$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: bRdswEbom3S73a9EMlzLGjzgkWNg70Q2FBCAswx1dss= Subject key identifier: 14:D0:03:1E:35:37:26:DC:45:FE:90:BE:01:4F:34:0A:F5:81:09:2E Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 09 Signing time: Wed 23 Oct 2024 06:49:42 +0000 Manifest this update: Wed 23 Oct 2024 06:49:41 +0000 Manifest next update: Wed 30 Oct 2024 06:49:41 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: 3tZOdnXbsJEV1qPABaVXftsGpZ17uRvufALEzxBT72k=) 2: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: a8PUztMZjKwlO5oAsBw+JL1gQU9NMI2G6jad/TSX5I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Oct 23 06:49:41 2024 GMT Not After : Oct 30 06:49:41 2024 GMT Subject: CN=67189c86-8097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:4e:60:ea:ca:0b:d9:41:dd:69:9d:5f:25: be:eb:e8:1d:dd:b5:e1:31:1a:d3:84:3c:d6:39:6c: 57:ca:0d:54:8d:90:6a:41:02:4f:e7:44:c8:c4:85: 8f:a0:6b:83:e8:4e:1b:2e:9a:63:6b:3e:d2:dd:a3: 8c:5d:ad:84:19:37:c4:a8:da:a0:74:96:f3:2c:28: b5:dc:a1:d2:b4:e2:d1:9d:a8:7c:c1:ff:71:87:68: e4:fb:8c:d9:42:8d:ea:92:88:3c:93:f8:93:55:f5: b0:83:2a:d9:7b:51:ae:3d:4a:ba:1a:2f:08:59:bc: 72:b7:15:8a:9e:66:f2:e4:c1:17:b0:44:78:f7:b2: 80:e8:b7:3b:17:57:0e:3a:d2:37:f5:d9:44:b3:01: 17:ae:a7:11:29:2f:86:42:02:8d:46:af:69:88:3a: e4:05:21:c6:68:3a:48:3e:53:77:de:71:04:93:df: 5c:2d:60:98:97:73:ff:95:be:41:71:dd:70:40:1e: 70:fc:dd:5f:be:85:d5:c5:33:87:b2:c6:c6:fa:44: 50:4b:2a:81:90:30:2c:f8:aa:5b:93:d9:b0:c3:61: 78:db:10:90:6d:c1:be:98:35:b6:d6:79:bf:0e:8c: 7e:a9:80:f4:d5:b1:ac:07:a3:47:d1:c8:19:3a:d3: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D0:03:1E:35:37:26:DC:45:FE:90:BE:01:4F:34:0A:F5:81:09:2E X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ef:7a:8b:dc:4e:1f:7a:e7:f7:d5:82:a5:78:bc:68:ae:ff: 25:7b:b0:ca:2d:7e:1f:e4:a3:e0:1e:05:9d:d6:de:1a:24:f8: fe:5e:97:a6:b4:0f:e6:7c:fe:4b:ef:19:65:a5:78:02:3d:79: 2e:a8:39:91:2b:b5:a5:60:76:70:bc:6f:33:b0:d3:dc:11:b3: d4:7e:a0:64:e2:6c:bc:a1:2f:82:cd:ac:fa:90:88:df:85:c8: f2:ab:54:74:04:38:d9:f9:19:6e:87:83:5b:87:aa:b6:1f:b1: ca:f9:74:45:2e:ef:ff:2d:ea:b7:b1:06:a3:bc:6c:27:c6:27: 42:e4:ce:cd:2a:66:1a:72:4f:40:9a:00:bb:44:8c:47:33:fe: 99:5e:d0:e2:37:a3:db:35:df:02:41:81:32:38:a9:1a:5b:3e: a5:c5:92:35:e7:3d:a0:95:ad:ba:4a:78:47:fe:99:c9:e5:fe: 94:df:1f:7c:b8:d8:37:bc:36:9a:e4:ce:f8:7d:28:94:18:52: 66:ad:e9:57:76:21:f2:9f:9c:25:cc:43:ef:51:ff:a7:97:eb: 5c:5d:e7:8d:98:4e:ad:d2:0f:72:f5:93:b7:2a:33:3d:43:3d: fd:56:24:30:8f:76:3c:38:d1:27:55:6f:0b:a4:93:01:e8:22: 5c:d8:1a:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODdGQzExMC8GA1UEBRMoM0E4Nzg3MUUzQkFFNjVFREUyRjMxQkIxQUQ1QzU5QkI3 QTc0QUJERDAeFw0yNDEwMjMwNjQ5NDFaFw0yNDEwMzAwNjQ5NDFaMBgxFjAUBgNV BAMTDTY3MTg5Yzg2LTgwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1gU5g6soL2UHdaZ1fJb7r6B3dteExGtOEPNY5bFfKDVSNkGpBAk/nRMjEhY+g a4PoThsummNrPtLdo4xdrYQZN8So2qB0lvMsKLXcodK04tGdqHzB/3GHaOT7jNlC jeqSiDyT+JNV9bCDKtl7Ua49SroaLwhZvHK3FYqeZvLkwRewRHj3soDotzsXVw46 0jf12USzAReupxEpL4ZCAo1Gr2mIOuQFIcZoOkg+U3fecQST31wtYJiXc/+VvkFx 3XBAHnD83V++hdXFM4eyxsb6RFBLKoGQMCz4qluT2bDDYXjbEJBtwb6YNbbWeb8O jH6pgPTVsawHo0fRyBk602uRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFNADHjU3 JtxF/pC+AU80CvWBCS4wHwYDVR0jBBgwFoAUOoeHHjuuZe3i8xuxrVxZu3p0q90w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4N0ZDLzM5NzhFMzE2ODZF MTExRUY4Rjc3M0Y4MkM0RjlBRTAyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT29lSEhqdXVaZTNpOHh1eHJWeFp1M3AwcTkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 N0ZDLzM5NzhFMzE2ODZFMTExRUY4Rjc3M0Y4MkM0RjlBRTAyL09vZUhIanV1WmUz aTh4dXhyVnhadTNwMHE5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGHveovcTh965/fVgqV4vGiu/yV7sMotfh/ko+AeBZ3W3hok+P5el6a0 D+Z8/kvvGWWleAI9eS6oOZErtaVgdnC8bzOw09wRs9R+oGTibLyhL4LNrPqQiN+F yPKrVHQEONn5GW6Hg1uHqrYfscr5dEUu7/8t6rexBqO8bCfGJ0Lkzs0qZhpyT0Ca ALtEjEcz/ple0OI3o9s13wJBgTI4qRpbPqXFkjXnPaCVrbpKeEf+mcnl/pTfH3y4 2De8Nprkzvh9KJQYUmat6Vd2IfKfnCXMQ+9R/6eX61xd542YTq3SD3L1k7cqMz1D Pf1WJDCPdjw40SdVbwukkwHoIlzYGrM= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org