$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: 0AczHiFCBgXYv5TzXR/RjQvI6De2F5SCeokV013udPc= Subject key identifier: BA:6A:57:E9:6B:38:00:69:93:BA:36:58:35:91:C4:B5:A6:90:17:05 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 3430 Signing time: Sun 24 Nov 2024 14:29:48 +0000 Manifest this update: Sun 24 Nov 2024 14:29:47 +0000 Manifest next update: Sun 01 Dec 2024 14:29:47 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: ZV2AWVoDmdXTsBA/nB6tyeC/MK8Qe9S/6a+50bzSxKg=) 2: EEDE81122E1F11EBB84D5E5BC4F9AE02.roa (hash: S0cZ3UCYU+mid6af6GRVdhGlHRTv/LuOF/lRxv7Qj2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13368 (0x3438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Nov 24 14:29:47 2024 GMT Not After : Dec 1 14:29:47 2024 GMT Subject: CN=6743385c-e87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:b2:d5:a2:05:a6:14:2b:e0:8c:1f:18:d9: 67:c5:0c:cc:a8:6f:c2:39:e3:d2:52:ae:8f:70:1e: e3:cc:77:81:f1:d5:94:e2:a2:3e:99:c5:f3:99:7b: 59:5b:0b:8f:2e:fa:22:ed:20:71:f5:08:e8:10:52: 5a:04:94:c7:64:28:30:7b:4c:54:b0:2a:91:65:e0: 80:2c:30:21:52:d6:e0:3b:dd:68:a0:4b:ef:63:66: 4b:56:81:fc:21:7d:3e:48:52:6a:0c:c0:d0:4a:c7: 8c:b8:0b:07:0b:08:b4:13:d8:61:1f:d1:ac:71:b3: 82:e2:7f:71:d9:b1:6c:02:c0:69:18:7d:db:44:2a: 27:0b:e3:0a:5d:70:9a:14:d9:c1:24:8d:b9:26:f5: 88:48:37:b0:ae:e5:55:fb:88:1a:4f:30:a7:5b:9f: b2:33:bd:bd:32:39:e2:0d:cc:7a:e6:ae:35:29:d8: 7d:5d:9c:a1:9c:51:f5:85:c2:c5:6f:97:94:eb:69: 12:bf:b6:e3:e3:d3:f5:cf:1a:53:53:c8:18:63:e6: b5:ed:77:b4:7e:c5:d0:1f:0f:44:05:f3:ee:05:ce: c9:b5:8d:7d:0d:58:4c:86:3e:1e:7e:48:3d:30:c3: 9f:0f:50:78:3b:44:f6:3c:e6:48:f0:3d:97:a6:a1: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6A:57:E9:6B:38:00:69:93:BA:36:58:35:91:C4:B5:A6:90:17:05 X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8a:f0:5f:fa:bf:dd:25:0d:80:bc:12:bb:21:ea:70:f2:9b: 66:48:c7:05:83:8e:75:14:6f:1c:7c:66:7c:d7:3a:07:d1:27: d7:9c:b2:db:1f:49:5f:16:61:11:bb:89:16:fc:4c:7b:4a:e1: 33:a5:a1:ce:77:09:42:ce:f0:0f:95:f2:69:19:25:da:9a:7c: 07:4b:8c:fd:7b:54:db:04:43:ce:1a:04:da:7b:18:2e:8d:ef: 72:15:77:10:4e:93:95:03:0b:d3:98:89:de:8a:43:16:e6:84: e0:ef:e5:3b:72:29:87:84:98:ec:f2:81:28:00:75:c7:2f:ca: 75:dc:9b:70:2f:89:2d:49:91:31:82:8d:2f:9b:4f:2b:ac:a7: cf:98:d3:29:da:ee:d7:8d:c4:e9:d9:18:e4:3a:94:b2:a8:3e: 9a:90:e8:d9:30:76:45:39:a5:0f:70:cc:ac:68:fb:5f:ef:3d: 52:19:c9:d8:91:87:93:99:11:bd:7f:75:e4:dc:d0:99:51:a3: 2d:87:c0:68:4d:0f:36:cd:d4:08:7a:81:54:b8:39:14:e5:43: 56:f8:2c:3b:32:1a:5e:7a:45:23:86:97:84:c6:31:67:68:ab: 98:c9:72:28:37:41:af:39:f8:b4:59:69:34:a1:e7:df:a0:f5: db:3b:15:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjQxMTI0MTQyOTQ3WhcNMjQxMjAxMTQyOTQ3WjAYMRYwFAYD VQQDEw02NzQzMzg1Yy1lODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0Ky1aIFphQr4IwfGNlnxQzMqG/COePSUq6PcB7jzHeB8dWU4qI+mcXzmXtZ WwuPLvoi7SBx9QjoEFJaBJTHZCgwe0xUsCqRZeCALDAhUtbgO91ooEvvY2ZLVoH8 IX0+SFJqDMDQSseMuAsHCwi0E9hhH9GscbOC4n9x2bFsAsBpGH3bRConC+MKXXCa FNnBJI25JvWISDewruVV+4gaTzCnW5+yM729MjniDcx65q41Kdh9XZyhnFH1hcLF b5eU62kSv7bj49P1zxpTU8gYY+a17Xe0fsXQHw9EBfPuBc7JtY19DVhMhj4efkg9 MMOfD1B4O0T2POZI8D2XpqHcWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpqV+lr OABpk7o2WDWRxLWmkBcFMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0ivBf+r/dJQ2AvBK7Iepw8ptmSMcFg451FG8cfGZ81zoH0SfXnLLb H0lfFmERu4kW/Ex7SuEzpaHOdwlCzvAPlfJpGSXamnwHS4z9e1TbBEPOGgTaexgu je9yFXcQTpOVAwvTmIneikMW5oTg7+U7cimHhJjs8oEoAHXHL8p13JtwL4ktSZEx go0vm08rrKfPmNMp2u7XjcTp2RjkOpSyqD6akOjZMHZFOaUPcMysaPtf7z1SGcnY kYeTmRG9f3Xk3NCZUaMth8BoTQ82zdQIeoFUuDkU5UNW+Cw7MhpeekUjhpeExjFn aKuYyXIoN0GvOfi0WWk0oeffoPXbOxWJ -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:21 2024 by rpki-client on console-ams.rpki-client.org