$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: BGLgtwzebaykFZIVEkMvZf+TPFM5N9Js5cvnqw0R2ow= Subject key identifier: 07:91:B8:C2:E8:7F:42:DB:21:86:96:9D:0C:CD:D2:8B:FB:9A:2B:E6 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0BDC Signing time: Fri 22 Nov 2024 18:37:05 +0000 Manifest this update: Fri 22 Nov 2024 18:37:04 +0000 Manifest next update: Fri 29 Nov 2024 18:37:04 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: INGRjqrSEInFX1CgsyB8xD3FafV0EBiieLt+eHONl5U=) 2: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 3: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Nov 22 18:37:04 2024 GMT Not After : Nov 29 18:37:04 2024 GMT Subject: CN=6740cf51-c894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:a8:22:55:af:ec:85:68:12:46:f5:a0:db: 5f:46:c4:1d:b3:11:31:67:a2:d6:f0:97:07:7d:32: 6f:b5:e1:4f:37:9c:18:b9:71:80:a8:81:15:29:2d: 64:7f:05:80:84:cd:4f:2d:24:90:03:45:b4:84:62: 33:03:2c:86:b7:ee:b4:7d:97:14:4b:83:a2:99:ef: 8f:c5:9f:5b:64:f3:b0:1e:35:d2:07:2e:60:a4:6a: 5c:7f:d5:3f:16:d5:57:b1:34:48:e4:b1:45:5e:66: a1:00:70:14:6e:6c:86:b5:17:cd:10:82:23:fc:99: 0b:ae:a9:4b:83:f1:51:51:89:c6:ab:a0:de:35:39: ee:ef:2c:37:23:60:62:81:0a:76:9f:ca:26:45:e8: 15:76:d8:2f:a2:70:c9:76:2e:e0:21:32:e8:2a:27: 07:54:4c:fd:f3:4d:e4:3d:b9:1c:38:54:b3:25:fe: 16:4b:86:9f:dc:b3:d2:c5:02:e6:f3:52:56:fa:77: e4:f5:20:f7:1c:9f:23:53:bb:db:f6:92:c6:28:4c: 99:3c:d8:54:ed:ba:97:f5:f3:d9:42:d4:22:fa:47: 85:b9:67:fa:10:6e:c2:fd:0b:13:14:34:ef:45:e2: 4d:2f:71:72:ba:73:43:c6:7b:db:b2:21:15:f1:40: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:91:B8:C2:E8:7F:42:DB:21:86:96:9D:0C:CD:D2:8B:FB:9A:2B:E6 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3d:b1:5d:d1:38:5a:fd:aa:d6:d2:a0:7c:ef:fb:dd:67:ec: 46:ed:24:54:40:d0:6c:18:35:31:00:67:d5:57:72:4f:d0:77: 4a:06:36:93:a9:8f:e1:94:0c:1c:82:f6:34:c5:8e:42:10:9c: 44:c9:ea:4a:2a:23:84:15:ea:99:8f:4b:de:0d:4f:73:f5:b3: 51:fc:f8:58:57:23:f6:4f:4a:52:e0:a4:4d:95:36:84:ac:21: 94:e2:8c:99:93:f4:34:31:49:a2:92:9d:6f:91:47:df:63:3a: 77:e4:45:e1:23:1d:05:01:f9:cc:02:d0:2a:57:95:dc:e8:47: cb:95:a3:1e:a9:1a:c8:c6:ad:9b:22:50:dc:c7:64:6b:20:d1: c8:a4:a2:4d:e1:19:5f:55:90:95:1b:c0:a2:01:9c:22:73:50: 19:b1:a4:8e:5c:b9:ea:e0:14:c7:1f:69:47:15:00:19:bf:50: 26:3d:bd:3d:ad:0c:3a:64:e7:d4:a4:2d:53:f7:12:57:b7:57: 64:ff:a5:05:8c:03:ac:d5:79:48:2d:82:2a:b9:4d:0e:e9:57: 82:3e:16:52:02:63:96:7c:04:84:f3:fe:f5:cf:e6:ee:b7:03: fd:0b:4e:e9:8f:dc:90:64:9f:ba:82:19:2d:8f:85:f2:92:10: 6c:46:53:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjQxMTIyMTgzNzA0WhcNMjQxMTI5MTgzNzA0WjAYMRYwFAYD VQQDEw02NzQwY2Y1MS1jODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpOoIlWv7IVoEkb1oNtfRsQdsxExZ6LW8JcHfTJvteFPN5wYuXGAqIEVKS1k fwWAhM1PLSSQA0W0hGIzAyyGt+60fZcUS4Oime+PxZ9bZPOwHjXSBy5gpGpcf9U/ FtVXsTRI5LFFXmahAHAUbmyGtRfNEIIj/JkLrqlLg/FRUYnGq6DeNTnu7yw3I2Bi gQp2n8omRegVdtgvonDJdi7gITLoKicHVEz9803kPbkcOFSzJf4WS4af3LPSxQLm 81JW+nfk9SD3HJ8jU7vb9pLGKEyZPNhU7bqX9fPZQtQi+keFuWf6EG7C/QsTFDTv ReJNL3FyunNDxnvbsiEV8UAIIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeRuMLo f0LbIYaWnQzN0ov7mivmMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOPbFd0Tha/arW0qB87/vdZ+xG7SRUQNBsGDUxAGfVV3JP0HdKBjaT qY/hlAwcgvY0xY5CEJxEyepKKiOEFeqZj0veDU9z9bNR/PhYVyP2T0pS4KRNlTaE rCGU4oyZk/Q0MUmikp1vkUffYzp35EXhIx0FAfnMAtAqV5Xc6EfLlaMeqRrIxq2b IlDcx2RrINHIpKJN4RlfVZCVG8CiAZwic1AZsaSOXLnq4BTHH2lHFQAZv1AmPb09 rQw6ZOfUpC1T9xJXt1dk/6UFjAOs1XlILYIquU0O6VeCPhZSAmOWfASE8/71z+bu twP9C07pj9yQZJ+6ghktj4XykhBsRlP8 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org