$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: +8HgzMorcO1zr1McGkE38fMieqPC9+bNFYoOoV3TWwQ= Subject key identifier: AD:37:47:99:46:29:3B:36:E6:D5:42:AD:D5:D1:E6:2C:35:B1:C6:D4 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 012E Signing time: Thu 21 Nov 2024 03:09:10 +0000 Manifest this update: Thu 21 Nov 2024 03:09:10 +0000 Manifest next update: Thu 28 Nov 2024 03:09:09 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: OMylxIhzhvuSE8mJfbbiJT4koiFzVeN/0XoocdPWQvo=) 2: CE65A4E4A57E11EFA1B6E428C4F9AE02.roa (hash: ZHGzWJkY5sAYDc6BSvOrCRXQaApvHMzRRyro0XTmGHU=) 3: D0103496FD6611EE9188C568C4F9AE02.roa (hash: zL5GyY22PUxzXPY7su+a9MACm6wFmrlH/cDiceL5VFU=) 4: 7F8A5DCEFE2111EE95DF4819C4F9AE02.roa (hash: By1liJHVxYGQgV4b/cFfOGlWMDw0HY09qCefHuS9+HI=) 5: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: T0MEU9uiqGpjuKW+36eXoeccUUjS7k2e0k37wCmWLMc=) 6: 1D9A36F40C6B11EF95ACFA13C4F9AE02.roa (hash: SQfSNlw1EDeW09L4crLROC7TBXDXyLj3U0dw7Nr364s=) 7: 4316FFB2FCC011EEA517206FC4F9AE02.roa (hash: xzVQa7ltFjf1B7yqSQ1Ep816eoaM0CHgR1jzg2DtZu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Nov 21 03:09:10 2024 GMT Not After : Nov 28 03:09:09 2024 GMT Subject: CN=673ea456-0a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:26:05:80:e3:69:0c:2a:88:1c:f7:8f:20: f2:6c:b8:3c:e4:0d:f5:f6:8a:b9:f8:a1:d2:56:fe: 8c:7f:55:38:6e:6d:9b:06:eb:30:6a:0f:cf:61:01: 74:49:d2:f5:b8:53:31:58:20:7d:92:28:08:b5:e6: 42:69:7e:d8:e1:60:2d:21:1f:d1:89:f8:b0:1a:a6: 0d:4f:9b:fe:bc:5f:dd:da:da:f6:6a:05:6e:14:0a: 35:bb:c1:ec:86:d8:dd:a6:99:8e:ab:ce:ce:a6:ce: 73:5e:77:28:80:2f:5d:96:69:2f:29:f4:44:ab:90: c5:4d:29:16:88:ae:e9:da:f9:be:5f:37:a4:a0:eb: 45:f4:be:0f:10:71:b1:b0:c6:04:2c:fb:43:04:08: 63:e8:ee:7f:db:79:96:c6:d5:a8:64:6f:34:06:d0: 33:b1:6f:38:36:a6:6e:81:66:6b:4b:34:35:df:a9: bf:18:6a:8a:fc:db:12:01:3b:49:1f:84:f6:4d:30: 5f:ee:c6:f7:bf:52:04:4b:22:db:bd:d7:99:a1:f2: 1b:6e:d7:36:bc:26:fb:05:77:0d:70:92:1a:96:6e: ef:10:e8:39:ce:a0:75:b9:63:ff:86:25:94:e2:b0: 0e:16:e5:34:90:38:a0:0c:a6:63:16:cb:e4:a5:b0: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:47:99:46:29:3B:36:E6:D5:42:AD:D5:D1:E6:2C:35:B1:C6:D4 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:89:29:f1:73:6f:95:6c:7c:95:e6:1a:0b:4f:b0:ee:1f:78: ce:a5:be:fe:92:32:da:4b:ae:12:8a:19:be:a9:f9:83:ae:ab: 03:63:84:d6:f2:5b:3f:00:3b:86:f5:3d:d8:95:bc:d4:c6:a1: be:0a:9f:69:71:6e:dd:5b:dc:60:49:14:02:1d:15:06:7a:e3: 21:17:16:0d:5d:cf:b6:86:ef:9a:26:fc:d0:73:93:a6:e8:8f: 31:0b:28:8d:29:19:bf:f6:d1:9a:f4:27:9e:a6:4a:f7:80:14: 68:2b:8d:02:72:9e:f5:10:a8:61:01:4d:5d:56:0b:b1:5c:b0: 3a:9e:a4:93:84:fd:c7:c6:0c:93:95:a3:00:4e:6a:3a:69:89: 4f:a2:50:45:60:41:be:50:bc:71:21:f3:cd:fa:03:05:b5:6f: 33:88:d9:07:ee:d6:78:30:61:a6:ef:ec:62:cd:22:14:03:19: 8a:1d:31:42:ef:3c:1c:35:47:67:5d:73:05:1d:3b:e5:a5:5f: 19:fb:e8:46:10:17:19:da:26:05:a9:b6:14:b9:b5:75:b4:07: a3:5d:7b:37:a3:1e:db:22:34:a7:55:69:95:34:10:01:65:8e: 27:ef:ad:14:3d:b3:17:fc:5b:97:f3:30:b4:15:4a:29:9b:df: 9f:e8:75:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjQxMTIxMDMwOTEwWhcNMjQxMTI4MDMwOTA5WjAYMRYwFAYD VQQDEw02NzNlYTQ1Ni0wYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9kmBYDjaQwqiBz3jyDybLg85A319oq5+KHSVv6Mf1U4bm2bBuswag/PYQF0 SdL1uFMxWCB9kigIteZCaX7Y4WAtIR/RifiwGqYNT5v+vF/d2tr2agVuFAo1u8Hs htjdppmOq87Ops5zXncogC9dlmkvKfREq5DFTSkWiK7p2vm+XzekoOtF9L4PEHGx sMYELPtDBAhj6O5/23mWxtWoZG80BtAzsW84NqZugWZrSzQ136m/GGqK/NsSATtJ H4T2TTBf7sb3v1IESyLbvdeZofIbbtc2vCb7BXcNcJIalm7vEOg5zqB1uWP/hiWU 4rAOFuU0kDigDKZjFsvkpbAVjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK03R5lG KTs25tVCrdXR5iw1scbUMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmiSnxc2+VbHyV5hoLT7DuH3jOpb7+kjLaS64Sihm+qfmDrqsDY4TW 8ls/ADuG9T3YlbzUxqG+Cp9pcW7dW9xgSRQCHRUGeuMhFxYNXc+2hu+aJvzQc5Om 6I8xCyiNKRm/9tGa9Ceepkr3gBRoK40Ccp71EKhhAU1dVguxXLA6nqSThP3HxgyT laMATmo6aYlPolBFYEG+ULxxIfPN+gMFtW8ziNkH7tZ4MGGm7+xizSIUAxmKHTFC 7zwcNUdnXXMFHTvlpV8Z++hGEBcZ2iYFqbYUubV1tAejXXs3ox7bIjSnVWmVNBAB ZY4n760UPbMX/FuX8zC0FUopm9+f6HU6 -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:09 2024 by rpki-client on console-fra.rpki-client.org