$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json) Hash identifier: hX2E/KfD0oAgLZPZMpp3LT3j4jnBoddGVGB0kXR8POw= Subject key identifier: 7B:4C:54:88:37:2F:75:C3:2B:AA:6C:55:73:5A:87:74:12:B7:F0:12 Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Certificate serial: 0743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft Manifest number: 0739 Signing time: Sat 04 May 2024 22:35:57 +0000 Manifest this update: Sat 04 May 2024 22:35:56 +0000 Manifest next update: Sat 11 May 2024 22:35:56 +0000 Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: +rl8SHYMcHFp8PYMOnJ+TjPaM+b9HSjqUnvDmOquC/o=) 2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: x9zaBp6pcCOC+20pSOAYtnZh511coIBLvqokw0jiIJY=) 3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 6gNXhWjlxTyFavzBn/rXXMBvH3G8XTW1jjLT1se8iJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Validity Not Before: May 4 22:35:56 2024 GMT Not After : May 11 22:35:56 2024 GMT Subject: CN=6636b84c-a4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:e2:14:ee:57:ed:b3:44:d5:27:ba:fc:03: 3f:b9:4f:a6:82:40:27:e0:5d:d4:c2:b0:14:52:61: 4b:b4:d2:4f:1a:34:50:b4:e8:14:5a:69:32:a8:0d: 28:ff:e2:47:10:7c:3b:36:9e:85:44:af:d7:52:68: 05:d2:f1:42:66:d1:07:b1:55:ae:c0:92:a5:5f:ec: b7:87:eb:c4:1b:ff:a5:7e:ed:5f:a4:c0:14:6d:3c: 79:0d:ef:71:a3:c2:c9:47:bc:30:55:46:8b:4f:d7: 9d:ae:1b:e7:0f:28:bc:6f:5d:89:20:c6:a5:e1:85: 8d:f7:30:bb:e5:84:d0:6e:42:3b:be:a8:d9:11:76: 7d:71:90:0c:82:5a:81:dd:83:48:20:5f:bc:e8:ab: 52:d7:a3:43:a0:e2:11:7d:6a:f9:26:af:2e:14:86: 9b:09:c2:35:b9:09:8f:d0:a4:a3:69:72:aa:12:94: b8:b3:6a:4a:60:8c:29:eb:1d:35:20:f8:aa:52:60: 09:1f:75:56:0c:20:62:5a:cf:97:d2:68:7b:f0:9f: dd:cf:97:96:0d:4a:6a:22:9d:f6:e8:d5:5d:89:4c: 5b:b9:0c:83:30:b5:71:d5:c3:38:66:9b:1b:23:b1: b8:34:0e:cb:b4:56:31:8c:8d:2c:a8:5c:e5:f0:96: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4C:54:88:37:2F:75:C3:2B:AA:6C:55:73:5A:87:74:12:B7:F0:12 X509v3 Authority Key Identifier: keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:17:7d:2e:f6:1e:19:c8:6f:a9:eb:c2:b7:52:49:dd:33:bb: 89:c7:a1:30:44:3e:f2:4b:91:25:77:e1:a4:50:96:89:ce:99: 52:2d:4a:6c:e0:70:b7:f5:cc:8d:d1:55:1d:d9:fb:86:62:a7: 0c:7d:23:73:e8:03:17:00:be:7d:8d:0a:b8:f7:ec:65:21:45: 93:c4:88:18:91:20:a2:06:64:2c:f6:e6:f3:19:bc:00:78:57: bd:e2:2b:54:9a:a5:5d:09:4a:5d:57:15:28:41:d5:aa:77:b1: b7:a2:74:27:ab:6a:0e:42:d2:b6:52:31:74:d9:60:84:d0:40: a3:91:25:d0:fd:f0:5f:ee:d9:1f:5a:b1:57:03:de:58:dd:11: 3e:2b:0a:ae:6f:c0:8f:4a:0a:46:f8:89:4f:69:e9:f8:8e:b3: bc:48:c0:ed:53:6c:9b:35:6a:1c:e9:86:fc:86:37:40:85:2e: 91:77:4f:45:f5:8e:be:fe:79:32:08:93:03:fd:26:d6:aa:5c: c8:98:b7:2f:ae:37:bd:f2:3d:80:d8:bc:19:b5:ad:9c:a6:d9: 8a:58:1a:51:08:ce:98:ee:a3:19:e7:c8:8b:4a:8a:45:d7:8d: 8a:a4:b8:1c:24:a4:b4:67:06:86:21:83:0b:e6:79:28:e7:42: 00:39:c2:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJGQzkxMTAvBgNVBAUTKEEyOEFEQTc2MTFCREZEMEZBREI4MUQ4QTgwM0ExMTA5 OTAwRjc3ODAwHhcNMjQwNTA0MjIzNTU2WhcNMjQwNTExMjIzNTU2WjAYMRYwFAYD VQQDEw02NjM2Yjg0Yy1hNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh7iFO5X7bNE1Se6/AM/uU+mgkAn4F3UwrAUUmFLtNJPGjRQtOgUWmkyqA0o /+JHEHw7Np6FRK/XUmgF0vFCZtEHsVWuwJKlX+y3h+vEG/+lfu1fpMAUbTx5De9x o8LJR7wwVUaLT9edrhvnDyi8b12JIMal4YWN9zC75YTQbkI7vqjZEXZ9cZAMglqB 3YNIIF+86KtS16NDoOIRfWr5Jq8uFIabCcI1uQmP0KSjaXKqEpS4s2pKYIwp6x01 IPiqUmAJH3VWDCBiWs+X0mh78J/dz5eWDUpqIp326NVdiUxbuQyDMLVx1cM4Zpsb I7G4NA7LtFYxjI0sqFzl8JYlrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtMVIg3 L3XDK6psVXNah3QSt/ASMB8GA1UdIwQYMBaAFKKK2nYRvf0PrbgdioA6EQmQD3eA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkZDOS9CMzdGNjUyMkUx MjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9RLXR1QjJLZ0RvUkNaQVBk NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vcmFkaEc5X1EtdHVCMktnRG9SQ1pBUGQ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkZDOS9CMzdGNjUyMkUxMjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9R LXR1QjJLZ0RvUkNaQVBkNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvF30u9h4ZyG+p68K3UkndM7uJx6EwRD7yS5Eld+GkUJaJzplSLUps 4HC39cyN0VUd2fuGYqcMfSNz6AMXAL59jQq49+xlIUWTxIgYkSCiBmQs9ubzGbwA eFe94itUmqVdCUpdVxUoQdWqd7G3onQnq2oOQtK2UjF02WCE0ECjkSXQ/fBf7tkf WrFXA95Y3RE+Kwqub8CPSgpG+IlPaen4jrO8SMDtU2ybNWoc6Yb8hjdAhS6Rd09F 9Y6+/nkyCJMD/SbWqlzImLcvrje98j2A2LwZta2cptmKWBpRCM6Y7qMZ58iLSopF 142KpLgcJKS0ZwaGIYML5nko50IAOcIG -----END CERTIFICATE-----Generated at Sun May 5 00:12:35 2024 by rpki-client on console-fra.rpki-client.org