$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json) Hash identifier: 7QnHe2zbzJXdGJWuPwLpJ+8sov12CnAwI9dQ8uTfGPE= Subject key identifier: AE:83:59:2B:DE:02:6D:4D:91:66:18:89:DB:6B:BD:7F:70:54:7E:45 Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft Manifest number: 04C8 Signing time: Fri 22 Nov 2024 23:27:51 +0000 Manifest this update: Fri 22 Nov 2024 23:27:50 +0000 Manifest next update: Fri 29 Nov 2024 23:27:50 +0000 Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: cxaU+WvIyeP+djgSFJBF57YKwoCh/dHkDuiJyRlYAH8=) 2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=) 3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: MzCxa5//voyTa1PWfOUraFYhl6MRI6DeuUFpM68sXZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Validity Not Before: Nov 22 23:27:50 2024 GMT Not After : Nov 29 23:27:50 2024 GMT Subject: CN=67411376-d290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:90:52:05:11:ad:eb:5d:aa:cc:07:78:07: 08:28:99:45:09:ef:36:f3:c0:90:24:52:c4:3d:fc: 07:8c:f9:82:9b:89:b3:2d:93:02:6c:f3:ff:f0:42: 80:6b:12:29:12:7d:c4:2c:64:1a:9e:e4:ff:a0:7e: 65:43:7f:a2:aa:bc:cb:53:53:ef:28:94:46:6e:c4: 62:9f:79:2e:72:c9:f4:95:c1:f0:a6:43:6c:61:03: 61:fd:28:24:c0:e1:b4:7e:3c:ce:a6:d9:5c:9a:f4: bb:6e:4a:57:6d:bb:bd:ce:0d:d5:51:8e:81:1e:ef: 41:44:1e:41:61:7e:e2:ab:dc:bd:e5:bc:d4:66:06: ec:de:51:12:83:97:8b:9a:16:ba:66:ad:71:78:10: d5:7d:e7:bf:b8:aa:d2:b9:5e:74:a0:ae:4f:88:6a: 04:3e:46:0a:b7:5a:3c:d6:d3:bf:7d:f3:f0:e7:86: da:2d:c0:72:6d:35:56:94:e7:04:0d:2a:3f:5b:92: 1a:4f:28:fb:c7:be:17:b5:e2:a1:2f:47:8b:f6:76: fc:06:9f:54:94:20:9f:dc:ba:fd:27:76:e8:78:d9: ea:b3:1a:cf:e4:36:82:bb:f0:63:83:f6:a9:e9:80: 6d:cb:8c:f6:69:7d:cd:c5:48:25:9e:72:dd:98:92: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:83:59:2B:DE:02:6D:4D:91:66:18:89:DB:6B:BD:7F:70:54:7E:45 X509v3 Authority Key Identifier: keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ae:fb:2f:f1:33:77:c5:ce:94:97:e7:4a:a8:72:ac:e7:5c: 0f:44:41:e3:c7:a1:4d:b9:af:ae:e3:c6:0f:33:51:df:69:0e: ee:6c:73:f4:99:9c:c7:09:7f:58:e1:b3:c7:ed:5b:b1:00:82: 00:13:e3:b7:d9:4c:2d:db:39:eb:84:e9:2d:d1:25:2e:41:ae: ff:50:d1:9e:d4:7d:57:cf:fd:eb:f8:c6:58:e7:91:38:3d:1d: 2c:3a:b6:fb:0d:37:84:f6:e6:df:ba:9b:6e:3c:b6:90:0a:92: 86:06:8b:b0:13:84:91:64:28:60:b0:72:2f:fc:90:9d:6a:50: 99:dc:f3:52:69:85:2b:2c:6e:b0:9d:aa:46:a6:6e:27:56:1a: 4c:7d:e8:f6:3e:b7:c8:4c:a3:71:f3:64:bc:a2:3a:42:9e:24: 1a:40:e9:d8:ca:a6:65:16:3a:0f:80:cc:8b:64:26:54:55:7e: c0:9e:cc:4e:cb:5e:6c:0e:cc:29:ae:59:d1:4a:e7:2a:a8:50: 60:e5:04:53:6c:df:11:9e:49:9e:7b:47:84:54:89:1e:65:3c: 05:80:2f:f8:41:38:66:25:e8:94:50:a1:9d:54:2c:96:e5:2a: c0:46:87:95:29:70:4e:0e:ed:8f:81:fb:64:7f:32:51:a3:03: 4b:c2:3b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF ODg1RDdDNTAwHhcNMjQxMTIyMjMyNzUwWhcNMjQxMTI5MjMyNzUwWjAYMRYwFAYD VQQDEw02NzQxMTM3Ni1kMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRSQUgURretdqswHeAcIKJlFCe8288CQJFLEPfwHjPmCm4mzLZMCbPP/8EKA axIpEn3ELGQanuT/oH5lQ3+iqrzLU1PvKJRGbsRin3kucsn0lcHwpkNsYQNh/Sgk wOG0fjzOptlcmvS7bkpXbbu9zg3VUY6BHu9BRB5BYX7iq9y95bzUZgbs3lESg5eL mha6Zq1xeBDVfee/uKrSuV50oK5PiGoEPkYKt1o81tO/ffPw54baLcBybTVWlOcE DSo/W5IaTyj7x74XteKhL0eL9nb8Bp9UlCCf3Lr9J3boeNnqsxrP5DaCu/Bjg/ap 6YBty4z2aX3NxUglnnLdmJLwvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6DWSve Am1NkWYYidtrvX9wVH5FMB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1 OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0VFMy85QTc3QUEyQTA1OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFL eWFrbVJNbHZlS2pvaGRmRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOrvsv8TN3xc6Ul+dKqHKs51wPREHjx6FNua+u48YPM1HfaQ7ubHP0 mZzHCX9Y4bPH7VuxAIIAE+O32Uwt2znrhOkt0SUuQa7/UNGe1H1Xz/3r+MZY55E4 PR0sOrb7DTeE9ubfuptuPLaQCpKGBouwE4SRZChgsHIv/JCdalCZ3PNSaYUrLG6w napGpm4nVhpMfej2PrfITKNx82S8ojpCniQaQOnYyqZlFjoPgMyLZCZUVX7AnsxO y15sDswprlnRSucqqFBg5QRTbN8Rnkmee0eEVIkeZTwFgC/4QThmJeiUUKGdVCyW 5SrARoeVKXBODu2PgftkfzJRowNLwjvF -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org