$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json) Hash identifier: EgFzoNhD5hNrkQm6qc9kfZrq4en/js8DYDOREFtXojI= Subject key identifier: 64:5B:C3:86:EF:FB:26:CD:E3:B6:79:52:2D:2B:33:E4:A8:C9:68:36 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft Manifest number: 3476 Signing time: Fri 22 Nov 2024 14:25:21 +0000 Manifest this update: Fri 22 Nov 2024 14:25:21 +0000 Manifest next update: Fri 29 Nov 2024 14:25:21 +0000 Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: 3Pj5cKUBVgnx3+4Tml240YDcCHegel7lhW69KLyAMZw=) 2: A99B7B0A7CC211EFAF770811C4F9AE02.roa (hash: LRgBeS95TqQozF5AqWzaZUqlsD5uzo2WC7dIoNj8drc=) 3: 8A7456C47CBE11EFB9BF7074C4F9AE02.roa (hash: HcKEOonzAu+z0GPSseUC7go/+PDERZEFfa5gQQU6r04=) 4: 190AC86A33FF11EDB747A054C4F9AE02.roa (hash: yTZANzjfsTRDW4TWvk7jnlYG+mHu3NNnkszMyxSn7bY=) 5: 203B2B7A1C9811EE995E057EC4F9AE02.roa (hash: 4zPuCRb6jQp/WONx/+B920AnQZg5YD/rNNquB0manEQ=) 6: CF50CAEE7CC211EFA0514511C4F9AE02.roa (hash: lLOS6iIX9XnjW5mqGMyIzeegwe8mQOfFKlRYkQHEw4g=) 7: E52789DCE39E11EAAAE0622CC4F9AE02.roa (hash: QHmNlvHkZ1UVpicdTwIncttCEG27hNKbZKwKjK3XZ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Nov 22 14:25:21 2024 GMT Not After : Nov 29 14:25:21 2024 GMT Subject: CN=67409451-aa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:a7:23:35:42:27:3f:99:87:64:57:6f:68: ee:a5:d8:e6:86:6d:db:59:9e:8d:96:97:3f:8f:7e: f4:19:1c:2d:1c:4d:17:20:76:fa:1d:1b:21:73:d2: a9:ec:45:5f:fb:51:f4:c5:71:9d:dd:92:e3:28:91: 71:b4:cc:d1:e1:da:13:47:96:be:34:f1:96:eb:75: be:bd:2d:c7:15:ce:73:f8:05:ce:31:8e:77:a2:d4: 04:b4:e9:d4:14:ea:f0:b8:07:08:0f:25:cd:d0:b7: b2:84:77:93:ee:ca:2f:78:2d:11:e3:55:d1:3b:42: 9b:66:7f:57:b6:ac:4a:7a:2d:2d:8c:fa:86:2b:5a: 94:f5:a3:35:34:5d:f4:e1:85:1b:d6:6f:7b:6e:b9: 0d:7d:13:35:34:d7:5d:9e:94:ff:1c:ce:69:c8:95: 35:50:2f:6e:64:49:69:14:03:07:5b:16:cc:7c:05: c2:e4:47:15:25:77:91:f7:69:ed:88:f0:fe:3a:dd: 8b:3f:fc:b2:f2:e9:1a:c0:bd:82:8b:34:02:d8:b0: b7:59:b0:23:c1:f6:30:56:7a:cc:fd:99:b4:3e:94: aa:56:4e:5b:1d:fd:65:f1:d7:39:48:ca:b6:46:41: e7:86:9f:62:71:e3:6e:02:8f:e8:4c:71:67:98:d8: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:C3:86:EF:FB:26:CD:E3:B6:79:52:2D:2B:33:E4:A8:C9:68:36 X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:18:9a:45:d5:19:37:d9:10:3d:90:ca:2c:10:59:14:1a:c7: 29:97:95:aa:49:b4:4b:64:c2:7a:e5:75:fe:cb:76:fa:f6:37: 00:be:62:8a:a0:5c:87:9a:ef:fc:82:64:b7:ef:32:5f:62:f4: 2f:05:3c:94:22:b2:d5:bf:ee:b8:a6:b5:52:91:c6:e1:cf:7e: 2c:5f:52:41:6d:00:e5:29:a3:26:93:8c:f4:ba:6f:3a:4e:3e: da:80:c9:68:66:14:9d:ef:00:c8:f0:e4:4d:46:48:f9:9b:72: e6:21:09:23:10:d6:47:a6:a5:9b:9b:ab:77:89:c6:35:78:0f: 9c:ab:5a:90:24:4f:da:61:bd:cc:93:33:90:75:fa:26:95:4f: b7:e3:6e:a8:a6:f4:89:26:d8:c9:a1:db:c8:a9:bc:31:60:bb: a6:a6:a2:30:24:6d:2e:d7:47:c1:aa:d5:6f:9f:e7:03:ec:16: 3e:e0:63:ef:18:9f:4d:1b:b4:51:78:b7:a4:4e:67:52:96:3b: ff:a8:9c:19:a5:ad:fb:90:de:fb:a5:00:7a:f1:49:16:ee:01: 7d:9e:4f:36:cf:00:12:63:53:c3:e7:85:87:8a:6b:0e:42:9d: 57:ca:8e:cb:52:5f:8a:b0:a8:22:13:9b:47:6b:f6:d3:74:ff: c0:d1:9c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjQxMTIyMTQyNTIxWhcNMjQxMTI5MTQyNTIxWjAYMRYwFAYD VQQDEw02NzQwOTQ1MS1hYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvunIzVCJz+Zh2RXb2jupdjmhm3bWZ6Nlpc/j370GRwtHE0XIHb6HRshc9Kp 7EVf+1H0xXGd3ZLjKJFxtMzR4doTR5a+NPGW63W+vS3HFc5z+AXOMY53otQEtOnU FOrwuAcIDyXN0LeyhHeT7soveC0R41XRO0KbZn9XtqxKei0tjPqGK1qU9aM1NF30 4YUb1m97brkNfRM1NNddnpT/HM5pyJU1UC9uZElpFAMHWxbMfAXC5EcVJXeR92nt iPD+Ot2LP/yy8ukawL2CizQC2LC3WbAjwfYwVnrM/Zm0PpSqVk5bHf1l8dc5SMq2 RkHnhp9iceNuAo/oTHFnmNjKAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRbw4bv +ybN47Z5Ui0rM+SoyWg2MB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB WmZCUVk0aEdEa3J5OFg4XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfGJpF1Rk32RA9kMosEFkUGscpl5WqSbRLZMJ65XX+y3b69jcAvmKK oFyHmu/8gmS37zJfYvQvBTyUIrLVv+64prVSkcbhz34sX1JBbQDlKaMmk4z0um86 Tj7agMloZhSd7wDI8ORNRkj5m3LmIQkjENZHpqWbm6t3icY1eA+cq1qQJE/aYb3M kzOQdfomlU+3426opvSJJtjJodvIqbwxYLumpqIwJG0u10fBqtVvn+cD7BY+4GPv GJ9NG7RReLekTmdSljv/qJwZpa37kN77pQB68UkW7gF9nk82zwASY1PD54WHimsO Qp1Xyo7LUl+KsKgiE5tHa/bTdP/A0Zzg -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:38 2024 by rpki-client on console-fra.rpki-client.org