$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft File: OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json) Hash identifier: GfXEviGQL2PrriSWOtRwAuFeDHsZtLuk+s8JyOORLqQ= Subject key identifier: DD:DE:F0:9C:04:C5:E8:9F:41:FC:4A:D3:72:77:6B:D6:8F:6C:6B:5D Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 Certificate issuer: /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft Manifest number: 9B Signing time: Wed 15 May 2024 07:07:18 +0000 Manifest this update: Wed 15 May 2024 07:07:18 +0000 Manifest next update: Wed 22 May 2024 07:07:18 +0000 Files and hashes: 1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: JBkBo6M4xaPAbsQCfYLQG4D+BO9dOnyg/drKrhPxvqs=) 2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: tde+vUJakIp3I6DilPG1SltVQgnZyzbbBDIV3qPw0lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Validity Not Before: May 15 07:07:18 2024 GMT Not After : May 22 07:07:18 2024 GMT Subject: CN=66445f26-ad32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:17:fb:b0:c1:48:f1:28:00:ee:50:ce:85:9d: 9b:bc:b3:54:13:2f:56:00:ab:8e:8c:6d:32:61:c6: 93:b9:c6:9b:ce:7b:20:63:92:99:94:f6:03:4f:ef: 83:c2:19:40:48:49:70:84:c6:b8:39:0b:f5:ed:d2: ab:38:21:ec:dd:04:ea:8e:c3:1a:8c:01:ae:af:8c: 28:59:5e:ca:ed:43:eb:3a:8a:21:57:ba:1f:f4:b5: 1c:98:69:56:d3:0e:91:ad:fc:6f:25:dd:41:29:ed: 20:b6:cc:65:3a:09:f8:00:2b:97:26:21:d3:5f:cb: 48:d6:b3:24:13:59:62:f5:fb:8b:52:8d:6b:da:5f: 03:84:82:51:1e:b8:eb:45:96:fe:85:d2:d9:91:d5: 87:84:5d:92:7f:44:b3:c1:bc:1f:6c:b4:38:b0:02: 70:37:15:06:82:19:b6:ca:ec:4f:d1:7a:1a:fb:24: 3d:89:d0:3e:1a:56:38:1a:f0:ed:4e:37:ca:1c:47: 55:49:3d:33:2d:65:52:16:68:c3:44:e6:b7:4b:84: 33:7e:8d:97:f0:a0:69:c3:ca:a0:8b:61:d5:5a:e6: b6:d0:bf:d2:ee:f9:d1:3f:d6:02:6f:42:ec:6e:94: 83:28:86:8f:71:02:bc:b4:6b:64:1b:a6:35:4e:87: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DE:F0:9C:04:C5:E8:9F:41:FC:4A:D3:72:77:6B:D6:8F:6C:6B:5D X509v3 Authority Key Identifier: keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:8c:eb:95:d8:1a:54:6f:d9:b4:22:89:bb:56:f4:f0:69:05: 18:d1:72:54:f9:ef:09:bb:79:7d:ea:99:00:03:a3:e1:f6:fe: e2:ea:07:20:01:a5:00:98:86:c2:32:10:a1:37:a6:96:e7:93: 7c:98:a7:32:4b:0d:40:97:fe:64:40:d4:da:3b:25:4f:8c:01: 27:f4:3c:66:d4:2b:5f:02:50:a1:9d:c0:2f:1e:46:3e:dd:a7: 67:63:83:51:97:d5:65:58:52:6e:30:02:f4:bc:e6:a2:60:21: bd:2c:45:1c:d2:3a:0c:5d:a0:36:9d:29:29:9b:c5:a6:ec:ec: 7d:d8:5b:cf:ac:31:8e:ea:94:80:2c:b7:85:08:91:cd:aa:cc: aa:0f:8d:96:82:40:9c:e2:53:43:b3:15:aa:ea:12:c6:1d:24: bf:58:b0:c5:ea:92:05:7a:ff:04:9c:df:bf:87:d6:00:75:30: fd:68:1e:56:ad:f8:2a:33:ce:ad:9b:ac:29:98:02:be:49:6f: b6:0c:3d:52:0a:15:b9:74:8d:e2:81:2f:ba:60:8b:b5:01:ed: c0:17:f9:31:21:48:9d:ce:2a:6e:82:47:1b:d6:e5:bd:04:ac: c3:2f:41:f4:76:b3:8b:1e:d0:bd:ae:ff:08:1e:e5:ca:36:a1: ab:3d:c8:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE RDgyNEFDRTQwHhcNMjQwNTE1MDcwNzE4WhcNMjQwNTIyMDcwNzE4WjAYMRYwFAYD VQQDEw02NjQ0NWYyNi1hZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Rf7sMFI8SgA7lDOhZ2bvLNUEy9WAKuOjG0yYcaTucabznsgY5KZlPYDT++D whlASElwhMa4OQv17dKrOCHs3QTqjsMajAGur4woWV7K7UPrOoohV7of9LUcmGlW 0w6RrfxvJd1BKe0gtsxlOgn4ACuXJiHTX8tI1rMkE1li9fuLUo1r2l8DhIJRHrjr RZb+hdLZkdWHhF2Sf0SzwbwfbLQ4sAJwNxUGghm2yuxP0Xoa+yQ9idA+GlY4GvDt TjfKHEdVST0zLWVSFmjDROa3S4Qzfo2X8KBpw8qgi2HVWua20L/S7vnRP9YCb0Ls bpSDKIaPcQK8tGtkG6Y1TofZnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3e8JwE xeifQfxK03J3a9aPbGtdMB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjAwQS85RUEyQkI3RTNDRDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhG MlJ4bG5UWC1UeWJkZ2tyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARjOuV2BpUb9m0Iom7VvTwaQUY0XJU+e8Ju3l96pkAA6Ph9v7i6gcg AaUAmIbCMhChN6aW55N8mKcySw1Al/5kQNTaOyVPjAEn9Dxm1CtfAlChncAvHkY+ 3adnY4NRl9VlWFJuMAL0vOaiYCG9LEUc0joMXaA2nSkpm8Wm7Ox92FvPrDGO6pSA LLeFCJHNqsyqD42WgkCc4lNDsxWq6hLGHSS/WLDF6pIFev8EnN+/h9YAdTD9aB5W rfgqM86tm6wpmAK+SW+2DD1SChW5dI3igS+6YIu1Ae3AF/kxIUidzipugkcb1uW9 BKzDL0H0drOLHtC9rv8IHuXKNqGrPchP -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org