$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json) Hash identifier: VUtjsTg1UkGkmo6/u5iYIzDqPEL+tAKK89bEldwKPNk= Subject key identifier: 0A:DF:99:59:1C:22:51:85:5F:AD:85:FF:C0:4D:3F:EA:5C:2B:1D:61 Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft Manifest number: 5F Signing time: Thu 21 Nov 2024 05:09:06 +0000 Manifest this update: Thu 21 Nov 2024 05:09:06 +0000 Manifest next update: Thu 28 Nov 2024 05:09:06 +0000 Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: W/0DkiC272vMiLylkwiTklkt+KJN4S8NqDpjv90gaqo=) 2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: TR/9w+oCqGCqjfN5wK6VX8rAdbT3DnBKMOm4/b1iJZA=) 3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: y9ipesVJF6530t8WVs2qEr0X7RGO4yWHPQGA3YKJeHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Validity Not Before: Nov 21 05:09:06 2024 GMT Not After : Nov 28 05:09:06 2024 GMT Subject: CN=673ec072-d9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:b7:f7:92:5e:52:93:20:07:9b:8a:a1:ca: 90:09:35:bb:bd:2b:9c:9b:cb:bf:25:1b:e7:aa:dd: 95:2a:a4:bc:15:1c:d3:50:2a:6d:d9:9c:36:e1:38: 60:86:53:5a:5c:43:1f:1d:ad:24:01:cb:e3:59:31: a8:a4:93:11:20:8b:7d:30:e9:c9:f0:70:d9:9f:35: cd:c1:ce:6d:78:30:10:d9:16:6d:5e:7e:31:60:a7: d4:8d:76:a9:ab:f3:91:7a:04:4e:e7:cf:2b:a7:98: e8:d8:15:ad:8b:ff:ca:b8:ad:48:a7:1f:cd:65:b6: b2:44:cb:2a:8e:08:d8:6f:16:f4:f3:5b:1f:e6:f9: 11:48:37:24:1c:2c:77:a8:4c:34:2b:0b:09:2f:31: 42:47:ee:82:4b:0a:e6:44:9a:9d:82:67:78:90:70: 8b:51:3c:25:14:6f:44:75:1a:bf:29:1a:c1:6d:b2: 6d:5a:01:44:5e:db:46:7a:e1:cf:67:cc:9d:20:02: 7e:52:8d:57:40:d7:d3:1c:d9:18:29:43:9e:ea:b2: b3:82:8b:c3:a9:18:57:5b:cc:23:bc:51:78:da:26: 54:04:77:2c:72:14:44:ad:f5:3d:cd:e3:d9:86:95: 30:69:a9:3d:c0:bc:0b:29:2a:f0:b3:af:21:cf:d4: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DF:99:59:1C:22:51:85:5F:AD:85:FF:C0:4D:3F:EA:5C:2B:1D:61 X509v3 Authority Key Identifier: keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:cc:4f:fe:77:f4:89:99:5f:f7:1c:92:f2:f2:83:b8:e6:fd: 0d:21:8f:0c:84:4d:7c:fa:11:4a:e0:5b:14:8a:47:41:0f:07: f8:4e:be:bb:62:9f:14:32:5e:6d:8b:20:6e:8c:b2:cb:be:95: d8:6f:b2:fe:0d:1c:ef:4f:cd:e1:0b:c6:69:48:4d:43:10:94: 36:8c:36:6e:25:96:d3:89:d0:7d:cb:27:1e:2c:53:91:ce:02: 99:36:13:aa:9d:5f:6d:06:a9:8f:ce:b4:f2:fd:87:ad:ca:3a: ad:18:b5:3c:62:1b:d0:71:a4:44:32:c2:8f:aa:95:ea:36:0a: 72:46:92:1e:fc:29:04:3e:33:40:9e:80:9d:2d:79:28:cd:bd: 9f:43:5d:8f:03:fa:6e:9b:6e:5b:08:3a:0f:be:3f:d1:c2:67: 99:c6:86:c9:22:10:ad:33:85:72:05:3e:ce:e2:e3:19:98:2b: e6:b5:04:1a:a0:14:e4:ea:b7:fd:f4:3b:56:31:64:56:11:cc: 8f:fa:0d:46:7a:f1:84:8a:32:96:1b:6f:5c:27:14:6f:78:4e: 77:4c:b4:1c:bf:b3:a3:e9:4a:af:54:63:9b:43:55:75:ba:7f: 9d:f4:e2:05:4a:a7:c2:17:ae:a0:52:e6:f6:bc:d6:99:81:0f: 41:b6:db:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODc5QTExMC8GA1UEBRMoMzk5QTVFMTdEOUNBNDNCNkMzM0FDMzMwMjA2RENCREQ5 MzVFNzg3MTAeFw0yNDExMjEwNTA5MDZaFw0yNDExMjgwNTA5MDZaMBgxFjAUBgNV BAMTDTY3M2VjMDcyLWQ5YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ+rf3kl5SkyAHm4qhypAJNbu9K5yby78lG+eq3ZUqpLwVHNNQKm3ZnDbhOGCG U1pcQx8drSQBy+NZMaikkxEgi30w6cnwcNmfNc3Bzm14MBDZFm1efjFgp9SNdqmr 85F6BE7nzyunmOjYFa2L/8q4rUinH81ltrJEyyqOCNhvFvTzWx/m+RFINyQcLHeo TDQrCwkvMUJH7oJLCuZEmp2CZ3iQcItRPCUUb0R1Gr8pGsFtsm1aAURe20Z64c9n zJ0gAn5SjVdA19Mc2RgpQ57qsrOCi8OpGFdbzCO8UXjaJlQEdyxyFESt9T3N49mG lTBpqT3AvAspKvCzryHP1DifAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCt+ZWRwi UYVfrYX/wE0/6lwrHWEwHwYDVR0jBBgwFoAUOZpeF9nKQ7bDOsMwIG3L3ZNeeHEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NzlBL0I2NzAxNzNDMUM5 QjExRUY4RjQ1Q0M3REM0RjlBRTAyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVI RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1pwZUY5bktRN2JET3NNd0lHM0wzWk5lZUhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NzlBL0I2NzAxNzNDMUM5QjExRUY4RjQ1Q0M3REM0RjlBRTAyL09acGVGOW5LUTdi RE9zTXdJRzNMM1pOZWVIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFDMT/539ImZX/cckvLyg7jm/Q0hjwyETXz6EUrgWxSKR0EPB/hOvrti nxQyXm2LIG6Mssu+ldhvsv4NHO9PzeELxmlITUMQlDaMNm4lltOJ0H3LJx4sU5HO Apk2E6qdX20GqY/OtPL9h63KOq0YtTxiG9BxpEQywo+qleo2CnJGkh78KQQ+M0Ce gJ0teSjNvZ9DXY8D+m6bblsIOg++P9HCZ5nGhskiEK0zhXIFPs7i4xmYK+a1BBqg FOTqt/30O1YxZFYRzI/6DUZ68YSKMpYbb1wnFG94TndMtBy/s6PpSq9UY5tDVXW6 f5304gVKp8IXrqBS5va81pmBD0G223U= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org