$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json) Hash identifier: Jk8HGKgM4fe2lEis1+CyRubCatTJAcLISaG6aedbLw0= Subject key identifier: 9B:01:43:A1:9F:80:E0:74:81:3C:41:90:D5:9C:09:B4:B9:A5:14:B4 Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft Manifest number: 0738 Signing time: Thu 02 May 2024 22:35:17 +0000 Manifest this update: Thu 02 May 2024 22:35:16 +0000 Manifest next update: Thu 09 May 2024 22:35:16 +0000 Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: 5IR3sirbVPFti71wtR2D7fHkMt9Y03eYjVk6mxTE3Zo=) 2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: x9zaBp6pcCOC+20pSOAYtnZh511coIBLvqokw0jiIJY=) 3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 6gNXhWjlxTyFavzBn/rXXMBvH3G8XTW1jjLT1se8iJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Validity Not Before: May 2 22:35:16 2024 GMT Not After : May 9 22:35:16 2024 GMT Subject: CN=66341524-9a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:38:69:d9:4c:ec:ab:a4:3b:f2:ef:b1:a6: 37:43:f6:3e:48:e7:c8:51:d6:85:1e:01:2c:66:e7: 66:95:38:f1:ee:7e:5e:bf:38:2e:4a:34:95:77:cb: 34:06:65:73:a4:74:0a:e2:47:81:00:14:28:22:cf: 42:30:2a:6a:c1:b5:94:66:de:95:c8:f4:35:f6:3a: e8:24:f9:9d:28:e8:78:1f:81:ee:73:82:e5:7d:3d: d0:0d:06:82:43:e6:e7:f5:18:f8:25:a1:f4:fc:f7: 1c:23:56:73:55:38:ff:1c:fc:94:e0:83:8d:01:1b: b9:68:39:dc:09:9b:4c:43:05:3e:1d:ac:55:d3:82: 14:e6:91:8b:18:cf:b6:fc:00:00:ac:11:30:89:61: 67:86:ba:df:39:45:e6:21:79:69:d7:aa:76:a9:cb: c5:47:04:cb:43:8f:05:26:47:e2:73:bc:79:b4:17: ab:29:45:a6:55:20:0f:4e:12:c9:5d:4e:95:1d:e2: 15:82:54:8a:34:78:a6:04:dd:80:24:34:fb:2d:10: 87:d0:68:a0:50:97:5b:e9:60:65:cd:22:57:15:ec: ab:78:e5:0f:e8:21:92:75:5b:13:62:5b:90:8a:c9: 7a:c3:c6:65:f3:c9:a6:d6:9d:4d:7f:49:e7:9a:58: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:01:43:A1:9F:80:E0:74:81:3C:41:90:D5:9C:09:B4:B9:A5:14:B4 X509v3 Authority Key Identifier: keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:40:48:0f:34:f3:a4:cd:d2:5e:f7:4f:a5:28:4d:46:df:21: 8e:ae:ad:33:d4:94:96:c0:ae:45:f2:76:38:7d:ef:56:75:6e: 09:85:41:77:83:0b:e1:bb:a3:b6:c0:18:00:d2:52:95:0c:9a: 2a:eb:43:26:f7:a4:08:52:8f:52:01:5d:8f:76:b6:22:16:3f: 48:31:63:ed:ad:e6:b9:ae:92:01:b7:0a:f2:a5:bd:3f:5c:8b: c7:4e:36:ed:96:5b:bc:30:95:0d:ea:ef:7e:a0:49:e5:05:10: f1:35:3e:78:34:e0:a7:b4:77:dc:28:6b:36:b1:42:d0:8c:ce: 62:1c:91:1d:e4:ca:80:b8:8f:95:01:fd:2f:db:1d:9e:28:f4: 0f:bd:ff:62:5f:7f:b3:96:a4:ad:ed:85:69:4f:95:fc:ec:a7: b7:16:f4:c1:80:35:92:98:b5:f0:73:f0:dd:60:99:a0:a7:ec: 87:74:61:78:d8:f6:6a:94:4f:9b:c6:56:ba:82:8c:ea:7e:60: a0:7e:76:68:fa:96:e8:7c:fa:17:b7:99:73:dd:14:21:9d:92: 78:bd:f4:b5:cd:6b:36:d0:db:43:0c:28:e3:88:d6:73:d4:af: c0:e5:2a:de:21:76:8c:82:9e:76:ba:8e:cf:aa:ba:3a:1b:3f: 3d:5b:3d:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJGQzkxMTAvBgNVBAUTKEEyOEFEQTc2MTFCREZEMEZBREI4MUQ4QTgwM0ExMTA5 OTAwRjc3ODAwHhcNMjQwNTAyMjIzNTE2WhcNMjQwNTA5MjIzNTE2WjAYMRYwFAYD VQQDEw02NjM0MTUyNC05YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vQ4adlM7KukO/LvsaY3Q/Y+SOfIUdaFHgEsZudmlTjx7n5evzguSjSVd8s0 BmVzpHQK4keBABQoIs9CMCpqwbWUZt6VyPQ19jroJPmdKOh4H4Huc4LlfT3QDQaC Q+bn9Rj4JaH0/PccI1ZzVTj/HPyU4IONARu5aDncCZtMQwU+HaxV04IU5pGLGM+2 /AAArBEwiWFnhrrfOUXmIXlp16p2qcvFRwTLQ48FJkfic7x5tBerKUWmVSAPThLJ XU6VHeIVglSKNHimBN2AJDT7LRCH0GigUJdb6WBlzSJXFeyreOUP6CGSdVsTYluQ isl6w8Zl88mm1p1Nf0nnmlhMlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsBQ6Gf gOB0gTxBkNWcCbS5pRS0MB8GA1UdIwQYMBaAFKKK2nYRvf0PrbgdioA6EQmQD3eA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkZDOS9CMzdGNjUyMkUx MjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9RLXR1QjJLZ0RvUkNaQVBk NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vcmFkaEc5X1EtdHVCMktnRG9SQ1pBUGQ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkZDOS9CMzdGNjUyMkUxMjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9R LXR1QjJLZ0RvUkNaQVBkNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkQEgPNPOkzdJe90+lKE1G3yGOrq0z1JSWwK5F8nY4fe9WdW4JhUF3 gwvhu6O2wBgA0lKVDJoq60Mm96QIUo9SAV2PdrYiFj9IMWPtrea5rpIBtwrypb0/ XIvHTjbtllu8MJUN6u9+oEnlBRDxNT54NOCntHfcKGs2sULQjM5iHJEd5MqAuI+V Af0v2x2eKPQPvf9iX3+zlqSt7YVpT5X87Ke3FvTBgDWSmLXwc/DdYJmgp+yHdGF4 2PZqlE+bxla6gozqfmCgfnZo+pbofPoXt5lz3RQhnZJ4vfS1zWs20NtDDCjjiNZz 1K/A5SreIXaMgp52uo7Pqro6Gz89Wz19 -----END CERTIFICATE-----Generated at Thu May 2 23:48:45 2024 by rpki-client on console-fra.rpki-client.org