$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: +oJYjxiRa3rjo5+C6tRivTzc3j6gujlSolTB6qpm+dw= Subject key identifier: 27:A3:44:C5:55:93:91:A7:DB:F2:B6:49:B9:D5:D3:65:70:A4:D7:4C Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0DF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0DEB Signing time: Fri 22 Nov 2024 17:46:29 +0000 Manifest this update: Fri 22 Nov 2024 17:46:29 +0000 Manifest next update: Fri 29 Nov 2024 17:46:29 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: zQStIgUZlXbpn1bvGt9u790nPtN6t1viO4PZfIbsezk=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: HKMv6lMzUEnj1OeWCUm5Usk6S8rbshVmXllyOLilxZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Nov 22 17:46:29 2024 GMT Not After : Nov 29 17:46:29 2024 GMT Subject: CN=6740c375-e306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:52:b6:4e:99:eb:bb:af:6e:af:12:a5:a3: c0:b1:74:f2:6c:a1:a7:a5:2d:f1:16:d0:16:56:07: ac:7c:91:74:a0:81:b1:36:94:96:fa:6b:0b:42:d6: f3:07:b0:71:aa:f7:71:64:4e:d9:af:4f:cf:e5:c4: 66:2e:2e:50:ac:a5:85:ef:42:d9:af:6f:21:1a:3c: ec:30:d4:2e:94:00:da:3d:2f:6f:ad:a0:a4:05:5a: 53:37:b1:7b:5c:f5:c3:37:1e:66:7e:48:4b:22:4c: a7:b8:0f:a0:92:04:34:fb:78:43:0b:46:d1:88:df: a0:2c:cc:2c:a8:a6:09:23:5e:85:d5:86:4d:9b:d5: 4e:79:b4:12:3a:7f:35:d8:5b:90:6c:69:da:81:2f: cf:9a:f3:fd:da:3e:87:8a:15:76:e2:db:17:0d:ce: f7:b5:41:58:a1:44:cf:4c:3e:9a:4e:8d:a0:44:bd: c0:62:4e:70:b4:78:03:f8:66:28:74:21:a5:c1:bb: 1e:e3:9d:3f:a4:16:fb:d2:4c:43:2b:4d:61:b2:06: 0e:7d:f5:ea:f4:89:38:22:d9:30:1e:58:05:ca:6d: 9c:bf:ff:1b:3f:d0:e7:63:bf:cd:75:7a:ce:98:ea: b2:06:39:9f:86:4c:50:0f:70:16:00:a2:2a:16:e1: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A3:44:C5:55:93:91:A7:DB:F2:B6:49:B9:D5:D3:65:70:A4:D7:4C X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d7:08:f5:9e:1b:66:d3:15:22:35:c2:21:01:9d:7d:f3:d1: ed:08:8e:d1:a1:a0:16:50:8c:8b:54:55:fd:80:e6:80:56:49: 9e:08:0d:91:84:30:41:3e:d9:2c:93:ae:69:10:8a:48:e0:a3: b1:58:17:a4:98:d8:cd:cd:30:da:75:83:33:fc:7d:56:86:c8: fe:e3:6d:b4:df:15:17:43:1d:bd:91:ad:1e:8d:85:90:12:9b: 06:94:4c:60:ca:64:74:74:6e:f1:5c:69:69:1f:f3:2c:95:38: 18:2f:d9:d9:ab:a4:f3:fb:75:6f:ad:48:1f:f6:f1:43:e6:84: 49:ba:64:af:89:10:db:d3:81:6a:a1:3d:dc:dd:c1:fb:8c:3e: 76:f3:59:49:96:ef:0b:76:02:3e:37:c6:d2:33:0b:9f:d1:93: 75:2b:61:f3:11:d8:88:2d:81:c1:ab:09:25:00:84:4a:3d:d8: cf:15:b8:96:0a:ef:b9:7d:38:ef:51:9f:da:a8:76:11:ef:93: 3b:92:03:b9:09:d6:6a:e4:a9:31:20:6e:2a:c1:ac:d2:83:a1: 98:96:8a:8c:24:bc:e9:4a:af:3b:68:c1:77:b8:e4:f3:c4:e4: 3d:28:c6:2a:41:ae:8d:b9:44:66:21:96:a1:93:c8:93:8f:22: 16:02:f4:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjQxMTIyMTc0NjI5WhcNMjQxMTI5MTc0NjI5WjAYMRYwFAYD VQQDEw02NzQwYzM3NS1lMzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmtStk6Z67uvbq8SpaPAsXTybKGnpS3xFtAWVgesfJF0oIGxNpSW+msLQtbz B7BxqvdxZE7Zr0/P5cRmLi5QrKWF70LZr28hGjzsMNQulADaPS9vraCkBVpTN7F7 XPXDNx5mfkhLIkynuA+gkgQ0+3hDC0bRiN+gLMwsqKYJI16F1YZNm9VOebQSOn81 2FuQbGnagS/PmvP92j6HihV24tsXDc73tUFYoUTPTD6aTo2gRL3AYk5wtHgD+GYo dCGlwbse450/pBb70kxDK01hsgYOffXq9Ik4ItkwHlgFym2cv/8bP9DnY7/NdXrO mOqyBjmfhkxQD3AWAKIqFuEftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCejRMVV k5Gn2/K2SbnV02VwpNdMMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw1wj1nhtm0xUiNcIhAZ1989HtCI7RoaAWUIyLVFX9gOaAVkmeCA2R hDBBPtksk65pEIpI4KOxWBekmNjNzTDadYMz/H1Whsj+42203xUXQx29ka0ejYWQ EpsGlExgymR0dG7xXGlpH/MslTgYL9nZq6Tz+3VvrUgf9vFD5oRJumSviRDb04Fq oT3c3cH7jD5281lJlu8LdgI+N8bSMwuf0ZN1K2HzEdiILYHBqwklAIRKPdjPFbiW Cu+5fTjvUZ/aqHYR75M7kgO5CdZq5KkxIG4qwazSg6GYloqMJLzpSq87aMF3uOTz xOQ9KMYqQa6NuURmIZahk8iTjyIWAvSq -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org