$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: yH8PfL6gk8Z6EjX2Q+6tzTrJPYVMUCq7GmuWY+ImHIY= Subject key identifier: 27:6A:62:85:8A:73:31:26:E1:9C:AD:B5:DD:87:DA:38:0F:52:F8:9C Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0B75 Signing time: Mon 06 May 2024 19:44:34 +0000 Manifest this update: Mon 06 May 2024 19:44:33 +0000 Manifest next update: Mon 13 May 2024 19:44:33 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: 8JuTVoPfgrUG/zKDj6skBo9mNPRG0bCO549cZ3tpgYE=) 2: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: ikM/tg69JjWY6nettr5wxHjBh1+m3SzyShTdzRB5R+A=) 3: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: 1JL2vcJvf9dToWQ+N6WHvbsUimtrtreNI0yrG8eTtFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: May 6 19:44:33 2024 GMT Not After : May 13 19:44:33 2024 GMT Subject: CN=66393322-4127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:57:a1:35:e3:22:06:bd:a9:6c:89:7f:e4: 5e:fd:0f:1c:e2:45:42:ab:58:3b:00:66:2f:e6:40: df:00:fb:95:af:69:ab:59:1a:d9:b6:7d:09:b2:61: b7:58:9d:9a:4f:f0:ac:d8:6a:a0:94:0d:89:2c:b5: 80:eb:a8:53:ae:6f:cc:80:09:b5:4a:40:bf:79:69: b5:81:3e:b4:cc:e3:5f:49:b9:43:1b:71:1d:68:f6: 5b:ec:b8:c5:d5:29:79:98:1d:74:a9:81:02:fe:93: 4f:c8:4e:5d:05:17:68:4e:52:73:ab:84:66:f3:03: d9:be:a3:12:3d:5b:d1:b4:f4:01:57:c6:29:d6:c2: 90:53:ac:f5:1d:19:e9:45:d9:2a:e1:6a:3e:81:2c: 0c:e9:23:55:88:b1:3f:12:ac:91:a8:ee:26:a1:81: b0:3f:9d:0e:54:85:64:9d:df:ac:d2:41:9c:57:c2: ab:fc:83:d8:27:bb:f1:a9:a2:65:bd:e1:63:f9:e9: ac:27:5f:85:e0:cc:12:64:a3:e3:3b:12:91:04:0b: 4f:c8:32:09:ab:65:0d:d6:e8:c0:3c:51:4b:c1:4e: e4:9d:ee:04:88:cd:5a:7b:99:62:d5:02:62:af:8f: 9b:bf:f9:de:de:95:61:48:be:ae:38:40:18:fc:d8: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:62:85:8A:73:31:26:E1:9C:AD:B5:DD:87:DA:38:0F:52:F8:9C X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ab:25:4b:a5:f9:eb:6b:19:a6:5d:90:54:1e:e8:c0:27:65: 77:e8:d5:b5:2b:6a:04:b0:9b:95:25:34:cb:94:39:f5:42:1d: fd:cd:50:cf:da:7d:48:17:07:5c:49:42:2f:13:34:5e:7d:47: f8:e1:c9:ab:61:6f:0f:eb:71:68:e1:38:30:65:b7:0c:8b:35: 29:d5:a8:0d:10:b6:cc:58:07:38:ce:02:ab:ba:6b:2e:f2:f4: 26:35:f5:9c:94:e4:2b:cd:44:39:69:d6:cf:5e:bf:41:65:d8: 8d:b0:2f:80:cb:e9:1b:c5:01:e6:2c:2a:f1:1d:27:78:d1:2a: 7a:53:d5:c4:a9:c1:63:d8:9f:d3:bc:5a:63:28:de:5a:90:24: 03:ed:96:bb:fc:76:0b:75:f1:55:77:29:d8:b0:b4:e8:90:4b: 4e:19:3a:a5:8a:cc:18:f3:5e:d6:bc:53:0f:77:bc:59:32:fe: 23:c3:27:ec:9b:7a:2d:8c:48:a9:4a:1e:53:5c:13:3c:4a:58: 22:49:ef:35:cb:65:3a:ce:1d:d9:51:9c:a8:24:28:23:94:25: 16:eb:ce:8e:b1:fe:f9:28:3f:e4:7a:a5:10:6f:31:d3:43:ae: 9c:75:6d:ae:5a:f8:8e:e4:48:5f:56:49:bf:3b:4b:59:62:df: ce:80:6a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjQwNTA2MTk0NDMzWhcNMjQwNTEzMTk0NDMzWjAYMRYwFAYD VQQDEw02NjM5MzMyMi00MTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAVXoTXjIga9qWyJf+Re/Q8c4kVCq1g7AGYv5kDfAPuVr2mrWRrZtn0JsmG3 WJ2aT/Cs2GqglA2JLLWA66hTrm/MgAm1SkC/eWm1gT60zONfSblDG3EdaPZb7LjF 1Sl5mB10qYEC/pNPyE5dBRdoTlJzq4Rm8wPZvqMSPVvRtPQBV8Yp1sKQU6z1HRnp Rdkq4Wo+gSwM6SNViLE/EqyRqO4moYGwP50OVIVknd+s0kGcV8Kr/IPYJ7vxqaJl veFj+emsJ1+F4MwSZKPjOxKRBAtPyDIJq2UN1ujAPFFLwU7kne4EiM1ae5li1QJi r4+bv/ne3pVhSL6uOEAY/NjvLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdqYoWK czEm4Zyttd2H2jgPUvicMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTqyVLpfnraxmmXZBUHujAJ2V36NW1K2oEsJuVJTTLlDn1Qh39zVDP 2n1IFwdcSUIvEzRefUf44cmrYW8P63Fo4TgwZbcMizUp1agNELbMWAc4zgKrumsu 8vQmNfWclOQrzUQ5adbPXr9BZdiNsC+Ay+kbxQHmLCrxHSd40Sp6U9XEqcFj2J/T vFpjKN5akCQD7Za7/HYLdfFVdynYsLTokEtOGTqliswY817WvFMPd7xZMv4jwyfs m3otjEipSh5TXBM8SlgiSe81y2U6zh3ZUZyoJCgjlCUW686Osf75KD/keqUQbzHT Q66cdW2uWviO5EhfVkm/O0tZYt/OgGrm -----END CERTIFICATE-----Generated at Mon May 6 20:19:07 2024 by rpki-client on console-fra.rpki-client.org