$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft File: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json) Hash identifier: YkZkMPGAAifiqBAofBlcLLmZdcPAuIW2c/tZsaG5oE4= Subject key identifier: 5E:65:6C:C9:CF:6B:BF:5C:1E:15:C6:9D:E4:B0:89:62:A7:01:47:2A Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C Certificate serial: 06F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft Manifest number: 06E9 Signing time: Fri 22 Nov 2024 21:33:28 +0000 Manifest this update: Fri 22 Nov 2024 21:33:27 +0000 Manifest next update: Fri 29 Nov 2024 21:33:27 +0000 Files and hashes: 1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: eWfP2kfXPYjnz3OCaFluZd48lUltx8R9epCId8GK4MQ=) 2: FDC105522D2E11EB88924818C4F9AE02.roa (hash: NIUGS4mvKNWRmdIeXIiI1BIa89OgAlVEL12ojwbrF1s=) 3: 29127678295611EB9ECAB865C4F9AE02.roa (hash: qmzXltziG7ewuM6cN2cSP+Q/tlGJKiQaU+/L/25HLgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C Validity Not Before: Nov 22 21:33:27 2024 GMT Not After : Nov 29 21:33:27 2024 GMT Subject: CN=6740f8a7-117b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:c6:0d:1f:6b:8a:8e:98:86:c2:f8:d9:20: 02:37:df:6c:cc:55:bd:7b:6f:e4:dd:34:ec:5a:a7: 6f:64:b5:05:5d:bc:c8:67:77:1e:c8:0d:a9:be:67: e6:03:8d:94:12:91:18:fb:97:63:0c:9b:48:57:f7: b9:ee:47:f9:5b:76:14:e5:bf:ad:3d:c9:00:a7:ba: 0a:ba:f9:54:25:ef:41:6b:c9:d5:a9:82:1f:d2:a4: a7:bf:c7:bc:6b:e8:cf:28:2a:24:78:cd:f6:71:e0: f0:e6:24:d7:3f:b8:38:de:c2:e3:87:48:4d:5e:34: 27:20:c9:76:45:fe:3e:cb:b2:0e:a5:46:99:0a:41: 19:cd:7f:e0:a4:92:a9:45:97:07:cc:a9:0a:89:d3: 7c:13:e7:6b:a8:b4:db:1f:7b:8d:da:19:62:52:da: b3:7e:71:9d:a9:26:ac:09:e0:9d:90:b4:eb:78:cb: a6:25:d9:a0:8f:a2:57:e1:32:b3:73:67:7b:aa:d3: a2:42:55:1c:02:38:05:6a:f0:52:02:a2:98:01:13: f1:7f:75:6b:f1:7c:96:94:61:2e:40:3c:cc:aa:56: 83:e3:18:5e:e8:86:c1:1b:3a:d9:86:ea:2f:ea:c7: 77:9a:7f:0a:d7:36:e2:89:d0:0a:c8:ab:84:65:77: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:65:6C:C9:CF:6B:BF:5C:1E:15:C6:9D:E4:B0:89:62:A7:01:47:2A X509v3 Authority Key Identifier: keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ee:0e:7c:40:35:06:69:3b:b9:35:7d:8f:90:c3:bf:cb:34: c7:68:ba:06:37:1c:cb:e7:68:f4:01:28:11:74:6f:80:8e:16: e0:7a:47:d6:5a:42:b6:3c:0a:33:10:9d:4d:81:29:71:a8:74: ac:09:f8:79:b2:3d:86:fa:64:d9:78:b1:01:3b:66:10:05:ec: 55:ac:9d:7e:b7:a3:d1:30:b7:ea:72:e1:f0:48:db:63:e2:5d: 2e:47:3d:08:c4:c8:61:5a:48:41:bf:2e:3b:08:d0:f8:67:cd: 34:b6:53:3e:93:66:ba:ad:ed:8a:ac:5b:cc:27:f3:98:04:7c: ea:52:1b:2d:8d:0d:81:d3:18:29:42:50:f4:73:fb:1a:4c:9b: 2f:0c:01:ef:dc:c0:8b:c0:8f:14:04:d8:48:f1:4c:1f:90:bf: 3f:cf:37:70:c9:cb:58:16:e6:74:26:1a:4a:73:0c:5b:02:fc: 56:38:45:8b:a1:e1:91:36:42:49:0a:0b:b2:9a:81:9e:0d:38: 87:84:e0:54:fa:c1:8c:85:3b:a5:90:92:35:87:61:48:6c:25: 2b:b0:3d:f9:39:e5:4b:24:e5:1e:11:32:60:1a:4d:75:0e:40: 6e:00:9b:6d:42:02:60:92:99:7c:4a:f0:74:43:88:b6:ff:a7: 45:4d:c4:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NzExMTAvBgNVBAUTKEEzMjE1MzcxMjUzNzYwMEQ3MTM0MkVDMDY5QTU3RjNF RUQ2MEQ3MEMwHhcNMjQxMTIyMjEzMzI3WhcNMjQxMTI5MjEzMzI3WjAYMRYwFAYD VQQDEw02NzQwZjhhNy0xMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dDGDR9rio6YhsL42SACN99szFW9e2/k3TTsWqdvZLUFXbzIZ3ceyA2pvmfm A42UEpEY+5djDJtIV/e57kf5W3YU5b+tPckAp7oKuvlUJe9Ba8nVqYIf0qSnv8e8 a+jPKCokeM32ceDw5iTXP7g43sLjh0hNXjQnIMl2Rf4+y7IOpUaZCkEZzX/gpJKp RZcHzKkKidN8E+drqLTbH3uN2hliUtqzfnGdqSasCeCdkLTreMumJdmgj6JX4TKz c2d7qtOiQlUcAjgFavBSAqKYARPxf3Vr8XyWlGEuQDzMqlaD4xhe6IbBGzrZhuov 6sd3mn8K1zbiidAKyKuEZXf5sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5lbMnP a79cHhXGneSwiWKnAUcqMB8GA1UdIwQYMBaAFKMhU3ElN2ANcTQuwGmlfz7tYNcM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc3MS81MEMwODA0RTI5 NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lBMXhOQzdBYWFWX1B1MWcx d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL295RlRjU1UzWUExeE5DN0FhYVZfUHUxZzF3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc3MS81MEMwODA0RTI5NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lB MXhOQzdBYWFWX1B1MWcxd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd7g58QDUGaTu5NX2PkMO/yzTHaLoGNxzL52j0ASgRdG+AjhbgekfW WkK2PAozEJ1NgSlxqHSsCfh5sj2G+mTZeLEBO2YQBexVrJ1+t6PRMLfqcuHwSNtj 4l0uRz0IxMhhWkhBvy47CND4Z800tlM+k2a6re2KrFvMJ/OYBHzqUhstjQ2B0xgp QlD0c/saTJsvDAHv3MCLwI8UBNhI8UwfkL8/zzdwyctYFuZ0JhpKcwxbAvxWOEWL oeGRNkJJCguymoGeDTiHhOBU+sGMhTulkJI1h2FIbCUrsD35OeVLJOUeETJgGk11 DkBuAJttQgJgkpl8SvB0Q4i2/6dFTcRY -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org