$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: k8bQVu49w0G+odqlSSk+By1u9QMakIy9hQ2lVZOLN5A= Subject key identifier: 46:2E:A9:35:6C:46:E8:87:6E:70:02:AE:0C:F2:E5:1F:92:BF:D5:51 Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0B96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0B8C Signing time: Wed 20 Nov 2024 18:43:15 +0000 Manifest this update: Wed 20 Nov 2024 18:43:15 +0000 Manifest next update: Wed 27 Nov 2024 18:43:15 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: mB1Z2Ybswp1R6Jy9zUPsknL6hvVKyU1FcYow01lob7A=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: eV56fuiHryIQKRFyea/z5/qNhu8IKn93PeRTauxJVa0=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: 0LTunTRdOppVif2M1VIsKTeuAvtTcCE4K9s7XeFc1wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2966 (0xb96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: Nov 20 18:43:15 2024 GMT Not After : Nov 27 18:43:15 2024 GMT Subject: CN=673e2dc3-e0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:d0:bb:a2:f8:5f:9b:b3:4a:20:f6:74:82: e9:2f:8e:45:34:f3:73:1c:ca:89:a0:55:fc:bb:fd: a7:f7:6c:f2:8e:eb:cc:01:1b:52:30:75:92:0a:19: a4:82:89:41:8a:76:f7:ff:4d:f6:e5:32:a2:3a:26: aa:8b:b5:45:60:d9:0f:80:18:49:86:32:2e:82:be: 85:4b:57:e1:e3:d6:fd:64:a6:ca:61:25:81:22:b6: bf:3c:53:ce:f6:1f:db:5f:c2:22:be:46:bc:02:aa: a6:f7:c1:25:54:54:ee:30:db:41:d9:35:8a:d5:b6: 0b:a1:bb:94:06:f5:ac:5d:32:fb:a0:61:13:e1:14: 2f:84:8b:97:7e:81:e7:3f:f1:81:eb:e9:c1:6e:35: f4:f3:3e:38:e1:c9:e2:5c:13:a0:cf:3e:4c:ba:60: c6:29:84:e7:26:58:26:77:ea:1e:fe:d4:8a:88:ec: 30:49:30:16:da:7a:ae:68:0f:4a:4a:64:e6:9a:07: 9a:29:f3:03:0a:d4:3d:0e:ed:dc:5b:ca:67:28:3a: 77:47:57:cb:a7:27:17:db:a5:16:7e:4c:00:1a:5b: a8:48:5c:89:51:ae:53:60:e7:ee:b8:b2:79:63:70: b8:6f:4f:18:a6:64:54:68:1b:a8:a5:35:6e:45:4e: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2E:A9:35:6C:46:E8:87:6E:70:02:AE:0C:F2:E5:1F:92:BF:D5:51 X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ea:86:9d:b9:82:cd:c4:fb:10:7a:bd:fd:f1:43:a9:1c:e9: 35:4a:b6:65:32:17:d9:56:07:1d:bb:cb:f6:8c:94:c0:28:96: d7:20:aa:f3:aa:d9:c1:68:52:2d:f1:83:7f:72:b8:06:e4:4e: 77:11:ba:3d:c8:7c:28:e3:f0:e8:a8:26:0b:c6:e3:34:31:18: 93:d1:bc:bf:94:3c:31:18:63:a4:4e:d8:bf:40:34:74:10:a8: 51:29:be:59:d8:2a:1d:6f:18:78:80:af:90:95:c0:1d:63:d3: e1:7d:5c:23:a3:16:85:f9:87:0a:ab:8d:fb:54:67:3c:d9:0b: 9d:23:30:4e:75:f4:f2:ba:d2:49:d0:5a:c3:88:bf:a7:09:66: 73:f3:c2:4e:41:37:1e:8d:e4:b1:b9:f7:9e:63:72:56:2a:16: fd:94:0e:50:98:46:c1:4d:01:74:a4:bd:86:af:7b:eb:b1:66: fa:3d:bc:e8:66:a2:84:9b:c3:7b:89:df:96:f3:69:2f:5a:84: a0:42:32:3e:15:dd:13:00:9c:8e:52:d7:a2:c4:f0:c7:0c:88: 1d:06:dd:ac:13:e8:0d:36:97:8b:c9:7f:6b:f2:32:d5:f3:47: a5:dd:c6:f5:24:f9:3c:61:78:2f:87:f4:a0:f8:84:2d:d8:ae: db:73:65:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjQxMTIwMTg0MzE1WhcNMjQxMTI3MTg0MzE1WjAYMRYwFAYD VQQDEw02NzNlMmRjMy1lMGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAye7Qu6L4X5uzSiD2dILpL45FNPNzHMqJoFX8u/2n92zyjuvMARtSMHWSChmk golBinb3/0325TKiOiaqi7VFYNkPgBhJhjIugr6FS1fh49b9ZKbKYSWBIra/PFPO 9h/bX8Iivka8Aqqm98ElVFTuMNtB2TWK1bYLobuUBvWsXTL7oGET4RQvhIuXfoHn P/GB6+nBbjX08z444cniXBOgzz5MumDGKYTnJlgmd+oe/tSKiOwwSTAW2nquaA9K SmTmmgeaKfMDCtQ9Du3cW8pnKDp3R1fLpycX26UWfkwAGluoSFyJUa5TYOfuuLJ5 Y3C4b08YpmRUaBuopTVuRU6vSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYuqTVs RuiHbnACrgzy5R+Sv9VRMB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf6oaduYLNxPsQer398UOpHOk1SrZlMhfZVgcdu8v2jJTAKJbXIKrz qtnBaFIt8YN/crgG5E53Ebo9yHwo4/DoqCYLxuM0MRiT0by/lDwxGGOkTti/QDR0 EKhRKb5Z2Codbxh4gK+QlcAdY9PhfVwjoxaF+YcKq437VGc82QudIzBOdfTyutJJ 0FrDiL+nCWZz88JOQTcejeSxufeeY3JWKhb9lA5QmEbBTQF0pL2Gr3vrsWb6Pbzo ZqKEm8N7id+W82kvWoSgQjI+Fd0TAJyOUteixPDHDIgdBt2sE+gNNpeLyX9r8jLV 80el3cb1JPk8YXgvh/Sg+IQt2K7bc2Uv -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:48 2024 by rpki-client on console-ams.rpki-client.org