$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json) Hash identifier: E08uFy401B7I1H50JHSe8r4EBFVr1jMGiYXTeghB+K0= Subject key identifier: 66:91:EF:BA:6D:9D:F3:63:1D:48:26:CB:FD:26:6F:44:42:80:D8:30 Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft Manifest number: 0A57 Signing time: Fri 20 Sep 2024 19:37:17 +0000 Manifest this update: Fri 20 Sep 2024 19:37:16 +0000 Manifest next update: Fri 27 Sep 2024 19:37:16 +0000 Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: w3AqKVNSirQTcy+QVrnWwhsZ1l2QF+Acw4iH04xuui0=) 2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: xL/igmGv/tHvkJn5yKoATONH6AHHS5dqWF72gorDIBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 19:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Sep 20 19:37:16 2024 GMT Not After : Sep 27 19:37:16 2024 GMT Subject: CN=66edceec-7b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:7a:ce:cf:26:22:e9:91:8a:de:2b:c0:3c: 7c:31:d4:47:1d:5d:26:c2:cf:33:fa:d2:db:d5:35: 67:18:f1:2e:1f:67:01:ef:bd:c3:a0:45:9f:d9:09: 37:e6:01:be:16:b2:a6:b7:d5:87:fe:66:99:cc:de: d8:75:60:02:d9:9a:cd:33:bc:55:9e:c4:5c:4a:2e: 65:fc:99:f3:17:6b:de:08:94:56:e3:84:d5:af:01: d0:dd:84:38:2c:b0:2d:1c:33:4a:af:c6:4f:bc:fe: fd:b9:8e:98:d1:67:b0:72:3b:23:ec:aa:7c:86:81: 7b:b6:3a:fe:11:27:33:61:9c:09:d7:a2:d2:3d:4d: 6d:14:91:86:75:2f:e1:e6:ee:f2:54:7f:55:86:6b: 4f:d1:25:af:7a:2f:84:43:4f:01:23:6d:3c:37:e4: d0:79:8e:4f:62:61:f8:e2:be:a7:b9:bf:3a:2c:a2: 1e:0c:6c:cc:98:1c:72:3e:24:44:29:b1:81:46:dd: 65:0d:d1:61:50:62:9e:ed:a3:e7:0f:d3:5f:ce:60: 73:90:bf:1a:bd:04:c5:9c:ca:81:12:4b:ef:58:f2: a3:f5:06:92:76:8e:57:12:1f:b2:a0:de:ac:aa:56: 6d:f7:d3:40:e6:9d:1a:eb:81:82:d0:d1:0f:10:4a: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:91:EF:BA:6D:9D:F3:63:1D:48:26:CB:FD:26:6F:44:42:80:D8:30 X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:86:c6:5a:50:f7:70:7e:62:37:1b:61:7c:9a:b5:03:b1:19: ea:22:16:43:4a:5c:66:ec:b9:37:f3:34:96:f5:3a:e5:55:2d: f9:8e:3d:51:1f:46:27:d4:ed:d0:a0:c1:75:ef:6d:c6:4a:75: 37:1a:0d:06:3f:5a:3a:41:49:5c:3d:a9:82:6c:37:16:47:04: e6:03:f3:aa:f4:08:76:8d:f2:88:d6:a3:6a:d3:de:2d:6c:3a: 57:c1:a6:e2:df:1e:2b:1b:8d:09:0b:76:18:1a:83:6c:d1:90: aa:15:55:8a:6b:7b:2a:74:b7:ea:b3:d6:34:ab:bf:59:4c:19: f7:69:cc:ae:48:0a:43:46:b3:a9:4a:2e:51:d6:d8:c9:5d:43: a3:81:ae:00:9d:fe:7d:7c:48:a6:3d:84:50:cb:af:d1:17:19: 00:00:99:8a:a8:e9:e4:e3:75:cc:09:14:3f:55:be:a0:61:f4: 96:6e:39:2c:5a:16:76:1d:7c:2a:8e:2e:17:a5:7b:d9:48:a9: 2a:4c:d4:c0:33:a2:31:2f:f9:c8:2f:f5:e2:f0:8f:fa:d7:8b: 3b:e6:f4:81:91:a7:f1:4e:31:9a:57:bf:f7:8c:19:27:74:30: ec:f2:ef:f1:d3:92:60:1f:e9:73:9f:b9:c0:b4:9b:00:e6:4d: 86:0a:df:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjQwOTIwMTkzNzE2WhcNMjQwOTI3MTkzNzE2WjAYMRYwFAYD VQQDEw02NmVkY2VlYy03YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEV6zs8mIumRit4rwDx8MdRHHV0mws8z+tLb1TVnGPEuH2cB773DoEWf2Qk3 5gG+FrKmt9WH/maZzN7YdWAC2ZrNM7xVnsRcSi5l/JnzF2veCJRW44TVrwHQ3YQ4 LLAtHDNKr8ZPvP79uY6Y0Wewcjsj7Kp8hoF7tjr+ESczYZwJ16LSPU1tFJGGdS/h 5u7yVH9VhmtP0SWvei+EQ08BI208N+TQeY5PYmH44r6nub86LKIeDGzMmBxyPiRE KbGBRt1lDdFhUGKe7aPnD9NfzmBzkL8avQTFnMqBEkvvWPKj9QaSdo5XEh+yoN6s qlZt99NA5p0a64GC0NEPEEokoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaR77pt nfNjHUgmy/0mb0RCgNgwMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURFRS9BREQ2NUUyODRCOTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFF N2ZiUFhnUGYzc2h2RmMxNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwhsZaUPdwfmI3G2F8mrUDsRnqIhZDSlxm7Lk38zSW9TrlVS35jj1R H0Yn1O3QoMF1723GSnU3Gg0GP1o6QUlcPamCbDcWRwTmA/Oq9Ah2jfKI1qNq094t bDpXwabi3x4rG40JC3YYGoNs0ZCqFVWKa3sqdLfqs9Y0q79ZTBn3acyuSApDRrOp Si5R1tjJXUOjga4Anf59fEimPYRQy6/RFxkAAJmKqOnk43XMCRQ/Vb6gYfSWbjks WhZ2HXwqji4XpXvZSKkqTNTAM6IxL/nIL/Xi8I/614s75vSBkafxTjGaV7/3jBkn dDDs8u/x05JgH+lzn7nAtJsA5k2GCt/v -----END CERTIFICATE-----Generated at Fri Sep 20 20:58:47 2024 by rpki-client on console-ams.rpki-client.org