$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: O5KPXGS3Lmv+8ISa3djnUHv9f/GHmFGPQMUzlqFiEUQ= Subject key identifier: 4E:21:9B:A0:4E:4A:CE:47:F5:7A:AA:57:0C:78:27:EC:4E:60:3F:26 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 017F Signing time: Mon 25 Nov 2024 02:02:10 +0000 Manifest this update: Mon 25 Nov 2024 02:02:09 +0000 Manifest next update: Mon 02 Dec 2024 02:02:09 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: NfrFm9sY6BptBlQkAVyc8zINC7yaNgfeW6uDAGiCv54=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: cNnbg9xxC6U5sNak7P0XJVCbmPrEMBO9iWPAKMk7ubw=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: UIaiumWPe9jUL45AtctOwNh6JmpIHSNMvBEiVQiJmyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Nov 25 02:02:09 2024 GMT Not After : Dec 2 02:02:09 2024 GMT Subject: CN=6743daa1-2a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:d5:5d:f8:8a:2a:37:2c:28:f5:a0:91:d2: 9d:e1:f8:0d:f1:75:6b:3c:aa:a0:4d:b3:00:2f:d1: 16:bb:f8:2f:8d:35:e0:b1:63:18:55:50:5e:90:b5: 24:18:51:e0:93:74:9e:22:ec:db:8d:30:2f:bf:df: 77:94:57:29:e3:70:8c:9e:ed:f9:a5:42:bb:d7:e3: 85:60:49:09:83:21:a7:11:57:fa:7e:53:cf:f7:48: 9f:04:1f:e4:8a:ea:62:6e:f1:33:4f:4a:dd:04:4b: 40:73:39:1d:90:a2:7d:05:ab:44:16:35:53:24:02: 75:e9:f8:28:67:56:4a:3c:3d:eb:47:2f:db:fb:fe: 68:39:0e:2d:f6:49:7c:95:db:c2:de:c0:ca:13:9c: 78:93:ac:ee:b1:87:b8:ad:39:09:5b:34:7e:88:8f: e1:ab:87:7d:63:86:4f:a4:ac:24:e4:d1:c1:fd:b0: 1e:cf:0b:63:39:d9:c0:09:19:93:7f:af:91:7d:c7: 4d:1b:91:b8:50:77:94:e4:cd:64:e5:dc:fb:88:80: 38:cc:d4:1e:6a:47:79:21:8f:59:1f:c7:21:fa:75: d0:57:58:37:5a:58:b3:29:90:56:a2:76:6c:1d:1d: 2b:7f:10:a6:6c:06:c8:4c:b0:3d:b4:44:9d:50:47: e0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:21:9B:A0:4E:4A:CE:47:F5:7A:AA:57:0C:78:27:EC:4E:60:3F:26 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:5a:3a:9c:2f:da:d0:69:93:cd:fb:4c:c6:63:54:eb:b7:9e: 0f:d7:5c:58:cd:61:d3:5f:b5:4f:65:f4:6f:78:1d:e5:6b:a4: a6:71:e4:7b:95:d1:6f:db:24:e1:12:bb:16:34:48:d7:9b:50: 45:85:46:52:a7:3a:d6:2f:04:2a:dd:66:cd:63:c1:4f:b0:0f: e0:67:ab:11:08:8b:68:5e:f1:c3:af:45:9b:8b:ed:68:5c:c2: 3e:54:83:c8:31:73:7d:5c:b9:ad:62:78:3d:08:79:9e:dd:ca: 57:8d:c5:69:b5:c6:c8:97:ff:f9:d8:8b:84:c2:ad:f2:a4:4b: 71:ce:aa:26:1b:4b:7d:3a:9d:21:88:28:58:d7:07:1f:4c:f5: 72:4f:e6:05:ea:76:4c:a9:4d:a6:05:8f:61:0e:b7:24:89:bf: 3e:57:92:f5:75:fc:6f:6f:1f:84:c5:96:2a:0b:7c:53:18:ce: b7:83:38:dc:00:89:17:3c:3d:8a:4e:da:18:10:5d:13:2f:48: 68:a0:09:0d:ef:8a:08:e1:fc:cb:72:af:11:af:63:53:53:10: 78:59:c1:d3:ca:36:f8:e1:d8:23:73:af:46:5b:d3:32:24:eb: 23:6a:32:53:6f:e7:ed:6c:50:36:7d:4c:79:9a:8f:f9:c9:3a: bf:26:49:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjQxMTI1MDIwMjA5WhcNMjQxMjAyMDIwMjA5WjAYMRYwFAYD VQQDEw02NzQzZGFhMS0yYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ijVXfiKKjcsKPWgkdKd4fgN8XVrPKqgTbMAL9EWu/gvjTXgsWMYVVBekLUk GFHgk3SeIuzbjTAvv993lFcp43CMnu35pUK71+OFYEkJgyGnEVf6flPP90ifBB/k iupibvEzT0rdBEtAczkdkKJ9BatEFjVTJAJ16fgoZ1ZKPD3rRy/b+/5oOQ4t9kl8 ldvC3sDKE5x4k6zusYe4rTkJWzR+iI/hq4d9Y4ZPpKwk5NHB/bAezwtjOdnACRmT f6+RfcdNG5G4UHeU5M1k5dz7iIA4zNQeakd5IY9ZH8ch+nXQV1g3WlizKZBWonZs HR0rfxCmbAbITLA9tESdUEfgiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4hm6BO Ss5H9XqqVwx4J+xOYD8mMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxWjqcL9rQaZPN+0zGY1Trt54P11xYzWHTX7VPZfRveB3la6SmceR7 ldFv2yThErsWNEjXm1BFhUZSpzrWLwQq3WbNY8FPsA/gZ6sRCItoXvHDr0Wbi+1o XMI+VIPIMXN9XLmtYng9CHme3cpXjcVptcbIl//52IuEwq3ypEtxzqomG0t9Op0h iChY1wcfTPVyT+YF6nZMqU2mBY9hDrckib8+V5L1dfxvbx+ExZYqC3xTGM63gzjc AIkXPD2KTtoYEF0TL0hooAkN74oI4fzLcq8Rr2NTUxB4WcHTyjb44dgjc69GW9My JOsjajJTb+ftbFA2fUx5mo/5yTq/JklB -----END CERTIFICATE-----Generated at Mon Nov 25 02:48:57 2024 by rpki-client on console-ams.rpki-client.org