$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: xaxXlIwW++kYW2h/MB6Cvf9tnrmAc5ha9wceAgLM/mY= Subject key identifier: 0F:FA:23:C7:C3:B3:4F:35:DA:DF:55:ED:70:FB:48:A4:37:04:FF:67 Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 05D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 05CE Signing time: Fri 22 Nov 2024 22:34:56 +0000 Manifest this update: Fri 22 Nov 2024 22:34:55 +0000 Manifest next update: Fri 29 Nov 2024 22:34:55 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: QApjYRseVpP+Y6z5L6/cXTPh47oURMIqaZ5/jh2ETRQ=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: JP5QB1zVHjOC8Yy1kU6cPSVIQkrzd0sn+DomcdrK1tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: Nov 22 22:34:55 2024 GMT Not After : Nov 29 22:34:55 2024 GMT Subject: CN=67410710-9250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:9c:ad:31:82:90:3f:8a:85:8f:1c:8a:97: 86:ef:62:e5:8f:ad:e2:3a:7b:bf:c3:30:2d:23:67: e3:e6:20:05:9b:d0:0e:ac:03:42:46:bb:b2:e5:1e: 50:ed:d4:58:7d:15:aa:f9:ec:ee:54:be:37:0e:81: 83:db:76:a2:a5:a5:bb:b3:e6:ce:50:12:27:2d:d0: 44:4d:9f:07:82:8b:e8:4e:d2:c1:18:d5:c4:e2:81: 9d:a6:fe:30:94:03:bb:5e:2b:61:26:e3:6e:78:30: 8c:19:20:96:9f:ab:5b:f3:f0:d2:50:c0:50:54:95: a9:d3:f6:9b:e1:a5:a6:15:47:c4:38:72:c4:e1:e5: 91:f3:ae:e0:f7:66:31:89:31:1b:c1:02:ee:c5:fb: 60:fa:6d:f2:a7:6f:dc:bf:de:cf:b1:d0:04:1e:a5: b9:bb:2a:fb:1c:41:10:18:4c:b0:59:b4:0e:2d:da: e7:e1:9a:2d:a7:82:d0:dd:ab:a6:e1:c4:25:28:1d: c3:e1:ff:0f:93:fa:fa:cf:65:7f:37:ff:59:b7:e8: bd:8f:9a:52:af:05:77:7f:54:cd:d2:17:93:c2:8c: 13:54:ad:9d:9c:2a:62:97:b7:75:fd:cc:b9:91:4d: 85:f6:95:8c:59:5b:a2:fd:70:81:72:ef:eb:ba:82: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FA:23:C7:C3:B3:4F:35:DA:DF:55:ED:70:FB:48:A4:37:04:FF:67 X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:fc:70:17:93:76:3a:6d:cf:2d:9a:de:00:9c:b1:5c:88:28: 84:ca:36:50:5d:8e:0b:f5:37:89:2f:a8:ca:46:01:b7:07:7e: 57:dd:1c:0e:1a:b3:e8:43:ac:dc:13:f4:c1:23:55:52:55:bc: 23:a6:82:cb:7c:87:2f:e2:49:cf:41:ec:ee:d0:b8:74:8f:a6: 1e:ac:d5:10:87:32:af:a6:3e:7c:bd:67:f0:4c:8b:b5:b4:d0: 6d:e4:5e:c3:7a:ba:e2:25:b6:3c:1e:eb:b6:06:b0:0c:a7:59: f8:59:38:15:61:05:8f:f5:36:48:82:ff:21:0a:59:e7:1c:9f: 8e:f3:bf:50:13:4f:70:18:c9:59:03:d2:e9:6a:d9:05:30:54: 5d:47:2e:5e:00:81:2e:bb:27:8c:e2:06:8b:a5:00:aa:b6:1c: 58:7f:73:03:c3:3b:9b:eb:f4:5b:53:55:8f:18:ee:59:e0:ab: ac:b0:dc:b5:29:94:5e:97:91:72:f0:b5:0e:6b:88:66:07:ee: a6:b9:e0:0e:45:48:80:00:6f:b3:d3:ec:40:fc:83:bd:a6:1f: af:d0:84:6e:cc:08:77:bf:b6:92:87:fa:1a:26:cf:3d:08:bc: f3:83:02:98:3e:89:3e:a0:4f:46:d7:33:54:30:05:ee:8f:ce: 9b:f4:6b:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjQxMTIyMjIzNDU1WhcNMjQxMTI5MjIzNDU1WjAYMRYwFAYD VQQDEw02NzQxMDcxMC05MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwScrTGCkD+KhY8cipeG72Llj63iOnu/wzAtI2fj5iAFm9AOrANCRruy5R5Q 7dRYfRWq+ezuVL43DoGD23aipaW7s+bOUBInLdBETZ8HgovoTtLBGNXE4oGdpv4w lAO7XithJuNueDCMGSCWn6tb8/DSUMBQVJWp0/ab4aWmFUfEOHLE4eWR867g92Yx iTEbwQLuxftg+m3yp2/cv97PsdAEHqW5uyr7HEEQGEywWbQOLdrn4Zotp4LQ3aum 4cQlKB3D4f8Pk/r6z2V/N/9Zt+i9j5pSrwV3f1TN0heTwowTVK2dnCpil7d1/cy5 kU2F9pWMWVui/XCBcu/ruoIQQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/6I8fD s0812t9V7XD7SKQ3BP9nMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw/HAXk3Y6bc8tmt4AnLFciCiEyjZQXY4L9TeJL6jKRgG3B35X3RwO GrPoQ6zcE/TBI1VSVbwjpoLLfIcv4knPQezu0Lh0j6YerNUQhzKvpj58vWfwTIu1 tNBt5F7DerriJbY8Huu2BrAMp1n4WTgVYQWP9TZIgv8hClnnHJ+O879QE09wGMlZ A9LpatkFMFRdRy5eAIEuuyeM4gaLpQCqthxYf3MDwzub6/RbU1WPGO5Z4KussNy1 KZRel5Fy8LUOa4hmB+6mueAORUiAAG+z0+xA/IO9ph+v0IRuzAh3v7aSh/oaJs89 CLzzgwKYPok+oE9G1zNUMAXuj86b9GtQ -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org