$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: +PCFOuXdlsezBPuKTFZ8sd/+xpIGswiAKe6YbEng3KA= Subject key identifier: DC:E8:9C:76:9C:A0:9E:C7:06:93:92:A6:42:AA:A1:29:A6:83:7B:92 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0D10 Signing time: Fri 22 Nov 2024 17:58:34 +0000 Manifest this update: Fri 22 Nov 2024 17:58:34 +0000 Manifest next update: Fri 29 Nov 2024 17:58:34 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: SWQoLRRsfvtFeyliouLS5Y+DjTfoR89TlJWacWnrM2Q=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: 27YGiOVHeYRZmfLChwQ0MVLlQEu8P+YtfErwSj+QIxo=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: Ff3/yMR0vWErszLBIPlNKjSAb7MzXOTFYgb7mDfdJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Nov 22 17:58:34 2024 GMT Not After : Nov 29 17:58:34 2024 GMT Subject: CN=6740c64a-3c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:9c:00:cf:eb:7f:e4:27:b6:3d:ea:88:fb: 8f:0a:e4:f6:83:e2:57:1a:df:bf:57:a3:ea:1c:bc: f8:94:c3:dd:59:bb:c0:04:ba:a3:36:d1:44:6b:e9: 3d:1a:46:fd:31:cc:58:ff:e6:90:6e:39:7f:0a:ec: 37:48:9a:8a:fe:fb:2a:f1:c6:7e:f2:4e:39:ca:71: 3e:6a:6e:e2:85:ef:85:80:d6:fe:9d:a3:8e:18:c8: cc:e8:51:ad:c6:f3:2c:74:34:93:a1:29:fb:ac:08: a4:29:50:7a:9f:a0:5f:f4:2f:15:32:0b:92:23:21: 55:ce:e5:be:2a:b2:2c:b8:ab:c6:3c:2f:d1:f2:2c: 23:ac:48:9b:da:c6:d8:24:cd:17:d7:86:1b:bc:d9: 44:7a:0b:2f:21:47:c4:7c:95:7b:5b:f7:a9:fa:fa: f7:6a:d9:32:72:84:7a:26:18:25:85:1c:a1:1c:07: 53:17:cb:ec:74:d0:f6:e0:3c:a5:3d:aa:64:1a:de: 94:6c:39:75:d6:22:ce:36:71:48:c4:70:83:0f:fb: 66:82:5c:f2:ab:fe:87:d3:fe:4e:46:2d:83:0b:9a: a1:41:e8:8b:bb:04:a6:56:9a:19:7e:2d:98:73:52: cd:bd:76:1c:0a:fd:68:2f:5e:8f:b8:21:10:52:56: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E8:9C:76:9C:A0:9E:C7:06:93:92:A6:42:AA:A1:29:A6:83:7B:92 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f5:fc:05:2a:bc:6a:2f:0e:14:8c:6e:57:bd:f2:33:f2:9a: 79:02:bd:15:92:bc:7c:ed:d5:19:53:22:65:30:d9:08:94:0c: f6:fc:8b:b6:ae:9e:ff:03:d2:3b:19:0f:16:12:6b:51:6b:2b: 1a:c9:d1:ee:21:ac:cf:ab:d8:f8:bf:94:2a:1e:1b:d9:3c:f8: b2:f8:b8:03:8b:52:88:fb:49:db:47:81:0b:24:76:96:d2:4c: 10:a5:e1:91:35:c0:95:c0:17:69:63:eb:5d:60:04:df:a5:5e: 4b:88:58:15:d7:e6:0a:c5:2f:71:85:ec:72:6d:68:a2:d5:d7: 4e:bc:41:34:45:39:6d:89:6c:0e:62:ee:8a:9c:e6:23:08:fc: 63:20:63:9c:a0:bc:b3:0d:63:cd:5e:38:93:4d:c9:53:4e:cd: cf:79:00:01:ae:4b:65:0a:c6:52:4f:d2:d5:cb:b4:a0:ef:5e: 1b:5b:1f:cf:7b:60:81:13:04:14:06:4c:d8:65:ab:13:2e:4f: af:f5:50:49:e3:8c:66:0b:16:86:35:57:14:bb:24:52:df:a4: 31:02:fe:2d:a4:f8:dc:da:97:71:d7:7c:84:6e:66:6c:e3:27: 82:58:a8:4c:83:96:04:34:d9:e7:7a:f8:18:2e:d9:1f:4e:c2: b4:c2:47:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjQxMTIyMTc1ODM0WhcNMjQxMTI5MTc1ODM0WjAYMRYwFAYD VQQDEw02NzQwYzY0YS0zYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14icAM/rf+Qntj3qiPuPCuT2g+JXGt+/V6PqHLz4lMPdWbvABLqjNtFEa+k9 Gkb9McxY/+aQbjl/Cuw3SJqK/vsq8cZ+8k45ynE+am7ihe+FgNb+naOOGMjM6FGt xvMsdDSToSn7rAikKVB6n6Bf9C8VMguSIyFVzuW+KrIsuKvGPC/R8iwjrEib2sbY JM0X14YbvNlEegsvIUfEfJV7W/ep+vr3atkycoR6JhglhRyhHAdTF8vsdND24Dyl PapkGt6UbDl11iLONnFIxHCDD/tmglzyq/6H0/5ORi2DC5qhQeiLuwSmVpoZfi2Y c1LNvXYcCv1oL16PuCEQUlbpnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzonHac oJ7HBpOSpkKqoSmmg3uSMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe9fwFKrxqLw4UjG5XvfIz8pp5Ar0Vkrx87dUZUyJlMNkIlAz2/Iu2 rp7/A9I7GQ8WEmtRaysaydHuIazPq9j4v5QqHhvZPPiy+LgDi1KI+0nbR4ELJHaW 0kwQpeGRNcCVwBdpY+tdYATfpV5LiFgV1+YKxS9xhexybWii1ddOvEE0RTltiWwO Yu6KnOYjCPxjIGOcoLyzDWPNXjiTTclTTs3PeQABrktlCsZST9LVy7Sg714bWx/P e2CBEwQUBkzYZasTLk+v9VBJ44xmCxaGNVcUuyRS36QxAv4tpPjc2pdx13yEbmZs 4yeCWKhMg5YENNnnevgYLtkfTsK0wker -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org