$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: aLIcjDUX94FDO2YanM1OQyeBk9XSQpBZ+LhO7npAazg= Subject key identifier: 01:BC:44:9B:B1:B7:40:A4:8D:4D:1A:C0:43:51:EB:F2:51:21:D7:E0 Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 1730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 1728 Signing time: Fri 22 Nov 2024 16:37:40 +0000 Manifest this update: Fri 22 Nov 2024 16:37:40 +0000 Manifest next update: Fri 29 Nov 2024 16:37:40 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: tnVtwxe32p29h/BnTS1ZpuYSM4ZYDziIYZv/6DQQYJ8=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: Lsp36uN6r4N8/1l9UkZLjN+RdaoTsddxUG/MhDgoNk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5936 (0x1730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Nov 22 16:37:40 2024 GMT Not After : Nov 29 16:37:40 2024 GMT Subject: CN=6740b354-69fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:47:c5:fa:32:a9:6a:24:6b:ab:c7:c0:bd: 5a:b9:d5:94:e6:7f:be:c2:61:68:83:13:6a:e4:5b: ee:ea:ee:33:13:36:8b:9a:4a:31:07:96:1a:f0:25: 4f:d4:68:6c:38:48:e3:18:e6:7c:a0:8d:6e:b5:5f: 09:47:4d:c1:1b:40:92:4a:b4:d1:af:06:8b:5b:d2: d7:54:8f:cb:ed:3f:fb:e8:ef:96:3f:b1:45:12:f2: 1a:d0:f7:6d:03:d9:16:8c:5b:3b:3a:6d:24:2a:01: e2:aa:be:1e:fe:ea:e5:53:0c:cc:da:2f:24:d3:f2: e6:07:a8:dd:87:66:b9:9c:a6:ef:9b:8e:f5:63:21: 29:e1:40:b6:fe:6d:2d:04:07:ee:e2:34:09:7c:70: 9e:a4:ea:71:7f:21:8e:03:c4:20:f2:ce:d1:94:43: ee:c1:bb:e6:b2:b7:fe:be:46:76:cf:22:17:10:2d: a3:ee:c6:92:2f:0e:b1:65:f3:60:c3:15:57:fb:e4: e9:dc:b0:54:7a:b8:e2:cd:9a:33:c5:f9:f5:08:90: 88:92:93:18:0e:2c:48:5b:eb:62:c0:44:c1:9c:4b: 60:fc:40:b6:df:8a:66:d4:3c:4e:8f:5a:23:0b:a5: f5:16:bf:64:0a:df:54:d2:33:20:37:dd:87:c3:1b: 97:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BC:44:9B:B1:B7:40:A4:8D:4D:1A:C0:43:51:EB:F2:51:21:D7:E0 X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:34:47:0d:fa:b8:95:fb:4e:e0:75:89:8f:20:cb:41:1e:be: 4c:96:ba:37:86:6f:e4:67:f5:c9:79:86:95:22:af:ee:be:36: e0:7e:33:58:d4:c5:32:6d:d5:22:89:d6:6b:26:41:65:fc:94: b7:4e:5e:9d:df:67:3b:71:01:f5:89:e7:e4:c4:fb:68:af:4d: c4:d7:f7:dc:09:2a:9d:71:e2:4c:6a:6c:13:f8:3f:8b:ed:84: 27:ea:11:1e:96:f7:0e:2c:5b:4a:5a:77:df:98:39:c3:1b:42: c0:87:8c:3f:39:e0:fe:fa:1f:8f:d0:20:e8:c9:f9:f0:6d:aa: dc:22:8b:1c:ec:a9:09:b2:8b:74:27:4c:e9:9e:08:2d:81:27: 80:66:1c:c7:fc:b8:2b:45:af:68:26:77:73:0f:6f:4c:00:7b: 22:5e:ae:e4:05:27:1d:b1:7e:8d:5c:87:4d:34:fd:01:d4:16: 29:5e:d4:3d:4e:f7:f4:c4:5c:a8:b5:70:a4:fe:6b:10:a7:41: 31:26:a9:98:16:78:01:6c:de:0f:88:f9:8a:0e:1c:e3:61:06: cd:05:e0:4c:77:3c:6b:1e:8e:8e:f8:af:a8:1f:6a:dd:35:1c: 92:43:dd:ff:1d:42:4e:d0:9b:0e:8f:eb:25:14:0f:19:96:65: b0:0c:15:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjQxMTIyMTYzNzQwWhcNMjQxMTI5MTYzNzQwWjAYMRYwFAYD VQQDEw02NzQwYjM1NC02OWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHhHxfoyqWoka6vHwL1audWU5n++wmFogxNq5Fvu6u4zEzaLmkoxB5Ya8CVP 1GhsOEjjGOZ8oI1utV8JR03BG0CSSrTRrwaLW9LXVI/L7T/76O+WP7FFEvIa0Pdt A9kWjFs7Om0kKgHiqr4e/urlUwzM2i8k0/LmB6jdh2a5nKbvm471YyEp4UC2/m0t BAfu4jQJfHCepOpxfyGOA8Qg8s7RlEPuwbvmsrf+vkZ2zyIXEC2j7saSLw6xZfNg wxVX++Tp3LBUerjizZozxfn1CJCIkpMYDixIW+tiwETBnEtg/EC234pm1DxOj1oj C6X1Fr9kCt9U0jMgN92HwxuX8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG8RJux t0CkjU0awENR6/JRIdfgMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvNEcN+riV+07gdYmPIMtBHr5Mlro3hm/kZ/XJeYaVIq/uvjbgfjNY 1MUybdUiidZrJkFl/JS3Tl6d32c7cQH1iefkxPtor03E1/fcCSqdceJMamwT+D+L 7YQn6hEelvcOLFtKWnffmDnDG0LAh4w/OeD++h+P0CDoyfnwbarcIosc7KkJsot0 J0zpnggtgSeAZhzH/LgrRa9oJndzD29MAHsiXq7kBScdsX6NXIdNNP0B1BYpXtQ9 Tvf0xFyotXCk/msQp0ExJqmYFngBbN4PiPmKDhzjYQbNBeBMdzxrHo6O+K+oH2rd NRySQ93/HUJO0JsOj+slFA8ZlmWwDBWZ -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:23 2024 by rpki-client on console-fra.rpki-client.org