$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: AcxpTfq1EUU4Wizn3Wcj9ZkkUPnAofyF5C+TAVVg/0k= Subject key identifier: 87:10:C7:D5:6A:28:52:1E:EB:D3:9B:A4:E5:97:91:DC:C4:11:84:E1 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: CD Signing time: Wed 15 May 2024 06:41:52 +0000 Manifest this update: Wed 15 May 2024 06:41:52 +0000 Manifest next update: Wed 22 May 2024 06:41:52 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: +kF13+FF8sO6znwj4CosxmqMyf8VritQzBq78uIkWWU=) 2: D0103496FD6611EE9188C568C4F9AE02.roa (hash: zL5GyY22PUxzXPY7su+a9MACm6wFmrlH/cDiceL5VFU=) 3: 7F8A5DCEFE2111EE95DF4819C4F9AE02.roa (hash: By1liJHVxYGQgV4b/cFfOGlWMDw0HY09qCefHuS9+HI=) 4: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: T0MEU9uiqGpjuKW+36eXoeccUUjS7k2e0k37wCmWLMc=) 5: 1D9A36F40C6B11EF95ACFA13C4F9AE02.roa (hash: SQfSNlw1EDeW09L4crLROC7TBXDXyLj3U0dw7Nr364s=) 6: 4316FFB2FCC011EEA517206FC4F9AE02.roa (hash: xzVQa7ltFjf1B7yqSQ1Ep816eoaM0CHgR1jzg2DtZu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: May 15 06:41:52 2024 GMT Not After : May 22 06:41:52 2024 GMT Subject: CN=66445930-6956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:2a:a7:ff:a2:80:ff:cc:82:f5:47:16:e4: 73:c2:e1:85:73:93:f1:6d:ea:7e:d2:4b:41:8f:eb: 00:17:79:8e:f6:97:9e:23:d3:ba:f4:31:fc:88:a6: 83:b1:8b:8d:a6:e7:19:a3:78:27:3a:de:2f:36:85: 57:26:2b:f4:a9:d4:82:2a:c7:2c:6e:6f:be:f3:5b: a3:61:cf:5a:d4:f5:d7:e2:ca:a4:a4:52:13:b0:1b: 2d:5b:fb:3f:34:d2:00:0d:4a:57:75:06:74:46:ec: 95:d4:a5:b2:c8:21:b2:08:9b:67:bd:f7:50:01:d5: e3:62:d6:09:1b:95:da:e9:4d:0f:c2:19:af:b5:f2: 99:4b:42:fb:d6:fd:37:6b:9a:d3:eb:0b:8f:c1:3f: 16:82:59:ed:b6:b6:62:42:5c:10:6d:73:0d:81:c9: 0e:3b:09:25:71:14:86:a0:0f:ec:51:34:aa:e7:a3: 56:5a:0e:fa:b0:9a:0f:ce:56:c7:e0:9a:36:01:e0: 75:2d:ce:97:15:7d:87:00:b6:70:0e:1c:ba:f4:09: 3a:f6:4e:57:1d:17:49:99:26:64:4e:72:a5:a6:d3: de:fc:8f:99:d1:40:b5:a9:da:42:18:e0:14:a6:d8: f3:ee:3a:75:ea:d1:93:b5:52:f0:e5:bd:cb:fe:0a: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:10:C7:D5:6A:28:52:1E:EB:D3:9B:A4:E5:97:91:DC:C4:11:84:E1 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:78:49:bd:c3:e3:7a:b8:55:ef:05:c7:05:a1:bd:33:b8:ec: 2e:60:42:07:0d:10:f0:7d:0e:bc:21:17:d0:70:9b:34:3a:69: 76:2b:a5:24:69:0e:be:92:c9:ca:53:30:12:8e:b0:d2:35:dc: 70:01:eb:4c:67:d8:70:df:56:50:a6:3a:f9:0a:1e:6a:16:6a: 16:44:df:64:54:db:11:1e:04:b4:fe:86:83:f7:3f:27:62:4c: c3:9b:a2:3a:2c:dc:56:64:a2:5f:28:ed:79:d0:86:f2:cf:26: e5:fc:a1:bb:29:ae:15:00:d0:68:fe:17:1a:dd:c7:79:b4:1a: 25:79:5f:20:0d:9e:9b:9e:a1:8f:86:bc:8b:0f:b4:8a:71:f1: 09:06:d1:d1:45:1e:49:3c:4a:5f:61:63:77:0e:27:b7:9c:a8: 2d:a7:72:ff:44:19:ab:3e:59:18:8c:21:f1:6e:59:aa:42:b0: 83:de:31:96:64:31:22:ad:33:da:fb:e5:a8:00:c9:9e:c6:62: aa:6c:0f:ad:63:ff:d1:5b:8c:b8:16:6b:3a:c6:13:1e:05:e2: b0:f7:77:c5:c0:47:3c:5e:fe:a7:3f:e7:36:ee:d0:e5:ae:78: 09:00:5c:90:af:eb:cf:83:bf:51:19:63:68:95:85:8b:53:2e: 05:61:36:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjQwNTE1MDY0MTUyWhcNMjQwNTIyMDY0MTUyWjAYMRYwFAYD VQQDEw02NjQ0NTkzMC02OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszcqp/+igP/MgvVHFuRzwuGFc5Pxbep+0ktBj+sAF3mO9peeI9O69DH8iKaD sYuNpucZo3gnOt4vNoVXJiv0qdSCKscsbm++81ujYc9a1PXX4sqkpFITsBstW/s/ NNIADUpXdQZ0RuyV1KWyyCGyCJtnvfdQAdXjYtYJG5Xa6U0PwhmvtfKZS0L71v03 a5rT6wuPwT8WglnttrZiQlwQbXMNgckOOwklcRSGoA/sUTSq56NWWg76sJoPzlbH 4Jo2AeB1Lc6XFX2HALZwDhy69Ak69k5XHRdJmSZkTnKlptPe/I+Z0UC1qdpCGOAU ptjz7jp16tGTtVLw5b3L/goiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcQx9Vq KFIe69ObpOWXkdzEEYThMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzeEm9w+N6uFXvBccFob0zuOwuYEIHDRDwfQ68IRfQcJs0Oml2K6Uk aQ6+ksnKUzASjrDSNdxwAetMZ9hw31ZQpjr5Ch5qFmoWRN9kVNsRHgS0/oaD9z8n YkzDm6I6LNxWZKJfKO150Ibyzybl/KG7Ka4VANBo/hca3cd5tBoleV8gDZ6bnqGP hryLD7SKcfEJBtHRRR5JPEpfYWN3Die3nKgtp3L/RBmrPlkYjCHxblmqQrCD3jGW ZDEirTPa++WoAMmexmKqbA+tY//RW4y4Fms6xhMeBeKw93fFwEc8Xv6nP+c27tDl rngJAFyQr+vPg79RGWNolYWLUy4FYTaW -----END CERTIFICATE-----Generated at Wed May 15 09:28:19 2024 by rpki-client on console-fra.rpki-client.org