$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: MHAuiYCtfGahMhP9mvAPi3LrI5/0EmqBvWg/OAdCYoE= Subject key identifier: A5:22:6E:61:12:FB:39:A7:24:4F:8E:4D:E7:23:6D:E1:D1:82:F9:FE Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 015F Signing time: Sun 05 May 2024 05:00:27 +0000 Manifest this update: Sun 05 May 2024 05:00:27 +0000 Manifest next update: Sun 12 May 2024 05:00:27 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: mxlRuuywnItAPsJWyHXcuB9uw7Cp3qGvO3eC3QUkjgg=) 2: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: VBG1+8YHN1/tahN8bBEosQsH1gRLIMgivs7uGKrPeZY=) 3: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 6BFNdp8UFpW60ABUgGsgW8FSuWg9dxxXP5vPoSiiTW0=) 4: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0vXT9qM+SxwzMikIx2DMcnNmbVuL9pkrtJo3L3NaXEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: May 5 05:00:27 2024 GMT Not After : May 12 05:00:27 2024 GMT Subject: CN=6637126b-38ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:41:88:7b:8d:66:00:18:6d:89:60:bc:06: 22:bb:e9:36:53:e9:d5:8f:24:81:55:df:6c:01:d5: ec:1d:d6:b0:04:c0:2e:34:38:64:dc:f7:34:e8:83: 39:7b:10:e3:00:a6:0a:02:ea:02:84:ed:a1:65:cc: 8a:f1:d3:14:5b:c3:57:f3:07:be:20:95:d8:11:ee: 00:58:e0:14:40:aa:8c:3c:c6:36:43:da:20:96:16: a2:7f:d9:03:39:3d:02:53:2f:d2:c9:fa:db:9c:9d: 78:d7:b7:d7:bd:0e:79:82:d8:e5:1a:55:1e:94:5f: e7:58:b7:b0:f1:5e:1c:15:65:6b:86:22:4e:4d:4a: d4:94:04:fe:50:f0:dc:9d:ea:f3:57:cf:2b:f2:39: 22:ad:1a:7c:d5:08:eb:1e:59:f9:1a:8e:c0:34:10: 12:8d:c4:65:cb:5a:2f:18:7a:91:d4:4a:03:66:80: cc:36:5e:69:4c:e8:1a:c2:da:a1:78:7d:69:9e:50: 92:b2:8c:49:63:a9:1e:a0:8f:6a:ff:b1:45:ce:09: 9b:2f:47:02:71:96:3f:0b:86:03:4f:da:48:a8:a6: 55:df:a6:17:36:b0:b4:a5:72:68:9e:5e:05:e7:93: be:68:93:39:5d:6f:31:1c:15:82:b3:21:14:4b:e3: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:6E:61:12:FB:39:A7:24:4F:8E:4D:E7:23:6D:E1:D1:82:F9:FE X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:19:5c:ff:0e:a2:09:10:2c:b9:d9:72:c0:05:b3:62:c7:18: 73:c1:28:55:62:1b:f9:73:b7:2b:3d:fc:4b:6a:14:a3:cf:0f: 24:6e:09:33:20:51:4a:33:9e:da:32:f7:40:2a:5e:63:3e:d4: 1b:f3:1b:eb:6f:2d:85:2e:e1:3a:3e:5f:ec:d3:f3:d4:19:75: 4a:53:d3:e9:3c:6f:aa:67:68:6c:4c:3d:dc:cf:1d:6b:da:f2: e8:b5:3b:e3:5d:03:1f:f8:83:6b:3a:7d:b1:95:78:05:b2:f8: 2e:4e:52:c9:b9:6d:fd:3e:88:8f:fd:27:d2:3a:82:94:a3:b3: 4e:c6:e2:de:83:75:e3:a2:ee:45:ea:65:cf:a3:d3:d8:76:a4: 7a:47:9f:f5:ca:b3:62:d0:25:57:68:82:73:57:5d:20:1c:72: 01:50:08:5b:85:3b:e5:7f:98:19:f1:22:af:e5:cf:1c:23:75: 99:92:d7:91:ab:10:68:d1:91:d1:6a:20:b7:45:1b:5c:4f:fb: 48:99:43:23:47:4a:2d:33:ac:6f:9b:2f:28:eb:0c:a2:5a:3a: c5:93:b7:35:dc:62:54:ca:00:e2:9e:a8:5d:8b:6a:db:94:e3: 23:48:a6:f6:82:6a:05:d8:75:5c:28:d3:9b:7a:e5:7f:c3:1a: 4c:6c:55:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjQwNTA1MDUwMDI3WhcNMjQwNTEyMDUwMDI3WjAYMRYwFAYD VQQDEw02NjM3MTI2Yi0zOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGBBiHuNZgAYbYlgvAYiu+k2U+nVjySBVd9sAdXsHdawBMAuNDhk3Pc06IM5 exDjAKYKAuoChO2hZcyK8dMUW8NX8we+IJXYEe4AWOAUQKqMPMY2Q9oglhaif9kD OT0CUy/SyfrbnJ1417fXvQ55gtjlGlUelF/nWLew8V4cFWVrhiJOTUrUlAT+UPDc nerzV88r8jkirRp81QjrHln5Go7ANBASjcRly1ovGHqR1EoDZoDMNl5pTOgawtqh eH1pnlCSsoxJY6keoI9q/7FFzgmbL0cCcZY/C4YDT9pIqKZV36YXNrC0pXJonl4F 55O+aJM5XW8xHBWCsyEUS+PVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUibmES +zmnJE+OTecjbeHRgvn+MB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHGVz/DqIJECy52XLABbNixxhzwShVYhv5c7crPfxLahSjzw8kbgkz IFFKM57aMvdAKl5jPtQb8xvrby2FLuE6Pl/s0/PUGXVKU9PpPG+qZ2hsTD3czx1r 2vLotTvjXQMf+INrOn2xlXgFsvguTlLJuW39PoiP/SfSOoKUo7NOxuLeg3Xjou5F 6mXPo9PYdqR6R5/1yrNi0CVXaIJzV10gHHIBUAhbhTvlf5gZ8SKv5c8cI3WZkteR qxBo0ZHRaiC3RRtcT/tImUMjR0otM6xvmy8o6wyiWjrFk7c13GJUygDinqhdi2rb lOMjSKb2gmoF2HVcKNObeuV/wxpMbFWz -----END CERTIFICATE-----Generated at Sun May 5 06:01:18 2024 by rpki-client on console-fra.rpki-client.org