$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: xI20unGay6kFZ1qSlunY5Tl3UBVaI/9xa8JVRd3GVS8= Subject key identifier: 7D:8B:16:AB:29:82:34:F1:D6:FF:63:B3:62:EB:AD:17:7D:FF:B7:FA Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 235B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2348 Signing time: Sat 18 May 2024 16:08:25 +0000 Manifest this update: Sat 18 May 2024 16:08:24 +0000 Manifest next update: Sat 25 May 2024 16:08:24 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: gk2hDYLmL7V0BjVpeF7Xn0ApJx3Vj1pqJ+qyLjx94t4=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: 4loc4urPVQS5L/hzKU13Pxjs5//WgdnLbBjxon1o65M=) 3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: Mt0fQZWhWQhdOjSfwp4ovls7hDEd5rk64993ERty+U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9051 (0x235b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: May 18 16:08:24 2024 GMT Not After : May 25 16:08:24 2024 GMT Subject: CN=6648d279-cf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:48:64:8c:79:f9:9e:49:5c:82:9d:50:da: ff:8c:69:d3:43:17:ef:75:1a:90:84:7b:f8:79:b4: d9:49:a6:46:7c:28:c0:93:bc:c0:27:d1:b8:9f:c7: 12:d8:60:34:ab:7c:1e:c0:9c:0e:28:f0:46:b3:5d: 24:f6:c2:60:89:fa:01:eb:7a:2a:37:3b:58:89:f2: 3c:d4:9f:5c:22:43:17:e6:72:a0:5b:ce:49:78:5f: 58:dc:fd:32:98:9f:13:bb:f3:0f:72:36:f7:84:33: 09:b1:ee:d2:c3:60:c7:ad:e5:5e:76:d0:01:92:31: e5:d7:77:ae:38:8e:1f:6b:66:71:3d:77:51:af:6a: 98:55:54:3f:9d:96:61:42:23:ba:11:a1:83:23:06: aa:4a:9f:1f:69:fa:32:ed:a9:06:c8:31:da:da:64: e9:a2:56:17:41:16:cf:07:32:2f:89:aa:95:7d:cf: f8:b2:ff:77:8a:70:18:91:0f:c7:33:39:7d:10:9e: 29:fa:db:1d:5b:1a:50:1f:fa:2b:66:86:ae:f3:3c: 8e:40:ad:21:dc:b2:8b:a9:79:35:a3:0c:36:d5:58: 22:1c:f2:63:98:ae:d5:59:72:38:80:63:b6:e5:e1: d1:99:65:c3:aa:01:02:38:6e:57:b5:2e:8e:37:b4: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8B:16:AB:29:82:34:F1:D6:FF:63:B3:62:EB:AD:17:7D:FF:B7:FA X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:81:a5:68:41:e2:10:d0:81:c1:8a:e4:92:8a:ef:7f:0a:c8: 7b:17:2d:9b:e2:2a:95:a0:19:14:2f:6f:b0:0c:99:bb:95:a9: 95:84:eb:4d:0f:36:c5:2c:c7:ce:0c:86:99:f9:a8:0c:27:74: ce:56:12:cb:66:7e:c2:fb:c4:43:c3:e1:32:88:31:d3:f1:b3: f0:15:de:c3:a1:5a:63:1b:82:63:c9:13:fa:e9:41:96:02:23: fc:ef:83:47:05:4c:3b:78:7f:bd:c7:05:ee:7f:f2:f9:2a:1d: f2:1f:46:dc:e6:06:a7:6b:ed:4d:fc:37:10:29:25:ac:3d:04: de:be:95:a5:12:aa:9b:aa:d2:7c:8d:02:9e:a3:96:db:fa:fe: 79:68:ad:45:19:d9:04:17:47:a7:a9:19:16:81:a4:07:18:c8: 06:b2:f2:c8:d6:41:49:85:1e:63:2f:7e:1a:f8:79:90:12:86: 63:d0:df:b3:8d:44:f1:51:77:58:48:99:d0:f7:4f:1d:ab:1c: 6b:34:31:e6:bf:fb:5e:91:5f:38:4a:24:27:56:9c:1a:c1:5a: 0c:67:96:db:4e:bf:4a:5f:75:03:6e:6c:12:f5:70:cb:20:9c: 99:8f:a2:a6:76:bb:a5:71:d7:1f:45:a5:8d:fa:c4:08:5e:48: f9:27:28:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjQwNTE4MTYwODI0WhcNMjQwNTI1MTYwODI0WjAYMRYwFAYD VQQDEw02NjQ4ZDI3OS1jZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrpIZIx5+Z5JXIKdUNr/jGnTQxfvdRqQhHv4ebTZSaZGfCjAk7zAJ9G4n8cS 2GA0q3wewJwOKPBGs10k9sJgifoB63oqNztYifI81J9cIkMX5nKgW85JeF9Y3P0y mJ8Tu/MPcjb3hDMJse7Sw2DHreVedtABkjHl13euOI4fa2ZxPXdRr2qYVVQ/nZZh QiO6EaGDIwaqSp8fafoy7akGyDHa2mTpolYXQRbPBzIviaqVfc/4sv93inAYkQ/H Mzl9EJ4p+tsdWxpQH/orZoau8zyOQK0h3LKLqXk1oww21VgiHPJjmK7VWXI4gGO2 5eHRmWXDqgECOG5XtS6ON7TZtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2LFqsp gjTx1v9js2LrrRd9/7f6MB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHgaVoQeIQ0IHBiuSSiu9/Csh7Fy2b4iqVoBkUL2+wDJm7lamVhOtN DzbFLMfODIaZ+agMJ3TOVhLLZn7C+8RDw+EyiDHT8bPwFd7DoVpjG4JjyRP66UGW AiP874NHBUw7eH+9xwXuf/L5Kh3yH0bc5gana+1N/DcQKSWsPQTevpWlEqqbqtJ8 jQKeo5bb+v55aK1FGdkEF0enqRkWgaQHGMgGsvLI1kFJhR5jL34a+HmQEoZj0N+z jUTxUXdYSJnQ908dqxxrNDHmv/tekV84SiQnVpwawVoMZ5bbTr9KX3UDbmwS9XDL IJyZj6KmdrulcdcfRaWN+sQIXkj5Jyi/ -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org