$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: t5B/OoHF8dwL2ZzgM3c6INXfqoXaMcWt8c8sH1ypjCY= Subject key identifier: 2E:EA:FA:B8:9A:6C:61:C3:60:81:FF:FF:2B:29:C3:E9:0C:F1:D7:31 Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 05A6 Signing time: Wed 20 Nov 2024 22:42:15 +0000 Manifest this update: Wed 20 Nov 2024 22:42:15 +0000 Manifest next update: Wed 27 Nov 2024 22:42:15 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: GKDY0MxmjK8k/0FJlbBHZ7IH58NAz2ayKp+wsb2MZK0=) 2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: Pa24EqnhzVLdBNd9p4j/m3vhajKpO1KOBKzuyf2oDyI=) 3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: rRKFhbIBmbzLdYOr5BLZyHQoz/TkKPZba2YaKMN0mo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Validity Not Before: Nov 20 22:42:15 2024 GMT Not After : Nov 27 22:42:15 2024 GMT Subject: CN=673e65c7-cc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:6e:c6:0f:af:da:c3:f2:58:15:06:50:62: 92:62:91:15:43:0d:78:34:6e:99:52:7b:8e:31:3d: 0c:d7:90:fd:74:6b:a2:29:8a:2a:a0:1c:77:1f:29: d4:19:2d:76:ba:ed:ba:cd:8f:18:94:ff:30:63:44: 6c:9e:4f:90:1b:e5:b6:11:df:83:1c:06:d8:01:d1: ef:42:7e:fa:4e:db:92:7f:94:26:f8:46:17:e1:a9: 2c:4b:27:d8:d9:b1:84:a2:79:3f:68:07:47:d0:0c: 8c:75:53:04:42:d2:75:f3:e3:43:cf:cc:62:d7:eb: 3e:f1:bf:68:a5:24:ab:af:61:15:d8:8b:28:ec:86: 9c:77:d3:97:f3:c5:36:30:11:fe:24:db:89:33:fc: 49:18:29:44:37:94:f4:a3:f3:ad:70:84:87:e8:64: 2a:04:4f:c2:0c:1d:cc:69:21:93:6f:1c:57:4f:b2: 1b:30:ec:c9:73:8e:30:34:3f:f9:5b:66:11:6e:fd: 10:32:3f:76:01:33:0a:d2:d9:3a:a3:2a:e0:b8:61: fa:99:e6:e5:20:68:56:71:84:76:24:9b:8c:f0:28: 89:b9:1f:93:69:d6:25:66:f7:37:a2:65:2f:7d:b3: a7:d6:7f:50:53:05:28:fe:5d:96:69:08:50:17:92: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:FA:B8:9A:6C:61:C3:60:81:FF:FF:2B:29:C3:E9:0C:F1:D7:31 X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ca:5c:e7:56:34:39:39:f6:f2:54:9a:c4:4b:d8:6d:0a:33: 2f:61:48:fd:8f:6a:63:41:18:8b:1b:be:c5:88:c3:03:51:ae: 54:5c:52:87:d7:bd:12:e5:07:34:82:0f:9f:06:8e:2f:8a:54: d3:c1:1f:8b:a4:6d:2d:17:20:ee:68:8f:2f:84:d5:96:06:17: af:7a:95:9c:e9:ac:e8:2a:19:27:1d:85:88:69:ad:49:50:69: df:0f:60:f0:d0:58:4a:86:a8:55:9a:6b:86:fa:7a:81:1d:90: 9f:63:28:21:f3:a7:70:54:f8:76:76:ee:16:87:60:6d:1c:68: cb:67:f7:bd:75:02:73:d8:9a:33:21:5b:c2:4f:69:58:f7:b3: ae:3c:c7:59:e9:cf:13:b3:d6:19:b5:5e:14:2d:ef:06:94:52: ae:f9:fb:31:7a:65:38:de:4a:c6:20:7a:8a:a4:2c:bf:fd:db: b3:e6:38:96:52:dc:b3:c0:86:f5:42:ac:7b:3a:82:69:1a:92: 54:6a:a4:2d:15:a3:87:16:5f:8b:c3:2e:ea:66:e5:9d:55:6c: f0:d6:de:ff:de:0c:bb:12:de:99:2a:cd:f4:a7:fc:86:ed:cf: 6b:7e:4c:e6:5c:16:94:39:0c:c2:c3:8c:d2:c7:87:7e:14:36: 55:24:25:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjQxMTIwMjI0MjE1WhcNMjQxMTI3MjI0MjE1WjAYMRYwFAYD VQQDEw02NzNlNjVjNy1jYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIhuxg+v2sPyWBUGUGKSYpEVQw14NG6ZUnuOMT0M15D9dGuiKYoqoBx3HynU GS12uu26zY8YlP8wY0Rsnk+QG+W2Ed+DHAbYAdHvQn76TtuSf5Qm+EYX4aksSyfY 2bGEonk/aAdH0AyMdVMEQtJ18+NDz8xi1+s+8b9opSSrr2EV2Iso7Iacd9OX88U2 MBH+JNuJM/xJGClEN5T0o/OtcISH6GQqBE/CDB3MaSGTbxxXT7IbMOzJc44wND/5 W2YRbv0QMj92ATMK0tk6oyrguGH6meblIGhWcYR2JJuM8CiJuR+TadYlZvc3omUv fbOn1n9QUwUo/l2WaQhQF5LE6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7q+ria bGHDYIH//yspw+kM8dcxMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqylznVjQ5OfbyVJrES9htCjMvYUj9j2pjQRiLG77FiMMDUa5UXFKH 170S5Qc0gg+fBo4vilTTwR+LpG0tFyDuaI8vhNWWBhevepWc6azoKhknHYWIaa1J UGnfD2Dw0FhKhqhVmmuG+nqBHZCfYygh86dwVPh2du4Wh2BtHGjLZ/e9dQJz2Joz IVvCT2lY97OuPMdZ6c8Ts9YZtV4ULe8GlFKu+fsxemU43krGIHqKpCy//duz5jiW UtyzwIb1Qqx7OoJpGpJUaqQtFaOHFl+Lwy7qZuWdVWzw1t7/3gy7Et6ZKs30p/yG 7c9rfkzmXBaUOQzCw4zSx4d+FDZVJCVB -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:49 2024 by rpki-client on console-ams.rpki-client.org