$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: 4HCZ5l+jGftG6lLNRfh98DqlVP0vys7obB+WXsdtUyc= Subject key identifier: 7A:F9:CD:3D:B0:F8:45:17:CD:C6:2E:3F:A4:25:12:97:F1:81:C2:96 Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: 4C Signing time: Wed 20 Nov 2024 21:46:54 +0000 Manifest this update: Wed 20 Nov 2024 21:46:53 +0000 Manifest next update: Wed 27 Nov 2024 21:46:53 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: Q2MyWGUlC9WZOvvb6zJI1W0lEP9ptix8+W5Jy1ULe9c=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Nov 20 21:46:53 2024 GMT Not After : Nov 27 21:46:53 2024 GMT Subject: CN=673e58ce-458a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:01:3f:dc:68:af:d5:6c:4a:23:3a:55:5d: 80:88:2a:54:b1:c7:37:48:20:b5:7f:6d:4b:65:2f: 45:fb:ec:6b:e3:04:f2:70:14:62:75:61:ae:35:7d: 9b:8b:1b:7e:03:5d:c6:24:d3:c2:8f:c5:97:e2:7c: 98:58:42:0d:f0:03:ff:a0:a2:da:cf:98:62:fb:59: cd:af:2e:6a:50:fd:69:52:a1:c5:ad:fe:1f:da:6d: bc:80:8f:54:8b:8f:b6:c1:da:ac:1d:25:3b:9d:3e: e4:28:45:de:e9:89:9b:1a:7f:fe:78:f1:59:3a:0f: c9:0f:4c:9b:d7:4f:52:e2:00:21:dd:42:a1:5a:9d: 21:48:8a:02:32:9d:cf:09:a8:c3:97:34:b5:3d:54: eb:64:d3:73:7e:ce:ae:04:65:9f:7c:20:8d:64:71: e6:69:b8:09:2c:d5:bd:83:fc:82:9b:0b:b2:1b:68: 0f:bb:0b:2b:3b:61:e1:12:84:95:f4:55:a8:27:fa: 4a:50:6e:78:56:da:51:85:f9:18:cc:85:7d:0e:d1: 3d:68:91:15:2a:db:24:0b:97:a2:e7:af:e8:b5:af: 74:9a:ba:08:84:b9:09:be:dc:82:16:4a:bb:f4:6d: c7:90:77:16:59:3b:80:4e:2b:61:f4:02:5f:76:0b: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F9:CD:3D:B0:F8:45:17:CD:C6:2E:3F:A4:25:12:97:F1:81:C2:96 X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:af:19:e1:db:40:9b:7f:1b:b5:58:9e:8e:21:db:e4:c1:d4: 45:d2:86:9a:bd:1f:04:94:98:d3:2c:14:2a:a1:3c:40:84:34: 07:b5:68:9d:4b:43:6c:9b:86:61:d6:39:20:d5:92:86:c7:b8: c7:85:81:26:2b:23:47:5b:23:1b:e4:b2:21:0b:e0:a5:78:17: 4e:79:86:0b:d6:75:76:c6:a1:b6:bb:9c:7f:66:7f:e1:83:c9: 27:4c:66:b4:bc:e3:d1:a6:72:d6:1f:32:eb:a5:fe:ff:a3:08: 68:14:1f:f2:a7:67:7e:3b:17:7b:da:ca:6a:53:7d:29:d6:79: a1:57:d5:08:84:c1:03:e3:54:9c:24:32:98:d2:a1:49:c9:6d: 7a:39:ff:06:25:ab:48:5c:80:7f:0d:c2:f5:e6:de:56:77:6b: 58:ab:57:f8:c5:03:9b:d3:83:3c:81:3e:d2:1a:20:93:5a:8f: cb:14:de:82:6e:96:4f:a5:09:7f:da:2d:23:f7:88:ca:79:26: 87:07:3b:41:d9:0a:a1:f7:ac:bb:83:3d:5b:18:90:88:39:10: c2:cd:23:da:17:b5:66:59:c2:eb:ee:91:8a:2f:03:ab:26:a5: dc:1f:68:98:d4:97:0f:47:25:9c:14:d7:f3:69:b9:60:af:6a: 97:14:ff:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkJCODExMC8GA1UEBRMoQTRFNkVFMkEyQkQ0QjZERjNCMzUzQkFFNkJDNDg5MkE2 RDM4RUYyOTAeFw0yNDExMjAyMTQ2NTNaFw0yNDExMjcyMTQ2NTNaMBgxFjAUBgNV BAMTDTY3M2U1OGNlLTQ1OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEaQE/3Giv1WxKIzpVXYCIKlSxxzdIILV/bUtlL0X77GvjBPJwFGJ1Ya41fZuL G34DXcYk08KPxZfifJhYQg3wA/+gotrPmGL7Wc2vLmpQ/WlSocWt/h/abbyAj1SL j7bB2qwdJTudPuQoRd7piZsaf/548Vk6D8kPTJvXT1LiACHdQqFanSFIigIync8J qMOXNLU9VOtk03N+zq4EZZ98II1kceZpuAks1b2D/IKbC7IbaA+7Cys7YeEShJX0 Vagn+kpQbnhW2lGF+RjMhX0O0T1okRUq2yQLl6Lnr+i1r3SaugiEuQm+3IIWSrv0 bceQdxZZO4BOK2H0Al92CwlZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUevnNPbD4 RRfNxi4/pCUSl/GBwpYwHwYDVR0jBBgwFoAUpObuKivUtt87NTuua8SJKm047ykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QkI4Lzg2MTk2MzE2M0RB NDExRUZBRDNFQTgxOEM0RjlBRTAyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvcE9idUtpdlV0dDg3TlR1dWE4U0pLbTA0N3lrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 QkI4Lzg2MTk2MzE2M0RBNDExRUZBRDNFQTgxOEM0RjlBRTAyL3BPYnVLaXZVdHQ4 N05UdXVhOFNKS20wNDd5ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWvGeHbQJt/G7VYno4h2+TB1EXShpq9HwSUmNMsFCqhPECENAe1aJ1L Q2ybhmHWOSDVkobHuMeFgSYrI0dbIxvksiEL4KV4F055hgvWdXbGoba7nH9mf+GD ySdMZrS849GmctYfMuul/v+jCGgUH/KnZ347F3vaympTfSnWeaFX1QiEwQPjVJwk MpjSoUnJbXo5/wYlq0hcgH8NwvXm3lZ3a1irV/jFA5vTgzyBPtIaIJNaj8sU3oJu lk+lCX/aLSP3iMp5JocHO0HZCqH3rLuDPVsYkIg5EMLNI9oXtWZZwuvukYovA6sm pdwfaJjUlw9HJZwU1/NpuWCvapcU/0w= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:35 2024 by rpki-client on console-ams.rpki-client.org