$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft File: o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json) Hash identifier: dQqyejY6EqUYSC4/poQFwQTBZbx9IqeCW3INCoupaqI= Subject key identifier: 32:F5:5D:F1:91:3B:F0:C2:DC:A5:B6:5E:2B:C1:5B:DB:D9:F2:64:38 Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft Manifest number: 74 Signing time: Sat 23 Nov 2024 04:50:47 +0000 Manifest this update: Sat 23 Nov 2024 04:50:46 +0000 Manifest next update: Sat 30 Nov 2024 04:50:46 +0000 Files and hashes: 1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: GCTXAMsRvmiyNiTzbt4EPWBMDThG8xLrKs7le24fVVI=) 2: 8C7FA9C0FD4B11EEABAB0B60C4F9AE02.roa (hash: LEMiACV3Ie+SK4LkuQJBWGvSnOFQ7e/xDgjdO66Ipp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Validity Not Before: Nov 23 04:50:46 2024 GMT Not After : Nov 30 04:50:46 2024 GMT Subject: CN=67415f27-87d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:20:45:c0:93:a0:89:bd:7c:24:e5:67:61: f3:a5:60:4c:bb:30:22:be:fb:22:7b:f0:c5:75:a8: e6:80:ea:71:56:4f:41:69:97:da:53:eb:09:f4:15: 2c:23:56:e7:e3:0d:99:60:b1:43:2d:25:d9:ec:62: 33:02:62:07:2f:80:92:96:bd:e6:04:2e:d5:3c:9a: 9d:d1:63:98:f7:92:45:e8:05:d3:73:48:16:80:5e: 08:26:37:46:fb:47:5f:4a:9d:7c:70:95:39:69:51: ad:4b:98:e2:b2:95:64:74:a2:bd:a7:a2:c2:43:4f: 6e:8e:9f:af:b8:d6:46:fa:04:dd:e2:8c:8f:3d:82: c5:18:79:7d:d2:18:99:98:7f:65:ad:df:fa:83:b1: 61:2c:f0:40:cc:38:40:f1:2c:a0:fe:a3:fe:5e:df: 9f:21:dc:49:6c:38:b8:d3:9d:5d:9a:2a:31:20:e1: ae:e7:3d:43:44:96:8b:03:05:49:8c:a2:1b:ef:65: be:55:26:68:13:c3:2a:65:73:f9:b5:3a:54:e6:49: b8:db:9b:0b:69:dd:7e:9c:b8:ed:04:18:6c:11:6f: b8:0c:d8:b6:70:ab:e1:ce:46:03:48:0f:30:db:5a: 6f:dd:bb:8c:32:d7:1d:9f:d0:10:f6:6b:b0:a5:5e: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F5:5D:F1:91:3B:F0:C2:DC:A5:B6:5E:2B:C1:5B:DB:D9:F2:64:38 X509v3 Authority Key Identifier: keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:2a:38:34:a1:1b:c1:49:b3:f7:b3:50:dc:46:79:d7:1d:19: 3b:4c:5e:bf:d4:61:ec:6f:b0:60:d7:fc:8f:f1:93:95:19:67: d6:51:ef:41:7d:61:42:0a:bd:50:a1:5e:e4:9f:ac:5c:17:3c: 4e:98:6f:03:8b:4d:07:6c:fc:5d:c5:88:1d:c7:17:e0:4d:1c: e5:0e:54:c7:a3:9f:ca:ae:93:d2:18:96:33:78:e2:b3:3f:df: 7e:fc:b1:87:59:b0:f3:2e:67:8b:68:46:de:2f:9a:14:37:8d: 53:3d:8b:09:7e:ff:9c:a9:18:d7:18:27:59:e1:33:92:32:19: 0b:44:55:e1:fa:23:27:2e:e3:97:e3:73:fe:44:4f:9d:95:77: d4:b5:a3:d5:7c:6e:00:39:6c:c9:b9:89:84:36:04:26:55:ea: 17:22:72:40:31:94:59:43:b2:5a:68:90:ca:c1:13:a4:a5:28: 69:f9:c7:fd:8f:86:5b:42:71:ac:f1:e1:54:93:78:ea:b4:e0: 00:3f:d8:0d:dc:6e:98:07:26:7b:68:d8:36:2d:3c:7c:88:a2: 35:50:a8:18:3d:62:55:e8:e2:19:b0:bf:3a:f7:a1:c7:57:1f: 8f:0f:d9:a4:fb:5d:54:4d:90:43:12:70:43:b5:65:d7:e6:ea: 4e:c4:7f:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzEwRjExMC8GA1UEBRMoQTNFQjUxRDI5OTlCQkI0NDY1OUJEREE2QkUxRTEwRkE1 NTFFMjI2NTAeFw0yNDExMjMwNDUwNDZaFw0yNDExMzAwNDUwNDZaMBgxFjAUBgNV BAMTDTY3NDE1ZjI3LTg3ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAKCBFwJOgib18JOVnYfOlYEy7MCK++yJ78MV1qOaA6nFWT0Fpl9pT6wn0FSwj VufjDZlgsUMtJdnsYjMCYgcvgJKWveYELtU8mp3RY5j3kkXoBdNzSBaAXggmN0b7 R19KnXxwlTlpUa1LmOKylWR0or2nosJDT26On6+41kb6BN3ijI89gsUYeX3SGJmY f2Wt3/qDsWEs8EDMOEDxLKD+o/5e358h3ElsOLjTnV2aKjEg4a7nPUNElosDBUmM ohvvZb5VJmgTwyplc/m1OlTmSbjbmwtp3X6cuO0EGGwRb7gM2LZwq+HORgNIDzDb Wm/du4wy1x2f0BD2a7ClXsVPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMvVd8ZE7 8MLcpbZeK8Fb29nyZDgwHwYDVR0jBBgwFoAUo+tR0pmbu0Rlm92mvh4Q+lUeImUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDMTBGLzlBNzU4MEM4RkQ0 QTExRUU4MDlCMDczMEM0RjlBRTAyL28tdFIwcG1idTBSbG05Mm12aDRRLWxVZUlt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvby10UjBwbWJ1MFJsbTkybXZoNFEtbFVlSW1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD MTBGLzlBNzU4MEM4RkQ0QTExRUU4MDlCMDczMEM0RjlBRTAyL28tdFIwcG1idTBS bG05Mm12aDRRLWxVZUltVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKMqODShG8FJs/ezUNxGedcdGTtMXr/UYexvsGDX/I/xk5UZZ9ZR70F9 YUIKvVChXuSfrFwXPE6YbwOLTQds/F3FiB3HF+BNHOUOVMejn8quk9IYljN44rM/ 3378sYdZsPMuZ4toRt4vmhQ3jVM9iwl+/5ypGNcYJ1nhM5IyGQtEVeH6Iycu45fj c/5ET52Vd9S1o9V8bgA5bMm5iYQ2BCZV6hcickAxlFlDslpokMrBE6SlKGn5x/2P hltCcazx4VSTeOq04AA/2A3cbpgHJnto2DYtPHyIojVQqBg9YlXo4hmwvzr3ocdX H48P2aT7XVRNkEMScEO1Zdfm6k7Ef2c= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org