$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft File: OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json) Hash identifier: 1GiN3SZgGEvcqfYnu2Ei3MZSw22Hv0nZ5odzntXO1aA= Subject key identifier: AA:5C:5A:C3:F4:31:C7:D4:9F:05:13:82:C6:4A:49:41:67:44:35:E4 Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 Certificate issuer: /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft Manifest number: 9D Signing time: Sun 19 May 2024 07:00:25 +0000 Manifest this update: Sun 19 May 2024 07:00:24 +0000 Manifest next update: Sun 26 May 2024 07:00:24 +0000 Files and hashes: 1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: yKNb5iddYFRIq3vqyCnJJZn9iYfCOLw8VcHuuiBtEUk=) 2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: tde+vUJakIp3I6DilPG1SltVQgnZyzbbBDIV3qPw0lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Validity Not Before: May 19 07:00:24 2024 GMT Not After : May 26 07:00:24 2024 GMT Subject: CN=6649a389-4bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:95:39:80:d4:ff:e2:d1:a7:18:f8:41:91: 3d:46:66:f6:4d:73:22:d8:f5:6d:3e:2b:00:24:59: 97:95:20:0f:07:5f:c0:d7:e0:19:3e:7f:13:8e:29: 2a:a3:84:7c:cc:d6:fa:69:8f:9f:f2:46:52:88:17: 2d:2c:16:68:fa:e1:0d:f1:c5:ad:8b:73:c1:1c:d0: bb:df:5b:ec:f4:f3:b6:f6:bc:94:7d:3f:b5:6d:90: ac:8d:36:74:3c:79:e9:47:fc:93:6f:37:71:86:99: 39:4e:1a:8e:83:fb:29:94:60:7f:07:7c:f6:aa:54: ef:e4:41:13:28:2e:81:46:09:6d:0c:44:4d:5b:97: ec:0e:c2:f0:00:65:af:e6:a3:70:6d:d5:44:66:04: 07:b4:1e:9d:46:ef:78:e8:8f:4d:64:7d:4a:e3:f7: 6f:cc:18:d2:fb:c5:0b:96:58:49:13:47:83:6e:9c: 4f:dd:d7:0a:8a:44:32:7f:ff:2e:7c:d9:e0:ad:ab: eb:d3:40:d9:54:00:27:d7:2b:70:f7:9d:2a:a6:dc: 74:cb:0e:a8:0d:fe:1a:6f:bf:1c:06:66:b7:1a:5d: 37:ba:af:98:ef:0f:cd:73:28:04:7c:85:30:d3:a6: 33:1f:ec:b9:f0:71:26:cd:e6:01:c3:d6:d5:98:92: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:5A:C3:F4:31:C7:D4:9F:05:13:82:C6:4A:49:41:67:44:35:E4 X509v3 Authority Key Identifier: keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:93:6b:ca:32:1d:9d:64:9e:16:5b:49:9b:10:b6:a7:b1:d8: 5d:5d:a0:c6:45:be:0a:53:c1:8f:09:fe:87:6a:a9:07:00:0f: 15:eb:12:a2:70:6f:cb:44:64:90:18:8f:e4:dd:70:3d:80:f4: c4:da:7d:39:eb:5d:7e:ee:7d:59:ec:63:4d:bf:34:ba:03:ac: c3:25:de:af:71:73:13:2b:fa:52:a1:0e:97:ec:8a:d2:62:7f: c1:c2:e5:aa:32:a1:99:58:d6:22:4c:f2:23:4e:88:20:5e:54: 50:c1:ce:2c:35:6e:b0:8e:f9:83:87:a8:96:54:86:e9:f9:84: 1a:73:c9:92:a2:c8:c7:76:98:6c:40:ab:a2:51:86:4f:2a:13: 5d:ed:c0:12:e1:36:5e:51:02:59:1e:8c:7b:a3:16:8e:36:5c: e1:15:7e:5e:03:2f:5b:fd:0c:f4:b4:f5:29:82:46:10:e9:3c: 65:12:1f:7b:f4:14:51:99:35:46:a9:06:3f:de:39:48:2e:1a: 4c:b1:84:ac:2b:56:76:0d:1f:90:d1:c4:5f:de:8c:5b:95:d2: af:74:cc:06:15:49:30:b9:69:b0:07:27:bb:07:e0:5e:e8:d4: 92:20:7b:b7:86:e2:a2:27:44:12:a3:a5:63:cd:bc:f3:1f:89: d5:db:8f:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE RDgyNEFDRTQwHhcNMjQwNTE5MDcwMDI0WhcNMjQwNTI2MDcwMDI0WjAYMRYwFAYD VQQDEw02NjQ5YTM4OS00YmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/6VOYDU/+LRpxj4QZE9Rmb2TXMi2PVtPisAJFmXlSAPB1/A1+AZPn8Tjikq o4R8zNb6aY+f8kZSiBctLBZo+uEN8cWti3PBHNC731vs9PO29ryUfT+1bZCsjTZ0 PHnpR/yTbzdxhpk5ThqOg/splGB/B3z2qlTv5EETKC6BRgltDERNW5fsDsLwAGWv 5qNwbdVEZgQHtB6dRu946I9NZH1K4/dvzBjS+8ULllhJE0eDbpxP3dcKikQyf/8u fNngravr00DZVAAn1ytw950qptx0yw6oDf4ab78cBma3Gl03uq+Y7w/NcygEfIUw 06YzH+y58HEmzeYBw9bVmJIgtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpcWsP0 McfUnwUTgsZKSUFnRDXkMB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjAwQS85RUEyQkI3RTNDRDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhG MlJ4bG5UWC1UeWJkZ2tyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGk2vKMh2dZJ4WW0mbELansdhdXaDGRb4KU8GPCf6HaqkHAA8V6xKi cG/LRGSQGI/k3XA9gPTE2n05611+7n1Z7GNNvzS6A6zDJd6vcXMTK/pSoQ6X7IrS Yn/BwuWqMqGZWNYiTPIjToggXlRQwc4sNW6wjvmDh6iWVIbp+YQac8mSosjHdphs QKuiUYZPKhNd7cAS4TZeUQJZHox7oxaONlzhFX5eAy9b/Qz0tPUpgkYQ6TxlEh97 9BRRmTVGqQY/3jlILhpMsYSsK1Z2DR+Q0cRf3oxbldKvdMwGFUkwuWmwBye7B+Be 6NSSIHu3huKiJ0QSo6VjzbzzH4nV249M -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org