$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json) Hash identifier: +6sXULOJs9wC4ncsDxl1Prsuh0cQO5viJy6D4VXMbLE= Subject key identifier: 25:DE:69:E9:CB:3B:92:31:5A:9F:4C:A4:B6:6E:17:41:79:F8:28:C8 Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft Manifest number: 99 Signing time: Sat 23 Nov 2024 04:24:54 +0000 Manifest this update: Sat 23 Nov 2024 04:24:53 +0000 Manifest next update: Sat 30 Nov 2024 04:24:53 +0000 Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: 0L+2BV6JpBJdYeljkPEmfmiXYtdiR95eMhYDhqVA3xM=) 2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: qTZhpHJCRQ13DNUyXqIoDQjBjuUIgvaF3XVdmuG/v/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Validity Not Before: Nov 23 04:24:53 2024 GMT Not After : Nov 30 04:24:53 2024 GMT Subject: CN=67415916-d3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:9d:6c:d4:3e:bf:1f:08:75:4d:28:ae:4d: 60:e7:29:5b:b5:2b:bb:e0:0b:b7:39:fe:06:9b:68: 20:f3:c8:c1:80:d8:23:c4:df:12:ab:f7:66:81:87: 23:12:65:0b:93:c4:15:4a:60:ed:2f:40:b0:32:f8: ba:2c:f5:b4:55:66:9b:5e:2a:07:f2:36:56:fb:13: eb:2a:de:fe:24:b7:a7:d6:fb:a4:b5:2a:24:95:16: eb:35:c9:2e:35:04:4d:d0:1c:de:d8:19:dc:21:db: 0f:9d:9e:0d:22:0b:cd:42:18:bd:97:df:28:9f:f2: f5:b1:31:c5:31:12:71:0d:e6:f6:b0:b1:7e:cf:12: ca:d0:9a:12:17:a8:1d:f1:b7:03:a2:a7:81:27:4f: 53:52:3b:f5:46:d9:08:2c:b0:9e:de:e6:b2:a4:c0: 17:1c:23:49:9b:e2:af:bc:7a:0a:54:d6:14:fa:7e: 60:b8:e9:07:9c:05:19:1f:07:d8:5b:72:4d:77:79: e3:95:0a:ab:9c:27:90:96:71:83:5e:f4:6a:91:65: 6e:85:fe:7b:3e:bc:1d:9b:a0:03:7f:f0:f4:38:2e: 6c:81:59:a5:6e:bd:9c:74:c0:09:c2:68:f7:0a:1a: 8c:fd:94:0d:27:4a:07:09:32:b3:a5:aa:05:bc:d5: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DE:69:E9:CB:3B:92:31:5A:9F:4C:A4:B6:6E:17:41:79:F8:28:C8 X509v3 Authority Key Identifier: keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3e:90:d6:67:eb:73:84:5c:8e:a3:7e:1b:e1:d5:8d:89:8e: 5f:76:99:be:9d:80:50:1f:c2:f8:36:83:1c:2c:b1:7e:1e:77: 9d:c8:c1:23:96:4e:78:4c:79:8c:e0:9e:83:e2:a5:c0:5c:a3: 30:ae:fc:53:04:4c:cd:42:ba:3d:89:6a:73:06:38:ad:83:b1: c6:52:46:7b:87:08:4b:71:5e:13:28:3b:72:57:06:5d:62:42: 35:6e:2e:b5:83:f8:0b:04:30:03:7d:ad:9e:fe:6a:39:aa:8b: cd:ac:2a:9f:99:90:d1:04:b7:2d:79:75:ff:7b:f6:ab:d7:63: cd:fc:2f:83:d2:ca:0b:b9:e9:7e:00:ef:9f:c0:e6:05:85:07: 4d:16:10:52:71:2c:89:ce:24:21:8d:2d:42:50:87:cf:c0:d1: 45:e8:9e:fc:88:0a:6e:51:10:84:6d:69:2d:8e:2c:ab:74:bf: 95:57:71:a5:0e:12:68:9e:04:b6:5f:e2:e8:58:02:63:b3:8d: 72:a9:4f:66:44:f9:58:bf:b7:97:78:74:d1:08:b7:98:1c:eb: 7e:ea:63:55:b6:b1:05:76:e8:9a:71:13:b8:c0:c9:35:0a:2f: af:68:a2:47:63:10:96:ff:54:78:96:cd:08:4f:20:70:8f:87: cb:e8:d3:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw M0JCREZBNjIwHhcNMjQxMTIzMDQyNDUzWhcNMjQxMTMwMDQyNDUzWjAYMRYwFAYD VQQDEw02NzQxNTkxNi1kM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hKdbNQ+vx8IdU0ork1g5ylbtSu74Au3Of4Gm2gg88jBgNgjxN8Sq/dmgYcj EmULk8QVSmDtL0CwMvi6LPW0VWabXioH8jZW+xPrKt7+JLen1vuktSoklRbrNcku NQRN0Bze2BncIdsPnZ4NIgvNQhi9l98on/L1sTHFMRJxDeb2sLF+zxLK0JoSF6gd 8bcDoqeBJ09TUjv1RtkILLCe3uaypMAXHCNJm+KvvHoKVNYU+n5guOkHnAUZHwfY W3JNd3njlQqrnCeQlnGDXvRqkWVuhf57Prwdm6ADf/D0OC5sgVmlbr2cdMAJwmj3 ChqM/ZQNJ0oHCTKzpaoFvNUsKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXeaenL O5IxWp9MpLZuF0F5+CjIMB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s RU0yOC1jZkRwREFEdTktbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgPpDWZ+tzhFyOo34b4dWNiY5fdpm+nYBQH8L4NoMcLLF+HnedyMEj lk54THmM4J6D4qXAXKMwrvxTBEzNQro9iWpzBjitg7HGUkZ7hwhLcV4TKDtyVwZd YkI1bi61g/gLBDADfa2e/mo5qovNrCqfmZDRBLcteXX/e/ar12PN/C+D0soLuel+ AO+fwOYFhQdNFhBScSyJziQhjS1CUIfPwNFF6J78iApuURCEbWktjiyrdL+VV3Gl DhJongS2X+LoWAJjs41yqU9mRPlYv7eXeHTRCLeYHOt+6mNVtrEFduiacRO4wMk1 Ci+vaKJHYxCW/1R4ls0ITyBwj4fL6NNZ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org