$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: JC9AO9p8osrSRAsGxJ6s9SHq6pTJxUGQavEK9kTXTUY= Subject key identifier: 0E:F9:E5:97:6D:9C:1D:9E:91:2F:5F:7F:CC:C0:7C:F5:5C:E2:0D:C6 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 06D1 Signing time: Wed 20 Nov 2024 21:38:48 +0000 Manifest this update: Wed 20 Nov 2024 21:38:48 +0000 Manifest next update: Wed 27 Nov 2024 21:38:48 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: JTeSkPuqTk4Zmf5s+E4eKqJNch94s2ucdfu6li+1MzA=) 2: C2219930AED411EB92E7A470C4F9AE02.roa (hash: f99oNJTMU1zGhqBGO4nYW75zk397Fa58POfhJKOSX2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Nov 20 21:38:48 2024 GMT Not After : Nov 27 21:38:48 2024 GMT Subject: CN=673e56e8-0e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:9e:29:5b:86:28:48:67:38:1c:a5:1c:d1: 77:8c:47:b6:94:32:a2:81:62:b4:45:b5:01:0e:5c: 1d:a0:47:70:24:86:d9:c8:21:db:61:25:05:c2:eb: d0:dd:9c:c0:00:6b:6e:c3:d7:e0:bf:56:2c:6b:19: ff:e1:2c:02:6a:ba:fd:13:62:f6:ea:8f:24:51:05: 69:aa:5b:dc:a0:ce:7d:d4:7a:8e:8e:0f:23:de:79: f2:ba:1d:fd:44:6c:fd:d6:d4:58:79:05:df:2f:b7: a6:d7:17:e6:32:7e:32:ac:dc:e0:3b:d8:70:b3:a8: 68:59:fe:5c:d0:f3:42:34:73:57:6b:bc:1f:0a:7c: 2f:cd:9a:82:83:f2:f9:79:2f:da:d0:33:e9:01:6b: 7f:20:cf:f5:10:2c:63:f5:0f:e0:cd:3a:8c:38:d3: b0:6a:f6:6c:e1:26:03:75:74:f6:6e:57:fc:84:86: 91:81:46:c5:74:fe:d9:ad:5d:74:6a:f1:75:e7:3e: 42:d0:d6:b1:78:09:4e:71:46:48:0c:30:31:c8:1b: ae:49:b8:2f:21:7e:69:70:5d:cb:e6:11:e8:bb:dc: 55:ec:ee:e6:d5:62:3c:93:81:18:f3:ad:0a:4c:50: 12:01:41:68:1b:aa:1d:9b:17:42:21:dd:b4:2f:57: be:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F9:E5:97:6D:9C:1D:9E:91:2F:5F:7F:CC:C0:7C:F5:5C:E2:0D:C6 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f6:ac:bd:09:63:86:cd:e9:42:4b:85:45:fb:f5:3c:f2:54: b2:db:5b:63:82:7c:d3:74:bd:f2:b4:35:46:3a:55:e7:73:9f: 51:03:2c:26:05:fc:26:57:ba:a3:d6:0a:e0:d8:33:31:d6:12: 77:14:98:a4:f5:99:75:a7:2d:5f:f8:88:f5:7a:55:bc:5e:77: c9:98:11:d5:31:71:ef:be:67:e0:0b:ee:90:1c:8c:0f:66:11: 4b:23:9f:c6:f7:be:e2:c6:cb:e8:c8:59:13:f3:51:88:91:0d: 42:61:a8:cf:70:65:d3:87:1c:74:ce:c4:8c:4d:bc:e9:f0:b0: 61:8c:cc:2c:5c:94:b8:fa:54:27:48:ff:c9:c1:13:05:58:34: a1:2e:54:77:aa:01:25:72:3f:c4:52:94:41:bd:a9:91:12:df: a9:e6:7c:4f:0e:1f:32:5c:af:42:d0:17:2c:5f:2b:57:61:94: 46:76:b5:8b:e7:83:fa:06:43:40:32:e4:16:9d:43:ad:ce:60: 15:df:32:1d:3a:94:0f:dd:4f:05:3e:96:52:e1:41:29:90:fe: 52:ea:34:af:5a:0e:6b:6b:23:66:8e:d8:81:69:ef:d5:6f:a6: 1e:62:a5:63:69:09:0e:eb:e5:a1:df:cd:d8:fb:c0:38:f6:07: 3d:eb:27:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjQxMTIwMjEzODQ4WhcNMjQxMTI3MjEzODQ4WjAYMRYwFAYD VQQDEw02NzNlNTZlOC0wZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkGeKVuGKEhnOBylHNF3jEe2lDKigWK0RbUBDlwdoEdwJIbZyCHbYSUFwuvQ 3ZzAAGtuw9fgv1Ysaxn/4SwCarr9E2L26o8kUQVpqlvcoM591HqOjg8j3nnyuh39 RGz91tRYeQXfL7em1xfmMn4yrNzgO9hws6hoWf5c0PNCNHNXa7wfCnwvzZqCg/L5 eS/a0DPpAWt/IM/1ECxj9Q/gzTqMONOwavZs4SYDdXT2blf8hIaRgUbFdP7ZrV10 avF15z5C0NaxeAlOcUZIDDAxyBuuSbgvIX5pcF3L5hHou9xV7O7m1WI8k4EY860K TFASAUFoG6odmxdCId20L1e+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA755Zdt nB2ekS9ff8zAfPVc4g3GMB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA69qy9CWOGzelCS4VF+/U88lSy21tjgnzTdL3ytDVGOlXnc59RAywm BfwmV7qj1grg2DMx1hJ3FJik9Zl1py1f+Ij1elW8XnfJmBHVMXHvvmfgC+6QHIwP ZhFLI5/G977ixsvoyFkT81GIkQ1CYajPcGXThxx0zsSMTbzp8LBhjMwsXJS4+lQn SP/JwRMFWDShLlR3qgElcj/EUpRBvamREt+p5nxPDh8yXK9C0BcsXytXYZRGdrWL 54P6BkNAMuQWnUOtzmAV3zIdOpQP3U8FPpZS4UEpkP5S6jSvWg5rayNmjtiBae/V b6YeYqVjaQkO6+Wh383Y+8A49gc96ycq -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:48 2024 by rpki-client on console-fra.rpki-client.org