$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: ka+SnhNf5n5XLtMfGBsEQL50ju9VYzVb1cSkqwZNgJU= Subject key identifier: 85:CF:DF:2D:7E:19:86:F5:BD:34:EC:C7:DE:9E:44:15:BF:BD:B6:54 Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 232E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 5E84 Signing time: Fri 31 May 2024 14:15:22 +0000 Manifest this update: Fri 31 May 2024 14:15:21 +0000 Manifest next update: Fri 07 Jun 2024 14:15:21 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: ywZySDOrfHJz832e7WUHnRK2YgB2EjM9MYfODfGd/I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9006 (0x232e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: May 31 14:15:21 2024 GMT Not After : Jun 7 14:15:21 2024 GMT Subject: CN=6659db7a-8b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:44:da:d5:34:08:b4:04:c7:04:fd:7e:4d: 4c:0f:92:56:98:67:4c:43:2e:02:23:62:ab:ff:41: c8:7a:b3:c5:08:e4:86:96:be:d3:e9:4a:40:b2:a8: 65:a9:68:3d:6b:5b:c6:f9:fb:34:65:2a:dc:36:80: 07:16:97:e0:35:28:4b:9e:8f:b7:d7:a9:be:b4:89: aa:0e:5f:0e:10:de:f1:e3:3e:80:31:e9:d4:4a:12: 41:ab:71:c2:8f:ac:ff:85:7d:09:4f:8e:08:4d:d0: 05:23:6f:56:8b:93:16:e6:cc:3a:93:e5:09:62:38: 3e:61:eb:f5:2b:5d:12:4f:25:c5:53:6f:25:d2:14: 6d:d0:a9:ec:5a:7e:1c:8e:0d:f4:70:0b:6f:59:ca: cc:47:44:47:28:e9:11:48:1d:48:1d:f1:03:4f:d3: 49:65:f5:de:f3:09:97:4c:fe:be:14:74:58:1b:5f: e9:d7:27:c0:36:e5:a9:2d:1b:c4:b1:74:b4:06:15: 74:da:6d:53:4f:03:73:8b:9f:ad:41:67:dd:80:c0: be:19:24:b2:e5:15:57:ca:1b:6f:7c:03:97:54:dc: 9b:93:d7:e8:d4:15:67:67:98:e9:09:28:9e:b6:a9: d2:cd:26:28:7c:c4:c6:f9:56:dd:fc:da:3b:76:89: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CF:DF:2D:7E:19:86:F5:BD:34:EC:C7:DE:9E:44:15:BF:BD:B6:54 X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:50:e4:39:95:ac:63:d0:ed:27:3e:47:75:bf:5e:c6:6e:93: 39:e2:eb:7e:76:d0:59:c7:cb:3b:3d:63:85:5e:0b:a1:85:16: 2e:86:d3:f2:f7:59:ad:5b:4a:31:40:f8:18:6e:33:f1:b7:32: 44:97:29:05:2d:d1:6a:f3:ec:41:68:8f:42:08:b6:bd:ca:64: 27:29:aa:65:bd:d3:5e:06:51:c0:10:63:10:9f:0a:3a:4e:86: f1:14:ed:7a:e9:b8:f6:a4:b0:cd:f6:1f:13:64:6b:12:8e:06: 01:ab:cd:79:47:69:1c:d2:d7:98:ba:4f:b8:9a:5d:ff:33:9f: 01:b3:c6:70:4e:d2:e0:01:46:74:8f:ba:08:ea:99:54:f1:3a: df:88:24:52:8a:99:85:9e:a9:b1:ab:28:2e:63:cb:6a:e4:bb: bf:68:71:ce:ae:d6:6d:9a:e2:9d:41:e3:f3:0b:23:7a:56:1f: ee:fa:d6:64:25:76:37:57:49:73:61:95:91:4b:c1:f5:03:b6: ac:96:46:7f:14:54:27:6e:cb:e9:88:6d:5e:91:05:08:d3:51: 06:be:af:47:af:fa:90:55:8a:9d:49:90:07:52:59:59:f8:40: e0:bc:5e:ae:90:91:af:ee:0c:19:35:06:71:45:0c:78:cd:87: e5:22:c3:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjQwNTMxMTQxNTIxWhcNMjQwNjA3MTQxNTIxWjAYMRYwFAYD VQQDEw02NjU5ZGI3YS04YjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b1E2tU0CLQExwT9fk1MD5JWmGdMQy4CI2Kr/0HIerPFCOSGlr7T6UpAsqhl qWg9a1vG+fs0ZSrcNoAHFpfgNShLno+316m+tImqDl8OEN7x4z6AMenUShJBq3HC j6z/hX0JT44ITdAFI29Wi5MW5sw6k+UJYjg+Yev1K10STyXFU28l0hRt0KnsWn4c jg30cAtvWcrMR0RHKOkRSB1IHfEDT9NJZfXe8wmXTP6+FHRYG1/p1yfANuWpLRvE sXS0BhV02m1TTwNzi5+tQWfdgMC+GSSy5RVXyhtvfAOXVNybk9fo1BVnZ5jpCSie tqnSzSYofMTG+Vbd/No7domGWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXP3y1+ GYb1vTTsx96eRBW/vbZUMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwUOQ5laxj0O0nPkd1v17GbpM54ut+dtBZx8s7PWOFXguhhRYuhtPy 91mtW0oxQPgYbjPxtzJElykFLdFq8+xBaI9CCLa9ymQnKaplvdNeBlHAEGMQnwo6 TobxFO166bj2pLDN9h8TZGsSjgYBq815R2kc0teYuk+4ml3/M58Bs8ZwTtLgAUZ0 j7oI6plU8TrfiCRSipmFnqmxqyguY8tq5Lu/aHHOrtZtmuKdQePzCyN6Vh/u+tZk JXY3V0lzYZWRS8H1A7aslkZ/FFQnbsvpiG1ekQUI01EGvq9Hr/qQVYqdSZAHUllZ +EDgvF6ukJGv7gwZNQZxRQx4zYflIsMd -----END CERTIFICATE-----Generated at Fri May 31 15:08:32 2024 by rpki-client on console-fra.rpki-client.org