$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: LWsRYNbP/53b1ceAcnd5hM3WkWt2glAeeGBKv3Kk5W8= Subject key identifier: F7:CC:75:4C:62:9E:97:BB:46:C0:BA:B2:6E:A7:69:51:F8:86:02:21 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 0142 Signing time: Sat 23 Nov 2024 02:46:07 +0000 Manifest this update: Sat 23 Nov 2024 02:46:07 +0000 Manifest next update: Sat 30 Nov 2024 02:46:07 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: ED+9/HW2SbCmw6Kfvu+GTYlkxBVZ9w7E/g4HtP0RH2w=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: Ui/QnP01hpvTt4Kwc9g4FJqYkxBDeQTtmQ9yVgJx8bM=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: i03lBnfDNHY/sYmQfX16IPVZCxFCGwznGSQxDY92raY=) 4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: z0EtLWEQp9O+xeRsHBz+7LlglO6xcn6/HeB52vSAbyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Nov 23 02:46:07 2024 GMT Not After : Nov 30 02:46:07 2024 GMT Subject: CN=674141ef-33b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:31:41:f2:fe:ad:62:cb:64:74:00:9f:26: 91:0a:44:a4:3b:3a:3f:ae:ff:c5:94:d6:68:62:9f: 60:39:10:48:19:3a:36:b1:26:ea:86:36:68:3f:03: dc:aa:84:15:65:c5:4d:aa:2d:a6:6a:8f:9f:ab:5c: 82:58:0f:57:e4:45:28:9e:3c:32:1a:52:43:51:e2: a3:d8:b3:e0:be:a8:ae:00:c5:1c:40:d2:26:73:76: fd:66:c8:9e:8a:13:2c:b3:4d:27:ef:0e:87:ba:88: 2a:4a:35:42:95:6d:7a:9b:9e:9e:d5:21:03:e8:8c: 1d:e6:8c:77:c9:a0:0f:4b:a6:32:41:e0:01:c8:05: 59:95:03:c8:a3:db:c3:d1:eb:d9:a3:a2:28:9a:6e: e7:68:4d:59:f4:19:bb:52:46:8a:97:45:c2:e0:48: f0:70:86:82:a2:e4:4c:9a:3f:3b:d1:fb:8a:e0:7b: 39:e0:50:31:c0:a4:d2:f2:a3:04:61:7c:d0:cf:0a: 20:4a:4e:8a:aa:00:e7:6d:f5:61:11:f4:95:53:69: 09:29:f2:58:38:3b:01:05:d2:2e:cd:8a:8d:bb:55: 44:11:d5:48:2e:91:05:dc:ee:88:34:9a:b4:0b:31: 09:0f:53:97:ae:41:b4:28:85:d5:08:19:b8:7f:85: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:75:4C:62:9E:97:BB:46:C0:BA:B2:6E:A7:69:51:F8:86:02:21 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:02:c1:83:44:da:d3:df:ad:9b:fe:3b:b4:1a:a5:2b:75:fb: d5:92:25:bb:a2:3b:98:a8:0f:bb:76:03:5d:e2:97:3a:9c:ac: 4f:27:a8:5e:da:1e:ea:9e:06:30:40:c1:6f:87:9f:5b:11:df: 81:57:65:8b:39:c2:49:e6:20:2f:6f:bf:14:17:bf:7f:db:0f: 8c:01:7e:15:df:99:f0:3a:1d:ad:c1:5c:f5:ff:e5:5d:52:e7: a1:1e:56:4a:9c:9a:b3:49:5b:ef:21:99:71:8f:a7:b6:a2:dd: bd:d1:26:bb:2f:bd:e3:ac:ef:e6:e1:c1:e0:4b:f0:a2:65:39: 98:68:69:aa:4a:78:d6:90:e5:13:ed:2d:ca:4b:b6:89:67:5c: 2b:a5:67:f9:29:21:7e:26:9e:5c:28:db:fa:c5:e1:cd:fa:7f: 91:9e:43:7b:20:5c:0f:37:c1:4e:c3:5b:d5:a0:b8:87:32:a9: 35:d8:d5:04:e7:01:cd:28:1e:00:ce:4c:f4:39:b2:38:fa:9d: 18:4b:d9:8c:b6:f0:b6:a1:01:b7:eb:17:5b:ba:35:70:61:10: f4:a3:1e:ef:a9:63:97:96:fa:8a:07:93:88:53:c5:12:77:11: 16:e1:6c:c7:e1:ef:d6:58:32:bb:54:84:6f:fe:26:f1:e9:ca: 20:c0:2b:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjQxMTIzMDI0NjA3WhcNMjQxMTMwMDI0NjA3WjAYMRYwFAYD VQQDEw02NzQxNDFlZi0zM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNoxQfL+rWLLZHQAnyaRCkSkOzo/rv/FlNZoYp9gORBIGTo2sSbqhjZoPwPc qoQVZcVNqi2mao+fq1yCWA9X5EUonjwyGlJDUeKj2LPgvqiuAMUcQNImc3b9Zsie ihMss00n7w6HuogqSjVClW16m56e1SED6Iwd5ox3yaAPS6YyQeAByAVZlQPIo9vD 0evZo6Iomm7naE1Z9Bm7UkaKl0XC4EjwcIaCouRMmj870fuK4Hs54FAxwKTS8qME YXzQzwogSk6KqgDnbfVhEfSVU2kJKfJYODsBBdIuzYqNu1VEEdVILpEF3O6INJq0 CzEJD1OXrkG0KIXVCBm4f4WRYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfMdUxi npe7RsC6sm6naVH4hgIhMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWAsGDRNrT362b/ju0GqUrdfvVkiW7ojuYqA+7dgNd4pc6nKxPJ6he 2h7qngYwQMFvh59bEd+BV2WLOcJJ5iAvb78UF79/2w+MAX4V35nwOh2twVz1/+Vd UuehHlZKnJqzSVvvIZlxj6e2ot290Sa7L73jrO/m4cHgS/CiZTmYaGmqSnjWkOUT 7S3KS7aJZ1wrpWf5KSF+Jp5cKNv6xeHN+n+RnkN7IFwPN8FOw1vVoLiHMqk12NUE 5wHNKB4Azkz0ObI4+p0YS9mMtvC2oQG36xdbujVwYRD0ox7vqWOXlvqKB5OIU8US dxEW4WzH4e/WWDK7VIRv/ibx6cogwCt4 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org