$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json) Hash identifier: RNTfdDNtgePZsxbP7dzcpyMTahTP7d0eoj2aok2ZAWk= Subject key identifier: C4:1E:96:ED:20:D2:5A:28:4F:85:2C:FE:46:3E:14:B8:BC:A4:9D:D4 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft Manifest number: 0668 Signing time: Wed 20 Nov 2024 21:59:41 +0000 Manifest this update: Wed 20 Nov 2024 21:59:40 +0000 Manifest next update: Wed 27 Nov 2024 21:59:40 +0000 Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: dna+a+PmgiEf3jYaV5gMdrhlWMxYdhy7bih4WRBJOg0=) 2: 8A1515887C7D11EFB24A9F51C4F9AE02.roa (hash: yu+vAXz85+ImzGtz2dS0WwomfVbOz0/fHg5Ts/b0h74=) 3: 59DE107A14CF11EE81C44276C4F9AE02.roa (hash: dorNefehc4jcrYiPb1SmTT9WWjQeQbu3xTbAJUr9xp0=) 4: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=) 5: BCC1E04E33C011EE83E9A61BC4F9AE02.roa (hash: gEcFdCTf52NARTThJUnsykol1LheMWgXpMpHapO3A8E=) 6: BC41A65E33C011EE83E9A61BC4F9AE02.roa (hash: CaitNOKQkm3AvYSLSTJmnVLMkDD1jkPzfCvAkZPYXwc=) 7: B76C776472E411ED833AE326C4F9AE02.roa (hash: G40zS/jPmT/MABYrNCr8KjGZKmGs9oISV/lw5AZ1PqY=) 8: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Nov 20 21:59:40 2024 GMT Not After : Nov 27 21:59:40 2024 GMT Subject: CN=673e5bcd-39b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:d9:d4:17:47:04:be:d3:3d:94:89:b8:e9: dc:8b:ea:0c:6b:a4:8e:7b:b9:4f:bc:a7:fa:f8:22: fd:7e:09:bc:31:90:d3:57:e1:4d:9f:61:03:2c:37: aa:37:61:6f:4d:4d:b0:d2:17:90:f3:33:be:08:a4: df:02:0d:94:13:4b:35:5c:d4:c7:80:8c:92:84:66: 20:e6:f1:6c:9b:a4:ac:f7:e2:0e:ba:9e:c5:35:69: fc:8b:c9:64:23:86:d7:b4:21:2d:14:f6:ff:97:ee: fb:0b:68:4b:b9:be:59:10:83:56:47:e2:a6:a5:b6: 41:72:8e:42:de:7c:f0:e4:2b:de:c8:67:43:47:ce: 7e:93:f3:43:aa:cb:78:2c:ae:6c:75:cc:c5:89:8f: 3d:48:b0:14:d3:ab:2f:e2:a3:99:ff:57:73:4c:11: e6:1f:b2:83:63:5b:b1:41:5c:7a:50:6f:f5:7b:bb: 39:6f:c5:db:35:1c:c5:be:ab:09:02:ff:9f:09:f5: da:51:e4:5c:2c:5b:d2:15:a6:27:d5:5b:74:35:09: 0b:31:23:06:eb:a9:48:7c:ce:00:b1:0a:5f:85:36: a1:9a:26:e5:07:0e:b7:28:cd:3c:4a:05:e8:a9:87: c3:87:e7:ac:76:ad:eb:5b:24:54:c1:b7:48:ac:50: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1E:96:ED:20:D2:5A:28:4F:85:2C:FE:46:3E:14:B8:BC:A4:9D:D4 X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:63:6b:5d:72:ec:f6:b2:b7:60:62:e3:99:14:e3:9a:cb:70: 88:4b:8f:42:08:d5:f4:1a:e9:3a:02:58:02:b6:e7:e9:10:ce: 7a:f1:92:8b:d6:22:93:9a:c4:d9:8c:bf:4e:62:87:b0:dd:6e: 51:e2:00:1f:f0:1d:9b:cd:5c:58:8d:51:41:58:90:ca:b6:ec: 47:58:87:0f:00:2c:38:32:12:17:bb:be:03:a6:74:ce:c3:37: 00:54:2f:7c:2e:68:18:f7:c9:7f:7d:f7:a1:40:39:5b:60:d6: 5e:0b:17:e2:7b:95:c6:5f:ed:3b:09:f2:31:00:8e:11:09:c8: d1:47:83:96:9a:e8:41:0d:b6:85:eb:2c:4b:ff:83:b4:a7:1e: 52:ea:56:85:70:56:9e:41:b8:4a:14:aa:38:79:ca:17:36:12: 2b:ff:0f:7e:f5:d3:72:96:e3:d6:19:82:ec:54:db:66:5d:1e: c5:d9:36:7d:06:e4:71:0e:20:80:b1:27:96:3a:59:88:3c:69: fd:35:83:a7:94:bc:bb:8e:91:52:e1:9f:6c:33:a6:af:15:8c: fd:27:47:d9:e2:d9:fe:f5:7a:4f:d7:54:2b:1a:50:5b:14:64: e6:6c:df:f3:e2:f7:46:ac:ed:30:7b:d9:9c:2e:35:f5:62:8d: 8e:ba:2c:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjQxMTIwMjE1OTQwWhcNMjQxMTI3MjE1OTQwWjAYMRYwFAYD VQQDEw02NzNlNWJjZC0zOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZvZ1BdHBL7TPZSJuOnci+oMa6SOe7lPvKf6+CL9fgm8MZDTV+FNn2EDLDeq N2FvTU2w0heQ8zO+CKTfAg2UE0s1XNTHgIyShGYg5vFsm6Ss9+IOup7FNWn8i8lk I4bXtCEtFPb/l+77C2hLub5ZEINWR+KmpbZBco5C3nzw5CveyGdDR85+k/NDqst4 LK5sdczFiY89SLAU06sv4qOZ/1dzTBHmH7KDY1uxQVx6UG/1e7s5b8XbNRzFvqsJ Av+fCfXaUeRcLFvSFaYn1Vt0NQkLMSMG66lIfM4AsQpfhTahmiblBw63KM08SgXo qYfDh+esdq3rWyRUwbdIrFC/HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQelu0g 0looT4Us/kY+FLi8pJ3UMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkY2tdcuz2srdgYuOZFOOay3CIS49CCNX0Guk6AlgCtufpEM568ZKL 1iKTmsTZjL9OYoew3W5R4gAf8B2bzVxYjVFBWJDKtuxHWIcPACw4MhIXu74DpnTO wzcAVC98LmgY98l/ffehQDlbYNZeCxfie5XGX+07CfIxAI4RCcjRR4OWmuhBDbaF 6yxL/4O0px5S6laFcFaeQbhKFKo4ecoXNhIr/w9+9dNyluPWGYLsVNtmXR7F2TZ9 BuRxDiCAsSeWOlmIPGn9NYOnlLy7jpFS4Z9sM6avFYz9J0fZ4tn+9XpP11QrGlBb FGTmbN/z4vdGrO0we9mcLjX1Yo2Ouixq -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:52 2024 by rpki-client on console-ams.rpki-client.org