$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: 0jfawwRDC7aF9NGIfCxRAif60ha3dgr2CUmRTt8Vic8= Subject key identifier: 14:C7:C6:AF:F6:68:DA:63:74:82:A2:5B:B5:79:E5:BE:5D:BD:45:4F Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 06F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 06EB Signing time: Wed 20 Nov 2024 21:35:00 +0000 Manifest this update: Wed 20 Nov 2024 21:35:00 +0000 Manifest next update: Wed 27 Nov 2024 21:35:00 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: JAxISJUJmdFwG40w3yd2W1/P6GLRXiBmEG94dy2sd8M=) 2: 10DD258E2AE711EBBFFCBC15C4F9AE02.roa (hash: DvUe9tlMP9l91/7mh7+Tetbprk3jQc1ROYqAjOky4yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: Nov 20 21:35:00 2024 GMT Not After : Nov 27 21:35:00 2024 GMT Subject: CN=673e5604-03ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:0e:72:3f:3e:6d:24:84:c9:10:5a:e4:2b: d8:3a:48:bd:a5:54:c0:c4:7a:c3:66:60:db:9d:86: eb:09:e4:d2:9f:5d:32:9f:39:66:fa:02:27:b1:2a: c5:1b:2d:a4:f3:31:28:04:35:9d:85:ba:93:a8:67: c1:c2:5d:6f:fb:ed:1b:3b:8a:2b:52:af:97:1a:23: b4:85:58:57:e6:a6:a6:22:62:c2:00:97:b6:75:62: 5a:57:69:64:f5:84:2e:40:09:a1:f4:dc:05:44:01: 5b:36:32:40:44:67:07:b0:e3:5d:da:95:aa:51:75: 8d:2a:77:35:9a:b1:7c:27:29:c8:65:bb:90:40:2f: ff:2f:da:2f:b1:85:ba:aa:d7:af:0e:ba:7c:1c:af: 57:99:a9:9b:87:2e:d7:bc:26:44:40:6f:a8:f5:f7: 2c:3a:8d:b7:4f:d0:72:b5:76:74:c1:8a:d6:61:ad: f6:af:8a:5b:e3:be:66:42:6f:0b:fa:61:95:a8:0c: ce:78:81:31:2d:1f:92:2d:c6:3f:35:9f:51:48:82: a3:24:b5:de:66:2b:f8:05:59:20:da:29:ae:b2:61: f4:8b:4d:32:e5:03:33:08:bf:d9:02:24:b9:a9:27: 7a:03:99:ef:ca:08:d1:76:f5:cd:a0:9c:b9:24:8e: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C7:C6:AF:F6:68:DA:63:74:82:A2:5B:B5:79:E5:BE:5D:BD:45:4F X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e6:61:00:2c:6b:40:80:99:44:e8:21:25:19:5a:11:0a:60: 94:77:d9:b2:9e:8d:95:72:5e:6b:be:55:35:24:ba:91:c1:c7: 97:67:bf:c8:44:47:1a:c3:fe:24:79:63:7e:6c:7f:c5:27:0c: d3:12:bb:ff:25:41:76:fc:22:65:e2:fe:22:7b:8d:44:7e:70: 31:01:9c:ad:8b:6a:a9:98:f1:15:8e:db:cc:48:7e:a4:16:10: 78:f6:ea:d1:3f:64:e5:08:76:09:36:ec:01:c0:6b:e1:89:e1: 07:fc:64:b8:f9:7a:af:03:db:52:37:f5:aa:53:2a:ae:5e:7a: a8:a6:04:d2:5d:bb:4c:a4:9a:18:22:f5:19:a6:49:36:c6:16: 7b:7d:42:b9:32:e9:25:ab:20:e6:27:e7:46:ae:36:5d:f7:eb: 26:28:2e:6a:56:66:5c:e1:81:75:bf:73:d3:35:f0:cc:46:e1: b0:2d:9a:f5:a4:f8:b5:00:b9:6b:4b:31:8d:32:a5:d5:d9:80: ae:f3:e6:63:8a:8a:a0:dc:fc:8d:c8:42:aa:17:58:6d:69:c7: e1:8b:b7:7b:f1:94:4b:56:85:ed:d4:16:e7:b3:ee:02:1b:71: 90:24:be:40:73:dc:f5:0b:76:24:97:86:ab:ef:58:65:3f:15: b9:cb:4a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjQxMTIwMjEzNTAwWhcNMjQxMTI3MjEzNTAwWjAYMRYwFAYD VQQDEw02NzNlNTYwNC0wM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCgOcj8+bSSEyRBa5CvYOki9pVTAxHrDZmDbnYbrCeTSn10ynzlm+gInsSrF Gy2k8zEoBDWdhbqTqGfBwl1v++0bO4orUq+XGiO0hVhX5qamImLCAJe2dWJaV2lk 9YQuQAmh9NwFRAFbNjJARGcHsONd2pWqUXWNKnc1mrF8JynIZbuQQC//L9ovsYW6 qtevDrp8HK9Xmambhy7XvCZEQG+o9fcsOo23T9BytXZ0wYrWYa32r4pb475mQm8L +mGVqAzOeIExLR+SLcY/NZ9RSIKjJLXeZiv4BVkg2imusmH0i00y5QMzCL/ZAiS5 qSd6A5nvygjRdvXNoJy5JI6JlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTHxq/2 aNpjdIKiW7V55b5dvUVPMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp5mEALGtAgJlE6CElGVoRCmCUd9myno2Vcl5rvlU1JLqRwceXZ7/I REcaw/4keWN+bH/FJwzTErv/JUF2/CJl4v4ie41EfnAxAZyti2qpmPEVjtvMSH6k FhB49urRP2TlCHYJNuwBwGvhieEH/GS4+XqvA9tSN/WqUyquXnqopgTSXbtMpJoY IvUZpkk2xhZ7fUK5MuklqyDmJ+dGrjZd9+smKC5qVmZc4YF1v3PTNfDMRuGwLZr1 pPi1ALlrSzGNMqXV2YCu8+Zjioqg3PyNyEKqF1htacfhi7d78ZRLVoXt1Bbns+4C G3GQJL5Ac9z1C3Ykl4ar71hlPxW5y0ps -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:45 2024 by rpki-client on console-fra.rpki-client.org