$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: Fd3L/tjcZYwXWFBvIxXhWVgdedQl7kuDIeSrP3hl2c4= Subject key identifier: D3:D7:1E:B9:6D:5B:CF:9F:08:FD:57:56:BA:D4:C4:41:76:BA:FB:6E Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 18 Signing time: Thu 21 Nov 2024 06:01:23 +0000 Manifest this update: Thu 21 Nov 2024 06:01:22 +0000 Manifest next update: Thu 28 Nov 2024 06:01:22 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: CGGq0pgtgpzrdaXYVq9noDopXNAb8kssd6uG7QoiMyc=) 2: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: a8PUztMZjKwlO5oAsBw+JL1gQU9NMI2G6jad/TSX5I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Nov 21 06:01:22 2024 GMT Not After : Nov 28 06:01:22 2024 GMT Subject: CN=673eccb2-de6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:70:58:ae:a2:de:78:d5:9e:bc:79:7f:49: 36:1c:fb:86:97:25:71:2b:c6:11:52:67:aa:a2:41: 22:72:a5:13:41:98:ce:b5:15:80:85:98:67:44:41: ce:a2:cb:8e:b7:06:1f:97:12:b3:f2:c4:3e:f9:01: b7:c4:da:e2:51:5f:db:80:32:6b:a2:c3:82:23:4e: 63:f6:08:0c:e4:2a:32:61:d5:d9:08:b7:8c:9a:eb: 22:60:7c:46:92:f2:85:86:07:8b:42:6f:d7:ae:21: bd:28:32:d3:59:94:36:b3:36:0d:b2:f1:b9:1d:81: d3:da:3b:e5:09:86:aa:ec:6c:0e:db:e2:d7:9e:32: e1:20:5f:52:20:25:51:5e:63:23:67:e0:8c:3b:10: 1c:13:aa:58:ef:f3:52:83:22:1e:0a:d3:d8:2d:33: c8:92:58:d1:92:cd:39:63:6b:b5:d9:2d:68:d5:d7: 82:13:21:83:6f:31:31:16:b7:cf:22:39:1d:12:d8: 61:a4:a1:7b:bb:c7:81:24:18:7e:d5:7d:ac:67:26: 1f:26:3a:ff:26:28:fb:5d:9b:59:20:26:e8:3c:cc: d9:86:95:9f:57:b2:a1:0b:7c:6c:f2:87:70:a5:e9: 92:dc:a5:f4:1c:ec:dd:f9:3e:28:b3:b8:6c:8d:45: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D7:1E:B9:6D:5B:CF:9F:08:FD:57:56:BA:D4:C4:41:76:BA:FB:6E X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:c8:ff:fb:d3:5d:a0:31:f1:89:77:64:33:c3:22:e2:f5:52: aa:11:9d:29:08:ea:1c:4e:da:99:98:1c:ff:37:43:ac:b1:a7: 05:60:e7:42:0f:47:a2:41:89:4d:c5:6f:e1:3a:e0:d0:16:57: dc:8e:c4:2c:bf:11:d5:54:15:93:ae:62:c8:91:9b:25:29:b0: a5:8f:8c:c2:5a:70:ec:4b:70:7e:fe:9b:49:18:49:06:bc:74: be:bb:9a:22:a3:3f:68:f4:9a:22:f5:50:95:aa:57:40:71:e2: 2b:e7:4e:f0:31:60:c8:81:ec:45:92:15:d1:79:e7:c2:ee:d1: d4:6d:a2:fd:a8:7c:3e:d9:58:20:6c:92:22:0c:ec:57:a0:0c: ed:8d:c1:b4:ac:84:96:52:8d:b6:70:4d:09:21:17:8a:9c:bf: 30:8b:c7:92:16:29:9b:f2:42:ab:31:21:06:1e:0e:7e:92:27: ca:37:52:09:54:e6:21:63:1e:ed:5e:9a:8c:45:dc:c4:13:fe: b5:53:10:56:61:75:ed:4f:99:21:fb:eb:c9:43:e4:ea:0b:d0: 99:5a:6b:cd:51:6d:f4:17:15:8f:b6:71:16:c0:3a:bd:e9:c3: b9:ed:8f:e0:50:fd:67:ab:14:e4:cc:6c:56:97:c0:9c:25:d5: 11:b4:f3:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODdGQzExMC8GA1UEBRMoM0E4Nzg3MUUzQkFFNjVFREUyRjMxQkIxQUQ1QzU5QkI3 QTc0QUJERDAeFw0yNDExMjEwNjAxMjJaFw0yNDExMjgwNjAxMjJaMBgxFjAUBgNV BAMTDTY3M2VjY2IyLWRlNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9P3BYrqLeeNWevHl/STYc+4aXJXErxhFSZ6qiQSJypRNBmM61FYCFmGdEQc6i y463Bh+XErPyxD75AbfE2uJRX9uAMmuiw4IjTmP2CAzkKjJh1dkIt4ya6yJgfEaS 8oWGB4tCb9euIb0oMtNZlDazNg2y8bkdgdPaO+UJhqrsbA7b4teeMuEgX1IgJVFe YyNn4Iw7EBwTqljv81KDIh4K09gtM8iSWNGSzTlja7XZLWjV14ITIYNvMTEWt88i OR0S2GGkoXu7x4EkGH7VfaxnJh8mOv8mKPtdm1kgJug8zNmGlZ9XsqELfGzyh3Cl 6ZLcpfQc7N35PiizuGyNRb5jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU09ceuW1b z58I/VdWutTEQXa6+24wHwYDVR0jBBgwFoAUOoeHHjuuZe3i8xuxrVxZu3p0q90w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4N0ZDLzM5NzhFMzE2ODZF MTExRUY4Rjc3M0Y4MkM0RjlBRTAyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT29lSEhqdXVaZTNpOHh1eHJWeFp1M3AwcTkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 N0ZDLzM5NzhFMzE2ODZFMTExRUY4Rjc3M0Y4MkM0RjlBRTAyL09vZUhIanV1WmUz aTh4dXhyVnhadTNwMHE5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANfI//vTXaAx8Yl3ZDPDIuL1UqoRnSkI6hxO2pmYHP83Q6yxpwVg50IP R6JBiU3Fb+E64NAWV9yOxCy/EdVUFZOuYsiRmyUpsKWPjMJacOxLcH7+m0kYSQa8 dL67miKjP2j0miL1UJWqV0Bx4ivnTvAxYMiB7EWSFdF558Lu0dRtov2ofD7ZWCBs kiIM7FegDO2NwbSshJZSjbZwTQkhF4qcvzCLx5IWKZvyQqsxIQYeDn6SJ8o3UglU 5iFjHu1emoxF3MQT/rVTEFZhde1PmSH768lD5OoL0Jlaa81RbfQXFY+2cRbAOr3p w7ntj+BQ/WerFOTMbFaXwJwl1RG08x0= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:49 2024 by rpki-client on console-fra.rpki-client.org