$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: kEX2t9nV/335CScUZBhBzSzOUlReIKKmNerElU6bUsg= Subject key identifier: 7F:69:BD:08:B2:86:2D:70:50:3D:EF:E8:FB:88:AA:A4:BB:60:0B:8C Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0310 Signing time: Thu 21 Nov 2024 00:51:27 +0000 Manifest this update: Thu 21 Nov 2024 00:51:27 +0000 Manifest next update: Thu 28 Nov 2024 00:51:27 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: Cy4xcZx8PnjsCH3CT+MjHMX+zmu1hKHuqtTVR1BR2zs=) 2: AAFD824CBCFA11EDAD328D3AC4F9AE02.roa (hash: bAefQD+i2DUr5zX++CqMyYJLlTVBnnX0/82YDtmfqOM=) 3: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: p2XvCNFD6d4VIAif72MiFgokcw+e7+Qk3biI5UhdJ/g=) 4: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: WToU+UpRxbQJKSr2QGut5hwA296t8z/pXjsZxqDqyvg=) 5: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: oDrhzyW7lkRnV2JdbCV+XPs93kiucplQyCNzYwjrpJw=) 6: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: K97XOnrCVU0606+V1FtEZLw0f6bE1IzyADp5nbB58XM=) 7: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: vOZZW9Fz+Ew432aoBZJQA6i/cbgp+fKwlVmKDZ1QXVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Nov 21 00:51:27 2024 GMT Not After : Nov 28 00:51:27 2024 GMT Subject: CN=673e840f-844f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:0b:75:30:b4:69:80:89:a3:06:75:ba:41: e9:9e:a8:e6:ad:5e:6f:d9:75:a0:34:69:a8:5f:c7: b3:f8:bf:e7:96:0a:9c:2a:7a:2f:23:66:3c:88:ae: 34:56:12:e8:2d:10:0f:eb:e1:79:d9:d4:5f:07:ae: 2e:66:36:f7:36:a5:e3:f2:a2:79:b9:e9:48:4b:82: d9:e2:6c:58:c4:7c:2b:8d:f5:f3:b5:6b:3c:1c:d2: 8c:fa:91:e7:81:13:c2:b7:3d:1b:29:b7:be:fe:0e: ce:0b:b8:0f:1b:e0:32:4b:8a:91:20:88:24:40:67: 06:de:8b:15:0a:1e:36:a2:1b:23:ee:3f:ea:d7:b8: e8:4a:90:34:5d:75:4e:aa:cf:e8:75:82:3d:9e:21: 0e:ed:d2:51:4a:bc:d4:3f:d4:ce:28:89:48:fb:bf: 95:3a:09:c0:f4:1b:a5:8c:21:18:1e:13:0d:ae:80: bb:16:62:21:2a:36:7c:bd:29:69:f6:13:f7:95:49: 5f:20:79:77:1a:c2:21:3e:00:9d:e7:a6:e7:1a:6f: ff:ac:d0:96:94:40:c8:da:fd:2c:d8:71:a3:a2:ea: 0f:06:a4:d7:57:45:80:25:78:af:ab:5e:d4:9f:45: c9:98:2b:f7:fe:a8:2c:fb:b4:29:7f:e1:f0:a3:a6: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:69:BD:08:B2:86:2D:70:50:3D:EF:E8:FB:88:AA:A4:BB:60:0B:8C X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d1:bf:eb:02:ff:cb:4e:bb:35:6f:cc:68:c3:ea:6f:be:33: 39:53:27:54:52:ae:26:9e:05:a1:4f:41:08:ad:19:ee:61:d1: 48:f4:6c:e9:02:1c:69:eb:20:f5:55:99:c2:66:a6:a1:16:93: 50:09:b0:d4:e3:80:e9:9d:2e:51:bc:f6:b5:12:e8:09:29:17: 14:51:9f:ca:89:23:c8:43:6f:67:a7:fd:29:a9:8f:fc:33:40: 56:0d:03:b7:8e:de:50:1d:d5:39:48:6b:3d:47:a3:55:71:dd: 5c:51:b9:05:50:34:46:eb:9a:91:9a:e5:ca:4d:23:23:37:8c: 9d:c6:e7:93:64:b6:84:76:66:7d:9e:8c:e3:ed:eb:04:7f:d9: 70:de:c7:a3:fd:55:9d:d4:db:13:63:42:88:f8:8d:06:8d:6c: 00:98:03:5a:02:5e:43:78:7b:d5:dd:4c:da:3e:79:c4:db:9d: 35:be:ac:df:f0:7d:74:7e:61:a9:1f:09:a1:fc:e8:98:7e:6a: b8:86:1f:20:84:18:f1:13:d8:d5:e9:72:66:33:39:4a:0f:0a: f2:60:9e:90:21:d2:1f:bc:f1:31:b8:38:7f:c9:9d:49:0e:33: e9:5e:e8:0f:aa:c3:0c:90:64:00:c4:25:4a:50:68:5a:90:73: a6:58:ad:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjQxMTIxMDA1MTI3WhcNMjQxMTI4MDA1MTI3WjAYMRYwFAYD VQQDEw02NzNlODQwZi04NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYkLdTC0aYCJowZ1ukHpnqjmrV5v2XWgNGmoX8ez+L/nlgqcKnovI2Y8iK40 VhLoLRAP6+F52dRfB64uZjb3NqXj8qJ5uelIS4LZ4mxYxHwrjfXztWs8HNKM+pHn gRPCtz0bKbe+/g7OC7gPG+AyS4qRIIgkQGcG3osVCh42ohsj7j/q17joSpA0XXVO qs/odYI9niEO7dJRSrzUP9TOKIlI+7+VOgnA9BuljCEYHhMNroC7FmIhKjZ8vSlp 9hP3lUlfIHl3GsIhPgCd56bnGm//rNCWlEDI2v0s2HGjouoPBqTXV0WAJXivq17U n0XJmCv3/qgs+7Qpf+Hwo6aYpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9pvQiy hi1wUD3v6PuIqqS7YAuMMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW0b/rAv/LTrs1b8xow+pvvjM5UydUUq4mngWhT0EIrRnuYdFI9Gzp Ahxp6yD1VZnCZqahFpNQCbDU44DpnS5RvPa1EugJKRcUUZ/KiSPIQ29np/0pqY/8 M0BWDQO3jt5QHdU5SGs9R6NVcd1cUbkFUDRG65qRmuXKTSMjN4ydxueTZLaEdmZ9 nozj7esEf9lw3sej/VWd1NsTY0KI+I0GjWwAmANaAl5DeHvV3UzaPnnE2501vqzf 8H10fmGpHwmh/OiYfmq4hh8ghBjxE9jV6XJmMzlKDwryYJ6QIdIfvPExuDh/yZ1J DjPpXugPqsMMkGQAxCVKUGhakHOmWK3L -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:32 2024 by rpki-client on console-ams.rpki-client.org