$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json) Hash identifier: /wuPBc6MEXw7ukx0S4JCV2JdGW2qEIxlN+Dvzbn53p0= Subject key identifier: 42:AE:9F:08:D2:05:D0:86:F9:50:11:B8:78:7F:A5:09:C4:72:2B:E4 Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 09BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft Manifest number: 09AA Signing time: Fri 22 Nov 2024 19:49:13 +0000 Manifest this update: Fri 22 Nov 2024 19:49:13 +0000 Manifest next update: Fri 29 Nov 2024 19:49:13 +0000 Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: zLS3gcnbm5GdDgGbA/oKLMBrc/Asbn/89KIE81pwpMs=) 2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: fphiTj344DMgLwq6G0nys3hIn88s+iOZ8JrAAtNe+RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Nov 22 19:49:13 2024 GMT Not After : Nov 29 19:49:13 2024 GMT Subject: CN=6740e039-7381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:fb:ed:8b:7d:7f:96:ef:4e:a0:b1:13:16: 08:36:8d:16:fb:c2:73:30:ce:58:fa:82:9b:0a:45: ea:4b:f2:60:31:2c:29:df:78:3a:45:0e:00:6b:2f: e9:7b:f5:c3:53:41:b9:79:f4:52:ce:cc:5b:cb:f5: ae:6b:29:52:d7:4f:79:65:14:9f:0b:43:f2:7d:68: 7a:8c:5e:6b:e9:1c:4b:c2:cc:d6:fa:79:47:d1:f6: fd:e2:00:32:56:27:b7:55:73:fb:7f:67:f7:3e:13: ca:89:33:88:d4:18:43:65:c0:48:a8:91:77:dc:d1: e5:c0:f4:71:7d:87:5f:05:08:ab:8f:a2:77:ea:7d: 26:aa:7b:5d:25:e0:48:65:16:64:81:1f:34:e0:eb: 7a:87:73:13:b0:cb:d5:9b:96:7d:cc:a2:62:30:03: ad:8b:4a:8f:41:6c:c7:2c:f2:8f:ea:65:41:1a:70: 61:b8:2e:19:f3:b8:4e:de:11:ec:f9:60:c3:b8:1c: ed:fe:af:a4:cb:3e:c8:a1:87:b9:fa:ce:59:be:79: ed:11:ac:2b:88:9d:25:0a:8b:3b:b4:40:06:38:cc: 65:b0:45:e2:77:1a:d9:fa:c1:d1:1e:f0:a6:35:d6: 1c:d4:11:be:44:ce:9c:0e:47:d2:e2:ad:14:f9:6b: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AE:9F:08:D2:05:D0:86:F9:50:11:B8:78:7F:A5:09:C4:72:2B:E4 X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ab:ec:fc:dc:7a:56:f0:7c:db:c4:c4:d0:a8:69:31:07:83: ec:92:b0:6b:e1:43:57:fa:3a:de:1f:eb:47:1f:9d:ed:38:41: df:d6:7f:b2:b6:6c:c8:d4:ca:10:ba:4b:29:ba:7b:f8:cd:65: 3b:9a:fa:be:c7:d4:02:39:0a:5e:97:fa:9c:ef:9d:57:fa:a8: 93:e9:86:bf:45:49:e0:2e:42:aa:20:05:c4:06:98:0f:51:b8: bd:60:2c:36:82:8e:09:cf:9b:a1:d7:7e:8c:41:48:c1:f9:7c: 86:5c:e6:da:96:a9:a9:0e:d7:cb:3a:bd:44:44:52:dc:19:75: a3:40:b3:27:e7:7c:15:86:d4:f6:86:e5:a3:fb:54:1b:55:e3: 26:34:05:93:3a:e5:e5:e5:d6:3d:d3:22:34:12:6a:02:57:01: 9f:5f:92:0b:98:01:37:f2:37:72:60:99:60:f8:87:e0:b6:84: 96:f6:47:c7:c7:d9:95:35:6f:b5:20:25:4d:0e:aa:2c:ac:1e: 19:8d:03:db:ab:f4:ab:9a:57:bf:84:b0:fe:e6:04:e0:29:a1: c6:ab:c0:10:5f:63:d1:b2:ab:08:5d:4c:f3:4c:1a:95:dc:d0: 18:7a:b3:a5:b0:3e:cb:9e:3e:e1:19:5f:54:7b:e1:47:90:7f: 2b:52:10:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjQxMTIyMTk0OTEzWhcNMjQxMTI5MTk0OTEzWjAYMRYwFAYD VQQDEw02NzQwZTAzOS03MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0j77Yt9f5bvTqCxExYINo0W+8JzMM5Y+oKbCkXqS/JgMSwp33g6RQ4Aay/p e/XDU0G5efRSzsxby/WuaylS1095ZRSfC0PyfWh6jF5r6RxLwszW+nlH0fb94gAy Vie3VXP7f2f3PhPKiTOI1BhDZcBIqJF33NHlwPRxfYdfBQirj6J36n0mqntdJeBI ZRZkgR804Ot6h3MTsMvVm5Z9zKJiMAOti0qPQWzHLPKP6mVBGnBhuC4Z87hO3hHs +WDDuBzt/q+kyz7IoYe5+s5ZvnntEawriJ0lCos7tEAGOMxlsEXidxrZ+sHRHvCm NdYc1BG+RM6cDkfS4q0U+Ws8bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKunwjS BdCG+VARuHh/pQnEcivkMB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzAzOS9DMjVEMDJGRTc4OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdO SlloZmkwZFlVQzRqMm9PTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfq+z83HpW8HzbxMTQqGkxB4PskrBr4UNX+jreH+tHH53tOEHf1n+y tmzI1MoQukspunv4zWU7mvq+x9QCOQpel/qc751X+qiT6Ya/RUngLkKqIAXEBpgP Ubi9YCw2go4Jz5uh136MQUjB+XyGXObalqmpDtfLOr1ERFLcGXWjQLMn53wVhtT2 huWj+1QbVeMmNAWTOuXl5dY90yI0EmoCVwGfX5ILmAE38jdyYJlg+IfgtoSW9kfH x9mVNW+1ICVNDqosrB4ZjQPbq/Srmle/hLD+5gTgKaHGq8AQX2PRsqsIXUzzTBqV 3NAYerOlsD7Lnj7hGV9Ue+FHkH8rUhCO -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org