$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft File: Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json) Hash identifier: kEzD0KeONM6co5JgRQOpOOVz7Ai7IriNG0MjZcyX2ic= Subject key identifier: AA:41:9E:46:90:92:0C:26:5F:F5:34:C1:DB:DE:6A:77:5D:36:60:25 Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 34FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft Manifest number: 34A0 Signing time: Fri 22 Nov 2024 14:50:23 +0000 Manifest this update: Fri 22 Nov 2024 14:50:22 +0000 Manifest next update: Fri 29 Nov 2024 14:50:22 +0000 Files and hashes: 1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: IBl8paB6MmGS3VJBG2I69aInlHbPXWzuUwZmDc1QdBc=) 2: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: K9GG+06i99foR/2RXGf0/I8Kvx2roZu5heq1VZdQ+OI=) 3: 6F1612BE562511EB9470B150C4F9AE02.roa (hash: JsgxM7O87UBNAKRhO7z2ipB7o5ZRGqkbp9Qr0swNUZI=) 4: 5A318E06F6A111EBB6318B7EC4F9AE02.roa (hash: VKqO6rf4s4pSFyfrGnTR87o9xy4m/ObtM6kQrJ3USOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13567 (0x34ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Nov 22 14:50:22 2024 GMT Not After : Nov 29 14:50:22 2024 GMT Subject: CN=67409a2f-bc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:c4:35:6d:fd:c6:30:47:1d:d1:ad:52:46: 23:e1:a2:a6:8c:5a:ea:a2:f0:4b:8f:1e:12:59:3a: 88:b7:c3:25:f5:2c:ff:b1:44:e3:90:ea:d6:e8:6e: 5f:9b:bb:9a:d0:ec:0e:90:9a:09:f2:db:f6:e7:b6: 9d:f7:1a:8c:49:7e:ed:95:3e:d9:7d:31:eb:ad:01: 1a:f0:1a:17:f4:7d:be:07:69:e0:d8:e9:a8:d8:79: 72:2d:7b:3f:42:73:13:4b:62:66:b3:01:96:90:8c: 20:83:b7:7d:14:a1:6e:a6:9b:65:0d:e0:64:1d:ac: 26:c1:8a:d4:16:1e:6b:0c:63:95:92:cb:c0:f5:1f: 9d:91:c7:98:1f:fb:e5:d0:42:84:e8:62:a7:45:36: 75:ee:58:a9:88:26:9d:d5:01:f1:e8:d6:78:4b:a9: b9:6c:b0:36:9d:b1:a9:8a:1a:1e:0a:68:8e:bc:8d: 82:23:5b:cf:cf:75:d1:40:6d:86:b3:58:7a:2a:67: c3:7b:70:a0:fe:1c:d6:c8:e8:43:38:a1:24:c7:e5: c7:33:12:b3:a1:91:af:3e:c6:c2:54:ba:d1:e7:35: 1c:d9:00:5c:0f:20:f9:33:4d:bd:49:57:aa:82:b5: 70:63:8e:5f:76:c3:30:4b:97:d6:c9:8e:54:9e:4f: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:41:9E:46:90:92:0C:26:5F:F5:34:C1:DB:DE:6A:77:5D:36:60:25 X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9e:ee:97:b2:4f:f9:17:de:73:dd:83:33:70:6a:51:27:ff: 62:c5:b5:5a:7c:0e:20:8a:3d:a7:da:60:66:4b:29:d1:4f:72: ea:c9:1c:5f:c9:06:5a:0a:67:23:0c:b8:88:c2:22:19:a7:bb: 15:ed:ae:cb:7c:42:ed:21:9b:7f:71:3e:3c:ee:a3:75:0d:99: 0f:8e:d0:5b:ef:41:6e:08:fe:88:19:ca:ae:ee:24:dd:79:52: e7:ae:a2:1c:b1:0a:5b:27:e9:ec:fb:85:b8:72:07:79:a8:8d: ff:17:09:e4:e3:b1:23:c9:54:95:c9:b6:1f:81:5d:0d:9d:42: 07:45:8f:b6:3c:33:86:d5:69:d0:50:c2:c8:c3:05:92:da:79: 2d:e5:21:c1:88:a6:f5:9d:aa:c4:f3:17:bf:01:e9:9c:ae:a0: 6c:b1:04:dd:7d:7d:a1:dc:1e:74:70:cc:82:9a:4f:5d:2c:c1: 3f:1b:ee:93:43:7f:ca:1f:3a:05:2c:50:65:ac:80:71:44:b5: 7c:7d:5e:93:68:39:7d:da:00:14:ff:2d:34:77:9a:aa:dc:63: 2b:c7:7a:ab:41:b5:65:d2:3c:33:aa:69:82:31:05:f1:3c:98: f8:3a:11:e9:d7:dc:3d:d8:de:ad:65:52:81:ac:c7:cf:37:ec: 13:03:2d:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjQxMTIyMTQ1MDIyWhcNMjQxMTI5MTQ1MDIyWjAYMRYwFAYD VQQDEw02NzQwOWEyZi1iYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4TENW39xjBHHdGtUkYj4aKmjFrqovBLjx4SWTqIt8Ml9Sz/sUTjkOrW6G5f m7ua0OwOkJoJ8tv257ad9xqMSX7tlT7ZfTHrrQEa8BoX9H2+B2ng2Omo2HlyLXs/ QnMTS2JmswGWkIwgg7d9FKFupptlDeBkHawmwYrUFh5rDGOVksvA9R+dkceYH/vl 0EKE6GKnRTZ17lipiCad1QHx6NZ4S6m5bLA2nbGpihoeCmiOvI2CI1vPz3XRQG2G s1h6KmfDe3Cg/hzWyOhDOKEkx+XHMxKzoZGvPsbCVLrR5zUc2QBcDyD5M029SVeq grVwY45fdsMwS5fWyY5Unk+OcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpBnkaQ kgwmX/U0wdveanddNmAlMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYwNi83NkUxQzQ3RTFEOTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01 VWxzenZCTTF1d2xjTFNlS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKnu6Xsk/5F95z3YMzcGpRJ/9ixbVafA4gij2n2mBmSynRT3LqyRxf yQZaCmcjDLiIwiIZp7sV7a7LfELtIZt/cT487qN1DZkPjtBb70FuCP6IGcqu7iTd eVLnrqIcsQpbJ+ns+4W4cgd5qI3/Fwnk47EjyVSVybYfgV0NnUIHRY+2PDOG1WnQ UMLIwwWS2nkt5SHBiKb1narE8xe/AemcrqBssQTdfX2h3B50cMyCmk9dLME/G+6T Q3/KHzoFLFBlrIBxRLV8fV6TaDl92gAU/y00d5qq3GMrx3qrQbVl0jwzqmmCMQXx PJj4OhHp19w92N6tZVKBrMfPN+wTAy3l -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org