$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: FWD5vxt7Yi/+wb3bCSB5OP1ZKA3Vf2Qga8+QILd9Fyg= Subject key identifier: A4:4D:4F:48:1B:20:FA:D5:3D:3A:D4:24:4C:0B:DC:A6:A8:73:76:EF Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 015B Signing time: Sat 23 Nov 2024 02:24:43 +0000 Manifest this update: Sat 23 Nov 2024 02:24:42 +0000 Manifest next update: Sat 30 Nov 2024 02:24:42 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: oB3JVyNvP/Fsm/fvTmyI1qq4J1RTETBQdOvu8DYNGj8=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: VtazFFTqbixljqAtcsaeza2iwr0OPiOznwFcK1HtWtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Nov 23 02:24:42 2024 GMT Not After : Nov 30 02:24:42 2024 GMT Subject: CN=67413cea-b3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:5f:93:18:f8:cf:21:c7:04:21:8c:90:4c: 73:f4:fe:d5:f9:16:f1:20:91:79:cd:12:7a:84:95: cc:a5:b5:f5:ac:c7:05:80:0c:42:a6:41:26:ad:53: d7:a4:3c:93:93:aa:03:72:82:45:a9:82:06:5c:cd: 2c:09:ba:10:5e:f6:ea:7e:7b:8a:59:9e:04:61:e1: f9:50:cd:ef:6b:4c:a1:28:c3:6f:d3:cc:83:7b:93: 9f:a2:4e:48:25:46:e2:55:02:c2:77:85:b4:fc:a7: dd:ef:ff:e3:f7:08:3c:1b:17:10:57:12:5d:bf:b6: c4:5c:1e:1c:55:72:b0:69:5f:44:a7:09:8f:6e:5a: b5:ac:f7:34:87:94:3d:01:13:54:29:1b:d1:8c:64: dd:13:c0:4d:9f:4c:8b:02:9e:d6:a1:f3:31:25:f1: bd:6e:5a:64:0f:d1:26:08:ec:e1:d8:17:fa:5f:db: 4e:43:ab:94:e3:75:01:23:24:90:ae:38:45:02:ef: e5:3f:8c:b9:ad:55:b5:5e:b3:77:10:55:3c:ec:c8: e9:8c:98:0b:26:48:1c:ed:e4:e8:08:8e:e0:01:79: 48:d8:db:9f:60:d0:39:37:85:ec:4e:07:45:43:0f: fc:3c:e6:9e:b6:f3:9d:06:06:64:b2:81:6b:b7:25: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4D:4F:48:1B:20:FA:D5:3D:3A:D4:24:4C:0B:DC:A6:A8:73:76:EF X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e2:ff:82:25:1d:57:ab:d4:41:93:0b:9a:25:41:20:65:0b: 9a:bc:6d:79:a3:6d:ac:bf:64:9b:92:4f:06:5d:e8:39:cf:2d: 1d:f1:a4:8a:62:53:94:c9:00:e3:7e:f1:20:56:2c:ae:28:94: a2:b1:b9:2f:b0:0a:98:90:02:c2:ed:2d:44:5b:e8:c8:bb:aa: 2a:08:47:d2:ea:7f:94:2b:23:cf:07:3d:21:1f:28:5f:df:64: fb:4e:e7:3b:22:4a:ce:2d:6e:c8:11:b9:e7:40:69:41:6d:35: 77:7c:80:3a:b9:a7:14:86:b8:e3:a6:f9:e9:b2:26:6a:0f:0f: f5:75:72:5e:88:09:30:e2:06:a1:a2:2d:39:b0:e1:09:ed:0d: f2:7c:d0:09:aa:7c:1f:20:21:9b:ad:25:c7:25:40:1d:2f:4f: 6f:00:d2:cf:68:fb:98:ff:3f:2b:64:3f:89:eb:1b:27:f9:07: b3:39:66:e6:73:e3:a8:1c:3e:d9:5e:a5:19:31:34:de:6e:76: 71:2f:3c:ca:74:87:e1:bb:49:8b:68:e5:af:f1:fe:25:10:1c: fc:79:0c:75:f2:eb:72:f3:91:a6:a0:91:fb:7b:64:19:d5:54: 18:20:ef:cb:ed:f1:67:a0:d2:6d:e0:c4:8b:ae:79:ea:89:d4: 4d:56:05:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjQxMTIzMDIyNDQyWhcNMjQxMTMwMDIyNDQyWjAYMRYwFAYD VQQDEw02NzQxM2NlYS1iM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqH5fkxj4zyHHBCGMkExz9P7V+RbxIJF5zRJ6hJXMpbX1rMcFgAxCpkEmrVPX pDyTk6oDcoJFqYIGXM0sCboQXvbqfnuKWZ4EYeH5UM3va0yhKMNv08yDe5Ofok5I JUbiVQLCd4W0/Kfd7//j9wg8GxcQVxJdv7bEXB4cVXKwaV9EpwmPblq1rPc0h5Q9 ARNUKRvRjGTdE8BNn0yLAp7WofMxJfG9blpkD9EmCOzh2Bf6X9tOQ6uU43UBIySQ rjhFAu/lP4y5rVW1XrN3EFU87MjpjJgLJkgc7eToCI7gAXlI2NufYNA5N4XsTgdF Qw/8POaetvOdBgZksoFrtyWGNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRNT0gb IPrVPTrUJEwL3Kaoc3bvMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe4v+CJR1Xq9RBkwuaJUEgZQuavG15o22sv2Sbkk8GXeg5zy0d8aSK YlOUyQDjfvEgViyuKJSisbkvsAqYkALC7S1EW+jIu6oqCEfS6n+UKyPPBz0hHyhf 32T7Tuc7IkrOLW7IEbnnQGlBbTV3fIA6uacUhrjjpvnpsiZqDw/1dXJeiAkw4gah oi05sOEJ7Q3yfNAJqnwfICGbrSXHJUAdL09vANLPaPuY/z8rZD+J6xsn+QezOWbm c+OoHD7ZXqUZMTTebnZxLzzKdIfhu0mLaOWv8f4lEBz8eQx18uty85GmoJH7e2QZ 1VQYIO/L7fFnoNJt4MSLrnnqidRNVgWU -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org