$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: r/bq4GGIs353d2eGkErk4ofML/xXWH/kY5P1rFBJx9A= Subject key identifier: C4:E1:AA:F4:B3:99:B6:8B:8F:E0:A5:33:69:5D:A8:D5:E0:47:EF:49 Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 094A Signing time: Tue 30 Apr 2024 21:26:07 +0000 Manifest this update: Tue 30 Apr 2024 21:26:06 +0000 Manifest next update: Tue 07 May 2024 21:26:06 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: 4Z0Nb2Itnpc3moiUyCSdfaJLaRpg+FRJp7oeHq6uSJI=) 2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: rK7keIoRH6aInuLu6dK+ZdnSUTlleXHZgfihoRVX/do=) 3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: IHiE5djC6jA8moe8rcJAAnUeGZgD++bx6K2nK7x1L2o=) 4: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: FV72IIPNnKaptJ6wsgdg9QRoiE8Fis6/GKNmve2u0+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Apr 30 21:26:06 2024 GMT Not After : May 7 21:26:06 2024 GMT Subject: CN=663161ee-5f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:5f:db:7a:fa:d7:c4:ac:c7:57:7a:6a:89: b4:a1:9d:14:cf:dc:9a:65:8e:54:4a:e2:a6:fd:5b: 41:66:36:f3:55:2d:98:1c:ad:d2:fb:1f:c3:c8:3b: da:3e:50:c2:9a:ed:21:2e:a0:c0:1c:66:30:0d:ce: 13:3d:e0:15:8e:77:df:75:88:0a:8a:88:fd:de:36: 1d:de:74:93:e7:d2:17:e8:1f:55:03:9a:d9:30:28: 50:f1:24:11:6c:7d:7b:bc:50:62:01:85:c4:fb:bd: 8e:a6:96:c0:86:b9:4c:05:68:8d:79:c6:3c:a4:9d: 4d:37:bd:76:07:e6:a9:21:15:5b:ee:64:10:c7:53: f0:a0:f0:4c:e0:92:b5:48:a2:56:93:54:f7:61:a0: 9b:0c:11:39:ae:93:34:42:04:e5:39:39:0e:a7:73: 54:bc:0e:0b:14:89:c5:66:08:85:aa:1c:db:90:12: 3f:b7:19:60:31:7f:08:8c:00:d1:81:1f:ed:62:98: 81:f4:d0:00:6c:70:0f:5b:11:87:b2:82:61:6b:58: d9:f2:2c:65:11:a8:65:af:51:57:4b:3d:d4:84:48: 07:b9:8d:12:f1:e6:aa:9a:cf:bd:41:b7:f7:e8:3c: 99:84:89:b0:c8:f2:3a:64:35:8a:cf:b1:98:fd:76: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:AA:F4:B3:99:B6:8B:8F:E0:A5:33:69:5D:A8:D5:E0:47:EF:49 X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:95:86:32:e0:84:4c:08:84:e4:b9:09:32:12:9e:41:d0:fe: b7:ee:18:51:9f:8a:b0:a2:4f:85:d9:5c:a8:02:9a:3b:6c:0c: 92:18:75:14:33:7f:36:ed:a0:53:82:f0:a1:c6:6d:c4:82:a0: 69:c6:2c:9f:be:46:7a:e7:03:d9:ff:31:97:c0:30:77:75:7c: d8:a8:17:cf:cf:21:fb:4f:2c:d0:e9:bf:48:81:ae:d0:b8:7e: 29:61:71:d8:25:fc:f6:10:99:5e:ff:7a:d8:fe:82:aa:c6:c0: 6b:ba:84:f6:e3:94:07:13:ad:b2:40:fc:6b:05:60:99:22:17: 57:91:d6:e4:7f:e8:21:43:97:62:66:eb:21:66:ea:f7:82:61: 55:58:68:c0:0d:9c:c5:f9:21:55:f0:d1:72:63:a8:f1:3d:3a: 63:b5:00:1f:ad:a5:b4:a6:07:01:c5:06:1e:a8:f1:bd:f5:3a: fc:6c:25:f4:b8:b9:db:64:86:2b:ef:81:36:86:02:47:3c:c1: ab:30:aa:a6:64:ee:a2:38:ac:aa:0b:e9:d4:67:b3:7e:73:32: 40:0a:55:ac:b4:dc:dc:ef:b1:f6:ea:fa:02:1d:7a:b2:4f:fd: 41:88:39:8d:8e:07:7a:47:23:73:b9:70:67:66:b6:db:e5:32: 8a:38:ee:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjQwNDMwMjEyNjA2WhcNMjQwNTA3MjEyNjA2WjAYMRYwFAYD VQQDEw02NjMxNjFlZS01ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwlf23r618Ssx1d6aom0oZ0Uz9yaZY5USuKm/VtBZjbzVS2YHK3S+x/DyDva PlDCmu0hLqDAHGYwDc4TPeAVjnffdYgKioj93jYd3nST59IX6B9VA5rZMChQ8SQR bH17vFBiAYXE+72OppbAhrlMBWiNecY8pJ1NN712B+apIRVb7mQQx1PwoPBM4JK1 SKJWk1T3YaCbDBE5rpM0QgTlOTkOp3NUvA4LFInFZgiFqhzbkBI/txlgMX8IjADR gR/tYpiB9NAAbHAPWxGHsoJha1jZ8ixlEahlr1FXSz3UhEgHuY0S8eaqms+9Qbf3 6DyZhImwyPI6ZDWKz7GY/XaSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMThqvSz mbaLj+ClM2ldqNXgR+9JMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9lYYy4IRMCITkuQkyEp5B0P637hhRn4qwok+F2VyoApo7bAySGHUU M3827aBTgvChxm3EgqBpxiyfvkZ65wPZ/zGXwDB3dXzYqBfPzyH7TyzQ6b9Iga7Q uH4pYXHYJfz2EJle/3rY/oKqxsBruoT245QHE62yQPxrBWCZIhdXkdbkf+ghQ5di ZushZur3gmFVWGjADZzF+SFV8NFyY6jxPTpjtQAfraW0pgcBxQYeqPG99Tr8bCX0 uLnbZIYr74E2hgJHPMGrMKqmZO6iOKyqC+nUZ7N+czJAClWstNzc77H26voCHXqy T/1BiDmNjgd6RyNzuXBnZrbb5TKKOO7H -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:11 2024 by rpki-client on console-ams.rpki-client.org