$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft File: OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json) Hash identifier: YFJdRT3zzplL+o0+N+qMlyV1vXw5PrKqiqDi9JTDrqY= Subject key identifier: 3D:42:09:76:25:C0:5F:BA:72:F9:51:75:E5:A8:C2:FA:BD:EA:6A:27 Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 Certificate issuer: /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft Manifest number: FF Signing time: Mon 25 Nov 2024 03:20:21 +0000 Manifest this update: Mon 25 Nov 2024 03:20:21 +0000 Manifest next update: Mon 02 Dec 2024 03:20:21 +0000 Files and hashes: 1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: Cag/yxItk8w5rJ4jOHbsiUzYTfJQu3HZw5396bhUdJA=) 2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: sWStjNphAJOS4ge/ZJtqF5XrPnq1MWPX1eiC04Kwz6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Validity Not Before: Nov 25 03:20:21 2024 GMT Not After : Dec 2 03:20:21 2024 GMT Subject: CN=6743ecf5-8dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:5f:8e:cb:17:85:5e:6d:32:3c:f0:fd:bf: 6d:0b:58:3c:93:7e:b7:ff:e3:4a:d6:51:4e:d4:4b: f9:52:66:32:f4:bc:29:28:9d:dc:44:7a:c1:6a:0e: 7f:0e:f7:b2:50:98:d4:1b:f8:61:d0:33:fb:9d:f1: 8f:d8:07:ab:82:3c:e7:af:53:60:5b:c5:cb:82:7a: 2a:4d:82:14:aa:f0:c2:de:1d:35:1a:2f:23:a7:ce: 6e:03:87:dd:36:bf:e2:88:18:49:62:d8:97:54:92: e2:02:6c:2c:0b:bb:5f:ff:6c:a6:ee:72:5f:a1:ca: b1:74:5d:c9:53:51:0c:bf:78:70:64:49:8a:b2:67: 84:87:44:ce:d8:a5:9c:b1:9c:fe:db:9d:c0:a7:af: b5:36:22:9e:42:bc:b9:42:07:33:60:d6:82:fb:73: 3e:6b:09:e4:f8:9c:ae:92:81:c0:59:21:b4:11:b2: 04:d0:e5:15:ac:fe:85:f3:41:ec:8c:0e:55:ee:ce: ab:84:d4:33:e6:22:04:35:58:0c:8a:92:f6:c5:bf: c2:88:81:4c:3f:a4:e8:82:1c:b2:07:c0:fd:4e:5b: 32:f5:4b:fb:91:5f:a0:e2:b4:53:61:fb:37:ed:88: 28:7c:53:c6:0d:57:ac:6e:2f:2e:7f:0d:c3:6a:98: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:42:09:76:25:C0:5F:BA:72:F9:51:75:E5:A8:C2:FA:BD:EA:6A:27 X509v3 Authority Key Identifier: keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:74:05:27:50:13:3c:13:fb:4a:de:b4:f1:11:69:be:de:f1: 88:88:47:b7:9e:5b:c6:da:a6:1f:57:f7:79:38:e1:7c:56:a5: 01:67:dd:72:e6:69:59:8c:cd:6d:5e:ba:c6:8e:7e:c4:68:fb: 54:51:21:13:e8:42:ce:d7:03:97:4a:24:5e:70:fa:c7:03:b7: 9a:36:20:77:d3:f3:f9:ef:a5:39:6c:33:ff:16:b2:8f:fa:fb: 31:ba:6b:6f:62:e8:62:fa:10:f9:e8:58:fb:0d:f3:5a:70:80: ba:62:78:40:43:55:86:39:9b:71:6d:62:f3:26:e9:07:3d:ec: e0:82:ff:59:7f:03:61:dc:72:cd:05:59:76:fa:cd:f9:eb:97: 4c:6a:52:55:3c:18:2c:4b:49:b0:4d:68:4f:99:2c:64:f0:ae: f0:f0:23:22:d3:29:6b:7c:c4:66:3a:c5:04:1d:95:bf:95:b2: 76:34:eb:c1:47:ec:c9:02:a5:99:b9:fb:fc:a7:6c:65:be:17: 2a:c0:3d:0b:c2:41:89:12:dd:64:21:2f:11:20:e2:8d:a1:f7: 33:b2:56:57:44:76:5a:d6:59:8b:fe:30:ac:61:60:af:e0:20: 51:bf:d5:35:5a:52:98:d1:a3:cf:f1:e9:9a:f1:80:55:35:56: a9:0c:e4:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE RDgyNEFDRTQwHhcNMjQxMTI1MDMyMDIxWhcNMjQxMjAyMDMyMDIxWjAYMRYwFAYD VQQDEw02NzQzZWNmNS04ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7hfjssXhV5tMjzw/b9tC1g8k363/+NK1lFO1Ev5UmYy9LwpKJ3cRHrBag5/ DveyUJjUG/hh0DP7nfGP2Aergjznr1NgW8XLgnoqTYIUqvDC3h01Gi8jp85uA4fd Nr/iiBhJYtiXVJLiAmwsC7tf/2ym7nJfocqxdF3JU1EMv3hwZEmKsmeEh0TO2KWc sZz+253Ap6+1NiKeQry5QgczYNaC+3M+awnk+JyukoHAWSG0EbIE0OUVrP6F80Hs jA5V7s6rhNQz5iIENVgMipL2xb/CiIFMP6ToghyyB8D9Tlsy9Uv7kV+g4rRTYfs3 7YgofFPGDVesbi8ufw3DapiRswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1CCXYl wF+6cvlRdeWowvq96monMB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjAwQS85RUEyQkI3RTNDRDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhG MlJ4bG5UWC1UeWJkZ2tyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFdAUnUBM8E/tK3rTxEWm+3vGIiEe3nlvG2qYfV/d5OOF8VqUBZ91y 5mlZjM1tXrrGjn7EaPtUUSET6ELO1wOXSiRecPrHA7eaNiB30/P576U5bDP/FrKP +vsxumtvYuhi+hD56Fj7DfNacIC6YnhAQ1WGOZtxbWLzJukHPezggv9ZfwNh3HLN BVl2+s3565dMalJVPBgsS0mwTWhPmSxk8K7w8CMi0ylrfMRmOsUEHZW/lbJ2NOvB R+zJAqWZufv8p2xlvhcqwD0LwkGJEt1kIS8RIOKNofczslZXRHZa1lmL/jCsYWCv 4CBRv9U1WlKY0aPP8ema8YBVNVapDORz -----END CERTIFICATE-----Generated at Mon Nov 25 04:54:32 2024 by rpki-client on console-fra.rpki-client.org