$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: JbhsFhKuAxAK9V89EuesH12WjWDrqGCuJqO14wpRFVM= Subject key identifier: 24:73:B7:E4:1D:8B:9E:23:8D:B1:26:80:26:76:36:7D:C9:08:5F:24 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: DB Signing time: Sun 19 May 2024 06:44:18 +0000 Manifest this update: Sun 19 May 2024 06:44:17 +0000 Manifest next update: Sun 26 May 2024 06:44:17 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: vsOSYJzhpcyfardQAtUS6/m4oRSsElBY28uvuw3LrXA=) 2: DB617778C58B11EEBD4E144DC4F9AE02.roa (hash: VdSR6Z2Wqy4AZ8bo0b/MEDIzSHWpvVsZQSFbxuz/eqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: May 19 06:44:17 2024 GMT Not After : May 26 06:44:17 2024 GMT Subject: CN=66499fc1-3609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:d6:51:c3:3a:fe:05:f3:1c:b1:a1:8f:16: aa:3e:ae:e5:5c:bc:39:a4:91:f8:bf:d6:32:62:67: b6:4e:de:77:f0:f5:8e:53:5e:5c:02:81:94:f3:74: 64:7d:68:a1:76:16:ab:df:f4:ec:c8:28:1a:f4:ec: bc:07:fd:bc:5e:9b:76:ed:03:37:3f:3d:aa:60:d3: 25:15:51:1f:64:1a:77:2b:d9:35:c3:ee:13:97:75: a5:a9:60:75:fd:8f:26:47:4d:fd:a0:d3:ea:9e:89: db:b9:83:fe:9d:f3:93:c8:dc:43:b6:16:53:dc:7d: c5:09:92:13:f7:ec:97:22:8c:39:5f:b6:66:3e:d7: 55:08:86:2d:ef:13:bd:53:7e:9b:e3:98:00:44:6f: af:bf:75:c5:c8:55:0f:56:a8:f8:ed:0a:47:1e:77: 85:dd:db:bc:ba:e6:2d:47:98:0f:48:cb:35:db:b0: 99:67:b4:82:f9:4d:a7:7e:53:9c:67:60:b8:f5:eb: 1e:1c:98:aa:29:2b:9f:2c:c0:8d:c0:4f:12:11:f8: c1:19:a6:2f:c2:1f:68:dc:8b:ea:f1:84:ac:8b:68: 67:03:66:be:ff:13:4e:e2:2e:a7:99:4a:1f:b7:c6: 0d:18:dd:23:bb:2c:52:f1:ff:a9:0a:97:62:9b:2f: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:B7:E4:1D:8B:9E:23:8D:B1:26:80:26:76:36:7D:C9:08:5F:24 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:dd:f7:cf:97:aa:5f:5c:c6:18:45:17:ce:cb:aa:45:71:92: d1:44:51:d1:69:38:97:05:ba:d3:76:fe:0e:11:06:39:5d:d6: 68:d9:57:0c:9f:3d:eb:10:06:69:95:52:e2:aa:cb:92:31:a4: 2e:df:d6:cb:3c:05:28:41:65:7a:c9:6e:9a:65:c0:d6:d4:a4: f7:74:87:2d:ce:a8:25:64:fb:00:78:00:ef:33:d7:ed:f1:53: 19:70:3a:e6:8e:61:be:af:3c:2d:72:35:08:a8:05:d3:4e:db: 5f:4b:39:59:16:6b:89:a9:85:67:64:fb:e0:05:cc:de:74:14: 50:c5:b9:5f:21:2a:39:e0:c7:d3:e1:4c:f9:2a:68:13:d3:a6: c7:b9:05:1b:79:70:b0:45:c7:9a:6e:73:a5:79:30:a2:bd:79: e3:60:d2:d3:46:d1:76:49:03:d2:74:76:f1:35:96:13:3b:9b: 88:77:80:5b:1f:89:61:9b:8d:81:48:2b:6b:41:e0:86:e7:8f: 59:ed:13:64:8e:1e:58:aa:3e:c1:38:59:27:94:1d:d5:c1:e3: ca:16:79:19:bb:64:1b:2e:fd:ad:7b:e3:f3:f4:19:61:7b:93: 87:dc:32:18:9c:1c:d5:c4:24:bf:4d:88:26:46:46:e7:12:f9: 6b:44:a2:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjNFRDExMC8GA1UEBRMoM0E3QTM3RkJCQTQ5QzQ2OUFEQUI1MjY2NDU2QzlBNDVG MkNGQzE4ODAeFw0yNDA1MTkwNjQ0MTdaFw0yNDA1MjYwNjQ0MTdaMBgxFjAUBgNV BAMTDTY2NDk5ZmMxLTM2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDILdZRwzr+BfMcsaGPFqo+ruVcvDmkkfi/1jJiZ7ZO3nfw9Y5TXlwCgZTzdGR9 aKF2Fqvf9OzIKBr07LwH/bxem3btAzc/Papg0yUVUR9kGncr2TXD7hOXdaWpYHX9 jyZHTf2g0+qeidu5g/6d85PI3EO2FlPcfcUJkhP37JcijDlftmY+11UIhi3vE71T fpvjmABEb6+/dcXIVQ9WqPjtCkced4Xd27y65i1HmA9IyzXbsJlntIL5Tad+U5xn YLj16x4cmKopK58swI3ATxIR+MEZpi/CH2jci+rxhKyLaGcDZr7/E07iLqeZSh+3 xg0Y3SO7LFLx/6kKl2KbL3+9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJHO35B2L niONsSaAJnY2fckIXyQwHwYDVR0jBBgwFoAUOno3+7pJxGmtq1JmRWyaRfLPwYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2M0VEL0I3NkUwNjYwMUQ3 QTExRUVBRDlGOEUwQ0M0RjlBRTAyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT25vMy03cEp4R210cTFKbVJXeWFSZkxQd1lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 M0VEL0I3NkUwNjYwMUQ3QTExRUVBRDlGOEUwQ0M0RjlBRTAyL09ubzMtN3BKeEdt dHExSm1SV3lhUmZMUHdZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjd98+Xql9cxhhFF87LqkVxktFEUdFpOJcFutN2/g4RBjld1mjZVwyf PesQBmmVUuKqy5IxpC7f1ss8BShBZXrJbpplwNbUpPd0hy3OqCVk+wB4AO8z1+3x UxlwOuaOYb6vPC1yNQioBdNO219LOVkWa4mphWdk++AFzN50FFDFuV8hKjngx9Ph TPkqaBPTpse5BRt5cLBFx5puc6V5MKK9eeNg0tNG0XZJA9J0dvE1lhM7m4h3gFsf iWGbjYFIK2tB4Ibnj1ntE2SOHliqPsE4WSeUHdXB48oWeRm7ZBsu/a174/P0GWF7 k4fcMhicHNXEJL9NiCZGRucS+WtEooA= -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org