$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json) Hash identifier: CWM9BvHBd6MWTKB8fO+ykZUAYzcwY32SPa6JyGvJFo4= Subject key identifier: 5D:94:39:CA:FF:03:7A:DB:64:70:29:13:37:84:07:62:1A:82:83:25 Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft Manifest number: 034E Signing time: Thu 21 Nov 2024 00:35:26 +0000 Manifest this update: Thu 21 Nov 2024 00:35:25 +0000 Manifest next update: Thu 28 Nov 2024 00:35:25 +0000 Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: 9/7PlSkgcmlZPZJZfkZmg7gFWycGXbM0iaGnRbDh1Lo=) 2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: WpCfV48MxVsvrCFja30wG20lXynE945EHFIKLttGYCo=) 3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: yNU/Mr3/TjvBPBhCoBid3sjZxAp8GNMAmJbEuw8jfTo=) 4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: Vwxx6xhJaUHJItb6aa+WAVKu+FlRyk7MdIYaendPGXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Validity Not Before: Nov 21 00:35:25 2024 GMT Not After : Nov 28 00:35:25 2024 GMT Subject: CN=673e804e-4338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:33:5e:48:b0:f3:fe:0d:a2:70:9f:c8:c2: 8e:0a:9e:45:e2:5e:09:46:58:69:61:23:d0:d2:27: d4:a2:35:2d:d0:ce:06:cf:83:b1:75:b5:3e:e7:35: 41:7e:cb:a7:6b:2b:40:bb:37:ba:52:c2:4c:5a:f6: 1c:0e:09:c8:c0:40:db:bb:a3:46:89:26:8a:d8:03: 65:a7:4c:18:af:ea:6f:4b:63:73:9a:6c:62:d6:da: 06:ed:c0:12:bc:e7:cc:95:09:1e:e9:a2:96:fd:6c: 8f:bd:d7:5e:a5:24:d0:a3:d1:3c:6b:62:61:65:98: 57:ff:d1:d4:70:b3:13:c7:19:cd:db:8a:ae:03:c9: 5a:5e:e3:fd:fe:c5:45:66:ae:38:4d:c4:b1:34:38: bc:9e:cf:0e:c4:c2:58:47:dc:99:1c:60:3d:e0:c6: d5:6e:53:39:ce:7c:81:7a:66:06:c1:ce:c3:31:b1: af:bc:dd:bc:eb:94:8d:97:86:05:54:27:1f:d3:64: db:44:67:84:f3:e2:dd:50:88:05:de:85:90:82:0e: c4:28:3f:0c:7c:99:27:a3:5c:ad:39:d5:27:65:a9: 40:15:42:85:6b:67:13:da:5d:77:55:43:c6:8e:4c: ab:c0:f3:9e:9a:00:cc:df:a2:4e:8b:14:0d:a8:63: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:94:39:CA:FF:03:7A:DB:64:70:29:13:37:84:07:62:1A:82:83:25 X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ab:9c:97:3b:e8:bc:7a:94:7e:2b:6c:ba:98:20:43:2f:0e: 29:d2:5f:55:6f:66:7b:2a:85:43:2c:e6:e3:b5:07:7f:b3:f5: 99:98:d5:f7:35:8b:ed:fb:d9:b4:25:f0:9e:e3:ab:48:c4:f6: fc:92:26:bf:ec:e0:bc:5e:5b:24:57:5b:b1:c4:37:16:ae:44: 79:f1:7f:e1:c2:19:b6:65:ee:5e:ba:03:eb:0d:86:15:d3:d6: 91:cf:e7:48:32:56:e4:6c:81:d9:d1:f6:7d:53:f8:c5:f3:9b: 7a:47:9e:28:e3:a6:01:70:e9:29:d2:c7:f7:61:00:37:4b:95: 75:f7:83:be:86:c1:61:e0:a6:29:8d:11:c6:4d:16:3b:79:fe: e4:92:d1:c4:e9:61:93:ff:84:90:57:8c:32:a4:54:46:1c:d1: 5a:4d:00:66:e6:00:2d:06:2b:bb:25:12:cc:ac:83:8c:40:c2: 07:26:e3:83:7c:70:15:85:33:c7:b3:f2:f5:c4:79:47:01:90: 3b:2a:67:9c:f4:8a:b1:97:f8:71:fb:81:64:6d:1d:65:9d:e4: 5b:ba:46:52:35:d5:4e:36:e5:28:50:a5:d1:5c:99:1e:72:af: ba:69:42:84:1b:80:87:4e:a8:e8:26:cd:b1:1b:8f:d2:b4:4f: f7:bb:fc:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjQxMTIxMDAzNTI1WhcNMjQxMTI4MDAzNTI1WjAYMRYwFAYD VQQDEw02NzNlODA0ZS00MzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo8zXkiw8/4NonCfyMKOCp5F4l4JRlhpYSPQ0ifUojUt0M4Gz4OxdbU+5zVB fsunaytAuze6UsJMWvYcDgnIwEDbu6NGiSaK2ANlp0wYr+pvS2Nzmmxi1toG7cAS vOfMlQke6aKW/WyPvddepSTQo9E8a2JhZZhX/9HUcLMTxxnN24quA8laXuP9/sVF Zq44TcSxNDi8ns8OxMJYR9yZHGA94MbVblM5znyBemYGwc7DMbGvvN2865SNl4YF VCcf02TbRGeE8+LdUIgF3oWQgg7EKD8MfJkno1ytOdUnZalAFUKFa2cT2l13VUPG jkyrwPOemgDM36JOixQNqGPLvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2UOcr/ A3rbZHApEzeEB2IagoMlMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUYyRC9DRDZENkU1Njk4OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03 NFFhLXJ0My1uenVEUnROMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyq5yXO+i8epR+K2y6mCBDLw4p0l9Vb2Z7KoVDLObjtQd/s/WZmNX3 NYvt+9m0JfCe46tIxPb8kia/7OC8XlskV1uxxDcWrkR58X/hwhm2Ze5eugPrDYYV 09aRz+dIMlbkbIHZ0fZ9U/jF85t6R54o46YBcOkp0sf3YQA3S5V194O+hsFh4KYp jRHGTRY7ef7kktHE6WGT/4SQV4wypFRGHNFaTQBm5gAtBiu7JRLMrIOMQMIHJuOD fHAVhTPHs/L1xHlHAZA7Kmec9Iqxl/hx+4FkbR1lneRbukZSNdVONuUoUKXRXJke cq+6aUKEG4CHTqjoJs2xG4/StE/3u/yO -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:58 2024 by rpki-client on console-fra.rpki-client.org