$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft File: 6osEPoaPdVc7zEVArUlUEC3JIrg.mft (raw, json) Hash identifier: iWXqhgjoWos1YiS9mJjpMzycjWZYWk7JpyYaPe/8L+o= Subject key identifier: E8:96:A1:6D:4D:89:7F:F4:C5:43:04:0C:E7:1A:29:C5:A3:9B:38:DB Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 Certificate issuer: /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft Manifest number: 47 Signing time: Sun 15 Sep 2024 09:44:24 +0000 Manifest this update: Sun 15 Sep 2024 09:44:23 +0000 Manifest next update: Sun 22 Sep 2024 09:44:23 +0000 Files and hashes: 1: 6osEPoaPdVc7zEVArUlUEC3JIrg.crl (hash: 6pYWtoRnlmjqCWJ+Ib9vUnVOvcztsWdE11Sr1spd3ak=) 2: 6EF22D0A07C411EF8A38A486C4F9AE02.roa (hash: H7mwXnAxb747BhosayyIuzxkCgPHMRkzFntir5DoNWo=) 3: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (hash: xBdixNbP361rXzc/XoDu9mGkluefiKE80EL1xZzlP+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Validity Not Before: Sep 15 09:44:23 2024 GMT Not After : Sep 22 09:44:23 2024 GMT Subject: CN=66e6ac77-faef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:3e:2d:33:50:bb:da:64:b4:90:f3:fc:0b: bc:7a:38:1c:bd:fa:bd:e6:da:1d:84:60:3c:6e:67: 13:b6:8b:80:13:4c:53:ba:be:93:ef:a4:61:e8:32: 9c:1d:02:d8:e5:1d:c8:e8:60:15:71:0d:78:2b:24: fa:5c:fa:94:d1:b2:31:4e:8b:01:9f:c0:01:ee:8d: ba:d0:af:d5:7c:8a:b8:28:09:01:f6:83:71:6f:65: 96:b4:8a:fc:04:35:e2:47:27:b4:69:ca:33:33:5d: 0a:e3:81:75:5a:4c:9e:eb:ae:55:db:a6:fa:33:48: 7b:38:04:15:0f:59:8b:f1:a2:04:38:5f:f8:ef:e8: 6a:9b:f8:ba:a5:ce:91:2e:5b:cb:3e:bb:9e:8a:2f: 73:fb:11:fd:cb:bf:f9:75:f7:c3:c0:24:82:bd:a8: b1:f5:ee:1f:7d:54:3d:81:16:19:a3:da:a7:7f:54: 4e:51:58:fe:cc:36:c3:fb:02:4c:d7:1b:17:90:74: 40:30:28:7a:35:0e:03:79:d9:3f:94:c7:60:8f:f3: 65:be:84:c0:0e:6d:42:56:7a:77:fd:db:94:02:05: c4:30:89:6c:fa:59:87:e5:72:17:32:0e:fb:57:9a: 00:2a:1a:a1:26:3a:aa:e4:ec:e6:09:63:02:ea:c8: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:96:A1:6D:4D:89:7F:F4:C5:43:04:0C:E7:1A:29:C5:A3:9B:38:DB X509v3 Authority Key Identifier: keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f5:d3:71:b5:bc:61:1e:1f:d1:cc:35:d3:4f:82:33:c5:18: 89:4e:3e:ab:32:8e:a6:5b:ac:20:57:e2:eb:ba:2d:6f:ab:4d: 7f:43:e8:4e:75:35:c1:4d:ec:74:69:7a:ca:a9:ca:aa:41:42: 90:6b:22:e8:4b:91:fa:0f:46:dc:ce:77:64:82:b8:3d:dd:c0: 5f:7d:ef:eb:3f:a6:71:39:20:05:12:cb:6b:0b:f1:98:45:ce: 08:4d:a7:4c:ee:a9:c8:05:a1:87:b0:90:29:d5:97:14:75:5a: fb:e6:00:31:cb:12:6c:bb:24:5c:49:73:6f:4d:60:55:1e:2b: 07:f3:2b:c7:c7:de:cc:57:26:89:ce:77:4b:ba:6f:b8:f4:73: 87:67:40:50:ab:26:26:96:ab:1c:39:b1:44:a4:aa:fb:cb:07: 8c:c7:31:a3:8f:1c:9b:10:de:97:4e:2a:95:e7:41:fd:d3:3c: 5b:e4:7c:ca:29:98:e5:53:69:97:5a:f3:07:79:79:61:32:7c: 87:67:27:34:26:ef:ff:c0:11:d6:4e:18:03:c6:87:f2:96:31: d6:92:7b:48:e5:14:e2:a1:cd:7c:37:a2:3f:5e:d4:66:d8:f6: bd:25:b6:af:9d:6d:26:80:56:43:f5:79:40:81:8e:6b:c5:42: 77:53:c4:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTc3MjExMC8GA1UEBRMoRUE4QjA0M0U4NjhGNzU1NzNCQ0M0NTQwQUQ0OTU0MTAy REM5MjJCODAeFw0yNDA5MTUwOTQ0MjNaFw0yNDA5MjIwOTQ0MjNaMBgxFjAUBgNV BAMTDTY2ZTZhYzc3LWZhZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxrT4tM1C72mS0kPP8C7x6OBy9+r3m2h2EYDxuZxO2i4ATTFO6vpPvpGHoMpwd AtjlHcjoYBVxDXgrJPpc+pTRsjFOiwGfwAHujbrQr9V8irgoCQH2g3FvZZa0ivwE NeJHJ7RpyjMzXQrjgXVaTJ7rrlXbpvozSHs4BBUPWYvxogQ4X/jv6Gqb+LqlzpEu W8s+u56KL3P7Ef3Lv/l198PAJIK9qLH17h99VD2BFhmj2qd/VE5RWP7MNsP7AkzX GxeQdEAwKHo1DgN52T+Ux2CP82W+hMAObUJWenf925QCBcQwiWz6WYflchcyDvtX mgAqGqEmOqrk7OYJYwLqyHP5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6JahbU2J f/TFQwQM5xopxaObONswHwYDVR0jBBgwFoAU6osEPoaPdVc7zEVArUlUEC3JIrgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NzcyLzA0QkQxQTZDMDdD NDExRUY4NTJEQ0M3REM0RjlBRTAyLzZvc0VQb2FQZFZjN3pFVkFyVWxVRUMzSkly Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNm9zRVBvYVBkVmM3ekVWQXJVbFVFQzNKSXJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NzcyLzA0QkQxQTZDMDdDNDExRUY4NTJEQ0M3REM0RjlBRTAyLzZvc0VQb2FQZFZj N3pFVkFyVWxVRUMzSklyZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB/103G1vGEeH9HMNdNPgjPFGIlOPqsyjqZbrCBX4uu6LW+rTX9D6E51 NcFN7HRpesqpyqpBQpBrIuhLkfoPRtzOd2SCuD3dwF997+s/pnE5IAUSy2sL8ZhF zghNp0zuqcgFoYewkCnVlxR1WvvmADHLEmy7JFxJc29NYFUeKwfzK8fH3sxXJonO d0u6b7j0c4dnQFCrJiaWqxw5sUSkqvvLB4zHMaOPHJsQ3pdOKpXnQf3TPFvkfMop mOVTaZda8wd5eWEyfIdnJzQm7//AEdZOGAPGh/KWMdaSe0jlFOKhzXw3oj9e1GbY 9r0ltq+dbSaAVkP1eUCBjmvFQndTxKc= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:20 2024 by rpki-client on console-ams.rpki-client.org