$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft File: e0Coz49PGgbDbiA08Yo4v5jKWxg.mft (raw, json) Hash identifier: iXDUkc+Xnn7kjOiX9fERHpBQjF7ZtTHNeQMMj2PACxs= Subject key identifier: AA:0B:A5:22:FA:93:85:72:94:92:2E:11:36:E0:8F:DB:9E:36:54:07 Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 Certificate issuer: /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft Manifest number: C3 Signing time: Sun 19 May 2024 06:23:24 +0000 Manifest this update: Sun 19 May 2024 06:23:23 +0000 Manifest next update: Sun 26 May 2024 06:23:23 +0000 Files and hashes: 1: e0Coz49PGgbDbiA08Yo4v5jKWxg.crl (hash: c6oMuTEKLjFBB58zgPGmup5gpdnaRHNH5PkB0TD98cg=) 2: A74C3132F49211ED8659177BC4F9AE02.roa (hash: J6N5IV7MCpXlVeF8cR4PHiRc9CQaom2wbzrHsgmKoxg=) 3: 2F9915D8718D11EE97E3E022C4F9AE02.roa (hash: l7v8jCh+6Pph9kyKmndNAaIV1W+fpuYotDnXZzaMmeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Validity Not Before: May 19 06:23:23 2024 GMT Not After : May 26 06:23:23 2024 GMT Subject: CN=66499adc-c1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:ce:49:a8:b8:e1:11:b3:64:58:33:c5:e3: 5b:45:45:2e:82:f2:1e:9b:2d:99:13:17:26:c8:8a: d1:a1:54:b6:6a:77:da:8e:c4:e1:4e:8e:3d:f7:e0: b6:2c:36:48:ee:83:c5:88:06:2b:56:5c:d1:bb:e4: 85:75:63:5d:15:c6:52:c0:23:b3:a7:b0:b0:b5:1b: 74:10:a4:2f:96:27:24:0e:80:5f:a9:12:fa:9c:c0: b9:bc:97:6f:61:e3:2d:53:c6:7c:50:76:ad:e3:e4: c9:cd:35:44:1a:3a:80:b9:07:5a:f1:5e:d5:d4:b1: 9f:a9:a4:92:78:ca:f2:30:89:99:b1:0d:c9:6e:2b: c5:02:dc:9b:ca:2d:b1:04:3f:6a:89:71:a0:78:b5: bb:2e:5a:6a:7f:d8:47:3c:b4:42:50:03:95:18:36: d5:05:33:29:a0:b6:1d:20:bc:5f:c7:2f:5c:38:38: c7:f3:60:6e:5d:c6:0b:73:e2:b5:4f:98:dd:f7:ed: 5c:45:2b:77:66:a3:d1:a6:b9:8a:85:f1:c4:ef:86: 4c:ac:8f:8a:98:ff:95:64:e3:f5:3d:7f:7d:b9:e5: 30:ce:af:ff:0c:11:12:c1:b1:39:5c:6b:2c:c4:15: dc:06:d9:fa:bf:82:f8:e4:61:9d:d1:37:3e:35:9f: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0B:A5:22:FA:93:85:72:94:92:2E:11:36:E0:8F:DB:9E:36:54:07 X509v3 Authority Key Identifier: keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c6:8b:3d:ce:be:09:cc:a0:c5:14:7f:47:ee:7a:06:c2:8d: 58:69:63:d6:bf:c6:d3:1f:ad:0e:4b:01:92:0e:3c:af:bf:a2: d0:9b:67:32:ec:c0:e7:b0:c8:b9:d8:d3:62:97:60:90:90:3a: a6:1c:a2:3d:4f:1f:4a:da:19:fc:8f:d4:53:da:9e:b6:eb:cd: 9a:b2:41:cd:97:ff:33:f8:05:aa:c0:11:47:97:6c:78:b7:d1: 48:1d:fc:46:bc:8d:7f:ff:a3:09:23:9d:68:09:ed:d7:10:16: e9:9b:88:d9:8b:6a:2c:17:66:fa:3b:b4:12:98:57:ea:15:d1: 9d:ed:a4:5d:5b:f9:1a:85:93:51:3b:2e:64:64:1f:7c:8f:57: b5:76:81:3e:1a:c7:a4:df:48:c8:e1:1b:a8:88:5c:a8:84:f0: 01:68:92:be:bd:93:37:24:eb:33:77:85:f4:97:8d:d3:e6:7a: 83:47:b5:14:74:db:fc:5e:80:a9:84:3f:ef:fc:32:9b:72:93: 9b:ac:47:f4:ca:07:0d:d6:c4:86:a7:93:40:ff:38:13:41:7c: da:f6:7d:8c:a2:c9:ff:33:01:1a:b1:e8:86:f5:48:62:64:06: a6:ba:fe:4e:67:6a:71:9e:15:ec:da:38:ac:4a:b2:f0:b3:98: 86:51:8d:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDdCNDBBOENGOEY0RjFBMDZDMzZFMjAzNEYxOEEzOEJG OThDQTVCMTgwHhcNMjQwNTE5MDYyMzIzWhcNMjQwNTI2MDYyMzIzWjAYMRYwFAYD VQQDEw02NjQ5OWFkYy1jMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtETOSai44RGzZFgzxeNbRUUugvIemy2ZExcmyIrRoVS2anfajsThTo499+C2 LDZI7oPFiAYrVlzRu+SFdWNdFcZSwCOzp7CwtRt0EKQvlickDoBfqRL6nMC5vJdv YeMtU8Z8UHat4+TJzTVEGjqAuQda8V7V1LGfqaSSeMryMImZsQ3JbivFAtybyi2x BD9qiXGgeLW7Llpqf9hHPLRCUAOVGDbVBTMpoLYdILxfxy9cODjH82BuXcYLc+K1 T5jd9+1cRSt3ZqPRprmKhfHE74ZMrI+KmP+VZOP1PX99ueUwzq//DBESwbE5XGss xBXcBtn6v4L45GGd0Tc+NZ/MpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoLpSL6 k4VylJIuETbgj9ueNlQHMB8GA1UdIwQYMBaAFHtAqM+PTxoGw24gNPGKOL+YylsY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xQjAwRUFFOEY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdnYkRiaUEwOFlvNHY1aktX eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UwQ296NDlQR2diRGJpQTA4WW80djVqS1d4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xQjAwRUFFOEY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdn YkRiaUEwOFlvNHY1aktXeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhxos9zr4JzKDFFH9H7noGwo1YaWPWv8bTH60OSwGSDjyvv6LQm2cy 7MDnsMi52NNil2CQkDqmHKI9Tx9K2hn8j9RT2p62682askHNl/8z+AWqwBFHl2x4 t9FIHfxGvI1//6MJI51oCe3XEBbpm4jZi2osF2b6O7QSmFfqFdGd7aRdW/kahZNR Oy5kZB98j1e1doE+Gsek30jI4RuoiFyohPABaJK+vZM3JOszd4X0l43T5nqDR7UU dNv8XoCphD/v/DKbcpObrEf0ygcN1sSGp5NA/zgTQXza9n2Mosn/MwEaseiG9Uhi ZAamuv5OZ2pxnhXs2jisSrLws5iGUY3a -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org