$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: P2tqqdLYd7anK0SIpb9Fk8zSEVJQ7N4Aisq+785aQBc= Subject key identifier: BD:BE:9D:DE:B4:B9:72:94:FF:4E:9B:42:B4:3D:C7:4B:4A:EF:04:01 Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 1F Signing time: Thu 21 Nov 2024 06:03:38 +0000 Manifest this update: Thu 21 Nov 2024 06:03:38 +0000 Manifest next update: Thu 28 Nov 2024 06:03:38 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: G1N3zYmo+hhI1FDok62GEkZB0S+mbhNrmI1mcZ4KfMQ=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Nov 21 06:03:38 2024 GMT Not After : Nov 28 06:03:38 2024 GMT Subject: CN=673ecd3a-f490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:62:d4:d0:3f:02:b6:15:26:f3:8f:72:f3: 56:3c:ba:53:81:55:ee:87:2d:8d:62:d8:73:01:36: b3:cb:ef:0f:7f:94:4a:12:bb:1a:32:aa:c3:c8:00: 44:ce:91:d7:57:05:81:82:23:8d:66:8c:83:50:e1: 83:3d:82:7b:55:c7:ae:77:4c:ef:37:24:5c:e4:be: 5f:a1:32:58:e4:70:40:5a:ee:7d:07:21:8b:2f:3e: 12:e9:6b:23:8d:ac:e6:b2:97:c0:21:25:5d:a6:40: 8b:7d:9a:d5:f2:bf:94:f5:51:89:17:d1:8b:96:c7: 4b:16:7f:95:74:53:9b:a3:53:5e:48:f8:01:21:15: 06:b9:53:b9:66:82:e0:1d:06:20:0f:08:85:45:db: a3:59:f5:c3:6b:81:3a:e8:41:8b:67:4d:ab:30:e1: fa:66:38:ed:52:0c:7a:3c:91:b0:54:8e:76:db:19: 73:79:8e:48:9c:a7:f8:2c:40:9d:5b:e1:8c:d0:ce: 92:21:aa:ea:32:91:7b:a5:b3:b3:09:01:21:95:38: f7:5c:c3:d5:93:04:77:24:8d:50:6d:cc:96:8d:25: 6e:d4:79:fc:7a:12:23:28:7a:eb:36:c9:43:af:7f: 1e:61:da:5c:c4:f6:fe:10:40:69:6a:4a:24:08:99: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BE:9D:DE:B4:B9:72:94:FF:4E:9B:42:B4:3D:C7:4B:4A:EF:04:01 X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1c:28:b0:fd:10:65:a2:9e:9d:e0:14:b8:25:6d:a5:d4:6b: b4:f0:bf:1e:f6:c2:df:f3:74:d7:ea:e2:02:4d:e2:b6:fe:20: 89:ae:00:f7:77:f4:28:f8:11:a7:0c:1e:22:8f:95:cd:ff:f0: f0:17:38:74:e6:79:ab:e5:c7:93:a9:f1:45:78:dc:04:e7:23: 3c:f4:31:7f:39:cf:05:2f:7d:c4:7e:31:ea:fd:40:eb:a1:3c: bd:16:cb:b1:a3:4d:5a:85:09:f2:a3:ca:c4:fc:09:36:53:3b: 25:4c:81:00:5d:d1:f2:f3:1c:73:6f:83:45:23:50:be:2b:0c: d8:c2:4c:4a:ab:d8:bc:86:ab:9f:a3:9f:ce:59:4e:14:f6:35: b4:57:59:02:b4:10:88:40:74:90:0e:c5:ef:8e:23:98:93:0a: 2c:49:bd:fc:f4:8b:8f:1c:3b:15:f9:97:eb:f7:8f:a4:7e:b9: 5c:d1:c9:03:15:0c:af:82:9d:75:91:dc:0d:66:dd:92:e6:26: 6c:42:de:f6:4d:75:b4:81:0d:07:4b:30:3b:f1:9d:8c:b0:fa: ac:d6:62:25:b1:48:39:c3:22:cf:3e:80:25:f3:3d:c1:ea:d8: c7:6c:dd:2f:aa:f3:5b:45:c9:ca:6e:19:71:b0:c2:f5:cb:bc: 10:2a:33:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoMTAwRDlBRUU5MUQyMjdGRTQ3NTkzNEYyOTc4QzM2MTdE OENGQThFRTAeFw0yNDExMjEwNjAzMzhaFw0yNDExMjgwNjAzMzhaMBgxFjAUBgNV BAMTDTY3M2VjZDNhLWY0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTS2LU0D8CthUm849y81Y8ulOBVe6HLY1i2HMBNrPL7w9/lEoSuxoyqsPIAETO kddXBYGCI41mjINQ4YM9gntVx653TO83JFzkvl+hMljkcEBa7n0HIYsvPhLpayON rOayl8AhJV2mQIt9mtXyv5T1UYkX0YuWx0sWf5V0U5ujU15I+AEhFQa5U7lmguAd BiAPCIVF26NZ9cNrgTroQYtnTasw4fpmOO1SDHo8kbBUjnbbGXN5jkicp/gsQJ1b 4YzQzpIhquoykXuls7MJASGVOPdcw9WTBHckjVBtzJaNJW7Uefx6EiMoeus2yUOv fx5h2lzE9v4QQGlqSiQImRopAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvb6d3rS5 cpT/TptCtD3HS0rvBAEwHwYDVR0jBBgwFoAUEA2a7pHSJ/5HWTTyl4w2F9jPqO4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzU3RkY0QkNBOEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUEyYTdwSFNKXzVIV1RUeWw0dzJGOWpQcU80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QzlFLzU3RkY0QkNBOEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81 SFdUVHlsNHcyRjlqUHFPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYcKLD9EGWinp3gFLglbaXUa7Twvx72wt/zdNfq4gJN4rb+IImuAPd3 9Cj4EacMHiKPlc3/8PAXOHTmeavlx5Op8UV43ATnIzz0MX85zwUvfcR+Mer9QOuh PL0Wy7GjTVqFCfKjysT8CTZTOyVMgQBd0fLzHHNvg0UjUL4rDNjCTEqr2LyGq5+j n85ZThT2NbRXWQK0EIhAdJAOxe+OI5iTCixJvfz0i48cOxX5l+v3j6R+uVzRyQMV DK+CnXWR3A1m3ZLmJmxC3vZNdbSBDQdLMDvxnYyw+qzWYiWxSDnDIs8+gCXzPcHq 2Mds3S+q81tFycpuGXGwwvXLvBAqM68= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org