$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: oPC1K1I4Wt+CQGo87I+VKtBkSCOJe3o8uF1USbG+8GQ= Subject key identifier: C9:54:7B:5B:91:9C:B4:A5:D6:D5:C8:58:E0:07:96:D7:F2:E6:6F:52 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 0138 Signing time: Mon 25 Nov 2024 02:39:30 +0000 Manifest this update: Mon 25 Nov 2024 02:39:30 +0000 Manifest next update: Mon 02 Dec 2024 02:39:30 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: IJWoV5L4IkInm+tbofJqkRClC8HYrosktpNnbpgjZlU=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: LK0ZOJt3bvu7IHmDVNJ+cUrmzRXOPpiZ1YyLnrDVzpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 02:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Nov 25 02:39:30 2024 GMT Not After : Dec 2 02:39:30 2024 GMT Subject: CN=6743e362-1c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:59:c1:61:29:0d:ab:fb:d2:da:11:91:af: 2e:aa:00:c3:1c:45:37:1b:76:59:98:67:0a:c0:c8: d7:1c:c7:04:dc:88:82:84:be:59:dd:80:98:a3:a9: 56:66:43:54:39:ef:1d:68:93:b7:ad:10:5a:d8:b3: 8b:bf:1d:71:42:5b:98:71:7a:0a:95:13:9d:ec:aa: df:0f:e1:4e:28:b7:c3:1a:76:46:cd:1d:54:88:a8: a9:8b:3b:a1:1a:e4:71:53:13:16:cd:b2:b2:93:99: ea:cc:83:50:6f:51:4d:c3:4a:15:eb:14:0a:5b:ff: 57:c0:81:48:0d:2a:72:ea:0b:ca:96:bf:16:5c:e5: e0:bb:d5:dc:6d:32:87:4f:53:7a:79:0a:7d:8d:bf: c3:5d:75:21:03:a5:6e:23:f3:8d:ae:4e:4d:31:dd: 58:8a:63:bc:1c:44:d1:e7:69:f2:37:97:e9:62:0b: 33:65:7a:ac:39:14:b1:24:ce:8d:d4:b4:4f:87:f8: 53:fe:bf:2a:15:72:d5:61:8f:2c:7b:8f:73:45:2e: eb:a1:e2:3d:61:86:4d:b9:65:c7:e8:22:0d:31:1b: a7:98:85:b4:aa:60:c8:5a:d7:03:de:57:ca:2e:d3: 75:b3:c1:97:0a:3f:5e:07:39:e6:ac:39:d2:87:a0: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:54:7B:5B:91:9C:B4:A5:D6:D5:C8:58:E0:07:96:D7:F2:E6:6F:52 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:22:72:f3:2c:20:f3:8e:55:14:e0:8b:a9:e0:6f:a9:a1:51: f6:8d:e9:c9:78:86:0a:e2:59:2d:6a:8c:2f:3e:61:ec:d9:10: 7a:7b:1f:6d:05:31:a2:18:d1:6d:1e:e1:78:5d:16:d8:64:17: ae:6f:8c:eb:e6:65:4a:92:f6:cc:88:ef:85:09:18:6d:71:53: f1:f9:43:91:e9:a1:29:5d:5f:70:66:1e:c8:3a:f5:46:c5:f6: 29:8c:e4:ed:f9:af:90:d1:b4:ef:94:bd:dd:8f:e6:a1:06:86: b1:d0:f5:5f:7f:6c:41:a6:6e:d9:a7:48:dc:a6:46:be:b8:bf: 0c:42:05:02:0a:5d:df:e4:e4:db:de:9b:6f:34:84:a4:3d:92: 8c:e8:8b:f6:5b:5a:2d:80:cd:95:b7:b8:9c:10:4d:ff:48:8b: c7:d7:4b:24:f5:eb:95:5c:d8:5a:ec:3e:0d:85:54:ff:98:dc: b0:4b:84:38:18:de:55:3e:f1:fe:3a:e1:5b:9a:96:e7:37:89: 82:4b:a3:b4:d5:e9:9d:a8:dd:e4:80:9a:d7:31:1e:aa:2d:bd: eb:56:08:bf:08:0a:21:5a:ef:51:57:d5:7e:4d:0f:8c:d0:b4: d6:74:eb:3e:06:ff:ad:9d:50:23:ec:ce:8b:b1:50:e7:44:62: 8f:f7:b3:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjQxMTI1MDIzOTMwWhcNMjQxMjAyMDIzOTMwWjAYMRYwFAYD VQQDEw02NzQzZTM2Mi0xYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApH1ZwWEpDav70toRka8uqgDDHEU3G3ZZmGcKwMjXHMcE3IiChL5Z3YCYo6lW ZkNUOe8daJO3rRBa2LOLvx1xQluYcXoKlROd7KrfD+FOKLfDGnZGzR1UiKipizuh GuRxUxMWzbKyk5nqzINQb1FNw0oV6xQKW/9XwIFIDSpy6gvKlr8WXOXgu9XcbTKH T1N6eQp9jb/DXXUhA6VuI/ONrk5NMd1YimO8HETR52nyN5fpYgszZXqsORSxJM6N 1LRPh/hT/r8qFXLVYY8se49zRS7roeI9YYZNuWXH6CINMRunmIW0qmDIWtcD3lfK LtN1s8GXCj9eBznmrDnSh6D7GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlUe1uR nLSl1tXIWOAHltfy5m9SMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0InLzLCDzjlUU4Iup4G+poVH2jenJeIYK4lktaowvPmHs2RB6ex9t BTGiGNFtHuF4XRbYZBeub4zr5mVKkvbMiO+FCRhtcVPx+UOR6aEpXV9wZh7IOvVG xfYpjOTt+a+Q0bTvlL3dj+ahBoax0PVff2xBpm7Zp0jcpka+uL8MQgUCCl3f5OTb 3ptvNISkPZKM6Iv2W1otgM2Vt7icEE3/SIvH10sk9euVXNha7D4NhVT/mNywS4Q4 GN5VPvH+OuFbmpbnN4mCS6O01emdqN3kgJrXMR6qLb3rVgi/CAohWu9RV9V+TQ+M 0LTWdOs+Bv+tnVAj7M6LsVDnRGKP97P4 -----END CERTIFICATE-----Generated at Mon Nov 25 04:54:30 2024 by rpki-client on console-fra.rpki-client.org