$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: Lmz4aZBJY+2rVZGlquxLW6b6o398pSfswuEXer8wrp4= Subject key identifier: 79:31:AB:95:02:A3:72:5B:9C:63:C0:54:4F:CC:78:B4:30:AB:50:76 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 0164 Signing time: Thu 21 Nov 2024 02:40:20 +0000 Manifest this update: Thu 21 Nov 2024 02:40:19 +0000 Manifest next update: Thu 28 Nov 2024 02:40:19 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: +HNa42wVD4y5s6JGWVlfEDgkDLca7BwFfugRqsVLu8U=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=) 4: 68612E727A7F11EFB5653840C4F9AE02.roa (hash: FvteCjqeo9yVrq2Lsua0n4LN7Rg+CLRjFiDooXY8jik=) 5: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=) 6: 5D406F9E7A1611EFB8683714C4F9AE02.roa (hash: tqkXDpdfj/GVF+slGEG/c03LpyPDSYus1NBRpjHwhlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Nov 21 02:40:19 2024 GMT Not After : Nov 28 02:40:19 2024 GMT Subject: CN=673e9d93-ff0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:97:8e:20:f8:ea:5e:df:01:18:7c:ee:0a:f5: 8d:26:1e:72:88:7a:58:41:34:ea:85:cc:93:16:15: d8:ea:1f:c7:67:c4:9a:07:c6:38:d5:51:e8:eb:c8: 3e:95:a9:7e:ad:4f:c2:b3:33:ac:20:99:2a:59:69: cb:3a:be:ef:1d:5a:55:cd:82:ca:23:46:6b:28:99: 49:b7:7c:d3:39:9a:43:47:f8:39:03:45:50:23:40: 79:51:42:56:f8:69:7a:43:c1:3f:d5:82:f9:05:59: 26:b3:3f:04:9c:bf:77:cb:2b:21:87:61:b5:15:3c: f9:52:92:90:19:06:45:af:ab:f4:12:46:1b:be:39: 58:6b:3a:bd:fc:a0:c4:e1:95:0b:5b:66:32:4e:72: f6:a6:8f:2f:3e:74:0f:db:7b:13:8d:75:60:0b:7e: f3:b2:67:29:f8:a0:c8:ae:2e:a5:7a:6d:98:0c:72: 26:3b:cd:01:32:c5:cf:a4:1c:9a:f3:79:55:65:6b: 15:1d:f3:af:04:db:b0:8a:d8:70:43:51:98:e2:84: b9:23:93:f9:be:3c:20:5d:f5:98:fb:dd:df:6b:8a: 9b:07:4d:aa:8a:76:f1:61:cd:9c:f2:5d:39:29:2b: bf:7f:18:fd:fe:10:5d:9f:8e:45:c4:4f:90:9c:77: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:31:AB:95:02:A3:72:5B:9C:63:C0:54:4F:CC:78:B4:30:AB:50:76 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d0:a0:37:21:da:fe:a6:c8:3e:a4:50:f4:d0:ef:e2:41:1e: fe:b2:cc:54:ae:7d:18:fa:0c:96:1e:5a:3d:7f:4c:39:3f:8c: 4c:3b:74:e0:d2:d3:e9:80:62:a8:02:a7:2b:95:81:c0:5c:03: ed:d3:ce:eb:5e:a7:19:07:0b:ec:aa:44:87:90:cf:b0:a2:6f: 1d:e0:82:58:1b:ba:46:e8:68:de:25:ef:76:d4:55:b7:45:b4: 04:60:cb:d8:07:08:a9:24:ba:ef:3d:04:b3:a6:fa:47:ca:c0: 69:db:c2:f6:4d:6b:da:24:46:3e:29:9c:da:c1:72:11:ad:56: 06:57:8f:9a:ab:cd:9a:fd:2e:1e:5e:48:22:c3:e9:5b:62:45: 16:9e:89:e3:80:86:ed:c4:86:7e:ee:eb:a9:db:b9:64:dc:33: d0:99:e8:bc:f2:e8:4b:9a:e2:02:3c:8f:5b:68:e3:97:d6:45: bd:a2:04:4f:4e:d0:ae:4f:ce:ba:de:53:80:aa:04:c6:ef:94: 42:ef:50:61:53:c6:98:19:07:71:4c:f8:82:12:85:41:3c:ab: 94:f6:cd:87:83:5b:f1:7a:5d:19:30:d5:71:02:60:0e:31:97: 14:95:76:9f:1b:c5:54:ad:3f:ff:d8:da:21:b2:71:4d:08:75: 83:df:15:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjQxMTIxMDI0MDE5WhcNMjQxMTI4MDI0MDE5WjAYMRYwFAYD VQQDEw02NzNlOWQ5My1mZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6peOIPjqXt8BGHzuCvWNJh5yiHpYQTTqhcyTFhXY6h/HZ8SaB8Y41VHo68g+ lal+rU/CszOsIJkqWWnLOr7vHVpVzYLKI0ZrKJlJt3zTOZpDR/g5A0VQI0B5UUJW +Gl6Q8E/1YL5BVkmsz8EnL93yyshh2G1FTz5UpKQGQZFr6v0EkYbvjlYazq9/KDE 4ZULW2YyTnL2po8vPnQP23sTjXVgC37zsmcp+KDIri6lem2YDHImO80BMsXPpBya 83lVZWsVHfOvBNuwithwQ1GY4oS5I5P5vjwgXfWY+93fa4qbB02qinbxYc2c8l05 KSu/fxj9/hBdn45FxE+QnHe8kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkxq5UC o3JbnGPAVE/MeLQwq1B2MB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK0KA3Idr+psg+pFD00O/iQR7+ssxUrn0Y+gyWHlo9f0w5P4xMO3Tg 0tPpgGKoAqcrlYHAXAPt087rXqcZBwvsqkSHkM+wom8d4IJYG7pG6GjeJe921FW3 RbQEYMvYBwipJLrvPQSzpvpHysBp28L2TWvaJEY+KZzawXIRrVYGV4+aq82a/S4e Xkgiw+lbYkUWnonjgIbtxIZ+7uup27lk3DPQmei88uhLmuICPI9baOOX1kW9ogRP TtCuT8663lOAqgTG75RC71BhU8aYGQdxTPiCEoVBPKuU9s2Hg1vxel0ZMNVxAmAO MZcUlXafG8VUrT//2NohsnFNCHWD3xXY -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org