$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft File: cOaM6FoDjZ4wcEODfKbmsaZglu4.mft (raw, json) Hash identifier: QhpAzDokkd4nnlN5Hzz5dL1svMtzWFMC2rTFq1fhv6M= Subject key identifier: 1D:0F:40:D3:8D:FF:ED:A9:E7:A0:BE:B1:EA:25:18:C5:8D:67:C7:2F Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft Manifest number: 0422 Signing time: Fri 22 Nov 2024 23:55:24 +0000 Manifest this update: Fri 22 Nov 2024 23:55:24 +0000 Manifest next update: Fri 29 Nov 2024 23:55:24 +0000 Files and hashes: 1: cOaM6FoDjZ4wcEODfKbmsaZglu4.crl (hash: SEI3dzQw+xJJgagXtg/yWRc0qCDoyx6CEVhCdZLjZnY=) 2: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (hash: CzraaquDZ9Uo+Rh3T+BRvbMkjKbruCD1g9kPUW6icAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Validity Not Before: Nov 22 23:55:24 2024 GMT Not After : Nov 29 23:55:24 2024 GMT Subject: CN=674119ec-1d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e4:22:56:6b:c4:75:19:f2:92:d2:39:86:ff: d8:53:ca:21:02:2c:8e:5e:f0:88:dc:3d:e8:e7:8f: 18:57:b2:b8:42:c2:f3:97:73:75:27:f3:cb:88:57: 8b:d2:b8:97:d8:63:06:4b:7c:64:ca:45:9d:a6:81: 76:93:61:db:12:16:e7:f0:20:32:32:4c:7d:55:93: 90:d8:b5:0d:d6:50:4e:6a:39:dd:59:f1:fe:d2:e8: 00:46:97:22:e5:bd:e7:a8:4a:65:7d:dc:72:f6:a3: a2:46:2b:80:51:23:71:db:b3:f5:f1:ee:f5:81:15: b2:71:ca:ad:51:6d:a4:3e:ad:04:c8:3b:94:d5:3a: a2:1c:07:35:ed:20:38:b4:7c:5b:b9:14:dc:f7:4f: b8:48:24:64:bd:f0:37:08:b6:96:06:ef:b1:66:d0: e6:a9:e0:86:d1:15:91:79:b7:f2:27:6c:e3:23:18: b6:06:86:f7:9a:16:da:d6:d2:dd:a5:d1:44:08:e7: a5:c3:7f:49:c6:21:aa:46:37:14:c9:9e:ad:62:fa: 32:5b:2f:23:14:8a:ae:79:ae:8d:ee:20:89:7c:6b: 14:c5:a9:77:59:63:53:ab:c2:6d:40:3a:82:9e:94: 31:79:0d:a5:a3:19:d7:75:71:84:ee:42:f3:5e:04: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0F:40:D3:8D:FF:ED:A9:E7:A0:BE:B1:EA:25:18:C5:8D:67:C7:2F X509v3 Authority Key Identifier: keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a9:68:d7:cf:9b:92:0b:cb:8e:9b:29:04:e0:99:b9:3d:56: cf:fb:d0:93:73:f8:fb:bc:e5:40:ba:98:da:0e:7f:4d:43:f3: 01:32:bc:a8:bc:c0:a9:ce:1f:37:8f:12:49:0a:be:d0:32:be: 2b:d4:40:38:4b:03:01:fe:94:51:9c:65:02:e4:0c:83:af:33: 02:f3:1c:b1:96:d7:9e:9c:51:9b:2b:fa:66:9d:66:c6:c2:fe: c9:89:91:1d:36:92:fa:60:74:5c:7f:22:0e:d2:fa:61:fd:1c: 8b:89:99:bc:7b:da:a5:e0:6c:34:f3:4a:44:e7:17:54:1f:70: 10:1b:d0:ab:26:0d:03:f0:63:8e:50:98:06:95:9b:5c:13:28: 47:66:db:7d:f4:cf:56:5c:9d:d7:6b:d0:3e:1d:63:03:fd:cd: 61:7d:8a:f2:b2:bf:6e:54:7f:7f:02:13:f7:02:8c:25:b6:e9: 22:a4:31:ff:3b:a0:82:d0:87:22:7f:6e:7e:4c:1c:38:99:05: 76:85:21:33:97:80:52:ce:aa:7f:15:d3:1d:0d:d0:f0:d1:9c: 6d:bd:53:b1:f1:95:37:3c:73:bc:ed:63:39:f2:42:9d:d6:d2: 6b:09:b3:50:85:cd:87:ad:f9:37:7d:df:50:50:40:ba:dc:ab: 94:4c:a2:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBREUxMTAvBgNVBAUTKDcwRTY4Q0U4NUEwMzhEOUUzMDcwNDM4MzdDQTZFNkIx QTY2MDk2RUUwHhcNMjQxMTIyMjM1NTI0WhcNMjQxMTI5MjM1NTI0WjAYMRYwFAYD VQQDEw02NzQxMTllYy0xZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+QiVmvEdRnyktI5hv/YU8ohAiyOXvCI3D3o548YV7K4QsLzl3N1J/PLiFeL 0riX2GMGS3xkykWdpoF2k2HbEhbn8CAyMkx9VZOQ2LUN1lBOajndWfH+0ugARpci 5b3nqEplfdxy9qOiRiuAUSNx27P18e71gRWyccqtUW2kPq0EyDuU1TqiHAc17SA4 tHxbuRTc90+4SCRkvfA3CLaWBu+xZtDmqeCG0RWRebfyJ2zjIxi2Bob3mhba1tLd pdFECOelw39JxiGqRjcUyZ6tYvoyWy8jFIquea6N7iCJfGsUxal3WWNTq8JtQDqC npQxeQ2loxnXdXGE7kLzXgRb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0PQNON /+2p56C+seolGMWNZ8cvMB8GA1UdIwQYMBaAFHDmjOhaA42eMHBDg3ym5rGmYJbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFERS8yODczOUQzQTQx REYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpaNHdjRU9EZktibXNhWmds dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPYU02Rm9Ealo0d2NFT0RmS2Jtc2FaZ2x1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFERS8yODczOUQzQTQxREYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpa NHdjRU9EZktibXNhWmdsdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsqWjXz5uSC8uOmykE4Jm5PVbP+9CTc/j7vOVAupjaDn9NQ/MBMryo vMCpzh83jxJJCr7QMr4r1EA4SwMB/pRRnGUC5AyDrzMC8xyxlteenFGbK/pmnWbG wv7JiZEdNpL6YHRcfyIO0vph/RyLiZm8e9ql4Gw080pE5xdUH3AQG9CrJg0D8GOO UJgGlZtcEyhHZtt99M9WXJ3Xa9A+HWMD/c1hfYrysr9uVH9/AhP3AowltukipDH/ O6CC0Icif25+TBw4mQV2hSEzl4BSzqp/FdMdDdDw0ZxtvVOx8ZU3PHO87WM58kKd 1tJrCbNQhc2Hrfk3fd9QUEC63KuUTKJe -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org