$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: 8BXsYaSOP5yT1wcx/SrBknbIuaig90Lti0Nf8qeprUk= Subject key identifier: A1:BA:63:BD:D6:47:9F:67:03:D9:9A:40:60:E5:92:EE:70:23:75:F4 Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 0820 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 081A Signing time: Fri 22 Nov 2024 20:33:26 +0000 Manifest this update: Fri 22 Nov 2024 20:33:26 +0000 Manifest next update: Fri 29 Nov 2024 20:33:26 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: tMDnw84mqGM9Syqcz0EY7LmKNT7Ijm90fFrmRzDMKbk=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: d1mOeGTfFGoxO3FpLGtyELB1KUYkFiEXG3WDXupnmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2080 (0x820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Nov 22 20:33:26 2024 GMT Not After : Nov 29 20:33:26 2024 GMT Subject: CN=6740ea96-aac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:ec:62:17:fa:d2:ed:48:75:67:b1:16:9d: 0e:6e:6d:77:0c:8f:ed:8e:9a:a3:60:fe:85:5b:98: d9:a6:eb:25:b0:f7:aa:d0:ac:62:08:8a:85:c0:4a: 9b:1f:08:30:35:a3:4a:15:94:e7:6e:a2:b6:69:51: 40:6b:39:48:31:e1:c5:fc:0a:20:3e:2a:7d:81:67: 23:65:43:f3:b1:f3:1d:99:c3:cd:21:3e:33:39:71: 5d:15:d4:32:82:45:6a:86:0a:9f:bb:b6:75:44:cb: 2a:e9:16:fa:19:57:71:19:51:65:40:7d:b5:a5:ae: 01:3c:a5:a3:cf:b5:ab:c5:22:ec:40:36:94:1f:91: 2c:84:cd:15:1f:50:ec:e7:99:c5:40:45:1f:da:8d: 6f:fa:c5:f5:77:3e:61:2d:e8:38:dc:ff:a6:d3:cd: 4e:ea:83:ee:3b:41:83:da:d6:6e:08:39:c3:2d:2d: 8a:c5:56:67:96:2b:03:e7:a0:d1:24:c0:5a:81:39: f9:21:a3:a0:23:b0:02:50:6c:d4:87:56:ac:64:5d: 1a:40:a0:bb:b9:61:b2:fe:2a:bd:79:35:06:b9:af: 52:d9:12:54:4b:c5:79:d6:8e:fe:56:c6:3c:48:91: e0:a9:51:9f:96:e5:43:e5:d9:1a:6c:20:c9:7a:46: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BA:63:BD:D6:47:9F:67:03:D9:9A:40:60:E5:92:EE:70:23:75:F4 X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:16:88:87:5a:f0:37:80:fe:bc:72:a3:1d:f2:a5:1d:22:22: f0:b3:6b:24:50:1b:a9:82:de:dc:f0:e0:54:d7:2c:1c:7f:dd: 95:bb:80:c4:b0:56:5f:9f:82:6b:fa:17:06:16:a8:26:99:f7: 9f:90:c2:b1:ef:47:d1:21:f7:81:c5:42:00:e3:15:7c:16:b7: c6:c9:49:e5:1a:69:2b:2e:28:c3:64:2f:ec:3a:bf:28:dc:79: 56:5e:cf:98:c7:89:ab:a1:e0:a8:86:5a:c4:c6:84:c4:5a:67: 9f:ce:01:29:ad:b1:ed:fc:80:83:af:43:db:35:ad:cb:be:e9: d3:3a:51:12:30:29:8f:f4:76:3b:c5:a4:30:94:97:e4:f5:dd: 6a:c7:b7:c8:74:74:d3:44:d2:e9:8a:84:36:65:8b:7b:d5:4a: fa:da:88:69:94:82:75:8a:68:21:c7:97:cf:7e:2d:03:39:58: 9f:1e:73:7e:50:c0:d3:be:96:27:08:06:24:f8:dc:20:3a:cb: 5b:a5:13:c9:4f:8c:fd:e9:d8:8e:08:98:08:d2:7a:48:12:fc: 7d:32:51:55:86:54:f3:22:30:85:d7:40:3e:92:0e:af:1f:fc: 59:5c:b0:be:2f:cd:08:6c:ff:f6:89:69:99:2d:7a:e3:00:9e: 3f:55:1b:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjQxMTIyMjAzMzI2WhcNMjQxMTI5MjAzMzI2WjAYMRYwFAYD VQQDEw02NzQwZWE5Ni1hYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGrsYhf60u1IdWexFp0Obm13DI/tjpqjYP6FW5jZpuslsPeq0KxiCIqFwEqb HwgwNaNKFZTnbqK2aVFAazlIMeHF/AogPip9gWcjZUPzsfMdmcPNIT4zOXFdFdQy gkVqhgqfu7Z1RMsq6Rb6GVdxGVFlQH21pa4BPKWjz7WrxSLsQDaUH5EshM0VH1Ds 55nFQEUf2o1v+sX1dz5hLeg43P+m081O6oPuO0GD2tZuCDnDLS2KxVZnlisD56DR JMBagTn5IaOgI7ACUGzUh1asZF0aQKC7uWGy/iq9eTUGua9S2RJUS8V51o7+VsY8 SJHgqVGfluVD5dkabCDJeka9KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKG6Y73W R59nA9maQGDlku5wI3X0MB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbFoiHWvA3gP68cqMd8qUdIiLws2skUBupgt7c8OBU1ywcf92Vu4DE sFZfn4Jr+hcGFqgmmfefkMKx70fRIfeBxUIA4xV8FrfGyUnlGmkrLijDZC/sOr8o 3HlWXs+Yx4mroeCohlrExoTEWmefzgEprbHt/ICDr0PbNa3LvunTOlESMCmP9HY7 xaQwlJfk9d1qx7fIdHTTRNLpioQ2ZYt71Ur62ohplIJ1imghx5fPfi0DOVifHnN+ UMDTvpYnCAYk+NwgOstbpRPJT4z96diOCJgI0npIEvx9MlFVhlTzIjCF10A+kg6v H/xZXLC+L80IbP/2iWmZLXrjAJ4/VRtw -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:23 2024 by rpki-client on console-ams.rpki-client.org