$ rpki-client -vvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft File: Ok9ILhJcCNuDBRbVGkot8eCqiso.mft (raw, json) Hash identifier: A9OnfjvrWuB/HxRp0mXKz+tU7ZeVwp2GVu7cGN8XfQo= Subject key identifier: FA:C2:F8:2A:A1:F9:AC:01:97:11:F8:2E:67:16:22:F4:25:90:6A:54 Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA Certificate issuer: /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft Manifest number: 09EC Signing time: Fri 22 Nov 2024 19:39:32 +0000 Manifest this update: Fri 22 Nov 2024 19:39:32 +0000 Manifest next update: Fri 29 Nov 2024 19:39:32 +0000 Files and hashes: 1: Ok9ILhJcCNuDBRbVGkot8eCqiso.crl (hash: IQFPm76V6iPKmn3ijYKuFoGY+LVKwBg7XBtIR6dYXuE=) 2: F25A6266796A11EB82E0EE24C4F9AE02.roa (hash: aNxxH/k6H9pUK4+Yh6tMJ5W3Dxa/fkGC+OopIVqyBEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Validity Not Before: Nov 22 19:39:32 2024 GMT Not After : Nov 29 19:39:32 2024 GMT Subject: CN=6740ddf4-ad92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:48:4a:9f:3e:9a:c6:d3:3d:bf:07:8b:86: 7a:41:57:c7:f0:63:81:ea:12:a1:68:dc:b1:2a:69: e7:4c:6b:4e:52:ae:27:4b:ba:68:da:d4:9e:bc:c8: 96:04:58:a5:00:b9:f6:45:4e:f3:2e:c5:77:a0:49: 6b:27:67:65:cf:9c:f8:00:14:c3:8d:da:a9:75:63: 6f:5d:12:ee:d1:0d:6b:3f:1b:86:23:d6:bf:fe:27: 96:cd:13:56:69:96:58:7d:f2:b5:a9:ba:2f:6f:57: 63:a5:ef:6b:f3:cb:50:a5:1e:f7:dc:20:40:17:48: cb:1b:80:ab:19:a4:a1:16:4e:00:ae:3a:10:51:44: 6b:cf:d7:bd:7b:7e:75:b3:0d:4c:ec:46:f4:0b:c0: 39:6c:6e:d0:b8:71:fe:7a:af:ed:8f:e4:18:7e:13: b0:41:b4:65:a9:0c:4d:40:c9:33:fd:d1:1c:fe:2f: bb:d4:b8:87:a0:dc:48:db:50:91:0f:74:f4:fd:90: 88:b8:07:4b:cb:62:05:ea:b0:2b:1b:07:99:3f:8e: 57:aa:e6:3a:84:82:00:ea:f7:8b:06:0a:9f:2b:d8: 75:4e:4d:c5:8c:57:13:9e:14:06:87:1b:59:f1:79: fb:29:0e:3f:db:5c:47:80:58:5e:da:81:ac:4d:70: a3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C2:F8:2A:A1:F9:AC:01:97:11:F8:2E:67:16:22:F4:25:90:6A:54 X509v3 Authority Key Identifier: keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:31:a1:2c:83:40:25:3d:c8:24:ef:0d:0f:27:15:81:8a:73: 4e:e3:b3:3f:07:97:f3:01:d1:c0:4d:a3:04:6a:4c:24:59:cb: 06:fe:25:ae:d8:bc:ca:a5:69:6f:6a:81:b7:b2:7a:9e:f2:5b: 52:d8:1f:5d:3b:09:a3:ed:2b:07:ac:21:7d:00:6c:6d:6c:bc: 28:f4:f9:3f:e5:ef:7d:b5:43:24:c5:19:9b:b2:15:03:bf:00: c5:a0:da:13:44:b3:11:c2:02:f2:87:f5:4c:6c:8e:cf:3b:d2: 8d:64:3a:6d:4c:53:fb:27:6f:9d:07:c5:51:08:d9:34:6d:64: 33:67:64:50:59:77:73:5b:c6:ad:fa:1a:98:35:c9:78:79:7b: ac:c2:c8:bd:d9:08:8e:0e:ab:7e:c4:c4:e7:a5:f4:4e:c2:6e: 2d:4b:a2:76:3f:11:78:ab:fe:a5:a5:3f:d3:15:1d:77:c1:05: e7:5d:26:17:9a:92:a5:0c:fb:56:57:a3:38:f8:96:0b:d1:fb: 65:d7:7a:95:ce:bd:48:d7:13:d5:a9:7a:7f:37:f8:f0:6d:d4: e9:8c:fa:2c:f2:f8:8b:78:3f:cc:c1:9a:c1:42:42:5c:98:fb: 3e:92:1f:0f:c3:c8:dd:49:a0:16:07:a0:5b:f3:93:38:84:a7: 08:f9:5f:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxNTgxMTAvBgNVBAUTKDNBNEY0ODJFMTI1QzA4REI4MzA1MTZENTFBNEEyREYx RTBBQThBQ0EwHhcNMjQxMTIyMTkzOTMyWhcNMjQxMTI5MTkzOTMyWjAYMRYwFAYD VQQDEw02NzQwZGRmNC1hZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcJISp8+msbTPb8Hi4Z6QVfH8GOB6hKhaNyxKmnnTGtOUq4nS7po2tSevMiW BFilALn2RU7zLsV3oElrJ2dlz5z4ABTDjdqpdWNvXRLu0Q1rPxuGI9a//ieWzRNW aZZYffK1qbovb1djpe9r88tQpR733CBAF0jLG4CrGaShFk4ArjoQUURrz9e9e351 sw1M7Eb0C8A5bG7QuHH+eq/tj+QYfhOwQbRlqQxNQMkz/dEc/i+71LiHoNxI21CR D3T0/ZCIuAdLy2IF6rArGweZP45XquY6hIIA6veLBgqfK9h1Tk3FjFcTnhQGhxtZ 8Xn7KQ4/21xHgFhe2oGsTXCjNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrC+Cqh +awBlxH4LmcWIvQlkGpUMB8GA1UdIwQYMBaAFDpPSC4SXAjbgwUW1RpKLfHgqorK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzE1OC9BRTUxRDgwMjY3 M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NOdURCUmJWR2tvdDhlQ3Fp c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rOUlMaEpjQ051REJSYlZHa290OGVDcWlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzE1OC9BRTUxRDgwMjY3M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NO dURCUmJWR2tvdDhlQ3Fpc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADMaEsg0AlPcgk7w0PJxWBinNO47M/B5fzAdHATaMEakwkWcsG/iWu 2LzKpWlvaoG3snqe8ltS2B9dOwmj7SsHrCF9AGxtbLwo9Pk/5e99tUMkxRmbshUD vwDFoNoTRLMRwgLyh/VMbI7PO9KNZDptTFP7J2+dB8VRCNk0bWQzZ2RQWXdzW8at +hqYNcl4eXuswsi92QiODqt+xMTnpfROwm4tS6J2PxF4q/6lpT/TFR13wQXnXSYX mpKlDPtWV6M4+JYL0ftl13qVzr1I1xPVqXp/N/jwbdTpjPos8viLeD/MwZrBQkJc mPs+kh8Pw8jdSaAWB6Bb85M4hKcI+V/b -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org