$ rpki-client -vvf rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft File: mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft (raw, json) Hash identifier: xHp+yat8qEA6m/G/QX8Etu32z5fM15v/N1mZMTxCFus= Subject key identifier: 6D:07:0E:F4:97:BD:F5:79:15:3A:B0:E6:2B:05:E9:1F:3C:B6:B3:18 Authority key identifier: 98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5 Certificate issuer: /CN=A9191989/serialNumber=98E54ED57250C612747E3CA296853EAF919059F5 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft Manifest number: 0170 Signing time: Sat 23 Nov 2024 02:18:21 +0000 Manifest this update: Sat 23 Nov 2024 02:18:21 +0000 Manifest next update: Sat 30 Nov 2024 02:18:21 +0000 Files and hashes: 1: mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl (hash: pi2/H2J+mdu4WMUOLvDEqvYOEraITAvuXhGbz2DLZZc=) 2: 40EF3C8690CE11ED98F4C344C4F9AE02.roa (hash: qvDqXEXQjbuHwCkNJ/vKqUaoawDx9hQmZK2ov3G3QAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191989/serialNumber=98E54ED57250C612747E3CA296853EAF919059F5 Validity Not Before: Nov 23 02:18:21 2024 GMT Not After : Nov 30 02:18:21 2024 GMT Subject: CN=67413b6d-3671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:04:cf:a7:c5:f0:41:a2:1e:7a:71:e1:76: e4:11:14:23:c8:9b:94:34:2d:2a:b6:ba:3c:ec:b6: b7:5c:6c:b3:29:8f:67:4e:c4:48:9b:70:f1:47:73: 60:5d:91:0d:ae:1d:b7:19:eb:59:76:04:57:be:ce: 7f:c5:7d:84:d0:eb:7d:3e:73:ef:ee:4d:16:7a:7f: 91:58:52:14:8e:6a:ee:4c:67:a4:7b:6e:71:1d:ee: 68:73:d2:71:a1:c9:e5:a4:d6:95:5a:41:6b:cf:38: ce:0a:f1:2c:37:d6:2e:49:48:65:a8:90:ec:11:0d: d1:4c:6c:cc:de:03:0d:f5:a5:70:c2:6b:b4:4e:3e: e3:01:31:41:3b:e0:55:ba:a6:88:f3:c7:c3:52:5e: 80:68:3c:82:45:15:1d:5e:ac:8f:13:3a:18:25:43: 76:a8:92:1e:b7:90:d8:34:ee:df:89:ee:f1:e5:10: 6f:57:14:a5:56:81:8b:45:4e:eb:fb:b4:85:fe:9c: 2f:e0:4c:12:92:08:8a:82:af:e4:dc:66:97:10:f3: 62:94:03:6a:ec:05:22:d7:65:a8:14:f9:c4:3e:eb: 80:63:3a:14:ec:38:7a:fc:06:bd:f2:6a:cc:df:2b: 01:3a:98:b1:6e:8b:c3:98:8d:71:34:c3:32:4e:e9: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:07:0E:F4:97:BD:F5:79:15:3A:B0:E6:2B:05:E9:1F:3C:B6:B3:18 X509v3 Authority Key Identifier: keyid:98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e6:e5:9c:5e:c5:15:b0:50:45:93:c3:5e:42:f8:12:ef:53: 8d:6c:93:c6:fd:59:c8:d8:4f:7b:e4:91:64:a6:a9:5e:00:f6: 17:4d:49:8d:97:08:bd:5f:01:cd:8b:ee:b5:73:67:62:3b:15: 6e:19:3f:32:92:0f:8f:3f:be:45:e4:2f:c0:d7:39:cc:45:26: 32:db:13:84:ab:99:9c:46:b9:cb:a3:c6:56:ee:3a:9f:35:49: 39:34:86:7b:57:24:52:6d:21:c7:4d:96:2f:f4:b2:a9:a5:62: 27:39:6c:78:c8:18:23:9e:4e:4b:c9:b4:6c:8b:5e:98:a4:bd: 7d:16:a2:7e:81:cc:2d:9e:d4:73:1b:c8:09:be:42:66:14:92: ed:12:88:69:74:b7:0a:4c:92:00:2e:2c:f8:58:ac:ba:d7:c1: 91:e5:8a:8c:63:cf:e0:06:55:91:0b:e3:c7:ae:5e:db:65:cb: 7e:c9:47:35:bd:6c:91:e3:43:4b:77:a7:57:8d:dd:90:ed:47: 90:46:9f:66:fa:73:e2:c8:1a:9e:be:8e:e7:21:eb:5f:6a:50: cf:3e:ae:9e:bb:dc:82:7e:61:2d:b3:04:2d:3b:ba:9d:5c:3e: d8:a5:2c:b3:c6:43:11:23:64:4a:bf:34:49:0a:18:31:5e:e4: 9c:1e:71:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5ODkxMTAvBgNVBAUTKDk4RTU0RUQ1NzI1MEM2MTI3NDdFM0NBMjk2ODUzRUFG OTE5MDU5RjUwHhcNMjQxMTIzMDIxODIxWhcNMjQxMTMwMDIxODIxWjAYMRYwFAYD VQQDEw02NzQxM2I2ZC0zNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mwEz6fF8EGiHnpx4XbkERQjyJuUNC0qtro87La3XGyzKY9nTsRIm3DxR3Ng XZENrh23GetZdgRXvs5/xX2E0Ot9PnPv7k0Wen+RWFIUjmruTGeke25xHe5oc9Jx ocnlpNaVWkFrzzjOCvEsN9YuSUhlqJDsEQ3RTGzM3gMN9aVwwmu0Tj7jATFBO+BV uqaI88fDUl6AaDyCRRUdXqyPEzoYJUN2qJIet5DYNO7fie7x5RBvVxSlVoGLRU7r +7SF/pwv4EwSkgiKgq/k3GaXEPNilANq7AUi12WoFPnEPuuAYzoU7Dh6/Aa98mrM 3ysBOpixbovDmI1xNMMyTumHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0HDvSX vfV5FTqw5isF6R88trMYMB8GA1UdIwQYMBaAFJjlTtVyUMYSdH48opaFPq+RkFn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTk4OS81ODc0MTREMjg2 M0IxMUVEQjU3RTdDMzVDNEY5QUUwMi9tT1ZPMVhKUXhoSjBmanlpbG9VLXI1R1FX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PVk8xWEpReGhKMGZqeWlsb1UtcjVHUVdmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTk4OS81ODc0MTREMjg2M0IxMUVEQjU3RTdDMzVDNEY5QUUwMi9tT1ZPMVhKUXho SjBmanlpbG9VLXI1R1FXZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF5uWcXsUVsFBFk8NeQvgS71ONbJPG/VnI2E975JFkpqleAPYXTUmN lwi9XwHNi+61c2diOxVuGT8ykg+PP75F5C/A1znMRSYy2xOEq5mcRrnLo8ZW7jqf NUk5NIZ7VyRSbSHHTZYv9LKppWInOWx4yBgjnk5LybRsi16YpL19FqJ+gcwtntRz G8gJvkJmFJLtEohpdLcKTJIALiz4WKy618GR5YqMY8/gBlWRC+PHrl7bZct+yUc1 vWyR40NLd6dXjd2Q7UeQRp9m+nPiyBqevo7nIetfalDPPq6eu9yCfmEtswQtO7qd XD7YpSyzxkMRI2RKvzRJChgxXuScHnF4 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org