$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json) Hash identifier: YWUCIKhSySlyra0m1VnZzZzOVxJl4f8Fd9ePMcxFotE= Subject key identifier: 87:A2:B9:7D:BC:36:FF:EF:52:B4:AA:CD:94:28:5C:02:C2:C2:C1:BD Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft Manifest number: 50 Signing time: Thu 21 Nov 2024 05:18:38 +0000 Manifest this update: Thu 21 Nov 2024 05:18:38 +0000 Manifest next update: Thu 28 Nov 2024 05:18:37 +0000 Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: y9xbasjj06kCJms1QxCt4W2KczqudtIAxA8233FPzZ8=) 2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: 7gIQlEaY6p9FZPwnLquANP+Ly+DUi94SCHLL5QY24Hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Validity Not Before: Nov 21 05:18:38 2024 GMT Not After : Nov 28 05:18:37 2024 GMT Subject: CN=673ec2ae-4f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:5a:0d:f8:f0:d3:30:44:c2:e6:b3:b9:66: 73:4a:e7:31:8f:cd:8b:15:60:26:37:72:d1:ef:3d: 4d:a5:23:8b:d0:14:74:d1:d0:6c:35:d6:93:5f:e8: 47:19:74:1c:7c:e3:4d:6d:b4:ff:67:c2:4d:37:ff: 01:e9:11:a0:c1:57:12:a5:12:7a:37:1a:c0:b8:dd: 7d:12:8e:b2:5e:7a:26:21:1c:e0:7b:e1:49:b7:ea: 3e:4c:5b:e6:4c:74:be:c0:64:f7:42:94:4a:b5:f1: b2:a4:a3:53:7c:2e:24:9b:48:5f:d3:3c:a7:e1:20: 33:ba:82:7f:2d:89:d0:83:62:16:e1:75:6c:64:74: 6d:35:16:02:14:a6:7d:8c:55:86:ce:b4:3c:56:5e: b7:3e:36:23:a8:db:18:7f:dd:e0:13:17:f7:bd:1b: b8:89:23:ce:a7:17:c7:97:3e:13:d0:ff:23:a0:e1: 0c:21:4f:5f:23:88:41:b1:cb:ef:cd:f2:93:83:ea: 03:0e:67:bc:d8:b8:e5:ce:1e:d0:28:40:9b:db:bf: b3:02:0c:5c:89:51:12:dc:9b:de:32:1a:a5:01:29: b4:48:fc:23:ce:e2:5d:0e:56:a3:70:95:f3:9f:81: 55:6a:5a:fd:35:6f:1f:f9:58:68:66:08:f1:26:8b: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A2:B9:7D:BC:36:FF:EF:52:B4:AA:CD:94:28:5C:02:C2:C2:C1:BD X509v3 Authority Key Identifier: keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8f:da:b6:91:51:cf:89:cc:72:8c:40:d9:b2:5e:dd:28:32: b8:77:b9:f6:c4:52:69:01:8a:ab:af:99:92:e5:cf:44:3f:33: 91:6c:c6:45:01:66:a4:d6:d1:80:cf:f0:2b:14:6e:2c:ff:7b: 78:13:3d:ba:65:43:0c:56:1b:b9:e3:44:46:66:15:8b:84:fd: 85:c5:35:87:77:2f:6d:a2:8c:24:87:45:ef:bf:68:a6:33:1e: 5b:ca:ff:17:f5:19:ac:4b:c5:c2:2f:52:5b:ac:c2:43:8b:0c: c7:21:89:9b:09:35:fa:c4:ad:ce:1f:4c:7a:6d:b0:25:7a:ca: 2f:2e:85:ad:bc:4b:9e:c3:c0:02:59:87:19:c2:5b:4b:3d:2f: cc:87:cc:3b:6c:a2:ab:2a:34:8c:26:22:c9:14:55:f3:5d:86: ba:7f:22:14:b7:49:1a:9f:72:34:92:77:04:13:51:c2:b3:c4: 7f:3d:06:32:e1:41:2f:f5:de:df:a9:1c:24:0d:46:62:a2:7e: a8:e0:d9:41:f0:6e:47:dc:d6:30:68:7e:e5:57:1b:8b:ab:e4: a2:94:9e:bd:c3:b6:c4:17:87:07:9d:70:98:d4:1b:b8:f7:cc: 4d:ba:fa:9c:ca:7a:f0:b6:8d:84:c1:87:95:71:b2:47:45:ee: 4f:a2:df:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REI3MjExMC8GA1UEBRMoRUNFMkUwMTYwMTYxQjZGNzdGQzc0OTc2RkE3RDQ2QzNF NDIzMkRFRjAeFw0yNDExMjEwNTE4MzhaFw0yNDExMjgwNTE4MzdaMBgxFjAUBgNV BAMTDTY3M2VjMmFlLTRmOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcDloN+PDTMETC5rO5ZnNK5zGPzYsVYCY3ctHvPU2lI4vQFHTR0Gw11pNf6EcZ dBx8401ttP9nwk03/wHpEaDBVxKlEno3GsC43X0SjrJeeiYhHOB74Um36j5MW+ZM dL7AZPdClEq18bKko1N8LiSbSF/TPKfhIDO6gn8tidCDYhbhdWxkdG01FgIUpn2M VYbOtDxWXrc+NiOo2xh/3eATF/e9G7iJI86nF8eXPhPQ/yOg4QwhT18jiEGxy+/N 8pOD6gMOZ7zYuOXOHtAoQJvbv7MCDFyJURLcm94yGqUBKbRI/CPO4l0OVqNwlfOf gVVqWv01bx/5WGhmCPEmi1tDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh6K5fbw2 /+9StKrNlChcAsLCwb0wHwYDVR0jBBgwFoAU7OLgFgFhtvd/x0l2+n1Gw+QjLe8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQjcyLzdEOTlBQ0FDMzFG NDExRUZBRTkxQTAwQ0M0RjlBRTAyLzdPTGdGZ0ZodHZkX3gwbDItbjFHdy1Rakxl OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN09MZ0ZnRmh0dmRfeDBsMi1uMUd3LVFqTGU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE QjcyLzdEOTlBQ0FDMzFGNDExRUZBRTkxQTAwQ0M0RjlBRTAyLzdPTGdGZ0ZodHZk X3gwbDItbjFHdy1RakxlOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ6P2raRUc+JzHKMQNmyXt0oMrh3ufbEUmkBiquvmZLlz0Q/M5FsxkUB ZqTW0YDP8CsUbiz/e3gTPbplQwxWG7njREZmFYuE/YXFNYd3L22ijCSHRe+/aKYz HlvK/xf1GaxLxcIvUluswkOLDMchiZsJNfrErc4fTHptsCV6yi8uha28S57DwAJZ hxnCW0s9L8yHzDtsoqsqNIwmIskUVfNdhrp/IhS3SRqfcjSSdwQTUcKzxH89BjLh QS/13t+pHCQNRmKifqjg2UHwbkfc1jBofuVXG4ur5KKUnr3DtsQXhwedcJjUG7j3 zE26+pzKevC2jYTBh5VxskdF7k+i3xw= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org