$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft File: mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json) Hash identifier: BrrTDJjDLgZCLD0tVXGoBZC77+btDBhuHxglvnG/yVs= Subject key identifier: 62:A4:92:99:7C:68:62:F2:0F:64:BE:C2:59:87:C6:85:37:44:08:A9 Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 Certificate issuer: /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft Manifest number: 34 Signing time: Thu 21 Nov 2024 05:38:45 +0000 Manifest this update: Thu 21 Nov 2024 05:38:44 +0000 Manifest next update: Thu 28 Nov 2024 05:38:44 +0000 Files and hashes: 1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: bitM75hIsW0J6QcDzAhspFpBH/1dyccKjnU0smCAXYI=) 2: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (hash: 07izI0BAWGv8aXzT4YAtv1Abw3XsO2GrHU61WuCgbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Validity Not Before: Nov 21 05:38:44 2024 GMT Not After : Nov 28 05:38:44 2024 GMT Subject: CN=673ec765-c482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:e2:a1:6d:e9:ff:ca:44:4a:09:5b:f3:f4: 2a:68:9a:67:c6:65:61:18:2d:af:42:9e:9f:85:3c: ce:4c:e8:f8:5a:92:ac:ab:43:7b:d8:c2:6e:cf:31: 04:32:32:8c:a2:20:a8:40:ba:bd:54:bd:34:25:cf: 76:e0:cb:de:92:a4:58:70:12:11:a0:1a:64:d9:7d: c9:8d:d3:2f:b9:3a:25:df:1b:be:b3:81:9f:33:47: c4:24:d1:39:55:01:c7:9b:b0:10:85:13:c6:11:56: d1:4e:e5:f1:1f:df:51:f9:25:7e:e4:b6:9f:b2:40: 2e:17:4e:b4:21:e6:25:38:9a:8a:2d:37:24:83:53: f3:4a:77:94:7a:97:ea:4a:68:f0:b8:09:84:e2:b5: 7d:7d:da:eb:fb:42:2a:2b:fe:ed:43:38:aa:04:f1: 64:b7:95:45:b3:76:50:fc:37:bc:66:4f:27:5d:6f: d3:c8:4c:11:9c:6b:c5:35:a8:9c:b3:db:24:53:76: e2:a5:80:50:cc:11:8f:7b:6f:c2:cc:bf:99:e5:4e: b3:48:36:de:ed:85:40:ff:73:f7:e4:7a:1b:43:28: 64:93:5b:46:83:92:0f:67:8a:60:31:47:52:c1:df: 61:25:aa:de:6e:de:66:d2:05:31:6d:b8:3a:19:a4: 7f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A4:92:99:7C:68:62:F2:0F:64:BE:C2:59:87:C6:85:37:44:08:A9 X509v3 Authority Key Identifier: keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:6d:1f:a6:0e:c7:13:a2:27:d0:5e:8f:9b:b7:bb:54:7b:a6: 52:75:be:0c:03:d6:a2:ab:20:0e:1e:6c:7a:9c:3d:db:eb:cf: 39:72:e8:43:2e:64:58:c4:03:71:ab:79:00:5b:14:31:da:b9: 3f:04:f4:65:14:f8:1c:fa:02:a4:8f:e1:81:23:c6:1d:9b:37: 68:9c:ad:16:dd:31:27:64:56:28:b4:c1:cd:aa:8c:01:f1:cb: ab:bd:53:a6:83:28:da:2d:b9:cd:7e:48:06:51:10:b6:ff:97: 30:1e:1b:e7:7d:0a:18:2e:b4:17:7b:9a:9b:7b:ac:bb:fd:23: 7b:49:ad:bf:8d:2b:b7:28:18:8f:74:f6:9d:dd:7e:e2:78:5c: 70:46:77:54:2f:78:54:1f:19:4f:27:03:cf:ff:14:57:d5:c0: a3:e7:e9:c4:03:fc:78:05:d3:8f:ef:78:d8:19:52:0b:ac:7d: d5:35:1f:d4:ba:6a:21:68:97:65:a4:2e:27:f6:1e:9a:43:e4: bd:c7:61:73:49:63:b8:5a:08:ff:21:fe:06:d1:ed:b9:21:bd: b9:b9:ab:7d:e2:ee:1f:0a:25:83:53:4b:7e:f8:8b:1b:42:cc: ff:3b:52:70:b5:09:9b:e4:50:ae:9b:be:3f:40:31:65:43:35: 54:21:36:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzc3MjExMC8GA1UEBRMoOThFMUU5QjA0M0U2OEQzNzY5RTlBNjhEQjFDMjZENzE1 MTA4Rjc4NzAeFw0yNDExMjEwNTM4NDRaFw0yNDExMjgwNTM4NDRaMBgxFjAUBgNV BAMTDTY3M2VjNzY1LWM0ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLceKhben/ykRKCVvz9CpommfGZWEYLa9Cnp+FPM5M6PhakqyrQ3vYwm7PMQQy MoyiIKhAur1UvTQlz3bgy96SpFhwEhGgGmTZfcmN0y+5OiXfG76zgZ8zR8Qk0TlV AcebsBCFE8YRVtFO5fEf31H5JX7ktp+yQC4XTrQh5iU4mootNySDU/NKd5R6l+pK aPC4CYTitX192uv7Qior/u1DOKoE8WS3lUWzdlD8N7xmTyddb9PITBGca8U1qJyz 2yRTduKlgFDMEY97b8LMv5nlTrNINt7thUD/c/fkehtDKGSTW0aDkg9nimAxR1LB 32Elqt5u3mbSBTFtuDoZpH9jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYqSSmXxo YvIPZL7CWYfGhTdECKkwHwYDVR0jBBgwFoAUmOHpsEPmjTdp6aaNscJtcVEI94cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NzcyLzkxRkYwRDkyNUI5 QjExRUY5Q0M0NTc0M0M0RjlBRTAyL21PSHBzRVBtalRkcDZhYU5zY0p0Y1ZFSTk0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbU9IcHNFUG1qVGRwNmFhTnNjSnRjVkVJOTRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 NzcyLzkxRkYwRDkyNUI5QjExRUY5Q0M0NTc0M0M0RjlBRTAyL21PSHBzRVBtalRk cDZhYU5zY0p0Y1ZFSTk0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACRtH6YOxxOiJ9Bej5u3u1R7plJ1vgwD1qKrIA4ebHqcPdvrzzly6EMu ZFjEA3GreQBbFDHauT8E9GUU+Bz6AqSP4YEjxh2bN2icrRbdMSdkVii0wc2qjAHx y6u9U6aDKNotuc1+SAZRELb/lzAeG+d9ChgutBd7mpt7rLv9I3tJrb+NK7coGI90 9p3dfuJ4XHBGd1QveFQfGU8nA8//FFfVwKPn6cQD/HgF04/veNgZUgusfdU1H9S6 aiFol2WkLif2HppD5L3HYXNJY7haCP8h/gbR7bkhvbm5q33i7h8KJYNTS374ixtC zP87UnC1CZvkUK6bvj9AMWVDNVQhNlo= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org