$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json) Hash identifier: mx6aa6PWDI3epBKK8Nq4qgh12GIasBVld1lMu/TIYM8= Subject key identifier: 82:A5:AC:1F:99:FF:4F:DA:F1:84:AC:EB:78:52:81:33:5E:54:99:45 Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Certificate serial: 3428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft Manifest number: 3425 Signing time: Fri 22 Nov 2024 14:53:59 +0000 Manifest this update: Fri 22 Nov 2024 14:53:58 +0000 Manifest next update: Fri 29 Nov 2024 14:53:58 +0000 Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: bcArcQLUf3MFYjjnECUv8Jf0rulaAWQ4pLEs1NBksgA=) 2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: As2LymjqIDH0cOS124NvImUruw0ZeoIg/jht9yiAhvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13352 (0x3428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Validity Not Before: Nov 22 14:53:58 2024 GMT Not After : Nov 29 14:53:58 2024 GMT Subject: CN=67409b07-532a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:73:9c:d1:33:66:6b:26:73:ef:1f:ea:81: ac:0b:45:ec:7a:be:72:28:68:42:b5:bc:af:35:25: 19:5f:6c:32:23:41:ff:bc:d2:2e:43:f2:ca:43:28: f8:25:a3:e0:1e:18:6f:a9:9e:1d:75:12:1c:18:f1: 15:1a:47:2a:b3:db:49:17:2d:0b:49:35:66:d4:01: 69:1a:f9:e9:e8:90:a6:0f:2e:f0:6c:a1:78:ee:f5: 05:8c:a4:83:b2:60:0a:ea:15:2f:64:be:f3:95:fa: 9e:cf:3f:43:b9:0e:ec:47:11:92:17:71:18:b8:f5: 06:0c:20:15:5d:3e:c7:a8:b4:08:dc:93:15:dd:fa: b3:75:c8:d7:39:4d:e8:fc:2b:40:67:5d:bc:90:1b: d3:a2:e3:97:35:e2:0e:c7:f4:a3:d9:f6:7a:ba:b5: b4:c5:af:f4:ef:04:07:4c:0d:14:f3:03:fb:d7:d0: 95:2f:df:ea:2d:01:49:f2:7a:b6:a4:50:7a:50:e2: 53:0d:0f:ee:70:2d:0b:a2:4f:d9:52:1b:0c:29:0c: 76:87:52:04:6b:e5:e8:79:cf:ab:fd:32:2d:f3:d0: 48:77:39:de:7c:ad:4a:a2:ca:ed:12:d7:ed:c8:01: 1f:69:4f:62:d1:73:23:9f:a0:80:1f:09:0f:96:79: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A5:AC:1F:99:FF:4F:DA:F1:84:AC:EB:78:52:81:33:5E:54:99:45 X509v3 Authority Key Identifier: keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:2a:e2:4d:a1:df:a4:16:4a:66:83:6c:96:c2:9c:33:f2:71: a6:c0:04:be:b2:3f:b3:ff:7b:a5:69:21:46:39:61:0c:17:8b: 91:90:c8:ee:cb:ca:83:24:05:42:b2:cf:a1:78:ee:83:bf:41: a8:e7:43:d2:71:8d:de:f3:06:ec:11:29:9b:60:4f:11:30:bc: 62:20:39:5c:e8:2a:4a:52:3f:0d:75:22:ed:28:f3:47:ec:9d: 5c:51:43:3c:c7:1d:40:2f:41:be:2a:8a:15:6c:1c:50:12:6f: a7:d8:1f:0e:bd:3c:2e:23:ea:96:8a:b1:1b:f7:a9:cd:c4:b3: ce:db:b7:b3:37:81:7a:1d:ba:41:15:42:ad:13:4b:76:e0:96: 39:34:46:6e:a2:93:2c:f6:02:e7:09:36:26:bb:46:30:ba:44: 31:69:13:2a:b6:2e:54:db:8b:8b:2c:ba:27:f2:05:fa:68:f1: fb:13:97:8a:dc:59:18:e9:0c:3f:22:7a:9c:8e:e2:f4:b8:c6: 46:24:f0:00:a5:8a:e8:16:57:29:58:7c:07:42:f0:10:19:a6: 79:f5:ef:27:74:0b:ba:5b:fa:aa:a6:ba:73:99:28:7c:c3:30: 8f:06:82:8e:46:1f:11:36:cd:16:e1:cb:b7:ea:bf:2b:df:1e: 52:59:9a:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAyNjcxMTAvBgNVBAUTKEEwMUQyM0Y3ODFFOEZGMzUzQjE4QkQxODgyODRDOUFE RkNEOUUzOTYwHhcNMjQxMTIyMTQ1MzU4WhcNMjQxMTI5MTQ1MzU4WjAYMRYwFAYD VQQDEw02NzQwOWIwNy01MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI9znNEzZmsmc+8f6oGsC0Xser5yKGhCtbyvNSUZX2wyI0H/vNIuQ/LKQyj4 JaPgHhhvqZ4ddRIcGPEVGkcqs9tJFy0LSTVm1AFpGvnp6JCmDy7wbKF47vUFjKSD smAK6hUvZL7zlfqezz9DuQ7sRxGSF3EYuPUGDCAVXT7HqLQI3JMV3fqzdcjXOU3o /CtAZ128kBvTouOXNeIOx/Sj2fZ6urW0xa/07wQHTA0U8wP719CVL9/qLQFJ8nq2 pFB6UOJTDQ/ucC0Lok/ZUhsMKQx2h1IEa+Xoec+r/TIt89BIdznefK1KosrtEtft yAEfaU9i0XMjn6CAHwkPlnlLYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKlrB+Z /0/a8YSs63hSgTNeVJlFMB8GA1UdIwQYMBaAFKAdI/eB6P81Oxi9GIKEya382eOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDI2Ny8xOTBFQUI1QzFE OTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196VTdHTDBZZ29USnJmelo0 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CMGo5NEhvX3pVN0dMMFlnb1RKcmZ6WjQ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDI2Ny8xOTBFQUI1QzFEOTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196 VTdHTDBZZ29USnJmelo0NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkKuJNod+kFkpmg2yWwpwz8nGmwAS+sj+z/3ulaSFGOWEMF4uRkMju y8qDJAVCss+heO6Dv0Go50PScY3e8wbsESmbYE8RMLxiIDlc6CpKUj8NdSLtKPNH 7J1cUUM8xx1AL0G+KooVbBxQEm+n2B8OvTwuI+qWirEb96nNxLPO27ezN4F6HbpB FUKtE0t24JY5NEZuopMs9gLnCTYmu0YwukQxaRMqti5U24uLLLon8gX6aPH7E5eK 3FkY6Qw/InqcjuL0uMZGJPAApYroFlcpWHwHQvAQGaZ59e8ndAu6W/qqprpzmSh8 wzCPBoKORh8RNs0W4cu36r8r3x5SWZr2 -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:05 2024 by rpki-client on console-ams.rpki-client.org