$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: J+uDXtXBfltUkAMGELWhwmUhaIst76+SeLxpksFl1Bc= Subject key identifier: D7:56:FC:7D:64:61:74:A8:0D:1A:E1:64:D3:D9:CC:65:E6:76:B7:B1 Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 10 Signing time: Wed 23 Oct 2024 06:51:58 +0000 Manifest this update: Wed 23 Oct 2024 06:51:58 +0000 Manifest next update: Wed 30 Oct 2024 06:51:58 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 6v25+s5h53enzh0JpF8s+X04g8HxzWsFmfOin53o8FQ=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Oct 23 06:51:58 2024 GMT Not After : Oct 30 06:51:58 2024 GMT Subject: CN=67189d0e-e2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:69:81:62:28:e3:8e:7c:f6:2c:ab:cf:61: 58:94:e4:21:d8:43:ec:d3:bd:52:d0:01:d4:37:e7: 15:ee:82:ec:0a:48:08:87:c6:47:fd:0b:84:3e:5f: f3:b9:24:71:b3:87:35:68:80:4c:58:86:2e:12:93: a1:6b:9e:c5:86:bf:0f:34:05:32:1a:ad:f0:ed:12: 34:fc:70:c9:ef:df:b2:64:b1:e5:3d:a2:21:04:f4: 59:5e:1f:ac:33:fe:2e:0a:18:e9:91:16:37:55:dd: a4:31:41:6a:30:3b:fc:01:c6:95:ba:32:fd:14:b9: 4e:da:66:ae:e3:2a:ee:95:8e:ae:c6:82:30:23:b1: e8:c7:74:7d:65:66:51:ee:48:5a:d1:03:9e:96:5f: 92:c5:9b:84:95:55:65:36:a3:eb:f7:15:85:de:f5: e3:36:df:01:f1:60:94:45:1f:77:b7:b3:ec:3b:f1: 6b:d3:0b:e4:ed:52:b1:a2:49:ad:20:ed:21:02:83: f9:bd:70:5c:50:4c:d2:64:81:10:53:29:62:44:17: 4e:2f:eb:07:8e:57:a4:7f:a8:4d:b8:c7:e2:2a:d2: 55:b1:57:ca:77:78:3f:73:4a:12:57:5c:ef:ee:9b: 51:a2:90:63:d4:98:55:3c:63:86:86:f4:dc:af:a6: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:56:FC:7D:64:61:74:A8:0D:1A:E1:64:D3:D9:CC:65:E6:76:B7:B1 X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:53:fd:53:b5:a7:e3:db:b6:61:5c:67:c1:95:04:73:77:bf: 7d:a3:d1:70:7c:be:80:f8:ae:39:93:6c:d4:1b:9d:d5:8c:1b: 41:d8:39:09:4b:30:3e:4d:b7:f6:33:fb:08:47:e3:c3:73:c5: a3:4c:a3:3a:f3:bd:4a:45:6e:57:02:1f:7a:84:7b:f6:b0:17: 06:5e:d5:48:79:4a:54:ad:d1:59:87:a5:e9:2a:0c:04:37:a1: f6:0f:36:f8:d5:9d:e5:bb:42:05:96:78:69:b8:53:a7:ee:23: a9:62:f0:44:38:b1:4c:62:ef:1b:01:6a:d3:9c:cb:09:e9:2b: a7:66:31:1a:37:e2:89:4f:17:35:59:84:a8:38:06:14:a5:ef: e5:59:4f:0e:ee:b1:f6:68:63:0c:e7:4a:76:78:7d:df:43:0a: 72:fd:51:5b:f3:f2:62:00:65:cc:b3:0c:d3:4a:41:c0:8c:29: af:96:2a:a3:1d:09:c7:f8:6d:60:30:17:20:45:74:a3:12:92: d6:52:be:94:ed:55:00:a7:d3:84:29:72:bd:87:e0:1d:c1:9c: 70:38:97:d2:bf:2f:ba:a4:84:eb:60:d8:64:59:3c:71:82:ff: 67:2d:fe:6e:bb:6a:57:ff:57:3a:50:93:1a:34:d5:53:91:66: 85:93:0d:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoMTAwRDlBRUU5MUQyMjdGRTQ3NTkzNEYyOTc4QzM2MTdE OENGQThFRTAeFw0yNDEwMjMwNjUxNThaFw0yNDEwMzAwNjUxNThaMBgxFjAUBgNV BAMTDTY3MTg5ZDBlLWUyZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC81mmBYijjjnz2LKvPYViU5CHYQ+zTvVLQAdQ35xXuguwKSAiHxkf9C4Q+X/O5 JHGzhzVogExYhi4Sk6FrnsWGvw80BTIarfDtEjT8cMnv37JkseU9oiEE9FleH6wz /i4KGOmRFjdV3aQxQWowO/wBxpW6Mv0UuU7aZq7jKu6Vjq7GgjAjsejHdH1lZlHu SFrRA56WX5LFm4SVVWU2o+v3FYXe9eM23wHxYJRFH3e3s+w78WvTC+TtUrGiSa0g 7SECg/m9cFxQTNJkgRBTKWJEF04v6weOV6R/qE24x+Iq0lWxV8p3eD9zShJXXO/u m1GikGPUmFU8Y4aG9Nyvpp2dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU11b8fWRh dKgNGuFk09nMZeZ2t7EwHwYDVR0jBBgwFoAUEA2a7pHSJ/5HWTTyl4w2F9jPqO4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzU3RkY0QkNBOEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUEyYTdwSFNKXzVIV1RUeWw0dzJGOWpQcU80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QzlFLzU3RkY0QkNBOEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81 SFdUVHlsNHcyRjlqUHFPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABRT/VO1p+PbtmFcZ8GVBHN3v32j0XB8voD4rjmTbNQbndWMG0HYOQlL MD5Nt/Yz+whH48NzxaNMozrzvUpFblcCH3qEe/awFwZe1Uh5SlSt0VmHpekqDAQ3 ofYPNvjVneW7QgWWeGm4U6fuI6li8EQ4sUxi7xsBatOcywnpK6dmMRo34olPFzVZ hKg4BhSl7+VZTw7usfZoYwznSnZ4fd9DCnL9UVvz8mIAZcyzDNNKQcCMKa+WKqMd Ccf4bWAwFyBFdKMSktZSvpTtVQCn04Qpcr2H4B3BnHA4l9K/L7qkhOtg2GRZPHGC /2ct/m67alf/VzpQkxo01VORZoWTDZc= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org