$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: DAJO0hZE61zIsPRcEG5r2i7pSNoWingpAGSeCJMDwFU= Subject key identifier: 1A:F6:EA:23:3E:90:FC:C7:F8:A3:ED:F3:DD:90:0B:C6:34:3A:A8:63 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 026D Signing time: Thu 21 Nov 2024 04:48:24 +0000 Manifest this update: Thu 21 Nov 2024 04:48:23 +0000 Manifest next update: Thu 28 Nov 2024 04:48:23 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: ez7T6uWKiPlz/FPuQSXyRugAH46YxIMdFrGqyOux0+M=) 2: CD2CF86C759E11EFB8230E38C4F9AE02.roa (hash: YBmeTVaSZHxdyluaKY2LXGaV+psmMf8UYwHUVBju0ME=) 3: B111111288B411EF80480527C4F9AE02.roa (hash: CjPKYAuDT4eI5JPa/G5V81ZBwDnMXPobI3BPswZB4kQ=) 4: B5D1A1164E3111EFB475160AC4F9AE02.roa (hash: F7ZAiYqiaqgCjshmhAH40pkpaSlek68K5yOIUFIlCqE=) 5: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: 2cEppnqVz6EA8cjixAQPIWKPT1GtTfD8PJaZqxpWTLE=) 6: 77B975EC79C511EF94E24B5EC4F9AE02.roa (hash: yEIwnuRJU6I6rs+jiNjI+mClNF9GymbQxuMkCMOp07U=) 7: B137DB2670EF11EFBEF21935C4F9AE02.roa (hash: gVhoaUxSYFZFX3pfYYhl9cQHoz5s0K+bPZd1cYQ52Y8=) 8: 811803C270C111EF8A30EB51C4F9AE02.roa (hash: 89cYcTv3FMM/3M08ZzwOVhAvZtTfzr28mJIgkmfMCvo=) 9: D4E4D8FCA7C311EFB1AAAD55C4F9AE02.roa (hash: Xf5Ju4zh/ec55xkKs2QH4FHNMxaxZH8+1mgQURFonS4=) 10: 1E1EB7789D8C11EF9B16D921C4F9AE02.roa (hash: TCFvbSrzX3ld7ReLyyVPKT1K5SyyyvX3oexEUzvLigY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Nov 21 04:48:23 2024 GMT Not After : Nov 28 04:48:23 2024 GMT Subject: CN=673ebb98-9d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:c0:9d:41:9e:24:b9:dc:51:09:67:a8:30: 9b:b4:22:30:08:10:97:2a:f9:75:06:f6:12:cb:e6: 3f:0e:66:15:f0:bc:d8:0c:03:99:24:d2:3e:eb:ef: 95:93:c4:d0:31:8a:f9:c5:d2:24:4f:15:c7:f5:a1: f1:07:b5:e2:e4:eb:61:02:ed:d8:c3:f8:ab:85:c4: 31:cd:0e:31:e4:c0:67:87:6c:ae:9e:6f:0b:33:08: a2:64:c8:6c:b8:46:d5:34:30:7b:86:4e:0e:fe:3e: a1:0f:20:5e:bb:f1:06:4a:74:bd:e4:0b:27:09:e2: d1:78:4d:b9:61:dc:0d:5c:1f:ac:69:c9:f3:4e:20: ae:d2:fb:c8:d4:55:06:c9:95:4f:30:82:8d:5e:ff: c3:f7:9b:1d:a7:97:a6:f4:d2:a4:b6:97:4a:b4:79: 7c:49:4e:b6:b9:d1:24:e5:3e:66:7c:00:aa:4f:fb: 67:d2:15:33:ef:66:a6:e5:0a:ef:98:5e:4a:3a:53: 36:80:4e:51:42:dd:6f:04:1d:4f:95:82:3c:15:c7: 