$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft File: OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft (raw, json) Hash identifier: wCLY4y/+D7RUMLHdmHQLX7lWHnvo4Rz4jzrpSY8KvlU= Subject key identifier: 04:03:93:2A:C5:DF:B8:07:6B:B2:E7:2D:18:8C:C5:9D:64:2C:EB:25 Authority key identifier: 3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62 Certificate issuer: /CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft Manifest number: 5E Signing time: Sun 19 May 2024 07:42:59 +0000 Manifest this update: Sun 19 May 2024 07:42:59 +0000 Manifest next update: Sun 26 May 2024 07:42:58 +0000 Files and hashes: 1: OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl (hash: MmjmO1gNu5rk+9Yn+qcihQOfle6AQCrm4i47TJCLlK0=) 2: 67CB8C7287E711EEAC6C0B48C4F9AE02.roa (hash: Ja7H6lUYEZzWWxdhPag7anFzIpbPVIzCTyw27glKttQ=) 3: 35B00252FD5F11EEB0C31133C4F9AE02.roa (hash: UC3PBnBpSQH+qqFq6I9BD5vYrb8V0ct3OvMYwkGggMo=) 4: 675EE9DC87E711EEAC6C0B48C4F9AE02.roa (hash: FHM4CrQwfj0OG9hZmIW9/S1AWP37xh5i4F8wos+JZ3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62 Validity Not Before: May 19 07:42:59 2024 GMT Not After : May 26 07:42:58 2024 GMT Subject: CN=6649ad83-35ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:61:51:a5:7a:3b:65:1b:65:f7:f1:29:11: 08:e2:74:38:ae:31:01:25:75:4c:7c:60:bb:4c:76: 94:66:46:3e:1b:10:61:ff:b8:9c:39:75:b2:98:da: bb:7d:ec:68:cf:27:2e:64:48:c7:f0:6a:17:4e:b3: 56:da:0f:64:99:39:ca:40:c5:bf:a0:2d:c7:fc:a2: c6:75:22:22:00:d3:b0:db:23:b6:eb:1d:bc:52:8a: 59:48:d8:ca:29:dd:da:c2:f8:f3:3a:59:21:01:88: 82:cd:0a:1e:8c:82:4e:96:74:70:8f:c3:44:29:9c: 43:33:61:d5:8d:0b:f5:01:cb:f7:27:26:49:32:fe: d3:ad:b8:88:a6:ef:41:7e:a7:ef:cd:e7:1d:89:f9: 38:e8:18:88:bb:da:b2:b4:49:24:19:11:da:7c:f1: 8c:da:89:5d:4f:f7:50:a7:c9:cc:3c:9b:c2:82:a5: 7d:25:ac:ff:01:44:fe:9a:df:f0:31:a8:e0:55:4e: bc:cf:7c:6d:29:39:17:2b:03:44:2f:74:3c:a6:00: 9d:44:ed:0d:9d:f0:63:9f:e6:8d:ee:54:79:7f:56: b9:94:a3:44:66:e7:e0:72:e9:82:ee:09:01:c1:4e: 97:a6:f3:fd:4d:4e:0b:cb:2b:d8:00:9d:21:eb:5f: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:03:93:2A:C5:DF:B8:07:6B:B2:E7:2D:18:8C:C5:9D:64:2C:EB:25 X509v3 Authority Key Identifier: keyid:3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:83:bd:d3:b1:9d:4c:30:86:05:2f:bd:a2:e5:a7:e7:a8:f6: