$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: YkHdAtB2RYQzEULZEoFpym5Iy+JAAMvW1Ei0khfV5xA= Subject key identifier: 36:3E:E9:4D:B6:4D:90:4A:03:15:9D:20:D9:22:7E:C9:59:ED:76:93 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 0574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 056F Signing time: Fri 22 Nov 2024 22:53:24 +0000 Manifest this update: Fri 22 Nov 2024 22:53:24 +0000 Manifest next update: Fri 29 Nov 2024 22:53:24 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: dVuB6tPGgc3ZAi2kAiN/bt3967Y3PUj+qa0rdcWCEKg=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: fabeHirzSfMRjgTkSzBs+NINgYgVd5ARAuZRjwIHiWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Nov 22 22:53:24 2024 GMT Not After : Nov 29 22:53:24 2024 GMT Subject: CN=67410b64-fd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:01:ac:ee:0e:62:6f:21:9a:1d:f0:42:d3: c1:3b:90:cd:6c:db:4f:48:b3:55:44:34:f2:93:33: 6d:a1:fe:c8:2b:9c:9b:7e:1a:9c:3d:02:bf:72:a0: dc:37:29:c6:25:86:be:de:a3:ed:f2:fc:23:da:60: b0:4f:ed:65:9a:ec:b4:0f:b2:75:d4:02:15:37:d5: e7:bd:ab:e1:0d:3a:6b:0c:61:b5:cf:32:4a:2f:01: 8f:17:8d:80:ad:a0:9c:fe:12:dc:c1:5b:a1:60:00: 80:95:ea:90:28:ca:e5:66:67:85:ac:85:87:57:89: b4:ce:04:83:7f:a6:75:09:92:e7:da:7e:bc:65:23: 93:da:1b:e7:48:37:d0:68:52:b9:8c:93:3a:c4:c6: 26:4f:54:74:be:d2:1b:10:83:e1:fe:ee:32:8f:32: 26:03:24:03:d4:b1:92:63:5e:2f:3a:1b:d9:70:0b: d5:fc:65:d2:63:08:a1:e5:04:a4:11:fb:66:21:e0: 85:1f:52:e3:18:81:cf:73:98:02:ff:dc:65:63:fc: 25:7e:bf:f9:b3:b1:0d:af:3e:db:14:47:5f:c8:fe: 67:e4:9c:30:30:ed:b5:55:43:07:f9:82:ef:3b:90: 12:c1:65:c1:04:61:0a:ed:c0:47:7c:f8:e6:af:07: 63:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3E:E9:4D:B6:4D:90:4A:03:15:9D:20:D9:22:7E:C9:59:ED:76:93 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:81:6b:83:2b:01:cf:6a:5f:04:58:33:e2:46:4d:0f:7e:cd: 74:ee:6b:bb:76:08:fe:47:4a:12:fe:44:0f:92:a8:74:b7:b7: 91:fc:ec:11:e1:61:c9:e8:61:96:06:b9:99:6e:32:37:b1:3d: 1f:9c:14:0c:5b:d4:1a:d7:69:ee:4f:51:5d:a6:05:09:88:f8: fe:47:ca:09:41:b5:7a:7b:2b:ca:31:d4:37:26:4b:3f:e6:bb: 54:a0:61:ff:dc:77:2d:7a:75:02:0a:ff:3a:d6:da:98:2c:d9: a4:ee:47:7c:de:b6:30:a6:5d:9e:6e:ab:19:ca:11:47:b9:5e: 90:13:2c:a9:64:29:8f:26:1d:11:72:32:d2:04:54:ba:da:3d: af:e2:c7:51:ca:78:0c:55:56:8a:f6:96:c9:69:42:4b:c3:46: 2d:a9:c0:b6:80:08:9b:d7:eb:74:33:c5:6e:07:ce:18:c7:96: 94:df:59:d4:f8:b5:d0:f0:a7:5f:e2:23:88:f9:cc:90:0d:d8: 47:0f:7a:7b:2d:26:4f:83:5b:67:53:2d:f0:b9:a7:ab:3d:71: 51:66:82:e3:36:14:32:2e:7b:de:c8:88:2f:b0:51:d8:dd:6a: 75:52:53:55:9f:38:a8:2b:a9:b3:23:b1:fd:cb:b9:37:59:61: f9:f4:92:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjQxMTIyMjI1MzI0WhcNMjQxMTI5MjI1MzI0WjAYMRYwFAYD VQQDEw02NzQxMGI2NC1mZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtIBrO4OYm8hmh3wQtPBO5DNbNtPSLNVRDTykzNtof7IK5ybfhqcPQK/cqDc NynGJYa+3qPt8vwj2mCwT+1lmuy0D7J11AIVN9XnvavhDTprDGG1zzJKLwGPF42A raCc/hLcwVuhYACAleqQKMrlZmeFrIWHV4m0zgSDf6Z1CZLn2n68ZSOT2hvnSDfQ aFK5jJM6xMYmT1R0vtIbEIPh/u4yjzImAyQD1LGSY14vOhvZcAvV/GXSYwih5QSk EftmIeCFH1LjGIHPc5gC/9xlY/wlfr/5s7ENrz7bFEdfyP5n5JwwMO21VUMH+YLv O5ASwWXBBGEK7cBHfPjmrwdjZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY+6U22 TZBKAxWdINkifslZ7XaTMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLgWuDKwHPal8EWDPiRk0Pfs107mu7dgj+R0oS/kQPkqh0t7eR/OwR 4WHJ6GGWBrmZbjI3sT0fnBQMW9Qa12nuT1FdpgUJiPj+R8oJQbV6eyvKMdQ3Jks/ 5rtUoGH/3HctenUCCv861tqYLNmk7kd83rYwpl2ebqsZyhFHuV6QEyypZCmPJh0R cjLSBFS62j2v4sdRyngMVVaK9pbJaUJLw0YtqcC2gAib1+t0M8VuB84Yx5aU31nU +LXQ8Kdf4iOI+cyQDdhHD3p7LSZPg1tnUy3wuaerPXFRZoLjNhQyLnveyIgvsFHY 3Wp1UlNVnzioK6mzI7H9y7k3WWH59JJz -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org