$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: wn/0el61qEWAhF8KB88Smp2G8i9jbzTB1bnAt3eLZ5E= Subject key identifier: F9:F1:5C:B4:8A:1A:6D:57:37:D2:27:B5:88:CF:A5:41:C8:79:2E:65 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 33C2 Signing time: Mon 06 May 2024 14:35:59 +0000 Manifest this update: Mon 06 May 2024 14:35:58 +0000 Manifest next update: Mon 13 May 2024 14:35:58 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: z4cMolsskkBGRdk6FaEpaWSRQkYcAswzQQ0BrWqsHKA=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: fqVmu0CJmNRy0HiTtIc6aH/DbG2CFCT1ZqkJEzOPobQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: May 6 14:35:58 2024 GMT Not After : May 13 14:35:58 2024 GMT Subject: CN=6638eacf-9490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:4d:52:69:b2:e5:79:1b:ba:98:69:be:3a: 39:cb:87:3d:a9:cd:b5:29:87:5c:2e:a6:25:96:10: 3e:ac:ca:c9:3c:1c:ea:3f:44:70:e0:a0:da:94:a4: 12:c4:f7:76:6c:e1:a5:75:a1:8f:b7:62:3f:56:53: 70:69:74:94:ce:e1:d2:94:85:da:19:a5:42:a8:97: 41:d4:9e:5b:54:31:01:29:4b:1d:1b:4f:16:04:89: 11:12:60:67:98:0d:6a:c2:65:da:71:c8:c1:60:eb: 34:89:43:4f:2a:9d:3d:54:aa:22:ca:7a:58:24:61: 1e:5c:8a:43:bb:88:79:db:13:37:bb:45:9a:60:e5: 97:ff:92:a2:9d:56:ce:c9:10:a0:6a:d0:46:24:bb: 79:c9:0b:dc:9f:73:59:f3:e5:14:7c:0c:b4:0b:98: e7:9d:d5:70:6e:af:be:7c:30:d6:99:d0:4c:13:5e: 12:ba:a3:b6:02:a6:f2:a6:b4:93:71:d9:46:cc:38: 9d:4d:12:5e:b1:31:fc:36:a3:85:db:fb:f1:fb:04: f4:c9:b4:64:c0:51:9b:a6:53:86:fc:cd:e2:65:15: 8f:1f:ea:19:5a:6e:b6:45:47:36:c0:78:33:cb:06: 74:b3:53:a2:9f:e2:28:07:78:93:b5:4c:74:40:7f: d9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F1:5C:B4:8A:1A:6D:57:37:D2:27:B5:88:CF:A5:41:C8:79:2E:65 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:3f:9c:49:af:f1:44:d2:ac:c7:da:ce:e4:33:b1:eb:66:9c: e7:b9:3c:85:3a:9e:a6:1a:fd:1b:c9:f1:49:15:ce:56:07:a7: 2a:c0:90:cb:3c:c7:91:68:7c:33:57:91:5b:9a:2b:97:f8:db: 7c:a1:d8:f9:f1:a5:7e:e5:76:2c:04:62:8e:ad:9c:bc:06:db: 65:6e:a8:6d:87:1c:8f:8c:5e:1e:e2:c7:a1:a2:d1:83:7a:81: 40:0b:6e:e2:3c:6e:f8:52:4f:7c:74:a1:78:f4:42:70:be:97: b8:d7:d5:f6:94:e1:c6:29:07:d2:50:7b:92:36:35:62:67:cc: 04:bf:fd:9a:88:cb:7e:3b:38:b3:3f:84:c0:91:55:c3:d8:f9: e9:f7:fa:47:a7:a4:99:2b:83:cb:e9:35:98:c0:7d:e6:20:98: 5c:fb:e0:bd:67:a2:02:d2:c8:c1:88:30:45:11:dd:e0:da:58: 24:bb:f6:21:1b:fa:75:54:4a:cf:d7:2b:32:d7:7b:7d:cb:23: ef:4e:e7:33:9f:a1:7d:88:f0:22:e0:94:12:de:2a:63:ed:d0: b0:cd:af:7b:db:2f:bb:a6:f4:9a:68:42:ce:b3:62:2f:5f:30: 51:dd:f4:c9:c0:9f:69:d7:c1:90:3d:7a:54:d1:d1:83:c5:74: 45:41:8f:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjQwNTA2MTQzNTU4WhcNMjQwNTEzMTQzNTU4WjAYMRYwFAYD VQQDEw02NjM4ZWFjZi05NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PVNUmmy5Xkbuphpvjo5y4c9qc21KYdcLqYllhA+rMrJPBzqP0Rw4KDalKQS xPd2bOGldaGPt2I/VlNwaXSUzuHSlIXaGaVCqJdB1J5bVDEBKUsdG08WBIkREmBn mA1qwmXaccjBYOs0iUNPKp09VKoiynpYJGEeXIpDu4h52xM3u0WaYOWX/5KinVbO yRCgatBGJLt5yQvcn3NZ8+UUfAy0C5jnndVwbq++fDDWmdBME14SuqO2AqbyprST cdlGzDidTRJesTH8NqOF2/vx+wT0ybRkwFGbplOG/M3iZRWPH+oZWm62RUc2wHgz ywZ0s1Oin+IoB3iTtUx0QH/ZiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnxXLSK Gm1XN9IntYjPpUHIeS5lMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEP5xJr/FE0qzH2s7kM7HrZpznuTyFOp6mGv0byfFJFc5WB6cqwJDL PMeRaHwzV5FbmiuX+Nt8odj58aV+5XYsBGKOrZy8BttlbqhthxyPjF4e4sehotGD eoFAC27iPG74Uk98dKF49EJwvpe419X2lOHGKQfSUHuSNjViZ8wEv/2aiMt+Oziz P4TAkVXD2Pnp9/pHp6SZK4PL6TWYwH3mIJhc++C9Z6IC0sjBiDBFEd3g2lgku/Yh G/p1VErP1ysy13t9yyPvTuczn6F9iPAi4JQS3ipj7dCwza972y+7pvSaaELOs2Iv XzBR3fTJwJ9p18GQPXpU0dGDxXRFQY9f -----END CERTIFICATE-----Generated at Mon May 6 17:35:36 2024 by rpki-client on console-fra.rpki-client.org