c2:9c:41:77:b1:96:70:42:48:ae:cc:14:33:32:c5:9c:da:b9: 4b:7f:bd:6a:33:7f:be:99:42:fc:3c:63:1d:c5:71:f9:26:19: 21:4f:d2:a9:37:33:64:ab:b4:45:94:68:de:80:81:4d:80:6c: b6:9c:5d:c0:4e:53:aa:8c:bb:25:e9:38:6a:a8:48:07:aa:e6: 49:e4:79:b1:a9:37:33:41:da:4a:55:33:dd:02:b1:e2:b5:72: 81:38:4c:49:f9:a5:f6:ff:b2:c0:3a:0a:06:0b:4e:15:d3:08: 11:95:41:a3:35:95:f8:fe:26:b3:0a:6e:3f:f9:b8:f2:a2:16: c8:5b:5d:a5:68:e7:04:59:bc:5f:8e:01:d4:10:34:c6:52:d7: 38:75:26:f5:6e:a3:ca:f1:54:27:17:b0:89:d6:aa:1d:cb:d3: ef:7f:6c:ef:b6:af:28:a8:c1:9d:33:83:6d:b9:8c:0e:7f:3b: a7:b2:eb:45:1b:62:44:e6:06:13:55:2e:f5:16:29:46:a2:fb: b2:47:5a:7d:8f:d1:f3:49:70:ab:f4:1f:97:3b:28:fb:87:f7: bd:94:a9:2d:81:6a:6f:e6:bc:e3:92:7e:4b:f0:e1:4c:4d:1b: 0e:e6:23:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzE4QTExMC8GA1UEBRMoM0ExNTQzQkRGMzc3MkE5OEQyOTRFQjkwMDIzODAzRERE REYxMUU2MjAeFw0yNDA1MTkwNzQyNTlaFw0yNDA1MjYwNzQyNThaMBgxFjAUBgNV BAMTDTY2NDlhZDgzLTM1YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClY2FRpXo7ZRtl9/EpEQjidDiuMQEldUx8YLtMdpRmRj4bEGH/uJw5dbKY2rt9 7GjPJy5kSMfwahdOs1baD2SZOcpAxb+gLcf8osZ1IiIA07DbI7brHbxSillI2Mop 3drC+PM6WSEBiILNCh6Mgk6WdHCPw0QpnEMzYdWNC/UBy/cnJkky/tOtuIim70F+ p+/N5x2J+TjoGIi72rK0SSQZEdp88YzaiV1P91Cnycw8m8KCpX0lrP8BRP6a3/Ax qOBVTrzPfG0pORcrA0QvdDymAJ1E7Q2d8GOf5o3uVHl/VrmUo0Rm5+By6YLuCQHB Tpem8/1NTgvLK9gAnSHrXwp1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBAOTKsXf uAdrsuctGIzFnWQs6yUwHwYDVR0jBBgwFoAUOhVDvfN3KpjSlOuQAjgD3d3xHmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMThBL0VDRkYyQUY4ODdF NjExRUU5N0U2Qzc0NkM0RjlBRTAyL09oVkR2Zk4zS3BqU2xPdVFBamdEM2QzeEht SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT2hWRHZmTjNLcGpTbE91UUFqZ0QzZDN4SG1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz MThBL0VDRkYyQUY4ODdFNjExRUU5N0U2Qzc0NkM0RjlBRTAyL09oVkR2Zk4zS3Bq U2xPdVFBamdEM2QzeEhtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHyDvdOxnUwwhgUvvaLlp+eo9sKcQXexlnBCSK7MFDMyxZzauUt/vWoz f76ZQvw8Yx3FcfkmGSFP0qk3M2SrtEWUaN6AgU2AbLacXcBOU6qMuyXpOGqoSAeq 5knkebGpNzNB2kpVM90CseK1coE4TEn5pfb/ssA6CgYLThXTCBGVQaM1lfj+JrMK bj/5uPKiFshbXaVo5wRZvF+OAdQQNMZS1zh1JvVuo8rxVCcXsInWqh3L0+9/bO+2 ryiowZ0zg225jA5/O6ey60UbYkTmBhNVLvUWKUai+7JHWn2P0fNJcKv0H5c7KPuH 972UqS2Bam/mvOOSfkvw4UxNGw7mI50= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org