$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: erfeoNEKQMVEOtWhcd6lzpD/VLXwu5U3Xb3LNbIGizc= Subject key identifier: A3:D6:15:D6:C6:39:37:16:CE:66:F3:E9:72:BC:4E:87:34:B8:98:AA Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 34BE Signing time: Fri 22 Nov 2024 14:23:57 +0000 Manifest this update: Fri 22 Nov 2024 14:23:56 +0000 Manifest next update: Fri 29 Nov 2024 14:23:56 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: I4xBJOolPEqRXf3gajI/0RMl4o6trkkQAQ4B+4gPKws=) 2: F99AB520FBC211EEBB321A7DC4F9AE02.roa (hash: 4AouT3t26agKQQf9QFNNf3GM+UsR/eCeJ+iR+acXWb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Nov 22 14:23:56 2024 GMT Not After : Nov 29 14:23:56 2024 GMT Subject: CN=674093fd-0544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:76:49:b3:64:8b:94:de:e0:10:2f:60:03: e0:a5:b0:8c:24:88:b5:00:f1:d9:ac:38:e4:b3:9d: 03:5c:69:98:eb:2f:a0:81:f7:3a:58:87:cd:a7:1b: 9e:92:a3:56:1b:19:02:e5:b8:1f:42:ec:99:5a:a7: 55:ab:7f:c5:ef:0d:36:80:e5:cd:b4:6a:13:0e:a0: 70:1c:53:06:c8:00:17:f2:b8:8e:44:c5:11:ac:e6: 5d:68:80:d0:2a:e2:52:79:ce:65:1f:7d:0c:7e:b8: 74:a7:a3:07:ae:78:64:fd:87:df:90:bb:6c:35:cc: 00:a7:2e:60:a4:50:95:8e:42:26:d0:aa:9c:1e:df: de:85:37:f9:83:d0:aa:53:cf:d5:52:a3:8e:20:5a: be:14:f5:8f:38:7e:4a:21:c1:d7:82:96:9a:e9:cc: 05:3d:21:31:fc:c3:f5:ed:7c:8a:dd:16:a3:75:f5: 58:27:78:d3:dc:2b:72:cf:d6:14:a4:7c:76:48:b4: 33:af:cd:97:ae:a2:17:90:6d:3f:36:b8:4f:67:3d: 7e:5b:b4:e5:37:7a:69:24:8e:79:fa:f4:87:83:72: c1:a9:bd:e7:0f:48:7e:78:f2:42:93:84:27:c0:d3: 1b:2e:57:fc:c9:ab:ca:8c:8c:f9:c6:1a:16:60:e4: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D6:15:D6:C6:39:37:16:CE:66:F3:E9:72:BC:4E:87:34:B8:98:AA X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b6:dd:cc:40:da:ce:8b:bf:6e:b5:e5:74:07:42:cf:1f:1b: a2:ef:05:a2:10:c8:7f:9a:09:5f:06:1e:9b:99:4b:03:c7:35: 1e:b5:a4:18:1d:2a:ec:06:7b:b3:9e:37:96:04:74:db:2d:18: 39:83:b2:d0:21:a4:4c:aa:69:cf:84:3c:21:7f:44:b4:39:34: b6:88:9d:37:a4:50:26:ed:e5:4d:80:5b:cd:74:21:5c:c8:49: 4e:77:f4:0f:8f:62:81:c0:76:03:e6:c0:b7:31:3d:6d:81:57: 4e:b1:25:ba:36:29:75:ae:73:46:f8:6c:a1:d6:18:8c:13:77: a2:a3:ce:b0:e8:e8:b8:6d:cf:8a:51:5f:88:53:a1:8a:03:bd: ec:b8:85:65:a0:71:ab:eb:e8:21:b8:24:bb:1c:06:0b:bf:8f: 45:2f:37:3c:50:9f:01:66:2f:ca:86:1b:ea:8b:06:00:13:45: 34:f4:22:0a:6a:bd:05:50:be:b7:e8:5f:58:ad:42:12:73:09: cd:c3:32:64:31:d6:5e:66:27:df:15:ff:22:27:25:12:fb:50: 8f:a0:92:de:fe:38:51:93:5a:93:48:b5:8c:76:d2:2e:59:b8: e8:02:b2:ac:c9:07:fc:f6:fa:0e:f7:d7:1c:18:63:ee:03:66: 8b:ae:6d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjQxMTIyMTQyMzU2WhcNMjQxMTI5MTQyMzU2WjAYMRYwFAYD VQQDEw02NzQwOTNmZC0wNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynl2SbNki5Te4BAvYAPgpbCMJIi1APHZrDjks50DXGmY6y+ggfc6WIfNpxue kqNWGxkC5bgfQuyZWqdVq3/F7w02gOXNtGoTDqBwHFMGyAAX8riORMURrOZdaIDQ KuJSec5lH30Mfrh0p6MHrnhk/YffkLtsNcwApy5gpFCVjkIm0KqcHt/ehTf5g9Cq U8/VUqOOIFq+FPWPOH5KIcHXgpaa6cwFPSEx/MP17XyK3RajdfVYJ3jT3Ctyz9YU pHx2SLQzr82XrqIXkG0/NrhPZz1+W7TlN3ppJI55+vSHg3LBqb3nD0h+ePJCk4Qn wNMbLlf8yavKjIz5xhoWYORY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPWFdbG OTcWzmbz6XK8Toc0uJiqMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAntt3MQNrOi79uteV0B0LPHxui7wWiEMh/mglfBh6bmUsDxzUetaQY HSrsBnuznjeWBHTbLRg5g7LQIaRMqmnPhDwhf0S0OTS2iJ03pFAm7eVNgFvNdCFc yElOd/QPj2KBwHYD5sC3MT1tgVdOsSW6Nil1rnNG+Gyh1hiME3eio86w6Oi4bc+K UV+IU6GKA73suIVloHGr6+ghuCS7HAYLv49FLzc8UJ8BZi/KhhvqiwYAE0U09CIK ar0FUL636F9YrUIScwnNwzJkMdZeZiffFf8iJyUS+1CPoJLe/jhRk1qTSLWMdtIu WbjoArKsyQf89voO99ccGGPuA2aLrm0g -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:57 2024 by rpki-client on console-ams.rpki-client.org