$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: GV+7XRdRJsg1YZG+mdMjXu4r4NJhTgpI8flhA62iQIA= Subject key identifier: 7E:E1:F6:F9:77:57:AC:81:F3:DB:1E:9D:EC:28:FE:0C:44:BD:80:22 Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: 14 Signing time: Sat 23 Nov 2024 05:57:58 +0000 Manifest this update: Sat 23 Nov 2024 05:57:58 +0000 Manifest next update: Sat 30 Nov 2024 05:57:58 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: 8NXsU87rJ2xwvOS6qHc7mzsK3307LMKn6jbtk7vgpeQ=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Nov 23 05:57:58 2024 GMT Not After : Nov 30 05:57:58 2024 GMT Subject: CN=67416ee6-1345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:cc:9c:18:df:ed:16:55:2f:a9:cb:4d:ec: f5:63:46:25:65:84:5a:4d:bc:19:75:38:41:b4:41: 1b:f5:42:da:3a:bd:76:d1:bd:01:d4:86:91:66:48: e2:56:2f:dd:39:eb:b4:53:22:b0:cc:d3:b8:2f:b7: c7:43:69:70:e5:a3:37:b8:0d:5a:ba:79:bc:e3:1f: 0e:52:1b:25:82:20:1c:03:42:98:8e:aa:78:69:f5: 7c:9e:14:89:e7:71:80:54:2d:a4:69:90:bb:52:08: 23:81:cc:b1:58:7b:50:8c:ed:47:2e:16:34:b1:87: 49:18:7d:8f:3b:ac:af:41:1b:0a:17:f7:38:de:98: 3a:a9:9d:1b:d8:fe:e3:95:db:65:86:e5:2b:89:14: a9:91:c2:4d:22:5b:39:e2:9c:96:96:03:9c:e7:57: a1:52:21:15:23:6b:82:1c:36:fc:5d:77:84:5a:ef: d4:1f:63:4d:19:05:00:48:58:4e:34:7c:4a:29:16: a5:d5:96:03:4b:41:7f:ff:a1:cf:96:4a:34:36:c0: a0:76:06:2e:92:f1:cf:1d:1c:4e:4c:31:65:11:40: 0c:f0:17:cb:99:8b:22:00:03:ed:7d:ee:bb:ab:94: b9:f8:4c:91:70:83:54:67:e8:4a:6e:01:e4:f5:1f: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E1:F6:F9:77:57:AC:81:F3:DB:1E:9D:EC:28:FE:0C:44:BD:80:22 X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b5:fe:fb:ca:05:91:cc:2f:f4:ee:5a:58:35:09:0a:13:9c: f9:27:e5:aa:13:84:f5:79:35:8b:75:cb:4f:53:2d:da:c1:36: 24:51:a1:ef:cd:0f:3c:a4:a3:f9:7b:2d:76:4b:59:93:71:21: 57:5c:5d:c8:ab:b1:19:0e:c4:f6:b5:95:95:58:d6:fe:c6:6b: 85:75:bd:dc:0f:71:0d:67:50:61:5d:3f:e4:e7:27:c1:d0:3c: 85:90:19:27:4d:91:a8:2b:79:33:64:8d:6c:44:e7:f4:0b:41: b4:3b:b6:30:52:ab:d1:49:24:74:04:96:65:5d:06:c8:43:dc: 92:e9:8b:8a:64:00:f3:ec:f2:1f:fe:11:50:99:8d:b2:c5:b3: 0f:46:ed:5a:ae:4a:c6:cf:2b:b4:b1:2b:9f:a5:29:ee:ba:fa: 2a:ee:07:cd:d7:c9:6d:a9:15:70:14:d4:92:fb:bf:05:38:80: 1e:fd:c2:b8:11:8a:7f:1f:24:b0:15:99:36:63:c2:06:f7:79: e5:48:33:07:78:71:4a:d6:b2:dd:7f:89:48:35:d5:71:2a:e6: bc:dc:09:0d:19:e3:79:ce:05:90:75:67:78:8d:74:cc:66:75: d7:d2:7f:33:78:f6:69:dc:f1:cc:f1:f1:07:1a:61:3a:99:f0: aa:c5:39:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDg4RjExMC8GA1UEBRMoMzk0M0Q0MjYxNTc5Q0RFMEU4MkEwNUNBMkFCNTRCMzg3 QkE1MTkzMzAeFw0yNDExMjMwNTU3NThaFw0yNDExMzAwNTU3NThaMBgxFjAUBgNV BAMTDTY3NDE2ZWU2LTEzNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfIcycGN/tFlUvqctN7PVjRiVlhFpNvBl1OEG0QRv1Qto6vXbRvQHUhpFmSOJW L90567RTIrDM07gvt8dDaXDloze4DVq6ebzjHw5SGyWCIBwDQpiOqnhp9XyeFInn cYBULaRpkLtSCCOBzLFYe1CM7UcuFjSxh0kYfY87rK9BGwoX9zjemDqpnRvY/uOV 22WG5SuJFKmRwk0iWzninJaWA5znV6FSIRUja4IcNvxdd4Ra79QfY00ZBQBIWE40 fEopFqXVlgNLQX//oc+WSjQ2wKB2Bi6S8c8dHE5MMWURQAzwF8uZiyIAA+197rur lLn4TJFwg1Rn6EpuAeT1H089AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfuH2+XdX rIHz2x6d7Cj+DES9gCIwHwYDVR0jBBgwFoAUOUPUJhV5zeDoKgXKKrVLOHulGTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEODhGLzg0QTVCQzgwOTA1 RDExRUZBNEYzMUQyRUM0RjlBRTAyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1VQVUpoVjV6ZURvS2dYS0tyVkxPSHVsR1RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE ODhGLzg0QTVCQzgwOTA1RDExRUZBNEYzMUQyRUM0RjlBRTAyL09VUFVKaFY1emVE b0tnWEtLclZMT0h1bEdUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ21/vvKBZHML/TuWlg1CQoTnPkn5aoThPV5NYt1y09TLdrBNiRRoe/N Dzyko/l7LXZLWZNxIVdcXcirsRkOxPa1lZVY1v7Ga4V1vdwPcQ1nUGFdP+TnJ8HQ PIWQGSdNkagreTNkjWxE5/QLQbQ7tjBSq9FJJHQElmVdBshD3JLpi4pkAPPs8h/+ EVCZjbLFsw9G7VquSsbPK7SxK5+lKe66+iruB83XyW2pFXAU1JL7vwU4gB79wrgR in8fJLAVmTZjwgb3eeVIMwd4cUrWst1/iUg11XEq5rzcCQ0Z43nOBZB1Z3iNdMxm ddfSfzN49mnc8czx8QcaYTqZ8KrFOYA= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org