$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft File: OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json) Hash identifier: Qjb4LNnw09eWYqGrlIsWikW1Be8fqTfz0NxEmiOFAfc= Subject key identifier: FF:1B:94:36:E5:4D:75:1B:97:43:52:48:8B:5B:A5:14:05:BB:39:87 Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Certificate serial: 25BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft Manifest number: 25AB Signing time: Fri 22 Nov 2024 15:42:51 +0000 Manifest this update: Fri 22 Nov 2024 15:42:51 +0000 Manifest next update: Fri 29 Nov 2024 15:42:51 +0000 Files and hashes: 1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: bRhojYzmpTzO166moUCpOd+2+j6LIcEywtaOMDrHNUk=) 2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: BFYejeG5zuQmOddj66ls1RY8KbJS0CKWjVPal4XkDVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9659 (0x25bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Validity Not Before: Nov 22 15:42:51 2024 GMT Not After : Nov 29 15:42:51 2024 GMT Subject: CN=6740a67b-7b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:76:ea:2a:6f:35:9f:67:6f:03:2f:15:f2: 28:2a:9a:34:8e:c5:34:80:b5:d4:d6:bb:04:ff:f3: 2f:fa:e4:b9:5d:73:c7:5d:0a:21:39:eb:3d:a3:3e: 83:4e:03:9b:0c:bc:c2:8a:80:83:f7:9e:5b:96:21: 77:f4:8c:1b:50:f7:6a:79:6b:1c:bc:d1:c7:4f:f3: 57:1c:0b:aa:f8:21:70:9b:77:75:40:f9:12:32:06: 04:ed:38:13:db:f6:8f:6a:7c:81:2a:2b:3c:5c:18: b4:3b:97:3f:b2:02:38:c3:08:2c:2e:2a:06:1e:46: 25:14:de:80:a7:53:ae:9e:0f:4c:72:64:3c:9e:7c: 47:0d:c9:6a:10:ca:a9:26:16:5b:ca:0d:0d:dc:a9: 5b:d1:58:32:9c:d8:96:c4:80:38:3a:ba:a0:7f:3b: 3f:50:c6:cd:8d:3e:25:ea:48:01:44:e2:61:d0:0a: 74:67:ae:2d:8e:37:66:b5:04:c7:26:82:02:25:32: 01:59:f6:0f:3b:0f:38:6e:fb:46:e8:25:28:60:8b: 3f:81:24:13:70:cc:ab:a8:06:48:6d:67:59:98:56: c9:e4:57:59:ad:bc:27:65:5f:5f:38:83:48:9f:00: 3d:7b:f7:7b:20:02:b4:d8:cc:ae:28:3a:8e:02:a1: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1B:94:36:E5:4D:75:1B:97:43:52:48:8B:5B:A5:14:05:BB:39:87 X509v3 Authority Key Identifier: keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c0:b6:85:cd:db:bc:9e:2d:4e:67:dd:3b:4e:35:23:41:41: aa:16:d5:9d:82:b1:6c:24:9a:2a:ef:e6:b1:40:34:46:e9:7c: 51:ab:57:b9:3c:06:1b:0d:5b:37:5c:fb:2e:bb:e9:93:1d:b5: 36:a7:7d:9e:38:ca:0a:cd:c5:9b:22:b8:e4:82:54:8f:09:e7: f4:91:1b:38:88:27:53:8b:09:b8:a4:8f:5c:a0:37:16:e7:8c: d1:18:90:81:e3:d7:c8:9d:00:37:28:48:a6:ed:c3:ef:9b:47: f8:0f:73:d9:e0:79:8a:fc:40:b2:33:ab:5d:30:cc:4f:ba:42: 5f:19:6c:68:31:1a:92:69:51:bc:72:ca:4e:b3:6b:e0:db:65: 17:99:c3:36:f2:48:29:7c:38:79:80:14:a2:e1:b6:81:36:b5: 88:2d:01:74:5f:2f:8a:5e:b7:b8:80:97:39:8d:6f:0d:84:cc: 6c:8e:21:9d:b1:70:dc:f4:51:8d:76:d5:af:bf:93:54:7b:39: ab:b6:54:aa:a2:5e:e3:ad:68:93:41:43:a2:75:4f:43:cf:1e: 88:39:da:23:ae:90:c0:ca:18:00:ce:b9:4f:6f:94:cf:a3:18: 4f:66:e3:6d:62:11:3d:ac:91:af:5a:ef:70:af:62:03:13:f9: 95:c0:bd:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5 ODFDQTY3MzYwHhcNMjQxMTIyMTU0MjUxWhcNMjQxMTI5MTU0MjUxWjAYMRYwFAYD VQQDEw02NzQwYTY3Yi03YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9l26ipvNZ9nbwMvFfIoKpo0jsU0gLXU1rsE//Mv+uS5XXPHXQohOes9oz6D TgObDLzCioCD955bliF39IwbUPdqeWscvNHHT/NXHAuq+CFwm3d1QPkSMgYE7TgT 2/aPanyBKis8XBi0O5c/sgI4wwgsLioGHkYlFN6Ap1Oung9McmQ8nnxHDclqEMqp JhZbyg0N3Klb0VgynNiWxIA4Orqgfzs/UMbNjT4l6kgBROJh0Ap0Z64tjjdmtQTH JoICJTIBWfYPOw84bvtG6CUoYIs/gSQTcMyrqAZIbWdZmFbJ5FdZrbwnZV9fOINI nwA9e/d7IAK02MyuKDqOAqFJ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8blDbl TXUbl0NSSItbpRQFuzmHMB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4 NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkM2Ni84RkI5NThGQUY4NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJy RjRzLUYwSXdBTDJZSEtaelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkwLaFzdu8ni1OZ907TjUjQUGqFtWdgrFsJJoq7+axQDRG6XxRq1e5 PAYbDVs3XPsuu+mTHbU2p32eOMoKzcWbIrjkglSPCef0kRs4iCdTiwm4pI9coDcW 54zRGJCB49fInQA3KEim7cPvm0f4D3PZ4HmK/ECyM6tdMMxPukJfGWxoMRqSaVG8 cspOs2vg22UXmcM28kgpfDh5gBSi4baBNrWILQF0Xy+KXre4gJc5jW8NhMxsjiGd sXDc9FGNdtWvv5NUezmrtlSqol7jrWiTQUOidU9Dzx6IOdojrpDAyhgAzrlPb5TP oxhPZuNtYhE9rJGvWu9wr2IDE/mVwL3S -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org