$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: taxJmvX43W5l41nFoZZUgrhKh8dM/tEzc4y2UnJT2fo= Subject key identifier: E9:C1:2D:C4:1D:5E:50:33:F2:4B:58:D3:C7:D2:09:22:39:3D:EC:A4 Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 011C Signing time: Sat 23 Nov 2024 03:03:25 +0000 Manifest this update: Sat 23 Nov 2024 03:03:25 +0000 Manifest next update: Sat 30 Nov 2024 03:03:25 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: FSn4urR9iUH0tNlbrV5hh7Z2L2HgpukD5vJI6qr1WSM=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: xBjv+vXxnqip6awmZ0nrqpewsCYSOweE2hm3wh5fJ/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: Nov 23 03:03:25 2024 GMT Not After : Nov 30 03:03:25 2024 GMT Subject: CN=674145fd-e985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8c:a3:23:b0:76:ce:f0:c9:0f:ba:ef:a3:48: 14:4d:0f:4a:a0:49:be:8c:ec:17:ee:87:6e:a5:28: 26:b7:1a:8e:b4:46:27:ca:c2:44:a6:3a:5d:78:a3: 83:fe:06:ab:14:cb:f2:47:97:0d:e0:4b:a7:ce:cb: b3:04:3b:90:70:dd:d3:71:c3:09:4d:01:83:8f:74: 42:eb:ec:77:dc:7e:e6:d7:31:ce:e4:3f:6b:ec:49: 29:a3:00:f5:20:4f:bc:40:11:2f:47:95:f7:eb:77: 7e:c4:d6:16:d1:d9:4d:26:5a:88:76:df:cb:45:7e: b8:80:c7:21:cd:fe:44:ac:3b:8d:a2:fb:5b:58:9c: aa:2c:ba:40:49:41:1e:46:d4:f4:23:25:ef:de:d7: e9:48:6a:8d:79:a4:98:14:bf:92:55:2c:23:73:33: a3:bf:d9:67:81:ee:9b:8d:62:29:7a:83:34:ce:88: 9c:94:8a:f9:f1:3b:f2:27:c2:da:6b:99:cb:40:55: b1:3e:36:bb:ae:bd:18:c8:2c:a3:8e:b1:ce:8e:72: fd:55:58:1d:77:e8:03:98:5c:11:44:98:ae:9f:f7: 8c:3f:f9:70:e2:ce:cc:9c:f1:36:60:b5:f4:4e:4b: 86:d4:70:56:4b:38:e1:b4:c7:82:e4:58:dc:80:45: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C1:2D:C4:1D:5E:50:33:F2:4B:58:D3:C7:D2:09:22:39:3D:EC:A4 X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:3c:82:74:40:d2:58:3d:aa:66:92:c6:35:f3:93:e9:46:30: 94:84:0b:ea:04:78:91:23:95:20:b6:6b:31:b4:ca:40:af:c9: 64:70:e5:59:00:05:e8:30:a0:93:a9:ad:48:cb:a8:79:e9:bc: 5b:61:9b:35:48:05:e9:e7:e7:7d:f7:1c:e9:e2:c7:e8:55:53: b1:34:5d:92:e2:38:a4:27:19:5f:19:64:c8:af:c9:d7:b1:3d: 26:e0:cb:60:5c:0b:d8:af:98:fe:e6:94:97:57:ff:e2:78:34: 38:3b:0d:94:72:26:3a:c1:27:99:25:3f:1d:2a:e0:ee:4c:0b: 15:93:3c:92:e9:dc:1b:c1:01:ca:42:bd:0e:04:fb:e1:12:23: 78:0b:88:3b:37:de:b2:0b:7b:7b:f2:06:34:2d:c9:f6:0b:90: 20:e8:c6:8c:64:21:37:93:87:6e:b3:b7:78:a1:a8:d3:c2:08: f0:48:7f:9b:a0:b5:11:d4:18:8d:15:5d:ed:1a:8b:61:74:22: 7c:4e:46:de:3b:2a:eb:b4:6d:67:b2:4b:26:b2:6a:d4:15:e2: ef:41:f3:c6:7a:f9:85:e5:74:ff:8d:07:8a:93:5c:7e:b0:ed: 27:f5:f1:b6:48:4a:e9:d1:c4:74:0a:45:d5:ca:96:a5:fe:23: 14:d0:bc:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjQxMTIzMDMwMzI1WhcNMjQxMTMwMDMwMzI1WjAYMRYwFAYD VQQDEw02NzQxNDVmZC1lOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYyjI7B2zvDJD7rvo0gUTQ9KoEm+jOwX7odupSgmtxqOtEYnysJEpjpdeKOD /garFMvyR5cN4EunzsuzBDuQcN3TccMJTQGDj3RC6+x33H7m1zHO5D9r7EkpowD1 IE+8QBEvR5X363d+xNYW0dlNJlqIdt/LRX64gMchzf5ErDuNovtbWJyqLLpASUEe RtT0IyXv3tfpSGqNeaSYFL+SVSwjczOjv9lnge6bjWIpeoM0zoiclIr58TvyJ8La a5nLQFWxPja7rr0YyCyjjrHOjnL9VVgdd+gDmFwRRJiun/eMP/lw4s7MnPE2YLX0 TkuG1HBWSzjhtMeC5FjcgEUCzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnBLcQd XlAz8ktY08fSCSI5PeykMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJPIJ0QNJYPapmksY185PpRjCUhAvqBHiRI5UgtmsxtMpAr8lkcOVZ AAXoMKCTqa1Iy6h56bxbYZs1SAXp5+d99xzp4sfoVVOxNF2S4jikJxlfGWTIr8nX sT0m4MtgXAvYr5j+5pSXV//ieDQ4Ow2UciY6wSeZJT8dKuDuTAsVkzyS6dwbwQHK Qr0OBPvhEiN4C4g7N96yC3t78gY0Lcn2C5Ag6MaMZCE3k4dus7d4oajTwgjwSH+b oLUR1BiNFV3tGothdCJ8TkbeOyrrtG1nsksmsmrUFeLvQfPGevmF5XT/jQeKk1x+ sO0n9fG2SErp0cR0CkXVypal/iMU0LwA -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org