$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft File: rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json) Hash identifier: 0xAsf2sI8S4b5vbvof8Ad/Keq+ZbmraZPG887h04Jn4= Subject key identifier: 29:03:75:F1:50:B1:A5:61:00:F4:40:ED:B0:D8:E0:7A:2A:85:3C:6A Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft Manifest number: 8F Signing time: Sat 23 Nov 2024 04:33:16 +0000 Manifest this update: Sat 23 Nov 2024 04:33:15 +0000 Manifest next update: Sat 30 Nov 2024 04:33:15 +0000 Files and hashes: 1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: OaYI0fO3Yf1zEWSybR99kF7HqUZsD0xvXm/kps8ibOo=) 2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: ytZ0mVr7Q5kbOcbcyXXPGqMfnF/2pBGd1W5uYZdomFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Validity Not Before: Nov 23 04:33:15 2024 GMT Not After : Nov 30 04:33:15 2024 GMT Subject: CN=67415b0b-7efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:8d:dc:cc:14:fd:9a:ed:83:96:0a:26:b3: 99:61:7c:e1:f9:2f:01:6b:74:f4:e2:38:0f:ec:09: f6:8e:80:d0:ff:1f:ee:13:c0:ba:13:a4:97:30:c0: 12:a5:e3:dd:f8:c4:8a:fe:06:6b:d3:6d:b7:73:97: 24:e4:53:9f:da:bb:a1:e1:e2:69:04:a2:d9:a2:be: 6c:af:62:8a:f5:c3:95:b2:6f:cf:f8:cd:7e:bd:ee: f0:56:c2:23:c4:36:2c:dd:be:bf:41:79:2f:ea:4e: fd:2d:21:78:a9:5e:d3:4e:ee:21:ae:22:dd:b6:a4: 20:f1:40:95:e4:e6:73:dd:a3:81:d9:7a:77:c6:24: a7:91:e5:bc:6d:d0:98:80:62:00:ef:20:9c:4e:a0: ab:ef:f2:7e:06:ca:bb:8d:c3:a3:86:62:d3:ec:6b: 9a:55:f1:0a:b7:a3:5f:0d:04:0d:d4:5f:31:2a:cd: 96:a1:0d:62:76:07:96:3f:86:b0:92:c3:c6:d1:e1: a8:11:bf:ae:49:57:5a:30:90:97:56:8a:42:1e:98: d9:68:ac:f4:f9:36:76:be:4a:e2:e5:33:37:30:66: 6b:cb:6e:4c:ac:f7:fb:9e:55:87:e1:ef:53:31:03: 7a:12:3c:ff:12:70:f4:50:0c:b3:d2:50:37:15:d1: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:75:F1:50:B1:A5:61:00:F4:40:ED:B0:D8:E0:7A:2A:85:3C:6A X509v3 Authority Key Identifier: keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:16:0d:6a:47:b2:5a:f5:e0:ed:1f:5a:9f:01:b0:24:56:e4: 23:55:6c:63:2f:b7:d5:76:88:72:90:27:ad:59:51:4e:c7:f1: 12:72:fd:80:66:80:32:be:2b:ad:ce:1f:37:46:ea:ba:b3:e3: 84:ff:ec:7a:bd:24:11:d2:28:6d:09:47:44:c2:35:28:ab:5b: b9:7f:61:b2:b8:57:42:da:06:69:ef:56:11:27:35:09:20:13: 18:6a:74:d4:19:47:42:43:7f:52:06:d3:fc:30:ce:fc:22:c8: 84:39:e8:f1:c8:ca:7e:9d:81:6c:94:29:c1:f1:ea:1e:56:a9: 5f:ce:e6:f7:d5:67:23:91:a5:31:cc:ba:88:fd:d4:db:c2:3a: 28:c4:9a:7e:c6:16:ba:d9:71:1b:19:61:20:b8:75:e9:f5:68: 63:b0:b1:42:79:82:62:94:19:03:8f:67:4f:23:47:c7:70:0f: ba:c4:36:a5:fa:de:2d:bb:47:5c:6a:de:ff:3c:64:df:94:b0: 96:6d:b9:a0:c7:d3:e0:89:5d:f0:c2:af:7a:f6:00:45:11:20: 90:7d:d3:24:ba:fe:bb:7c:1c:12:aa:be:2e:65:51:7f:99:5d: c7:e5:e1:d0:29:fd:6f:6d:54:00:f7:8d:84:12:4b:b3:37:34: 18:00:40:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKEFDRTI4REFCRTUzNjQ5NjM3RkE2RTRFMzIxREUxQjYz NDYzQjgzQ0YwHhcNMjQxMTIzMDQzMzE1WhcNMjQxMTMwMDQzMzE1WjAYMRYwFAYD VQQDEw02NzQxNWIwYi03ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ+N3MwU/Zrtg5YKJrOZYXzh+S8Ba3T04jgP7An2joDQ/x/uE8C6E6SXMMAS pePd+MSK/gZr0223c5ck5FOf2ruh4eJpBKLZor5sr2KK9cOVsm/P+M1+ve7wVsIj xDYs3b6/QXkv6k79LSF4qV7TTu4hriLdtqQg8UCV5OZz3aOB2Xp3xiSnkeW8bdCY gGIA7yCcTqCr7/J+Bsq7jcOjhmLT7GuaVfEKt6NfDQQN1F8xKs2WoQ1idgeWP4aw ksPG0eGoEb+uSVdaMJCXVopCHpjZaKz0+TZ2vkri5TM3MGZry25MrPf7nlWH4e9T MQN6Ejz/EnD0UAyz0lA3FdGIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkDdfFQ saVhAPRA7bDY4HoqhTxqMB8GA1UdIwQYMBaAFKzijavlNkljf6bk4yHeG2NGO4PP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS9BMUYyMzQzQ0Qx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNXTl9wdVRqSWQ0YlkwWTdn ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS9BMUYyMzQzQ0QxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNX Tl9wdVRqSWQ0YlkwWTdnODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDFg1qR7Ja9eDtH1qfAbAkVuQjVWxjL7fVdohykCetWVFOx/EScv2A ZoAyviutzh83Ruq6s+OE/+x6vSQR0ihtCUdEwjUoq1u5f2GyuFdC2gZp71YRJzUJ IBMYanTUGUdCQ39SBtP8MM78IsiEOejxyMp+nYFslCnB8eoeVqlfzub31WcjkaUx zLqI/dTbwjooxJp+xha62XEbGWEguHXp9WhjsLFCeYJilBkDj2dPI0fHcA+6xDal +t4tu0dcat7/PGTflLCWbbmgx9PgiV3wwq969gBFESCQfdMkuv67fBwSqr4uZVF/ mV3H5eHQKf1vbVQA942EEkuzNzQYAECg -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:10 2024 by rpki-client on console-ams.rpki-client.org