$ rpki-client -vvf rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft File: oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft (raw, json) Hash identifier: LFijjdWT20H6xhpCDNDvLHlhTNMA/lWUE8K2TzBtap0= Subject key identifier: 4A:1A:1D:84:A4:03:18:29:39:06:6E:83:67:5B:0B:BD:97:7A:8D:64 Authority key identifier: A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 Certificate issuer: /CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Certificate serial: 032B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft Manifest number: 0327 Signing time: Sat 23 Nov 2024 00:42:40 +0000 Manifest this update: Sat 23 Nov 2024 00:42:39 +0000 Manifest next update: Sat 30 Nov 2024 00:42:39 +0000 Files and hashes: 1: oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl (hash: NuHgy3EXrwmDlmaNKlE1wnPferBpe9wUOzgkskw+kqc=) 2: D1E294C2A34411EC803D2585C4F9AE02.roa (hash: 9gufT/8L47ewBvsedXGTY9SOVItSQOfXiC+UqlsipuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Validity Not Before: Nov 23 00:42:39 2024 GMT Not After : Nov 30 00:42:39 2024 GMT Subject: CN=674124ff-0c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:d5:ee:8d:bb:04:1b:cd:54:81:03:f8:c2: c8:03:03:50:ec:b0:7e:4a:88:4c:0c:bc:ad:30:3e: 7e:fe:98:3f:70:42:7f:0d:39:56:28:53:53:98:90: e1:3a:4b:e5:17:24:25:f9:f5:21:dc:f4:a4:88:fa: cc:fa:ce:3b:8a:97:1a:72:3a:55:5f:5a:54:44:ad: b7:47:89:1d:9e:a5:e2:0b:9b:fc:f0:55:10:af:ca: 2f:f3:ff:bd:da:1f:91:61:a5:f1:30:98:45:3f:0d: 07:3b:8e:36:17:ee:9a:46:33:b9:9c:30:5b:8e:7e: 74:d2:ae:f7:2b:6d:0d:c0:45:f5:8a:5b:c2:22:f0: b3:af:fb:af:39:13:f2:c9:86:66:73:b4:a5:3a:f3: 21:a0:a6:cc:cf:56:8c:1c:43:b9:6a:bb:31:c4:26: 76:55:ee:36:be:35:8f:24:51:c9:d7:4e:07:06:92: 61:44:cb:ae:72:00:d4:44:08:b3:63:b6:19:28:f0: 74:6e:35:c9:2a:33:17:0b:2c:a6:a8:a9:9a:7c:ce: 95:5e:d5:a5:32:a6:fc:aa:ca:d5:d7:64:08:7a:4d: 7b:df:84:3a:96:2d:ec:62:7d:56:d0:75:9f:91:08: 47:79:ac:c0:4a:b6:c5:13:cc:e9:8f:9c:c7:66:b2: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1A:1D:84:A4:03:18:29:39:06:6E:83:67:5B:0B:BD:97:7A:8D:64 X509v3 Authority Key Identifier: keyid:A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e8:ed:96:89:69:9e:29:90:f0:96:2c:13:ea:74:90:a9:83: 8e:ca:18:e2:d0:66:1a:93:f4:79:4d:a1:b0:6d:35:0f:15:dd: 53:04:35:31:89:cc:5c:bf:71:c9:a0:fb:12:26:da:91:db:9a: db:51:01:4c:52:81:ad:fe:76:be:a5:84:f7:89:d4:ae:00:34: ab:0f:14:f6:f2:44:54:d4:67:45:09:25:2b:fb:93:df:0e:df: c1:4c:4e:c7:3d:e4:43:fe:35:11:90:a1:53:53:58:ee:52:24: a5:1c:6c:49:d7:91:4b:c5:51:93:f2:0c:f3:04:c9:65:c1:3c: 23:48:7c:9b:c3:26:ba:ad:1a:5d:0a:03:ba:49:6c:e1:fc:51: 72:b3:b7:84:88:72:20:a1:97:7a:11:8c:f7:28:84:9c:e8:0b: c3:0b:f5:0f:0e:85:a9:30:13:ba:23:e4:21:c7:6e:f7:7c:99: ad:d7:93:2c:c2:43:b5:52:f5:af:eb:6d:b2:cb:a4:f0:fb:45: 5b:34:53:d8:88:b6:a3:19:51:e3:5b:dc:3f:96:1c:54:db:91: 82:b8:ed:34:46:c6:31:7f:2f:a8:7d:66:27:27:18:e6:ef:a3: c7:47:76:6c:38:33:f8:14:2a:a4:31:fd:4e:03:33:a7:92:ea: e1:69:dc:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwNDAxMTAvBgNVBAUTKEEwN0NEM0QxMDIxQTU4QzI0MEExMjEzNzQwMEI5N0Ix OEI3OTk4RDAwHhcNMjQxMTIzMDA0MjM5WhcNMjQxMTMwMDA0MjM5WjAYMRYwFAYD VQQDEw02NzQxMjRmZi0wYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIXV7o27BBvNVIED+MLIAwNQ7LB+SohMDLytMD5+/pg/cEJ/DTlWKFNTmJDh OkvlFyQl+fUh3PSkiPrM+s47ipcacjpVX1pURK23R4kdnqXiC5v88FUQr8ov8/+9 2h+RYaXxMJhFPw0HO442F+6aRjO5nDBbjn500q73K20NwEX1ilvCIvCzr/uvORPy yYZmc7SlOvMhoKbMz1aMHEO5arsxxCZ2Ve42vjWPJFHJ104HBpJhRMuucgDURAiz Y7YZKPB0bjXJKjMXCyymqKmafM6VXtWlMqb8qsrV12QIek1734Q6li3sYn1W0HWf kQhHeazASrbFE8zpj5zHZrKeLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoaHYSk AxgpOQZug2dbC72Xeo1kMB8GA1UdIwQYMBaAFKB809ECGljCQKEhN0ALl7GLeZjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDA0MC85QjA0QTBGMkEz NDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdNSkFvU0UzUUF1WHNZdDVt TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29IelQwUUlhV01KQW9TRTNRQXVYc1l0NW1OQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDA0MC85QjA0QTBGMkEzNDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdN SkFvU0UzUUF1WHNZdDVtTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD6O2WiWmeKZDwliwT6nSQqYOOyhji0GYak/R5TaGwbTUPFd1TBDUx icxcv3HJoPsSJtqR25rbUQFMUoGt/na+pYT3idSuADSrDxT28kRU1GdFCSUr+5Pf Dt/BTE7HPeRD/jURkKFTU1juUiSlHGxJ15FLxVGT8gzzBMllwTwjSHybwya6rRpd CgO6SWzh/FFys7eEiHIgoZd6EYz3KISc6AvDC/UPDoWpMBO6I+Qhx273fJmt15Ms wkO1UvWv622yy6Tw+0VbNFPYiLajGVHjW9w/lhxU25GCuO00RsYxfy+ofWYnJxjm 76PHR3ZsODP4FCqkMf1OAzOnkurhadwA -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org