$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json) Hash identifier: xba5eWxbJ9ehsJ6EzQWL0yjm2Rju1Z1DzwPaL2Bhs9E= Subject key identifier: 80:98:39:0C:AD:18:35:58:1A:2A:7D:B7:7D:85:9F:67:B6:12:40:F2 Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft Manifest number: 0331 Signing time: Tue 07 May 2024 02:59:03 +0000 Manifest this update: Tue 07 May 2024 02:59:03 +0000 Manifest next update: Tue 14 May 2024 02:59:03 +0000 Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: H/ZXuuucxNM5NLex1L5KyrYTwPkZJ0UoS8Swi7lRv1U=) 2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: KW8CZ9txs3YwrvV7wO0SOgdBrRNOn4AvsdkMNqvWRYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B Validity Not Before: May 7 02:59:03 2024 GMT Not After : May 14 02:59:03 2024 GMT Subject: CN=663998f7-78c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:f5:c6:eb:02:fb:b7:5e:9f:3f:10:fe:a9: b2:e3:24:d1:c8:76:25:d8:67:83:d9:51:2c:a2:6d: e8:54:38:16:4e:85:1f:42:db:bb:a8:36:be:c1:66: 8f:88:bc:b6:29:37:d5:68:d8:4f:91:34:41:76:cb: 75:0d:73:40:98:60:6e:25:25:80:e2:78:53:28:e5: 9b:6f:a5:c6:1c:3b:39:a7:d7:46:78:e3:f9:54:34: a7:93:92:f3:63:d8:a3:a9:24:f2:c5:3e:26:0c:b5: 91:b7:04:da:7b:fc:c5:c5:ad:00:a8:fc:1a:db:30: b0:5d:eb:8e:2e:18:11:00:74:bd:1a:2b:63:14:ef: 30:dc:25:10:93:1a:73:c0:6a:f1:64:58:4f:cd:9f: 6d:f2:fa:28:b4:5e:ce:f4:59:8d:66:3b:97:af:19: 66:fe:9b:e5:36:c5:60:8a:fb:18:31:e7:15:9b:ae: 6e:70:ef:9f:71:f8:a3:b0:e3:6a:90:b3:25:90:e6: dc:7a:70:2a:b0:01:4c:11:25:02:da:c3:45:5e:50: 4c:18:b2:9c:77:76:16:68:0c:56:8e:08:42:41:47: 59:f6:ed:f0:99:f6:c5:b8:fd:2a:00:fe:1c:c0:73: 38:db:f3:34:7d:75:2e:b2:dc:78:05:6d:3a:4e:bc: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:98:39:0C:AD:18:35:58:1A:2A:7D:B7:7D:85:9F:67:B6:12:40:F2 X509v3 Authority Key Identifier: keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f5:fc:f0:b5:d6:58:a2:90:89:9f:ac:f4:00:36:5d:04:d5: 29:c8:3b:31:59:eb:8b:27:9f:83:0d:76:41:1c:72:1d:82:e9: fc:ad:ef:fa:43:09:9b:d6:ad:7e:0b:08:d6:3a:f8:db:12:0d: a7:3e:73:b5:20:4c:b2:49:d4:6e:fd:ed:bc:59:b9:83:61:94: 88:cd:9d:37:da:d8:1e:d4:78:59:91:dd:1d:24:e1:8e:09:bb: 64:ec:42:a6:bd:cf:25:a0:cf:b1:e2:84:91:d0:39:7d:05:d0: a7:30:37:b8:ff:d4:20:f4:ab:bd:dd:83:7c:b5:5f:68:a5:37: d9:1e:49:83:e7:2e:53:52:13:69:86:d4:2e:d0:ef:15:43:d6: 5a:f5:6d:08:d0:92:bc:3b:ea:d2:36:63:7e:7c:0d:b8:5b:b5: e2:36:d3:e6:85:11:a5:a0:1d:f9:8b:5d:24:30:80:4e:32:2d: 42:6b:98:67:a9:7a:2b:f5:1e:a4:0f:92:b6:02:ea:18:5f:c7: 2f:a0:16:d6:bb:a4:9d:72:c2:f3:28:32:ec:9d:7e:0d:08:34: ae:17:83:58:d7:d3:1b:76:76:28:10:73:cf:c6:a7:0a:82:36: 63:56:d7:f4:bb:91:78:3b:5e:17:d1:c5:28:e2:3d:d5:fb:fa: 19:71:a7:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMkQxMTAvBgNVBAUTKDNBNjhBMjIyQzJDMENGNDE0MzBDMDk2OEQyMzA5QUE4 OTNDNzRBM0IwHhcNMjQwNTA3MDI1OTAzWhcNMjQwNTE0MDI1OTAzWjAYMRYwFAYD VQQDEw02NjM5OThmNy03OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dP1xusC+7denz8Q/qmy4yTRyHYl2GeD2VEsom3oVDgWToUfQtu7qDa+wWaP iLy2KTfVaNhPkTRBdst1DXNAmGBuJSWA4nhTKOWbb6XGHDs5p9dGeOP5VDSnk5Lz Y9ijqSTyxT4mDLWRtwTae/zFxa0AqPwa2zCwXeuOLhgRAHS9GitjFO8w3CUQkxpz wGrxZFhPzZ9t8vootF7O9FmNZjuXrxlm/pvlNsVgivsYMecVm65ucO+fcfijsONq kLMlkObcenAqsAFMESUC2sNFXlBMGLKcd3YWaAxWjghCQUdZ9u3wmfbFuP0qAP4c wHM42/M0fXUustx4BW06TrzTeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICYOQyt GDVYGip9t32Fn2e2EkDyMB8GA1UdIwQYMBaAFDpooiLCwM9BQwwJaNIwmqiTx0o7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMyRC84NkZEMTM4ODc5 MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXowRkREQWxvMGpDYXFKUEhT anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09taWlJc0xBejBGRERBbG8wakNhcUpQSFNqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMyRC84NkZEMTM4ODc5MEExMUVDOEQwQTI5NzlDNEY5QUUwMi9PbWlpSXNMQXow RkREQWxvMGpDYXFKUEhTanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA9fzwtdZYopCJn6z0ADZdBNUpyDsxWeuLJ5+DDXZBHHIdgun8re/6 Qwmb1q1+CwjWOvjbEg2nPnO1IEyySdRu/e28WbmDYZSIzZ032tge1HhZkd0dJOGO Cbtk7EKmvc8loM+x4oSR0Dl9BdCnMDe4/9Qg9Ku93YN8tV9opTfZHkmD5y5TUhNp htQu0O8VQ9Za9W0I0JK8O+rSNmN+fA24W7XiNtPmhRGloB35i10kMIBOMi1Ca5hn qXor9R6kD5K2AuoYX8cvoBbWu6SdcsLzKDLsnX4NCDSuF4NY19MbdnYoEHPPxqcK gjZjVtf0u5F4O14X0cUo4j3V+/oZcaeQ -----END CERTIFICATE-----Generated at Tue May 7 03:53:36 2024 by rpki-client on console-fra.rpki-client.org