d4:10: 88:82:02:52:01:91:bb:92:bb:fe:96:8e:e6:bb:ef:b4:45:d8: 81:17:58:4b:eb:58:10:06:ff:3a:09:d0:94:c7:23:5e:ae:ce: ce:61:8f:cd:42:87:b6:c5:0a:14:0d:a6:b6:ad:f9:3f:2e:98: dc:2c:32:af:4d:f9:43:a5:bd:b0:09:ba:70:8a:bb:5e:b9:c3: 34:86:cb:8c:1f:9f:10:fd:c1:fc:b6:09:17:3b:c0:de:30:35: 01:2a:28:e1:01:c0:f3:bd:df:f2:76:8e:39:e1:a2:0e:dd:d9: fd:91:e3:d6:65:09:d9:c5:fc:b3:d1:8f:20:a4:75:e7:24:a9: cf:d3:76:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMkQxMTAvBgNVBAUTKDNBNjhBMjIyQzJDMENGNDE0MzBDMDk2OEQyMzA5QUE4 OTNDNzRBM0IwHhcNMjQwNTE5MDI1OTMwWhcNMjQwNTI2MDI1OTMwWjAYMRYwFAYD VQQDEw02NjQ5NmIxMy1iMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cLW8Qb/BEQqKexTwOd/DfOtnKlVVdRIlbKrPYhDXMDnSp3hxIo9EL6O9ULg deEbb3XXGbv1EDOXbQUaQyqUDSo+AfZ3xYMVJNzE8A6AMbD2CmFKDXE2nhi5CgDz OFVALBxQz1AutalmPEYlSzS0RjY8+iST+dsFYpO2N2RQe6GVle/dcytSwglrZ9dg mwXicEks9O61nRg4JLbIcfLydYKeuXgLrep1fnOknEAjjXyLU9rHBl2umG06lNeA gRdb65JMtDs+cg+hdKWajJWp/sx40SlxLSxiO/yK5/UH1L8pL3T+SB99VAjkY2AQ eBym4xuGybaed6axwPok5CiIYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvO2i/M TCaGLiZ+R/voA2usHe4ZMB8GA1UdIwQYMBaAFDpooiLCwM9BQwwJaNIwmqiTx0o7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMyRC84NkZEMTM4ODc5 MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXowRkREQWxvMGpDYXFKUEhT anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09taWlJc0xBejBGRERBbG8wakNhcUpQSFNqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMyRC84NkZEMTM4ODc5MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXow RkREQWxvMGpDYXFKUEhTanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6klgiY1FL2BKW/RKQ3Nvt1PR33uuug0mspEGaZAEVlcXN6vnrgz0j NMy+SEtiiJd7Oy0yaGVSouwwnEDPi+D1SnwdJgl0TW2x2r/X5rZtqVHUy45QO39t i/MrY2IhpohgnWCyVM7S4UXHERs5pPvCbgG+ocLUGs9zqDa21BCIggJSAZG7krv+ lo7mu++0RdiBF1hL61gQBv86CdCUxyNers7OYY/NQoe2xQoUDaa2rfk/LpjcLDKv TflDpb2wCbpwirteucM0hsuMH58Q/cH8tgkXO8DeMDUBKijhAcDzvd/ydo454aIO 3dn9kePWZQnZxfyz0Y8gpHXnJKnP03YN -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org