$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft File: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json) Hash identifier: ShEtSPwCUDrQ3gItNkLZ9jLAhOjyrtxVjp/C++TbERs= Subject key identifier: 2D:B8:1C:0D:4B:63:0C:8B:17:37:58:F7:7B:77:C1:60:48:9E:5A:A4 Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Certificate serial: 25B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft Manifest number: 25A2 Signing time: Fri 22 Nov 2024 15:43:14 +0000 Manifest this update: Fri 22 Nov 2024 15:43:13 +0000 Manifest next update: Fri 29 Nov 2024 15:43:13 +0000 Files and hashes: 1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: 6xNDfeJrLdnqzseDOzsdwxNQdeW4Wzc1jij23M3y/rU=) 2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: +bflLncVpUKisFQ3ZZUQI/J0k3+BOK9UN6bLx8p1G6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9655 (0x25b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541 Validity Not Before: Nov 22 15:43:13 2024 GMT Not After : Nov 29 15:43:13 2024 GMT Subject: CN=6740a692-9671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:97:22:b2:20:ae:f0:7b:95:f9:e2:b0:5b: ab:a8:36:42:94:24:c6:3c:58:42:3d:99:b6:5d:50: 51:cf:46:63:ea:89:1a:e6:43:ee:d6:58:87:6b:c2: f4:06:1c:ea:be:cf:b2:4a:f0:ad:1f:88:1b:f6:0b: be:dc:7b:7a:c3:64:03:ac:bb:c3:ed:27:e8:41:ab: 31:ae:b3:68:b7:12:48:cc:f9:2d:5c:9c:fe:ff:19: ce:2d:77:07:4b:8b:9c:d9:d0:14:9d:27:e2:0a:51: 28:e1:69:fc:8b:4e:cb:87:ec:68:29:94:e2:8f:80: 1a:e1:e7:ca:68:81:74:ea:f3:70:23:27:e2:c3:ca: ce:31:37:68:2e:cd:67:18:b5:c3:a2:e6:a8:14:94: b7:f4:54:77:99:ef:17:0a:86:c6:68:5e:cf:17:fd: c8:e0:09:55:fc:b7:3c:1b:33:36:fb:1e:75:94:3a: 1b:3a:71:ba:6e:25:93:95:6b:4a:2a:49:96:a3:f5: 72:ad:f7:d2:a3:fa:ff:15:e6:5a:25:58:70:2f:0d: 54:71:c3:57:ce:3d:b0:51:d9:47:ef:81:ca:8c:1d: d1:12:29:30:4a:50:35:37:a9:78:38:70:0e:b9:b7: 6d:67:cd:7c:1a:b2:93:7b:8c:b5:57:20:bd:a3:84: 7e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B8:1C:0D:4B:63:0C:8B:17:37:58:F7:7B:77:C1:60:48:9E:5A:A4 X509v3 Authority Key Identifier: keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a7:73:8b:3d:cd:1e:ae:7a:3d:8c:e4:09:7d:4f:0e:32:e0: 33:97:d8:02:f8:59:57:f3:6b:7c:b0:97:62:9c:bf:e0:12:5b: d8:f4:7b:90:fa:b5:6c:0a:61:36:bd:eb:2b:13:30:71:0c:02: f6:65:94:38:09:48:e8:2f:94:fd:35:1b:2c:52:d8:e0:7a:4d: 86:84:18:20:da:14:ef:3c:84:75:42:16:b0:9b:91:61:cb:a9: 4d:fc:06:1d:1a:06:38:3a:14:ab:c8:61:ce:4d:15:5c:d2:11: 5f:82:90:0e:d3:13:61:e8:57:50:05:14:b5:79:02:c3:ea:07: 02:b0:95:16:6f:2a:bd:13:e3:69:4d:e2:8a:2f:17:ae:0c:0c: 31:f6:57:82:29:49:a5:b9:b0:75:80:07:73:b0:3e:91:6a:88: 7f:ba:52:30:3c:46:df:0d:d1:27:82:36:56:72:fe:20:1b:8f: 8e:c6:2c:8d:ae:3f:64:70:79:2f:c8:2f:5d:1e:51:87:0c:61: 59:79:08:7a:ea:64:d9:7c:a4:59:b6:40:44:19:31:54:79:de: 5e:19:c1:e7:f9:d0:6f:a1:47:58:36:03:bf:e0:66:2a:6b:b7: 7e:10:cc:98:25:45:18:15:83:6d:ce:49:4d:ea:d5:d7:25:83: b9:06:80:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMDIxMTAvBgNVBAUTKDM5QkY5Njk5NEFCNEM1NEM5ODNFRTBGNTEwMzY1RjRG RDk4NDE1NDEwHhcNMjQxMTIyMTU0MzEzWhcNMjQxMTI5MTU0MzEzWjAYMRYwFAYD VQQDEw02NzQwYTY5Mi05NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12CXIrIgrvB7lfnisFurqDZClCTGPFhCPZm2XVBRz0Zj6oka5kPu1liHa8L0 Bhzqvs+ySvCtH4gb9gu+3Ht6w2QDrLvD7SfoQasxrrNotxJIzPktXJz+/xnOLXcH S4uc2dAUnSfiClEo4Wn8i07Lh+xoKZTij4Aa4efKaIF06vNwIyfiw8rOMTdoLs1n GLXDouaoFJS39FR3me8XCobGaF7PF/3I4AlV/Lc8GzM2+x51lDobOnG6biWTlWtK KkmWo/VyrffSo/r/FeZaJVhwLw1UccNXzj2wUdlH74HKjB3REikwSlA1N6l4OHAO ubdtZ818GrKTe4y1VyC9o4R+/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC24HA1L YwyLFzdY93t3wWBInlqkMB8GA1UdIwQYMBaAFDm/lplKtMVMmD7g9RA2X0/ZhBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMwMi80RUE0OEU4NEZC QTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhVeVlQdUQxRURaZlQ5bUVG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09iLVdtVXEweFV5WVB1RDFFRFpmVDltRUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMwMi80RUE0OEU4NEZCQTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhV eVlQdUQxRURaZlQ5bUVGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIp3OLPc0erno9jOQJfU8OMuAzl9gC+FlX82t8sJdinL/gElvY9HuQ +rVsCmE2vesrEzBxDAL2ZZQ4CUjoL5T9NRssUtjgek2GhBgg2hTvPIR1Qhawm5Fh y6lN/AYdGgY4OhSryGHOTRVc0hFfgpAO0xNh6FdQBRS1eQLD6gcCsJUWbyq9E+Np TeKKLxeuDAwx9leCKUmlubB1gAdzsD6Raoh/ulIwPEbfDdEngjZWcv4gG4+OxiyN rj9kcHkvyC9dHlGHDGFZeQh66mTZfKRZtkBEGTFUed5eGcHn+dBvoUdYNgO/4GYq a7d+EMyYJUUYFYNtzklN6tXXJYO5BoCd -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org