93:65:0b:69:d6:de:19:50:c4:59:8d:f1:0d:57:c8: 8e:50:bb:aa:b4:0b:74:04:53:b5:03:a8:43:cf:de: b1:0e:d0:d0:0f:9b:4b:c6:36:c6:32:ea:3a:8c:57: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F6:EA:23:3E:90:FC:C7:F8:A3:ED:F3:DD:90:0B:C6:34:3A:A8:63 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:15:c7:8e:71:6c:ba:3f:98:af:64:56:1f:a8:4b:71:1d:21: 31:e6:a0:9e:4d:5d:ce:e6:71:43:7c:ea:e2:b0:b4:f8:f3:d9: 2d:61:51:42:4a:57:b7:b4:f4:b8:d6:c2:ba:a8:28:6f:d0:88: a9:db:e8:be:95:1d:dc:7a:ed:00:02:57:46:f4:ac:08:cd:60: c9:62:c1:93:63:88:d7:94:49:f2:8d:82:bc:4f:eb:af:12:e6: 93:d2:b0:1f:79:c0:40:7f:a7:cc:6b:cc:33:e1:9b:ef:8d:d0: f9:5b:94:13:3c:ff:65:fc:42:aa:1d:fa:7d:80:1f:f3:0a:23: fd:b4:c6:ed:d3:80:31:9a:d6:15:80:fd:11:69:54:6e:34:af: b9:50:ec:3f:d1:aa:00:8d:97:96:a7:2b:c2:41:81:f4:a3:b5: 26:74:40:0b:cf:7f:ba:ad:2d:fa:6a:a8:9b:cc:a3:f0:fc:65: 0d:13:e2:1b:ac:87:5a:b9:28:9e:55:1a:22:b8:b9:16:51:76: c1:6d:e3:f9:60:2c:73:08:49:b8:86:41:08:94:14:b5:c9:27: 4e:c1:c5:30:32:44:0b:ee:74:f4:85:67:d5:91:62:5e:c8:4e: 9b:a4:a0:01:fd:2c:3b:2d:65:97:54:8b:54:06:84:1a:7e:4c: 15:9f:f3:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjQxMTIxMDQ0ODIzWhcNMjQxMTI4MDQ0ODIzWjAYMRYwFAYD VQQDEw02NzNlYmI5OC05ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD7AnUGeJLncUQlnqDCbtCIwCBCXKvl1BvYSy+Y/DmYV8LzYDAOZJNI+6++V k8TQMYr5xdIkTxXH9aHxB7Xi5OthAu3Yw/irhcQxzQ4x5MBnh2yunm8LMwiiZMhs uEbVNDB7hk4O/j6hDyBeu/EGSnS95AsnCeLReE25YdwNXB+sacnzTiCu0vvI1FUG yZVPMIKNXv/D95sdp5em9NKktpdKtHl8SU62udEk5T5mfACqT/tn0hUz72am5Qrv mF5KOlM2gE5RQt1vBB1PlYI8FceTZQtp1t4ZUMRZjfENV8iOULuqtAt0BFO1A6hD z96xDtDQD5tLxjbGMuo6jFc/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBr26iM+ kPzH+KPt892QC8Y0OqhjMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiFceOcWy6P5ivZFYfqEtxHSEx5qCeTV3O5nFDfOrisLT489ktYVFC Sle3tPS41sK6qChv0Iip2+i+lR3ceu0AAldG9KwIzWDJYsGTY4jXlEnyjYK8T+uv EuaT0rAfecBAf6fMa8wz4ZvvjdD5W5QTPP9l/EKqHfp9gB/zCiP9tMbt04AxmtYV gP0RaVRuNK+5UOw/0aoAjZeWpyvCQYH0o7UmdEALz3+6rS36aqibzKPw/GUNE+Ib rIdauSieVRoiuLkWUXbBbeP5YCxzCEm4hkEIlBS1ySdOwcUwMkQL7nT0hWfVkWJe yE6bpKAB/Sw7LWWXVItUBoQafkwVn/PF -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org