$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: UCNsBkJZrckw3PjeZXhLvVuBqN22hiRN2NYij4FFbxo= Subject key identifier: D0:78:B9:9D:5A:5A:A6:90:6E:25:86:95:C6:D3:95:E9:63:DB:80:7F Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 0562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 054E Signing time: Wed 20 Nov 2024 23:01:23 +0000 Manifest this update: Wed 20 Nov 2024 23:01:22 +0000 Manifest next update: Wed 27 Nov 2024 23:01:22 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: 69awZQVJ2VZkReWIu0Ya3D9aeSrgleqYu8vsgsH+heI=) 2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: 0O6TcMZ7cyiTOQX6a4lo9IW8lZvmQl+TflI94IQBsXg=) 3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: QypSaOJWNZPEYJNaUp+tgMHOgSp9cYSc6zUXtXVCQpg=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: 5EMVY+mr8MeziaFmHYoIUZ8HY+OW0Ux+vJdDqNYyM+A=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: BMRoArOkK6XKfXiCgVXjRFI7Ts9ZVPZguMrIduSzckU=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: o0PMmxNvCxGi4Ma1i/XdkAnkuomNueTn7pJoxsJKzxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Nov 20 23:01:22 2024 GMT Not After : Nov 27 23:01:22 2024 GMT Subject: CN=673e6a42-1230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a4:a6:1d:78:ad:5f:7f:9f:de:6a:71:88:c3: 32:54:de:96:8e:db:fb:00:9f:f0:a3:94:9e:04:84: 98:e5:91:d5:8b:0a:12:09:65:d3:fc:be:44:77:a6: 55:44:21:c0:3f:9f:e5:2b:47:2e:59:bb:8e:6c:81: 3f:42:19:32:6c:ac:81:5a:70:af:80:f4:8d:55:fe: 9f:79:52:79:49:91:57:c2:48:85:46:06:36:b3:2b: 02:28:4a:78:ff:cd:d2:c0:83:9e:77:60:b7:07:4e: 40:08:58:b6:c0:42:a0:b8:e7:63:6e:53:d2:b8:33: 56:0f:de:11:b4:96:44:bd:6f:0d:57:2a:8b:8b:48: 10:ad:42:9e:54:69:d6:a2:61:4e:22:89:75:41:10: 97:3b:45:a9:19:c5:7f:42:b4:ce:ee:07:eb:a3:65: c2:6f:89:92:2f:ad:4b:a0:7a:fe:a8:14:35:24:46: 60:44:8c:24:58:f3:b3:e8:ad:28:7c:f4:45:3b:a6: 0f:22:f8:3b:1f:92:39:f1:eb:6d:2b:12:f9:c3:e7: c9:58:5e:6b:aa:f5:ed:37:e1:af:98:5d:c1:0f:14: aa:ef:4c:a0:fb:75:fd:ef:7b:46:96:5c:0b:d8:6d: 2f:d3:ef:44:d3:2f:31:fd:91:d0:4d:44:12:d9:4d: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:78:B9:9D:5A:5A:A6:90:6E:25:86:95:C6:D3:95:E9:63:DB:80:7F X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:67:97:77:32:66:0a:41:e7:c8:50:6a:68:98:5f:91:0b:11: a7:b1:b2:61:ad:50:14:4d:9e:2f:7c:d7:e3:76:db:e3:b8:2c: 46:4f:85:e1:f9:f9:2f:b3:a5:a0:d0:b5:29:20:04:38:1a:95: 02:cb:ec:12:52:cd:09:81:a7:ba:47:5c:83:40:b2:19:2e:e4: 9b:78:c3:40:00:13:68:3f:61:9d:f6:ad:7a:14:37:9d:39:5d: a3:8a:2d:25:8a:67:6a:cb:53:a5:c0:a7:1b:24:57:15:ab:4f: 29:81:ca:8c:76:37:5c:b6:c4:8d:e3:1d:61:6e:01:4b:13:49: 1a:0a:df:38:81:10:3f:1b:8d:09:7e:c6:64:d8:ea:e0:ea:10: 65:8a:1d:7d:40:fd:59:01:db:f7:bf:d5:7b:99:dc:0c:55:eb: b5:50:96:99:d4:01:58:14:5c:4e:ef:d2:ca:b7:a1:89:39:46: 6a:fc:a1:20:08:19:0d:a7:23:a3:65:6c:c2:45:95:7b:4f:33: a7:40:18:ab:4a:3f:8f:7c:a7:66:0b:0e:e7:ad:3e:7b:d9:73: 42:7f:08:34:54:59:7a:85:f1:9c:29:76:00:fe:71:e2:b4:b2: 36:f3:be:95:8a:02:14:ef:83:74:0c:1c:06:88:d4:9a:4f:e6: 1e:01:05:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjQxMTIwMjMwMTIyWhcNMjQxMTI3MjMwMTIyWjAYMRYwFAYD VQQDEw02NzNlNmE0Mi0xMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+aSmHXitX3+f3mpxiMMyVN6Wjtv7AJ/wo5SeBISY5ZHViwoSCWXT/L5Ed6ZV RCHAP5/lK0cuWbuObIE/QhkybKyBWnCvgPSNVf6feVJ5SZFXwkiFRgY2sysCKEp4 /83SwIOed2C3B05ACFi2wEKguOdjblPSuDNWD94RtJZEvW8NVyqLi0gQrUKeVGnW omFOIol1QRCXO0WpGcV/QrTO7gfro2XCb4mSL61LoHr+qBQ1JEZgRIwkWPOz6K0o fPRFO6YPIvg7H5I58ettKxL5w+fJWF5rqvXtN+GvmF3BDxSq70yg+3X973tGllwL 2G0v0+9E0y8x/ZHQTUQS2U15hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB4uZ1a WqaQbiWGlcbTlelj24B/MB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeZ5d3MmYKQefIUGpomF+RCxGnsbJhrVAUTZ4vfNfjdtvjuCxGT4Xh +fkvs6Wg0LUpIAQ4GpUCy+wSUs0Jgae6R1yDQLIZLuSbeMNAABNoP2Gd9q16FDed OV2jii0limdqy1OlwKcbJFcVq08pgcqMdjdctsSN4x1hbgFLE0kaCt84gRA/G40J fsZk2Org6hBlih19QP1ZAdv3v9V7mdwMVeu1UJaZ1AFYFFxO79LKt6GJOUZq/KEg CBkNpyOjZWzCRZV7TzOnQBirSj+PfKdmCw7nrT572XNCfwg0VFl6hfGcKXYA/nHi tLI2876VigIU74N0DBwGiNSaT+YeAQUT -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:25 2024 by rpki-client on console-fra.rpki-client.org