$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: +C3uPyB2w9QCSUXMQ2DDnJKmFILaoW8cD42MtYsYiEw= Subject key identifier: 8D:4B:08:FE:8D:D4:2C:C2:B4:FF:6B:E7:F1:2B:F6:C9:2F:B7:4D:21 Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0BB0 Signing time: Fri 22 Nov 2024 18:38:14 +0000 Manifest this update: Fri 22 Nov 2024 18:38:14 +0000 Manifest next update: Fri 29 Nov 2024 18:38:14 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: 9fiX0EThkGoem2DKpdENKIMFJVFp25QOh5Hsz06Vwos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Nov 22 18:38:14 2024 GMT Not After : Nov 29 18:38:14 2024 GMT Subject: CN=6740cf96-3b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:48:65:ff:b1:8c:52:39:e3:37:6f:c5:f6: 11:47:58:69:a3:8d:d6:65:00:17:52:d4:58:17:66: c0:5a:4d:5d:85:f2:e8:1a:96:22:2c:41:60:f6:13: 47:1b:8a:a5:15:6d:23:6a:f5:7c:a6:79:2f:a2:b5: be:a3:0d:e6:83:1e:22:37:eb:2c:63:01:ce:ed:b5: 15:89:98:f7:27:56:de:2f:ff:10:b6:24:29:c1:6c: 65:51:a5:ee:fb:88:90:31:6c:e8:f3:fe:ce:71:56: fd:5f:93:48:e7:65:54:34:07:6f:75:55:ca:e5:59: 46:7a:18:e0:74:fe:27:a0:c4:61:93:79:36:cd:f6: 21:40:d0:12:aa:f7:85:27:ed:b1:cc:10:c6:7d:91: ee:be:4c:33:21:cf:f1:12:6a:c4:81:69:2f:63:e1: 2e:7d:e5:05:87:ce:b2:38:c6:28:2e:50:f9:ba:2c: 90:a6:0b:e9:7e:5d:2e:39:79:d3:24:8d:7d:4e:d0: 88:65:25:a8:a9:81:12:ff:18:f7:7c:e0:d1:7d:9f: 6e:0b:f0:d6:b6:5d:39:92:00:2f:06:17:05:f7:1c: 28:de:fa:21:95:e3:18:97:f7:f0:11:d2:b2:57:54: b2:f0:5c:5e:fa:50:b0:2a:56:79:1c:29:c9:49:d6: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4B:08:FE:8D:D4:2C:C2:B4:FF:6B:E7:F1:2B:F6:C9:2F:B7:4D:21 X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a4:09:bd:69:c3:c4:de:d4:4e:b7:fc:5e:e7:30:35:7e:28: 97:97:74:7e:0f:44:66:68:9c:2f:57:b5:67:9f:89:1c:7e:57: 04:f9:c5:78:69:a5:f2:b5:cd:b1:26:10:47:19:e9:2a:ef:f8: dc:1a:61:02:b1:42:49:97:50:23:53:55:69:81:11:5e:68:d3: 94:62:2a:19:25:90:a3:19:4e:41:66:e8:f4:c7:ac:1d:9d:b7: fc:6c:b2:43:a5:b1:d8:70:66:45:f8:f1:3b:75:53:e9:d7:2b: 49:14:06:a8:7a:c2:9e:41:e7:73:d9:a3:bd:e0:e1:0b:d8:a7: ec:49:b8:69:66:3f:2a:51:da:f7:c6:4e:d5:ed:a3:56:73:9a: f1:56:15:36:c1:cb:87:59:08:aa:74:af:bf:f2:4e:7c:3e:76: 6a:c6:52:46:0c:70:c4:2a:85:3f:38:65:8a:69:03:6c:b6:e0: 8c:60:5a:53:2a:c7:c9:15:2a:fe:d7:95:94:8b:10:7e:0a:29: bd:6a:1f:5f:60:b0:33:d7:c3:16:a4:1d:85:ff:01:f8:f7:b6: 7f:5c:b0:87:3f:9e:dc:7b:ac:af:f5:47:6c:95:dd:4d:d4:06: 2f:35:90:98:ca:8d:7a:00:b5:9f:ca:b5:7b:52:e6:e6:70:54: 25:02:9c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjQxMTIyMTgzODE0WhcNMjQxMTI5MTgzODE0WjAYMRYwFAYD VQQDEw02NzQwY2Y5Ni0zYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOxIZf+xjFI54zdvxfYRR1hpo43WZQAXUtRYF2bAWk1dhfLoGpYiLEFg9hNH G4qlFW0javV8pnkvorW+ow3mgx4iN+ssYwHO7bUViZj3J1beL/8QtiQpwWxlUaXu +4iQMWzo8/7OcVb9X5NI52VUNAdvdVXK5VlGehjgdP4noMRhk3k2zfYhQNASqveF J+2xzBDGfZHuvkwzIc/xEmrEgWkvY+EufeUFh86yOMYoLlD5uiyQpgvpfl0uOXnT JI19TtCIZSWoqYES/xj3fODRfZ9uC/DWtl05kgAvBhcF9xwo3vohleMYl/fwEdKy V1Sy8Fxe+lCwKlZ5HCnJSdbngwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1LCP6N 1CzCtP9r5/Er9skvt00hMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFpAm9acPE3tROt/xe5zA1fiiXl3R+D0RmaJwvV7Vnn4kcflcE+cV4 aaXytc2xJhBHGekq7/jcGmECsUJJl1AjU1VpgRFeaNOUYioZJZCjGU5BZuj0x6wd nbf8bLJDpbHYcGZF+PE7dVPp1ytJFAaoesKeQedz2aO94OEL2KfsSbhpZj8qUdr3 xk7V7aNWc5rxVhU2wcuHWQiqdK+/8k58PnZqxlJGDHDEKoU/OGWKaQNstuCMYFpT KsfJFSr+15WUixB+Cim9ah9fYLAz18MWpB2F/wH497Z/XLCHP57ce6yv9Udsld1N 1AYvNZCYyo16ALWfyrV7UubmcFQlApwl -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:21 2024 by rpki-client on console-ams.rpki-client.org