$ rpki-client -vvf rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft File: oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft (raw, json) Hash identifier: Y4p23G7HxaPwxDviE/KmhLuoCvs+OzUjcuhQ+yfE3WM= Subject key identifier: A8:D1:3C:1C:63:82:04:36:9D:E4:46:61:5E:E2:A1:53:9B:AC:EC:BC Authority key identifier: A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44 Certificate issuer: /CN=A912E092/serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544 Certificate serial: 0BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft Manifest number: 0B8C Signing time: Fri 22 Nov 2024 18:47:20 +0000 Manifest this update: Fri 22 Nov 2024 18:47:20 +0000 Manifest next update: Fri 29 Nov 2024 18:47:20 +0000 Files and hashes: 1: oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl (hash: zwmOh3/cabh49C4U6UTOBtC97c6yzUx9IV1Cs7GI+wM=) 2: 0D00266818BA11EABAA29187C4F9AE02.roa (hash: 2ekbhQ9plvWKVtSxuNUxlcaY6szxwsQf8yVr8FNYsNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E092/serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544 Validity Not Before: Nov 22 18:47:20 2024 GMT Not After : Nov 29 18:47:20 2024 GMT Subject: CN=6740d1b8-423f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:fd:7d:21:21:1f:47:2c:ca:f8:b9:dc:43: fe:e6:c2:bc:60:97:0e:bd:bd:5d:46:97:3b:a5:1b: 0c:70:c2:e7:0b:aa:7e:1e:9e:b0:23:5e:e5:5f:cd: 32:ff:6b:28:af:35:98:28:a0:31:d8:4c:6e:93:a7: 0b:81:3e:28:bc:bd:8d:1c:3b:4c:c3:18:c2:84:1c: ee:4a:25:19:3c:cb:3a:06:c1:66:a3:6e:53:bc:22: c1:18:07:fb:53:60:7e:14:e6:67:c3:44:ef:34:dc: 0b:94:a6:eb:e8:1f:1a:1c:dd:6c:85:27:80:42:50: 5c:45:e9:dc:c4:0f:35:8e:dd:b3:0a:10:d6:0e:ff: 0c:ab:f8:11:a1:35:5f:c3:a8:de:95:1b:fa:18:fe: 75:c5:67:ab:e1:7f:64:75:0a:6d:1d:7b:63:df:80: c9:b4:c9:3a:6b:2e:1a:96:d4:73:3e:30:b6:c6:0b: 7a:22:ad:2c:fc:e3:91:3c:43:79:65:ca:b1:07:26: a9:68:69:5c:11:e9:34:03:47:1d:82:58:ae:41:99: e5:40:a1:0a:14:6f:b4:06:c6:69:af:6a:29:4d:d4: 73:de:06:e3:c7:d2:4b:4f:34:ad:9a:a7:e8:63:18: cc:ef:56:60:cb:52:4d:cf:05:8c:09:eb:21:63:92: 96:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D1:3C:1C:63:82:04:36:9D:E4:46:61:5E:E2:A1:53:9B:AC:EC:BC X509v3 Authority Key Identifier: keyid:A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b4:a1:50:f0:97:15:a2:9d:3e:62:e0:17:0b:f5:98:ed:d6: 0b:b7:fd:4e:0a:41:52:e3:26:33:96:91:61:7f:58:f6:34:a1: ec:cb:b8:e7:a7:e8:02:e6:e0:14:00:cb:25:47:9d:7f:dd:b6: 94:75:66:f3:22:94:57:93:1e:b4:bb:b0:b3:15:b8:c5:bb:d5: ae:d1:2d:f5:f3:82:43:c6:c1:38:12:ce:9d:28:98:f4:d7:48: 4a:1f:37:72:b9:a5:87:b9:40:46:fc:45:05:f8:a3:be:80:d7: 54:fd:c3:de:cb:cd:cc:83:5b:80:b7:5a:70:33:31:a2:f7:9e: 64:9d:34:ae:d7:e2:c5:ab:28:9f:4a:3a:b4:6a:bc:43:db:2c: 53:6b:ba:7f:cc:be:10:a3:1f:d3:c6:14:d1:88:18:2b:2d:d2: 44:94:47:c6:c7:7a:aa:44:ef:1e:fb:60:4c:0a:b1:7a:75:d2: d3:f2:f9:b6:f0:7a:65:c8:23:83:e5:2c:ff:e8:52:c1:13:ce: e6:93:28:22:11:e7:16:34:21:e3:32:43:2c:23:c5:2c:66:37: 4c:c4:35:e6:cc:34:fe:2f:15:64:68:7c:00:e9:9d:3b:06:95: ea:04:1d:4f:f2:ae:4b:f3:06:fb:b1:82:99:4a:da:ee:64:de: ad:7e:83:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUwOTIxMTAvBgNVBAUTKEExODEyNUQxRDNCRTRFNjBDRkQ5QzgyMUZDRjVBQ0NF NEVEQTY1NDQwHhcNMjQxMTIyMTg0NzIwWhcNMjQxMTI5MTg0NzIwWjAYMRYwFAYD VQQDEw02NzQwZDFiOC00MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqX9fSEhH0csyvi53EP+5sK8YJcOvb1dRpc7pRsMcMLnC6p+Hp6wI17lX80y /2sorzWYKKAx2Exuk6cLgT4ovL2NHDtMwxjChBzuSiUZPMs6BsFmo25TvCLBGAf7 U2B+FOZnw0TvNNwLlKbr6B8aHN1shSeAQlBcRencxA81jt2zChDWDv8Mq/gRoTVf w6jelRv6GP51xWer4X9kdQptHXtj34DJtMk6ay4altRzPjC2xgt6Iq0s/OORPEN5 ZcqxByapaGlcEek0A0cdgliuQZnlQKEKFG+0BsZpr2opTdRz3gbjx9JLTzStmqfo YxjM71Zgy1JNzwWMCeshY5KW5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjRPBxj ggQ2neRGYV7ioVObrOy8MB8GA1UdIwQYMBaAFKGBJdHTvk5gz9nIIfz1rM5O2mVE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTA5Mi9ERjIyQjRGQTE4 QjgxMUVBQjA2Q0E3ODVDNEY5QUUwMi9vWUVsMGRPLVRtRFAyY2doX1BXc3prN2Fa VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZRWwwZE8tVG1EUDJjZ2hfUFdzems3YVpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTA5Mi9ERjIyQjRGQTE4QjgxMUVBQjA2Q0E3ODVDNEY5QUUwMi9vWUVsMGRPLVRt RFAyY2doX1BXc3prN2FaVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAntKFQ8JcVop0+YuAXC/WY7dYLt/1OCkFS4yYzlpFhf1j2NKHsy7jn p+gC5uAUAMslR51/3baUdWbzIpRXkx60u7CzFbjFu9Wu0S3184JDxsE4Es6dKJj0 10hKHzdyuaWHuUBG/EUF+KO+gNdU/cPey83Mg1uAt1pwMzGi955knTSu1+LFqyif Sjq0arxD2yxTa7p/zL4Qox/TxhTRiBgrLdJElEfGx3qqRO8e+2BMCrF6ddLT8vm2 8HplyCOD5Sz/6FLBE87mkygiEecWNCHjMkMsI8UsZjdMxDXmzDT+LxVkaHwA6Z07 BpXqBB1P8q5L8wb7sYKZStruZN6tfoNS -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org