$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: 1c5V4jVSU5gZ5cnabDr8o+QIv80fKol8Zg9GvDbFfuM= Subject key identifier: 01:15:4B:E1:B6:1C:5A:82:B4:BF:9D:4B:8E:E1:91:5D:40:EC:96:72 Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0B51 Signing time: Fri 22 Nov 2024 18:56:55 +0000 Manifest this update: Fri 22 Nov 2024 18:56:54 +0000 Manifest next update: Fri 29 Nov 2024 18:56:54 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: 390jwBMoZH91RGTaMH1D+6fbHMNF6pSJCX1suxqoqoI=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: r+qQMJg9WeT3dBS1G2eddJkWAZzyHZW7YUPhUNiXmvc=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 78NzvvcCG2D0+YLHvm0WI7AAwqsj2ir6ZRecAq/XKO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Nov 22 18:56:54 2024 GMT Not After : Nov 29 18:56:54 2024 GMT Subject: CN=6740d3f7-af50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:fa:31:75:86:4f:e2:22:09:2d:32:27:d6: 4f:34:df:a2:7b:d6:13:96:8c:d2:a5:e4:61:9f:ec: e2:4f:59:1b:e3:83:1d:fe:e9:de:03:bd:79:d8:dc: 34:24:70:1a:6e:5c:cd:96:71:20:26:b7:78:69:07: e4:00:95:1e:92:b6:4a:6f:8f:0b:99:02:b7:4c:c7: 85:88:20:f3:ef:ee:08:7f:fa:b4:2b:17:9a:58:21: ba:d8:6a:dd:af:18:0c:fb:38:e6:29:cb:bd:39:4d: 69:05:cd:aa:51:a2:f3:63:31:36:53:0d:39:6d:80: 18:8d:35:1e:10:ac:a5:81:74:9c:fa:d4:86:dc:c7: 35:be:e8:cc:51:97:07:82:7e:0f:ec:33:a2:1b:d8: 82:ff:3b:6d:3f:c9:da:fe:0b:f6:f4:f1:bf:9a:1f: 05:e8:66:9a:6a:47:f1:5f:da:ea:b5:e9:b0:3d:cd: 6e:19:07:14:8d:0c:80:35:8c:13:d3:e7:02:39:99: 8e:bc:75:f8:1b:53:3b:87:bd:d9:35:12:3e:08:47: 69:cd:c4:d3:eb:ff:c4:6c:14:2d:26:86:17:20:7f: 75:43:f6:d0:93:28:4c:46:b4:37:bb:e8:6f:e1:c8: ac:a7:12:5e:c0:01:79:1e:c4:84:6a:69:de:81:6d: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:15:4B:E1:B6:1C:5A:82:B4:BF:9D:4B:8E:E1:91:5D:40:EC:96:72 X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:11:6f:36:4c:51:b4:7b:ee:28:47:1b:3c:6a:2e:53:a2:59: 52:5a:79:d8:6a:12:00:5d:29:c8:bc:ed:24:00:52:27:c6:7a: ab:d1:92:1d:d3:c5:bf:87:20:d7:a5:c7:55:6a:1b:6d:3a:11: 79:91:22:f8:6c:4d:ec:ea:65:5b:d6:88:40:21:4e:2f:66:e7: c3:28:87:29:dd:2c:3c:b5:e5:15:3f:66:e0:4e:70:88:74:cc: 85:b9:e7:70:94:b9:65:fa:97:08:c4:00:31:35:36:57:b1:77: be:a5:5d:56:e5:b6:d6:ef:e2:52:51:f8:bd:db:e6:6f:97:fe: 1a:50:38:4a:35:0d:93:fa:57:dd:af:e7:84:57:2a:88:ca:3e: 00:48:8b:3b:aa:03:0a:de:de:b8:30:92:f1:f3:88:96:cc:10: 2e:eb:c8:f8:c0:4b:bc:63:e0:3f:31:59:aa:e4:59:0b:e7:eb: ff:16:13:75:76:8b:02:8c:72:8f:cb:7c:82:b9:fd:24:5c:02: 8b:69:f4:bb:2f:02:41:47:c0:ab:bc:21:60:d6:95:14:80:2a: 4d:fe:10:72:18:42:62:4a:0e:c5:be:1b:dd:46:98:ac:f5:32: e5:17:9f:4f:97:71:ef:84:9d:00:95:7d:c0:85:fc:c6:fc:20: 49:f7:c2:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjQxMTIyMTg1NjU0WhcNMjQxMTI5MTg1NjU0WjAYMRYwFAYD VQQDEw02NzQwZDNmNy1hZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23v6MXWGT+IiCS0yJ9ZPNN+ie9YTlozSpeRhn+ziT1kb44Md/uneA7152Nw0 JHAablzNlnEgJrd4aQfkAJUekrZKb48LmQK3TMeFiCDz7+4If/q0KxeaWCG62Grd rxgM+zjmKcu9OU1pBc2qUaLzYzE2Uw05bYAYjTUeEKylgXSc+tSG3Mc1vujMUZcH gn4P7DOiG9iC/zttP8na/gv29PG/mh8F6GaaakfxX9rqtemwPc1uGQcUjQyANYwT 0+cCOZmOvHX4G1M7h73ZNRI+CEdpzcTT6//EbBQtJoYXIH91Q/bQkyhMRrQ3u+hv 4cispxJewAF5HsSEamnegW19WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEVS+G2 HFqCtL+dS47hkV1A7JZyMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPEW82TFG0e+4oRxs8ai5TollSWnnYahIAXSnIvO0kAFInxnqr0ZId 08W/hyDXpcdVahttOhF5kSL4bE3s6mVb1ohAIU4vZufDKIcp3Sw8teUVP2bgTnCI dMyFuedwlLll+pcIxAAxNTZXsXe+pV1W5bbW7+JSUfi92+Zvl/4aUDhKNQ2T+lfd r+eEVyqIyj4ASIs7qgMK3t64MJLx84iWzBAu68j4wEu8Y+A/MVmq5FkL5+v/FhN1 dosCjHKPy3yCuf0kXAKLafS7LwJBR8CrvCFg1pUUgCpN/hByGEJiSg7FvhvdRpis 9TLlF59Pl3HvhJ0AlX3AhfzG/CBJ98J0 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org