$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: uNkOF+dnqEUnZlIKgLDr68gp2AiMj6/CAhPjAscj4P0= Subject key identifier: E2:81:A2:FF:76:2F:9A:03:7B:2B:3B:A0:4E:68:2C:05:4F:CA:B2:15 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 07A7 Signing time: Fri 22 Nov 2024 20:48:20 +0000 Manifest this update: Fri 22 Nov 2024 20:48:19 +0000 Manifest next update: Fri 29 Nov 2024 20:48:19 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: 1mmwJelCe9qh/rZJMob3G7HSSNtNFGqxzIApma8bk2E=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: rKz6S4ig+3Nn3Uq5Htmq9rz0thwBeC0p821+eve0GW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Nov 22 20:48:19 2024 GMT Not After : Nov 29 20:48:19 2024 GMT Subject: CN=6740ee14-f525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:60:f3:c0:06:01:79:c5:41:96:5b:e3:24: 8d:df:7b:d4:71:57:31:25:2c:1a:9a:94:78:dd:e3: 6d:3d:7b:ca:a3:f1:70:41:cf:e5:a6:d3:61:5e:e8: a3:d5:46:24:21:4f:55:12:3c:87:3d:fd:c1:5e:ad: 59:54:bc:02:93:bb:d3:12:da:ce:b3:60:51:de:f7: 79:0a:52:73:80:db:e7:87:dd:48:9d:d2:cf:09:46: 41:61:b1:01:66:53:58:82:21:7d:8b:e2:8a:24:11: 35:18:f5:f5:8c:a2:44:8f:bd:15:ff:6c:e0:c3:47: cf:ca:63:1e:1c:e7:0c:81:e7:ea:cd:36:a7:bb:92: ac:a4:36:cb:8c:9e:b6:ea:4f:1f:fa:b2:6c:f0:20: d1:9f:5f:24:78:cc:89:bd:2b:d5:72:5f:26:07:16: 04:9d:99:4e:d8:c5:c7:2b:7c:96:61:56:8b:c5:ab: 0a:39:70:e5:d2:52:51:1c:23:90:54:6e:cb:05:65: 4d:09:8e:70:b0:7d:38:dc:a9:d8:f0:4c:fb:55:c8: 1a:49:cd:49:96:f4:d6:12:fc:80:bf:f6:0e:46:71: 0b:6d:3f:8a:56:d5:73:e0:37:3d:ba:ce:e2:1c:09: 0a:e9:3c:00:f8:a2:8d:c6:90:7e:a0:e4:34:e8:e3: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:81:A2:FF:76:2F:9A:03:7B:2B:3B:A0:4E:68:2C:05:4F:CA:B2:15 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:77:7f:6c:4c:8e:47:8a:0f:78:8a:5a:7d:43:af:b3:08:d0: 98:0f:16:4a:1b:0b:4a:0b:28:75:4e:99:70:9c:1d:bb:6b:af: 27:69:b1:bc:9e:56:83:39:00:a1:0a:54:3f:fe:96:95:a8:ec: 9c:35:27:fd:ed:59:a8:25:b7:20:d2:6d:58:28:a3:f3:ea:6e: d5:cb:c1:c1:63:c4:43:ad:56:b9:f7:58:6a:45:e4:ac:04:49: 76:3e:85:72:c4:48:8c:e3:34:36:87:12:ae:d4:89:81:85:e3: f9:98:ac:2f:2e:61:d7:1f:04:6e:a0:52:50:cd:98:86:44:81: 5e:7f:e9:49:a1:c6:63:3b:28:0e:00:7f:4f:3d:ca:db:c7:60: 48:50:d8:92:b2:bc:57:3e:3d:e6:1e:bc:55:fb:1b:2e:31:8c: 9d:61:10:b7:86:ee:8d:c8:85:54:fb:3a:fe:0d:00:b8:bb:68: 31:b2:63:14:e6:5e:ee:67:d3:c7:8a:76:ce:7f:1d:51:f5:68: 7b:a6:2a:c3:71:32:a9:10:a1:52:3e:74:14:37:61:2b:26:bb: 75:b5:d4:6d:8b:eb:e9:27:4a:e4:14:77:0c:89:ee:b8:50:e1: e1:82:a1:95:2c:6d:47:68:ac:d8:9b:ca:c0:6e:2a:e5:0e:24: 1e:58:ff:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjQxMTIyMjA0ODE5WhcNMjQxMTI5MjA0ODE5WjAYMRYwFAYD VQQDEw02NzQwZWUxNC1mNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwudg88AGAXnFQZZb4ySN33vUcVcxJSwampR43eNtPXvKo/FwQc/lptNhXuij 1UYkIU9VEjyHPf3BXq1ZVLwCk7vTEtrOs2BR3vd5ClJzgNvnh91IndLPCUZBYbEB ZlNYgiF9i+KKJBE1GPX1jKJEj70V/2zgw0fPymMeHOcMgefqzTanu5KspDbLjJ62 6k8f+rJs8CDRn18keMyJvSvVcl8mBxYEnZlO2MXHK3yWYVaLxasKOXDl0lJRHCOQ VG7LBWVNCY5wsH043KnY8Ez7VcgaSc1JlvTWEvyAv/YORnELbT+KVtVz4Dc9us7i HAkK6TwA+KKNxpB+oOQ06OOk1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKBov92 L5oDeys7oE5oLAVPyrIVMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYd39sTI5Hig94ilp9Q6+zCNCYDxZKGwtKCyh1TplwnB27a68nabG8 nlaDOQChClQ//paVqOycNSf97VmoJbcg0m1YKKPz6m7Vy8HBY8RDrVa591hqReSs BEl2PoVyxEiM4zQ2hxKu1ImBheP5mKwvLmHXHwRuoFJQzZiGRIFef+lJocZjOygO AH9PPcrbx2BIUNiSsrxXPj3mHrxV+xsuMYydYRC3hu6NyIVU+zr+DQC4u2gxsmMU 5l7uZ9PHinbOfx1R9Wh7pirDcTKpEKFSPnQUN2ErJrt1tdRti+vpJ0rkFHcMie64 UOHhgqGVLG1HaKzYm8rAbirlDiQeWP+M -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org