$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: IjgdknykwyLakWzVnAWxZToRgJXpHj7XQUytk0QvFBQ= Subject key identifier: 08:25:B1:63:DD:AC:98:7F:C7:F4:11:4E:04:C4:F6:CA:54:2D:2D:AC Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0952 Signing time: Sat 18 May 2024 21:04:34 +0000 Manifest this update: Sat 18 May 2024 21:04:34 +0000 Manifest next update: Sat 25 May 2024 21:04:34 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: uHPuAMvaJjfYw5/inEFox0rytY/qvkgPhdSRy9mZwDU=) 2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: rK7keIoRH6aInuLu6dK+ZdnSUTlleXHZgfihoRVX/do=) 3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: IHiE5djC6jA8moe8rcJAAnUeGZgD++bx6K2nK7x1L2o=) 4: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: FV72IIPNnKaptJ6wsgdg9QRoiE8Fis6/GKNmve2u0+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: May 18 21:04:34 2024 GMT Not After : May 25 21:04:34 2024 GMT Subject: CN=664917e2-e1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:4d:74:86:a2:b8:14:f0:18:ec:d8:1d:03: 1b:20:24:c2:f1:bd:31:22:7e:5d:08:7d:5a:8e:b5: 59:ff:16:b4:d7:41:46:2d:47:37:e9:9c:a8:4f:d2: 9e:d1:7e:fe:da:eb:e3:29:cd:f4:99:cd:16:9a:7a: 0e:4c:79:41:6b:ef:05:7d:c3:31:43:07:a6:91:eb: 3e:dd:96:17:89:98:15:2b:85:98:fa:62:5f:62:b5: 63:53:11:c7:75:d8:0f:93:9e:4b:4d:bc:35:ab:93: 83:5b:6c:90:e2:dc:88:2c:ba:18:ea:95:96:a7:4d: 36:45:ec:10:07:d0:f8:66:d9:a6:52:89:76:09:64: 57:1b:44:8e:b7:8e:ca:8f:19:26:20:06:87:f2:d9: ee:7a:fb:46:d5:6d:24:a7:3f:1f:eb:5e:a9:4e:f7: 13:71:fa:81:d0:bb:34:65:25:ac:4b:a8:10:13:47: bb:6b:54:5e:89:83:f4:97:64:40:f4:5e:72:eb:07: 41:a0:69:59:67:db:30:38:2c:fc:f4:34:e3:15:c4: 10:fc:78:11:06:ee:93:11:84:f8:5c:04:1f:99:6a: 63:ab:17:d7:dd:1a:31:3b:f8:5b:8e:46:ca:4d:fe: 90:a7:51:62:8b:3c:0e:f1:76:c9:1f:aa:91:ed:38: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:B1:63:DD:AC:98:7F:C7:F4:11:4E:04:C4:F6:CA:54:2D:2D:AC X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:45:5d:1a:d2:e8:b2:a2:72:60:74:5e:32:20:d9:18:3f:6f: 6c:9c:15:f2:5b:18:23:b0:8b:d0:08:fb:3b:43:af:f8:f7:03: 53:50:88:6a:86:0c:19:8b:d2:31:40:a7:82:81:2c:3f:2d:0d: a8:c9:fa:28:df:c5:de:c9:f2:eb:e5:d0:da:f3:ef:21:cc:6b: 11:38:7b:28:92:e6:b0:b9:35:d8:0f:16:e0:18:09:25:ad:8b: 72:e8:98:69:7b:fd:6c:5c:da:d0:b7:41:34:9d:42:8b:d9:81: 38:91:3c:ac:54:10:90:51:b7:2a:ad:48:e2:5e:84:85:ca:40: b0:bc:5b:a9:13:3d:60:60:10:ba:a7:94:aa:10:a6:8a:f4:71: dd:bf:79:84:5b:4f:f8:b1:8e:8d:c4:04:d4:0e:e6:91:15:ac: 54:59:64:c2:ad:a0:fa:e2:69:89:fe:f0:d5:d3:c7:e1:e1:a9: a3:83:94:04:ee:86:f9:c1:51:18:0e:32:3a:6f:31:df:e8:ee: 7a:e0:1d:c4:2b:b8:0d:5c:0d:ea:e7:8a:c6:5e:7c:40:ae:af: 3e:bc:0d:69:19:2c:89:3d:ba:b3:4d:7c:3b:d4:dd:1f:1b:6b: 61:5e:2f:c6:8f:56:e8:ac:b8:b6:a6:a2:d2:74:40:c1:07:32: c1:83:01:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjQwNTE4MjEwNDM0WhcNMjQwNTI1MjEwNDM0WjAYMRYwFAYD VQQDEw02NjQ5MTdlMi1lMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwVNdIaiuBTwGOzYHQMbICTC8b0xIn5dCH1ajrVZ/xa010FGLUc36ZyoT9Ke 0X7+2uvjKc30mc0WmnoOTHlBa+8FfcMxQwemkes+3ZYXiZgVK4WY+mJfYrVjUxHH ddgPk55LTbw1q5ODW2yQ4tyILLoY6pWWp002RewQB9D4ZtmmUol2CWRXG0SOt47K jxkmIAaH8tnuevtG1W0kpz8f616pTvcTcfqB0Ls0ZSWsS6gQE0e7a1ReiYP0l2RA 9F5y6wdBoGlZZ9swOCz89DTjFcQQ/HgRBu6TEYT4XAQfmWpjqxfX3RoxO/hbjkbK Tf6Qp1FiizwO8XbJH6qR7Th4NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAglsWPd rJh/x/QRTgTE9spULS2sMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8RV0a0uiyonJgdF4yINkYP29snBXyWxgjsIvQCPs7Q6/49wNTUIhq hgwZi9IxQKeCgSw/LQ2oyfoo38XeyfLr5dDa8+8hzGsROHsokuawuTXYDxbgGAkl rYty6Jhpe/1sXNrQt0E0nUKL2YE4kTysVBCQUbcqrUjiXoSFykCwvFupEz1gYBC6 p5SqEKaK9HHdv3mEW0/4sY6NxATUDuaRFaxUWWTCraD64mmJ/vDV08fh4amjg5QE 7ob5wVEYDjI6bzHf6O564B3EK7gNXA3q54rGXnxArq8+vA1pGSyJPbqzTXw71N0f G2thXi/Gj1borLi2pqLSdEDBBzLBgwGp -----END CERTIFICATE-----Generated at Sat May 18 22:14:05 2024 by rpki-client on console-fra.rpki-client.org