$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft File: OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json) Hash identifier: g4MdBVAgfu3HOgr+2/2Ba0QOzYYwK+VGQHXaPKX+tSY= Subject key identifier: 8B:C5:2C:7A:3C:FF:6D:1F:6F:D0:7C:A2:92:D8:94:E3:FD:37:3B:9E Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 Certificate issuer: /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft Manifest number: 063E Signing time: Wed 20 Nov 2024 22:03:21 +0000 Manifest this update: Wed 20 Nov 2024 22:03:20 +0000 Manifest next update: Wed 27 Nov 2024 22:03:20 +0000 Files and hashes: 1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: DJqdcPrG1jQVlS37wU21W67s/OS+u+XjZrl3GKvwlLQ=) 2: 6473BE24979811EB97001639C4F9AE02.roa (hash: tuPQApbHrE/GUVZVghqktL0O0OMOYVxWAqrRwmfFcZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968 Validity Not Before: Nov 20 22:03:20 2024 GMT Not After : Nov 27 22:03:20 2024 GMT Subject: CN=673e5ca9-6095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:72:01:3a:93:23:62:80:f3:cd:9f:76:00: d7:8b:db:6d:9e:13:95:7f:ab:5c:9a:a4:98:89:42: a5:96:0f:0d:a1:f4:1c:2f:41:83:74:f6:e4:2a:1b: 96:26:b2:b9:be:9c:36:50:91:ae:e3:45:b2:49:2e: 5f:a9:5e:35:6f:17:d1:a6:1f:3e:bd:da:7b:8a:ca: a1:0f:e5:a0:f2:90:48:31:c7:1b:ee:f0:03:fb:18: e8:7f:70:51:f8:df:9b:6d:03:2c:03:35:57:df:6d: 8d:ed:7c:43:d3:3f:81:c7:b4:3b:5c:a4:3b:d0:f2: 78:8c:08:94:57:4e:af:18:03:fa:06:d9:5a:4c:b3: 67:b1:18:79:c7:21:17:aa:cd:d4:e6:91:72:d8:95: 4a:db:7e:31:fb:99:8e:5a:cd:a3:cd:3d:a4:39:ae: cb:ee:bb:d1:ea:ce:29:fb:71:2d:96:a0:de:5f:4f: 97:9b:19:97:c7:49:02:86:0d:f8:d0:60:6d:e0:85: 93:d0:38:94:72:77:b5:48:d2:d6:e0:5a:b3:56:d2: 98:71:25:22:59:66:b6:e2:aa:b0:18:fb:d2:4b:e8: 15:68:c5:6f:5f:25:31:98:46:e4:19:fb:c7:7a:dd: d8:ed:68:ae:35:c3:5c:19:a3:15:a4:53:6c:b4:6e: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C5:2C:7A:3C:FF:6D:1F:6F:D0:7C:A2:92:D8:94:E3:FD:37:3B:9E X509v3 Authority Key Identifier: keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:24:0e:32:54:ec:d7:7e:b8:58:58:88:5f:f6:63:28:f0:79: a5:b2:ca:df:b3:60:13:c2:8d:ab:47:0c:6b:81:f7:a1:a5:b6: ac:14:ad:a1:2e:17:47:99:1a:f1:82:22:7b:72:76:29:b4:7c: 68:f1:33:ef:e4:37:51:d2:b5:0a:e8:51:8c:c2:bc:78:7a:76: da:33:ec:2b:f3:30:a1:6e:c4:fe:a9:35:22:e7:78:a0:95:99: 75:b5:fe:ba:6f:b8:4c:35:ac:7b:fb:c7:4e:15:73:7c:10:7e: 3a:7b:9d:92:8a:1a:b2:c5:8f:55:38:95:c0:f1:a2:b4:8b:25: cb:d4:05:a6:22:98:55:43:25:61:ea:71:cd:80:e7:6c:47:00: f9:7c:6e:57:60:1e:c4:68:44:1c:97:60:3d:b5:43:1c:45:e4: 95:ee:5d:2c:7e:0d:6a:09:c6:68:a1:a3:1c:9f:84:05:15:06: 2c:91:36:23:f6:a5:cf:71:01:40:df:54:33:bc:ec:d0:68:37: 35:7a:2f:5a:bc:cf:dc:a3:1e:6b:89:3e:e8:bb:b6:f6:2e:86: da:c5:3b:dd:47:01:00:4c:f1:36:ee:40:47:45:96:73:e6:5f: 87:af:8a:4f:71:d6:b3:59:d3:14:7b:4a:9a:a4:76:c1:69:61: fd:d7:ed:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1M0UxMTAvBgNVBAUTKDM4Q0UyNzZDODVCNkQyRDBFQUZFOUQzRjhBNUE1MDhD RERCQUI5NjgwHhcNMjQxMTIwMjIwMzIwWhcNMjQxMTI3MjIwMzIwWjAYMRYwFAYD VQQDEw02NzNlNWNhOS02MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYtyATqTI2KA882fdgDXi9ttnhOVf6tcmqSYiUKllg8NofQcL0GDdPbkKhuW JrK5vpw2UJGu40WySS5fqV41bxfRph8+vdp7isqhD+Wg8pBIMccb7vAD+xjof3BR +N+bbQMsAzVX322N7XxD0z+Bx7Q7XKQ70PJ4jAiUV06vGAP6BtlaTLNnsRh5xyEX qs3U5pFy2JVK234x+5mOWs2jzT2kOa7L7rvR6s4p+3EtlqDeX0+XmxmXx0kChg34 0GBt4IWT0DiUcne1SNLW4FqzVtKYcSUiWWa24qqwGPvSS+gVaMVvXyUxmEbkGfvH et3Y7WiuNcNcGaMVpFNstG6vAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvFLHo8 /20fb9B8opLYlOP9NzueMB8GA1UdIwQYMBaAFDjOJ2yFttLQ6v6dP4paUIzdurlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDUzRS80RUVCQzIwODZC NkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0RHFfcDBfaWxwUWpOMjZ1 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NNG5iSVcyMHREcV9wMF9pbHBRak4yNnVXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDUzRS80RUVCQzIwODZCNkIxMUVCODUxMjRCMkFDNEY5QUUwMi9PTTRuYklXMjB0 RHFfcDBfaWxwUWpOMjZ1V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaJA4yVOzXfrhYWIhf9mMo8Hmlssrfs2ATwo2rRwxrgfehpbasFK2h LhdHmRrxgiJ7cnYptHxo8TPv5DdR0rUK6FGMwrx4enbaM+wr8zChbsT+qTUi53ig lZl1tf66b7hMNax7+8dOFXN8EH46e52SihqyxY9VOJXA8aK0iyXL1AWmIphVQyVh 6nHNgOdsRwD5fG5XYB7EaEQcl2A9tUMcReSV7l0sfg1qCcZooaMcn4QFFQYskTYj 9qXPcQFA31QzvOzQaDc1ei9avM/cox5riT7ou7b2LobaxTvdRwEATPE27kBHRZZz 5l+Hr4pPcdazWdMUe0qapHbBaWH91+0u -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:50 2024 by rpki-client on console-fra.rpki-client.org