$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: ubXCHXaEhPXu/bTFmEIL30KbAoSPYf/4Y13+r0LZvZc= Subject key identifier: 07:3C:7A:44:1F:57:1C:F6:69:82:10:83:1E:DC:56:F7:B6:1D:65:64 Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 011D Signing time: Sat 23 Nov 2024 02:57:07 +0000 Manifest this update: Sat 23 Nov 2024 02:57:07 +0000 Manifest next update: Sat 30 Nov 2024 02:57:07 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: QAl/3Ya+fFdYPS95jem9Ne68wFPuAMtNDmO/PSJMqcw=) 2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: ZZdPnVowwXd341PXeuTZoAzmaTvlltdwYKchQCyVQrk=) 3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: qWWNyKzcmb7NGh+jIMofc7R/HFDVXogw0r/eVAACwfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: Nov 23 02:57:07 2024 GMT Not After : Nov 30 02:57:07 2024 GMT Subject: CN=67414483-f93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:4d:f3:60:3a:4f:82:35:0d:65:a0:07:c4: 9c:bb:71:93:27:ca:34:1c:8c:0b:71:d3:d0:d1:46: de:c6:46:8c:47:4a:f8:82:8d:39:ba:57:b6:99:ab: 5f:37:9f:ea:b5:0e:1c:01:0f:2c:28:22:88:ea:54: 52:11:19:c6:9c:eb:45:94:8b:40:90:95:9e:a1:0f: a3:08:71:e7:52:67:00:ed:e5:37:ba:ab:e3:9a:f6: a3:b0:2e:37:5b:b3:8d:04:6c:fd:e1:37:e2:1a:82: cd:d0:dc:08:b2:ad:57:99:dd:61:c6:aa:da:a4:18: a8:27:d3:ee:85:ae:8f:92:6c:51:22:c0:cd:2e:40: bc:65:81:43:d8:fd:44:40:8a:9d:c8:b8:be:2e:0d: 04:91:3d:26:23:34:49:bf:1a:41:7d:d9:27:d6:ea: a2:97:0e:e3:ff:d6:b1:90:c0:57:01:ae:23:d4:de: 4b:ea:19:a7:4e:b1:30:b8:22:79:3f:b9:3b:e3:cc: 6e:1d:fe:69:13:fb:84:76:3d:68:b2:dd:53:5f:a0: a8:2b:1e:0c:c6:06:00:f8:4f:77:2b:b5:4f:89:15: 46:cd:7c:5c:5d:93:cc:bd:12:3c:23:df:f1:4b:f6: f3:b9:72:28:6b:20:e3:c2:ca:12:24:5a:98:d4:07: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3C:7A:44:1F:57:1C:F6:69:82:10:83:1E:DC:56:F7:B6:1D:65:64 X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8a:8d:a6:a2:07:44:45:a5:75:5d:ab:4c:e0:78:c7:0e:91: ec:5e:d2:03:bd:75:9f:d7:17:87:fb:d2:e1:fc:35:df:fd:b2: 2b:fd:24:ab:95:a5:b3:ee:d3:80:10:f6:3a:29:9a:3c:5e:fc: f9:39:04:6e:3e:41:80:7a:e5:31:d3:8d:b2:0b:d7:c4:e8:a5: e1:01:9f:1c:07:e2:c7:ad:87:c6:02:8a:02:07:b6:72:a4:d1: e3:93:a2:d5:8f:75:6e:39:ad:74:ad:75:77:7d:3a:13:9c:07: 86:4d:13:11:28:f0:5d:17:8f:99:f5:e3:65:c8:d5:a9:1a:f3: 0e:7a:bf:32:f2:d7:06:df:08:52:ad:8c:ef:68:b8:13:74:b0: 92:b6:98:dc:30:7c:6b:f7:64:b3:8a:ee:3a:72:08:b6:c5:74: 4b:eb:97:41:28:1e:80:65:bb:17:8e:3d:0d:b5:7e:b0:9e:bb: e9:9a:03:66:5c:a1:97:e1:39:47:55:8f:f4:65:4a:45:66:e3: d6:86:d8:b6:94:14:90:da:f2:48:4c:12:2a:ce:f1:be:56:c7: 47:ad:0f:19:84:18:5b:4e:95:d6:67:95:85:f3:64:dc:b4:9c: f2:bb:39:c3:c4:83:33:bf:0d:52:6f:38:7b:26:49:8a:80:43: d0:49:24:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjQxMTIzMDI1NzA3WhcNMjQxMTMwMDI1NzA3WjAYMRYwFAYD VQQDEw02NzQxNDQ4My1mOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNxN82A6T4I1DWWgB8Scu3GTJ8o0HIwLcdPQ0UbexkaMR0r4go05ule2matf N5/qtQ4cAQ8sKCKI6lRSERnGnOtFlItAkJWeoQ+jCHHnUmcA7eU3uqvjmvajsC43 W7ONBGz94TfiGoLN0NwIsq1Xmd1hxqrapBioJ9Puha6PkmxRIsDNLkC8ZYFD2P1E QIqdyLi+Lg0EkT0mIzRJvxpBfdkn1uqilw7j/9axkMBXAa4j1N5L6hmnTrEwuCJ5 P7k748xuHf5pE/uEdj1ost1TX6CoKx4MxgYA+E93K7VPiRVGzXxcXZPMvRI8I9/x S/bzuXIoayDjwsoSJFqY1AdgmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc8ekQf Vxz2aYIQgx7cVve2HWVkMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBio2mogdERaV1XatM4HjHDpHsXtIDvXWf1xeH+9Lh/DXf/bIr/SSr laWz7tOAEPY6KZo8Xvz5OQRuPkGAeuUx042yC9fE6KXhAZ8cB+LHrYfGAooCB7Zy pNHjk6LVj3VuOa10rXV3fToTnAeGTRMRKPBdF4+Z9eNlyNWpGvMOer8y8tcG3whS rYzvaLgTdLCStpjcMHxr92Sziu46cgi2xXRL65dBKB6AZbsXjj0NtX6wnrvpmgNm XKGX4TlHVY/0ZUpFZuPWhti2lBSQ2vJITBIqzvG+VsdHrQ8ZhBhbTpXWZ5WF82Tc tJzyuznDxIMzvw1Sbzh7JkmKgEPQSSTD -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org