$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft File: O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json) Hash identifier: MCO0LH6Vq4qIz9XsCw+zvz8i3zJfgbVOs2w6zC53hvA= Subject key identifier: 9A:C8:06:C9:9F:4F:B8:BE:B3:7E:5E:BC:22:B1:BC:AC:7C:9D:17:B4 Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Certificate serial: 06A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft Manifest number: 069C Signing time: Fri 22 Nov 2024 21:48:40 +0000 Manifest this update: Fri 22 Nov 2024 21:48:40 +0000 Manifest next update: Fri 29 Nov 2024 21:48:40 +0000 Files and hashes: 1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: ae4jc3Fiyvau8n61dJbc64J965HnMj6WUrohxt+Q4kU=) 2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: xWLeLVRMoM3vsznlIkLX9f1sa9MuvduYuWbPLb+gCyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Validity Not Before: Nov 22 21:48:40 2024 GMT Not After : Nov 29 21:48:40 2024 GMT Subject: CN=6740fc38-e99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:67:ff:bc:e0:22:6c:b7:ae:6f:87:24:02: 4a:3c:8e:9d:8a:31:b7:3e:16:1e:9d:0d:4a:3a:36: c2:49:e0:b2:c7:be:71:72:ef:36:01:f7:cf:bc:72: 3b:89:5e:06:0a:6c:8f:9a:64:d2:fd:97:96:aa:2f: 31:d8:bf:1a:c0:d2:3c:8c:ce:6b:e0:c3:5c:fe:60: c5:27:53:b4:23:10:80:e8:2d:0e:9d:06:c7:c4:6d: de:67:b9:e2:d8:f1:1e:ff:b9:60:bc:ff:f3:2e:1a: 12:0b:73:2f:e1:fc:4c:8e:41:39:f9:c2:23:71:53: 4e:83:81:3b:82:11:91:42:18:84:4c:53:70:51:1e: c6:7a:90:2b:c1:27:57:d4:97:8e:f3:0f:bc:e6:e7: 9c:d0:a3:02:4d:d4:20:5d:a0:20:cb:13:9f:79:f8: a4:c1:41:99:95:06:d6:d7:4c:7a:33:72:63:4a:83: c7:d1:38:7e:dc:72:32:2a:90:f5:d9:ba:4c:1d:b9: bf:3a:2c:1e:06:a6:b0:a4:b3:69:82:d7:20:b0:55: 2f:60:c3:19:9e:40:a4:c1:11:53:c1:b6:75:8a:1e: 30:b1:12:ea:d4:04:20:53:c3:a8:5d:86:77:0d:da: 47:ac:4a:24:32:4b:4d:3c:f6:e8:a9:63:ba:57:5d: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C8:06:C9:9F:4F:B8:BE:B3:7E:5E:BC:22:B1:BC:AC:7C:9D:17:B4 X509v3 Authority Key Identifier: keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:49:dd:25:b8:e2:e6:6f:6a:f3:33:2c:12:34:7e:49:3a:a8: f6:1e:18:55:3b:83:d0:e1:2b:ba:28:b6:a9:2b:80:6d:14:76: 0f:e4:93:02:f9:08:fa:b5:93:76:e6:66:e3:e3:ab:7e:4a:b7: a9:1f:d0:f1:c7:23:0a:a2:4d:cc:9f:d0:23:93:77:0b:40:ab: 2b:d2:fc:cf:57:f6:87:c7:2e:64:f5:06:c2:59:4d:2f:ae:e5: 20:f4:90:16:16:48:07:f6:90:21:cd:d6:cb:61:10:df:4f:61: 3b:11:03:1a:68:f9:b8:6e:60:e7:e5:f6:2e:74:0d:c0:86:25: ed:f3:59:71:23:7d:58:b5:5f:d3:1c:e5:81:08:35:82:5c:d9: 22:45:51:e0:7f:fe:70:8b:4b:70:c9:16:bf:52:11:0d:e9:92: c0:8f:cf:61:6c:6e:d6:b3:fb:a7:4e:cf:50:27:2d:c6:1a:8d: 5b:44:6d:b6:3f:e0:1a:d5:c1:37:54:af:7d:b6:87:7c:f5:74: ea:62:fe:c1:49:d3:aa:c4:f5:2d:fd:b8:79:c5:99:6b:16:cc: 30:36:53:64:56:43:5a:82:4f:c4:97:dc:59:c3:50:ec:60:c0: 1b:7f:a4:f0:b0:d8:27:ec:90:d3:68:54:d3:f8:d6:c8:3a:94: 2a:56:5c:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk4MEYxMTAvBgNVBAUTKDNCQzZCMzIxRkQ3QjYwQzU2MEYxNUQ3RDI0Q0FDNUEz Mzc0NDBGQjQwHhcNMjQxMTIyMjE0ODQwWhcNMjQxMTI5MjE0ODQwWjAYMRYwFAYD VQQDEw02NzQwZmMzOC1lOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz5n/7zgImy3rm+HJAJKPI6dijG3PhYenQ1KOjbCSeCyx75xcu82AffPvHI7 iV4GCmyPmmTS/ZeWqi8x2L8awNI8jM5r4MNc/mDFJ1O0IxCA6C0OnQbHxG3eZ7ni 2PEe/7lgvP/zLhoSC3Mv4fxMjkE5+cIjcVNOg4E7ghGRQhiETFNwUR7GepArwSdX 1JeO8w+85uec0KMCTdQgXaAgyxOfefikwUGZlQbW10x6M3JjSoPH0Th+3HIyKpD1 2bpMHbm/OiweBqawpLNpgtcgsFUvYMMZnkCkwRFTwbZ1ih4wsRLq1AQgU8OoXYZ3 DdpHrEokMktNPPboqWO6V13WAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrIBsmf T7i+s35evCKxvKx8nRe0MB8GA1UdIwQYMBaAFDvGsyH9e2DFYPFdfSTKxaM3RA+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTgwRi8xNjYxN0Q2QzQ4 MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lNVmc4VjE5Sk1yRm96ZEVE N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL084YXpJZjE3WU1WZzhWMTlKTXJGb3pkRUQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTgwRi8xNjYxN0Q2QzQ4MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lN Vmc4VjE5Sk1yRm96ZEVEN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Sd0luOLmb2rzMywSNH5JOqj2HhhVO4PQ4Su6KLapK4BtFHYP5JMC +Qj6tZN25mbj46t+SrepH9DxxyMKok3Mn9Ajk3cLQKsr0vzPV/aHxy5k9QbCWU0v ruUg9JAWFkgH9pAhzdbLYRDfT2E7EQMaaPm4bmDn5fYudA3AhiXt81lxI31YtV/T HOWBCDWCXNkiRVHgf/5wi0twyRa/UhEN6ZLAj89hbG7Ws/unTs9QJy3GGo1bRG22 P+Aa1cE3VK99tod89XTqYv7BSdOqxPUt/bh5xZlrFswwNlNkVkNagk/El9xZw1Ds YMAbf6TwsNgn7JDTaFTT+NbIOpQqVlyQ -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org