$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: ObxXUDL9Tv7XiDVnTJc8qUErkPFAzKaOuygKdbrwATE= Subject key identifier: 43:4E:69:A3:4B:38:61:68:E3:0E:20:71:7D:69:04:A6:D5:19:A4:5E Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 02EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 02EA Signing time: Sat 23 Nov 2024 00:50:44 +0000 Manifest this update: Sat 23 Nov 2024 00:50:43 +0000 Manifest next update: Sat 30 Nov 2024 00:50:43 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: kgY6RFenVxGSAFL9BQiDPLrfSFHBNbTs1rATvCN6Atw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 746 (0x2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: Nov 23 00:50:43 2024 GMT Not After : Nov 30 00:50:43 2024 GMT Subject: CN=674126e3-4b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:7b:b3:cc:ec:8c:47:7a:59:3b:f6:3e:62: bf:2f:cb:69:ca:5e:df:96:f6:85:f1:51:e5:61:6d: 47:a1:ea:7b:15:66:51:f9:af:bb:a7:6e:39:03:d5: 43:49:d8:48:36:94:64:6f:81:7f:86:1a:2d:b1:da: bc:a0:24:23:34:c5:15:df:70:8a:f5:7c:19:1d:5e: 26:73:bc:cd:56:f6:65:0f:ce:84:12:d2:0b:40:70: 85:19:8a:8a:13:67:76:54:61:7b:58:14:70:f0:2f: 98:ef:ff:59:54:2d:b7:9c:a0:e1:24:bb:70:26:55: a2:52:80:e1:10:af:e2:b4:11:d2:62:8c:3b:36:6e: ea:76:12:fd:da:64:3e:5d:21:b6:68:05:74:e9:e1: a3:64:dc:22:ef:da:f5:01:a4:9b:94:26:07:86:ee: ed:e1:7c:75:b9:ed:97:b0:46:2a:93:33:d6:f8:15: 38:de:ef:3f:b7:b5:95:91:94:d2:72:58:d5:51:4d: e7:b0:58:10:ac:2e:60:3c:82:84:6b:8b:6c:2a:3d: 35:58:8f:5c:6d:da:23:f7:f7:b5:19:8c:1b:cd:73: f8:04:2e:34:24:65:f1:e5:dc:69:ff:29:4b:eb:e6: 26:dd:b3:c9:93:a0:01:7a:b3:bf:c7:1d:1c:a4:81: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4E:69:A3:4B:38:61:68:E3:0E:20:71:7D:69:04:A6:D5:19:A4:5E X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c2:da:dc:10:93:07:bc:99:e3:f1:16:d2:21:3a:37:1a:de: 67:2d:cc:73:17:0b:38:0f:c5:b2:de:d2:9e:1c:7d:54:f3:26: f0:ae:8c:7a:46:34:ba:d7:45:a6:fe:60:0d:13:b8:b1:c7:c5: e3:55:a8:14:fd:bc:70:5a:f4:f3:e7:bf:c1:7e:b5:d9:7c:0a: 10:0e:b2:25:19:30:3e:14:26:ad:15:a0:bf:ef:e9:fd:38:b2: e6:ca:99:27:f7:f3:62:8d:be:50:d1:eb:04:ce:c2:b8:a3:93: 3e:1f:03:3c:e0:7e:9f:42:07:0b:7a:61:e6:0e:08:99:f1:8c: eb:dc:61:35:a7:09:12:b6:24:22:74:80:f4:bf:48:5b:07:8a: 6f:20:3c:e2:b2:e5:35:d5:32:81:e0:d0:8d:48:0b:3f:de:b2: 16:72:19:39:c4:e4:99:f3:9a:51:2d:05:74:04:0a:64:87:99: 90:a3:30:2e:c3:6c:1c:e2:7e:97:76:ab:cd:fb:9a:10:1b:9d: f7:4d:df:53:a9:cf:be:94:c4:80:34:dd:d3:26:76:93:a2:43: 24:26:b4:ce:da:fc:3c:89:c5:d8:85:e9:87:83:f1:6f:a6:89: 24:b0:48:c9:4a:04:13:70:2f:34:b2:9a:ec:95:4e:52:b0:8f: 33:98:16:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjQxMTIzMDA1MDQzWhcNMjQxMTMwMDA1MDQzWjAYMRYwFAYD VQQDEw02NzQxMjZlMy00YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprZ7s8zsjEd6WTv2PmK/L8tpyl7flvaF8VHlYW1Hoep7FWZR+a+7p245A9VD SdhINpRkb4F/hhotsdq8oCQjNMUV33CK9XwZHV4mc7zNVvZlD86EEtILQHCFGYqK E2d2VGF7WBRw8C+Y7/9ZVC23nKDhJLtwJlWiUoDhEK/itBHSYow7Nm7qdhL92mQ+ XSG2aAV06eGjZNwi79r1AaSblCYHhu7t4Xx1ue2XsEYqkzPW+BU43u8/t7WVkZTS cljVUU3nsFgQrC5gPIKEa4tsKj01WI9cbdoj9/e1GYwbzXP4BC40JGXx5dxp/ylL 6+Ym3bPJk6ABerO/xx0cpIFlSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENOaaNL OGFo4w4gcX1pBKbVGaReMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqwtrcEJMHvJnj8RbSITo3Gt5nLcxzFws4D8Wy3tKeHH1U8ybwrox6 RjS610Wm/mANE7ixx8XjVagU/bxwWvTz57/BfrXZfAoQDrIlGTA+FCatFaC/7+n9 OLLmypkn9/Nijb5Q0esEzsK4o5M+HwM84H6fQgcLemHmDgiZ8Yzr3GE1pwkStiQi dID0v0hbB4pvIDzisuU11TKB4NCNSAs/3rIWchk5xOSZ85pRLQV0BApkh5mQozAu w2wc4n6XdqvN+5oQG533Td9Tqc++lMSANN3TJnaTokMkJrTO2vw8icXYhemHg/Fv pokksEjJSgQTcC80sprslU5SsI8zmBbz -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org