$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: sASsbQ82bU4szhlhCh9nW8N/14njtrOwTMF222zHvKw= Subject key identifier: D1:E8:9F:E5:5B:0D:D2:7E:0F:CD:87:16:CD:B5:92:78:AE:01:E7:8E Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0C0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0C03 Signing time: Fri 22 Nov 2024 18:18:13 +0000 Manifest this update: Fri 22 Nov 2024 18:18:12 +0000 Manifest next update: Fri 29 Nov 2024 18:18:12 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: UFlFqxV1+b+moWX5simPD7as0YZFPL9hbAyx8xoAUzU=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: yJ7JJ57X7acJRxSqEFCo5C/DFSHfzNjQxukB2Lk3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Nov 22 18:18:12 2024 GMT Not After : Nov 29 18:18:12 2024 GMT Subject: CN=6740cae5-a4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:72:e2:f7:2b:87:32:53:d0:bf:e0:6e:4c: a6:0e:7f:8d:66:55:93:42:d1:84:be:09:d2:44:fe: 35:92:6d:af:53:ba:71:05:a6:5c:41:7b:6b:fa:60: b1:45:3d:5a:8f:83:ae:ce:87:a3:cf:f8:3d:99:02: 20:80:c8:01:8f:a4:58:f9:01:7e:10:13:b4:85:56: b0:1e:67:74:53:04:cc:94:24:0f:76:29:84:08:1f: 2a:92:47:86:bc:d0:95:a7:b0:1c:d2:cb:c0:94:02: 67:57:8d:b2:3c:70:a1:8a:3e:c5:02:d6:32:92:53: 65:57:42:d0:50:9e:90:a0:6d:3c:7c:3c:3b:13:7d: 06:d0:75:b4:23:d7:0a:af:a2:d8:39:0a:a4:79:0d: dd:dd:ea:59:1d:73:0b:e5:4e:eb:4b:31:f4:1f:f6: 27:32:d9:e0:95:15:47:5c:b7:85:0f:75:95:fe:36: a9:b5:ee:48:c4:0e:36:59:94:97:78:a9:4a:90:73: f7:a7:75:6f:63:8f:98:41:10:a4:83:bd:6d:b5:97: 6b:8e:59:ac:40:10:46:33:a2:9f:58:3a:60:1c:31: 3c:42:52:bc:99:99:ea:1d:ef:fc:9e:bb:14:3a:01: d0:62:24:16:86:56:dc:2b:b1:d5:7b:36:f8:59:1e: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E8:9F:E5:5B:0D:D2:7E:0F:CD:87:16:CD:B5:92:78:AE:01:E7:8E X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:69:c3:78:7c:df:79:01:b0:4e:83:fb:c2:9b:84:a8:2c:74: d4:cc:bb:7b:8c:bc:cb:d7:87:9e:80:60:48:9f:44:84:f7:97: 79:19:51:1d:9f:91:ea:83:97:5f:7e:e9:f6:b2:65:98:a0:cc: 49:3d:54:79:c6:36:ae:b5:f5:4f:6a:49:0d:93:b0:a8:2b:f8: 5f:f2:2c:ad:48:26:ef:de:f7:ea:68:2b:46:2f:f4:83:dc:32: f6:04:5b:1a:db:a4:69:44:ae:55:79:d2:ed:e4:de:d3:fb:e7: d2:b3:f0:56:98:49:86:de:bc:52:0b:09:8b:a1:8c:9f:e4:c6: 79:a3:97:cf:1a:cd:bd:60:b7:a6:28:6f:1a:40:c3:95:91:39: f6:f5:5b:00:11:d4:49:69:bb:9e:e2:da:01:c1:69:1d:d2:c3: 36:22:94:1b:47:ea:f0:4f:8c:39:5b:f7:50:b4:2a:c7:2c:e0: f5:f6:ec:bf:ad:79:c1:9f:d7:74:34:d4:b1:22:34:35:88:00: f8:dd:5c:df:d8:70:7e:22:e7:2a:06:28:a4:ba:d5:8c:de:20: db:6a:78:ce:8d:5e:12:66:cb:b1:3f:0f:ce:96:c0:c4:fc:bf: d5:c1:d5:df:8e:99:ef:79:39:2f:90:cc:40:cd:b8:20:c3:ec: ed:26:ef:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjQxMTIyMTgxODEyWhcNMjQxMTI5MTgxODEyWjAYMRYwFAYD VQQDEw02NzQwY2FlNS1hNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Spy4vcrhzJT0L/gbkymDn+NZlWTQtGEvgnSRP41km2vU7pxBaZcQXtr+mCx RT1aj4Ouzoejz/g9mQIggMgBj6RY+QF+EBO0hVawHmd0UwTMlCQPdimECB8qkkeG vNCVp7Ac0svAlAJnV42yPHChij7FAtYyklNlV0LQUJ6QoG08fDw7E30G0HW0I9cK r6LYOQqkeQ3d3epZHXML5U7rSzH0H/YnMtnglRVHXLeFD3WV/japte5IxA42WZSX eKlKkHP3p3VvY4+YQRCkg71ttZdrjlmsQBBGM6KfWDpgHDE8QlK8mZnqHe/8nrsU OgHQYiQWhlbcK7HVezb4WR6IcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHon+Vb DdJ+D82HFs21kniuAeeOMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvacN4fN95AbBOg/vCm4SoLHTUzLt7jLzL14eegGBIn0SE95d5GVEd n5Hqg5dffun2smWYoMxJPVR5xjautfVPakkNk7CoK/hf8iytSCbv3vfqaCtGL/SD 3DL2BFsa26RpRK5VedLt5N7T++fSs/BWmEmG3rxSCwmLoYyf5MZ5o5fPGs29YLem KG8aQMOVkTn29VsAEdRJabue4toBwWkd0sM2IpQbR+rwT4w5W/dQtCrHLOD19uy/ rXnBn9d0NNSxIjQ1iAD43Vzf2HB+IucqBiikutWM3iDbanjOjV4SZsuxPw/OlsDE /L/VwdXfjpnveTkvkMxAzbggw+ztJu/Q -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org