$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: KiJJDVCg8WLiFaJhqTfxHQGURx4jx+lNZf6SxtE5Wc8= Subject key identifier: 8A:CB:DE:73:D7:7D:55:93:03:3E:69:CA:72:68:CB:13:B3:5C:F1:FC Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 0777 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 0772 Signing time: Fri 22 Nov 2024 20:56:25 +0000 Manifest this update: Fri 22 Nov 2024 20:56:24 +0000 Manifest next update: Fri 29 Nov 2024 20:56:24 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: CTTfML6iBAQx3YV2Im+z3t9ads/psUUWiUYYK2p+sOU=) 2: D26A631494D011EEBECF111CC4F9AE02.roa (hash: lNCPZWgPWvDsSNT82bj8eu8yx05ZG1x3ORIqj0JbPLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1911 (0x777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Nov 22 20:56:24 2024 GMT Not After : Nov 29 20:56:24 2024 GMT Subject: CN=6740eff9-dd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:48:e2:11:fe:82:2a:fb:80:b1:51:f7:52: b1:7e:17:a6:68:08:ed:bc:22:7d:98:fd:8a:e3:7f: 44:f6:f1:6b:c3:a1:fa:56:ca:ea:7a:40:cd:60:71: c6:ca:d7:a9:d3:da:c7:b7:3b:de:a1:63:42:76:87: f3:31:4f:ff:d0:b1:31:8d:d9:dd:ac:82:c6:90:81: 88:4b:bd:34:7b:fb:4b:21:ea:85:bc:69:4d:71:77: 69:d3:6d:63:46:45:e7:71:c5:b0:a9:f7:53:ed:51: 6e:ee:b9:06:3f:b6:29:ed:35:cb:82:d2:de:19:d2: c1:29:10:67:96:bd:3d:e6:40:94:94:bf:82:c6:62: cf:0c:3c:46:5e:0f:08:b8:09:b7:dd:90:2f:48:7b: 57:aa:0d:b4:0b:7e:32:2d:2c:49:f6:9e:df:be:20: c1:4a:40:f2:80:27:b8:26:07:b3:6e:a9:17:2c:ac: 1c:97:0e:b5:a2:d8:24:18:a1:cf:8b:04:8d:0b:25: c8:36:46:16:ef:52:f6:c7:e5:38:31:89:09:72:23: 44:97:28:dd:8f:a0:03:3b:b6:54:39:ff:35:97:7a: 78:eb:b6:a3:3f:16:ff:76:b6:a2:7d:ce:31:f9:d1: dd:7d:9d:cb:14:6a:85:c9:5e:c8:55:2f:7c:f3:98: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CB:DE:73:D7:7D:55:93:03:3E:69:CA:72:68:CB:13:B3:5C:F1:FC X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:99:45:2d:7b:cd:93:0c:63:26:28:67:43:43:39:5f:29:7f: 54:3e:a7:ff:3f:17:e3:ec:9e:6d:08:72:67:b6:ff:df:c1:1b: 55:5a:26:c4:b1:6e:41:c2:63:55:ab:f4:ba:4b:dd:9d:20:f1: ad:fd:34:d4:92:0e:92:7f:b9:c3:a3:04:aa:9b:24:0a:2b:60: 67:61:50:2f:bf:c1:8d:ee:2d:1c:d9:bd:91:f0:36:5e:41:8d: c9:e0:2c:eb:7e:c8:0f:55:01:46:22:9e:bf:50:09:29:f2:db: 10:c1:b0:38:a0:be:50:f4:43:16:4e:8d:77:62:d4:82:a8:41: 0d:ef:86:77:c3:9b:18:74:e8:bc:65:d9:da:51:22:53:f0:8c: 26:57:a4:a4:44:9f:08:38:39:64:7e:99:48:12:09:87:18:eb: 32:10:ce:18:43:0b:bc:8f:14:31:36:22:5d:86:a9:d1:98:bd: 31:4a:c1:b8:cf:0a:85:06:3c:16:b4:37:83:a0:ba:95:5d:43: da:ff:92:2a:e2:47:af:39:45:f9:dc:be:bc:14:5d:0e:19:5d: af:f6:37:ce:b0:a3:f3:11:84:9f:30:65:e8:e0:0f:a2:e1:8b: c5:21:a6:3f:29:36:88:e4:1b:68:39:30:48:46:5f:30:67:de: 40:73:7a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjQxMTIyMjA1NjI0WhcNMjQxMTI5MjA1NjI0WjAYMRYwFAYD VQQDEw02NzQwZWZmOS1kZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqshI4hH+gir7gLFR91KxfhemaAjtvCJ9mP2K439E9vFrw6H6VsrqekDNYHHG ytep09rHtzveoWNCdofzMU//0LExjdndrILGkIGIS700e/tLIeqFvGlNcXdp021j RkXnccWwqfdT7VFu7rkGP7Yp7TXLgtLeGdLBKRBnlr095kCUlL+CxmLPDDxGXg8I uAm33ZAvSHtXqg20C34yLSxJ9p7fviDBSkDygCe4JgezbqkXLKwclw61otgkGKHP iwSNCyXINkYW71L2x+U4MYkJciNElyjdj6ADO7ZUOf81l3p467ajPxb/draifc4x +dHdfZ3LFGqFyV7IVS9885j6AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrL3nPX fVWTAz5pynJoyxOzXPH8MB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLmUUte82TDGMmKGdDQzlfKX9UPqf/Pxfj7J5tCHJntv/fwRtVWibE sW5BwmNVq/S6S92dIPGt/TTUkg6Sf7nDowSqmyQKK2BnYVAvv8GN7i0c2b2R8DZe QY3J4CzrfsgPVQFGIp6/UAkp8tsQwbA4oL5Q9EMWTo13YtSCqEEN74Z3w5sYdOi8 ZdnaUSJT8IwmV6SkRJ8IODlkfplIEgmHGOsyEM4YQwu8jxQxNiJdhqnRmL0xSsG4 zwqFBjwWtDeDoLqVXUPa/5Iq4kevOUX53L68FF0OGV2v9jfOsKPzEYSfMGXo4A+i 4YvFIaY/KTaI5BtoOTBIRl8wZ95Ac3o1 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org