$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft File: mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json) Hash identifier: U2hhtfjFtivwAcsYrSDggOj6FZFPtfU4jFQYhQ00gsE= Subject key identifier: 1A:B5:43:44:DD:13:0F:B6:B2:08:F6:C8:46:CA:C8:86:AD:3A:CF:3E Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 Certificate issuer: /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft Manifest number: 14 Signing time: Thu 19 Sep 2024 06:18:40 +0000 Manifest this update: Thu 19 Sep 2024 06:18:40 +0000 Manifest next update: Thu 26 Sep 2024 06:18:40 +0000 Files and hashes: 1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: 2gT2zHTmWzn1tqEelXWXgMNF+z2i4/kdr7k2lqWGrW0=) 2: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (hash: 07izI0BAWGv8aXzT4YAtv1Abw3XsO2GrHU61WuCgbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Validity Not Before: Sep 19 06:18:40 2024 GMT Not After : Sep 26 06:18:40 2024 GMT Subject: CN=66ebc240-2168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:96:9f:de:26:67:a7:05:5a:6a:9d:9e:d3: 5f:fc:56:23:71:6d:83:9c:f6:fa:14:1f:21:fb:da: 34:ae:80:bf:90:c1:27:0f:a7:e0:44:bf:41:76:05: cf:28:47:bb:bb:00:6a:a9:e1:84:8b:e9:f8:6f:8c: 67:d3:1c:ff:ef:95:4c:22:3d:ce:57:b4:ea:36:b2: 00:1f:fc:30:91:11:3d:98:ed:c0:9f:8b:b9:ea:d5: bd:91:cb:0e:b4:2d:de:9e:78:0f:e3:1f:86:5d:7f: d2:11:b8:8f:26:cd:6c:77:82:a3:5b:a4:b7:3f:2f: 3f:53:f6:34:da:6b:3a:79:c4:6d:55:75:0e:f7:88: 08:4a:c4:3c:a2:5d:19:05:71:94:84:7f:e3:0d:0d: 16:cc:26:99:8a:4a:36:2b:13:27:6e:55:d2:c0:f5: 89:02:85:45:9e:c3:54:2f:b6:62:6f:2e:72:b0:ca: 4b:6f:56:c3:bf:24:49:a3:d6:6f:35:fe:ee:89:90: 31:e8:f5:c4:a1:35:b4:69:4b:5f:b9:49:db:45:5b: 57:7c:c0:a7:f4:83:a2:73:f3:ee:02:5c:49:5a:2f: ed:02:65:76:f2:27:b7:94:a0:4e:03:00:ed:9c:40: 56:4a:f3:20:59:ed:4e:92:da:30:8b:ea:ad:61:d9: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B5:43:44:DD:13:0F:B6:B2:08:F6:C8:46:CA:C8:86:AD:3A:CF:3E X509v3 Authority Key Identifier: keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6d:e9:3c:35:95:a2:bb:86:c1:4e:92:db:e9:75:41:c5:6f: 64:c4:36:0a:bb:1c:56:9f:9e:6a:04:c0:13:03:5c:2f:ac:12: 61:cd:d1:6f:81:65:b6:be:89:6f:b6:ff:d7:92:69:45:38:91: e7:cd:9d:3c:b5:a4:c2:c1:e9:9d:c2:09:85:19:16:c6:a6:d3: bf:32:e8:ad:43:d6:f6:d0:f2:a1:7d:e0:5e:45:78:94:7d:a1: 78:f1:b3:44:28:58:43:5c:c6:ab:e6:18:81:0a:c7:cb:5e:2b: 05:3e:cb:18:ca:6f:87:6b:5a:34:c7:0e:b2:4a:fe:81:6c:6e: 0b:44:4a:35:4d:af:58:da:db:ce:3d:2c:73:42:07:a1:88:28: 35:40:3f:69:b3:2f:a3:31:85:26:04:b7:b4:b4:b4:fd:47:60: 71:7c:8b:bc:f8:78:ec:1e:02:32:af:84:e5:98:c2:7d:38:85: 26:71:32:02:fd:91:fb:4b:bf:a1:94:41:fa:3f:89:f2:f5:92: bd:5c:b0:24:90:a9:23:90:93:e5:ed:17:12:f4:e1:6b:ae:31: aa:0d:7d:e3:0e:4d:60:f2:6f:5d:35:ca:7f:89:24:35:2e:c3: 2b:ef:06:32:30:70:62:f2:b6:e7:16:2e:01:f5:b9:cd:5d:b0: e3:c9:25:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzc3MjExMC8GA1UEBRMoOThFMUU5QjA0M0U2OEQzNzY5RTlBNjhEQjFDMjZENzE1 MTA4Rjc4NzAeFw0yNDA5MTkwNjE4NDBaFw0yNDA5MjYwNjE4NDBaMBgxFjAUBgNV BAMTDTY2ZWJjMjQwLTIxNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQC5af3iZnpwVaap2e01/8ViNxbYOc9voUHyH72jSugL+QwScPp+BEv0F2Bc8o R7u7AGqp4YSL6fhvjGfTHP/vlUwiPc5XtOo2sgAf/DCRET2Y7cCfi7nq1b2Ryw60 Ld6eeA/jH4Zdf9IRuI8mzWx3gqNbpLc/Lz9T9jTaazp5xG1VdQ73iAhKxDyiXRkF cZSEf+MNDRbMJpmKSjYrEyduVdLA9YkChUWew1QvtmJvLnKwyktvVsO/JEmj1m81 /u6JkDHo9cShNbRpS1+5SdtFW1d8wKf0g6Jz8+4CXElaL+0CZXbyJ7eUoE4DAO2c QFZK8yBZ7U6S2jCL6q1h2dZFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGrVDRN0T D7ayCPbIRsrIhq06zz4wHwYDVR0jBBgwFoAUmOHpsEPmjTdp6aaNscJtcVEI94cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NzcyLzkxRkYwRDkyNUI5 QjExRUY5Q0M0NTc0M0M0RjlBRTAyL21PSHBzRVBtalRkcDZhYU5zY0p0Y1ZFSTk0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbU9IcHNFUG1qVGRwNmFhTnNjSnRjVkVJOTRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 NzcyLzkxRkYwRDkyNUI5QjExRUY5Q0M0NTc0M0M0RjlBRTAyL21PSHBzRVBtalRk cDZhYU5zY0p0Y1ZFSTk0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlt6Tw1laK7hsFOktvpdUHFb2TENgq7HFafnmoEwBMDXC+sEmHN0W+B Zba+iW+2/9eSaUU4kefNnTy1pMLB6Z3CCYUZFsam078y6K1D1vbQ8qF94F5FeJR9 oXjxs0QoWENcxqvmGIEKx8teKwU+yxjKb4drWjTHDrJK/oFsbgtESjVNr1ja2849 LHNCB6GIKDVAP2mzL6MxhSYEt7S0tP1HYHF8i7z4eOweAjKvhOWYwn04hSZxMgL9 kftLv6GUQfo/ifL1kr1csCSQqSOQk+XtFxL04WuuMaoNfeMOTWDyb101yn+JJDUu wyvvBjIwcGLytucWLgH1uc1dsOPJJXI= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:52 2024 by rpki-client on console-fra.rpki-client.org