$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json) Hash identifier: bEGguUEvdaCGPYSATgkypEv4DE6ofwFI7yWJmET+A/s= Subject key identifier: 35:7E:A9:F9:12:0E:A2:BA:EF:52:49:E5:FD:C7:B9:0C:DC:39:36:ED Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft Manifest number: 0122 Signing time: Sat 23 Nov 2024 02:57:43 +0000 Manifest this update: Sat 23 Nov 2024 02:57:43 +0000 Manifest next update: Sat 30 Nov 2024 02:57:43 +0000 Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: c/x1+e4o30GCYjPZof4W54O+t12E+aUvSZglNTgowX8=) 2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: SaqoF9qZaWArmnzurxTGnX6sjuUal5ybDEvQkKwjecE=) 3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: DzBCpboud2zLxpVF1ilPsGBCQ+/vZr9mk3HLW2SW1Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Validity Not Before: Nov 23 02:57:43 2024 GMT Not After : Nov 30 02:57:43 2024 GMT Subject: CN=674144a7-c90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:65:c5:e1:8c:f5:32:9e:e4:bd:15:90:bd:0f: ed:e5:c4:7e:4f:df:bf:ff:b4:08:55:ff:f4:1b:9e: 65:88:7c:6c:4f:fd:5b:6c:c6:40:bb:35:c7:37:17: 1c:da:5e:59:71:3a:2a:2c:69:c0:d7:b5:51:f2:53: 29:65:c5:fb:6d:94:44:a4:1f:b9:40:c7:32:be:6a: f8:9a:73:ed:4b:47:32:08:4c:f5:d7:30:6f:8c:6d: c2:b2:7d:3e:34:dc:76:1d:a2:e1:13:6d:39:db:b0: 4f:d6:05:c9:1a:32:54:f7:3a:06:98:da:1f:df:ef: 31:30:91:c5:ed:9b:41:46:80:f3:42:28:e3:54:59: 66:6d:5c:21:61:24:c3:be:e3:0e:92:05:57:0a:18: 30:5c:7e:c0:98:72:d5:65:b8:7e:91:35:d4:5f:bd: 8e:16:b8:b6:2b:ca:18:80:10:6e:07:c6:8b:63:11: c1:23:44:d2:99:94:a5:c2:24:b3:34:07:74:b1:7a: 08:55:92:07:c0:df:3c:c7:93:17:c8:be:89:24:b0: cb:dc:2d:14:8b:77:f7:46:c2:61:4c:97:39:37:a6: b8:b3:f7:bd:f3:21:79:1b:eb:36:0f:ab:4a:48:1f: 95:bb:d3:0c:a7:14:17:5d:3e:7e:e3:2d:f0:00:1a: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7E:A9:F9:12:0E:A2:BA:EF:52:49:E5:FD:C7:B9:0C:DC:39:36:ED X509v3 Authority Key Identifier: keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:34:05:37:12:b2:47:4c:35:ad:21:52:fd:e7:8c:94:75:4a: 9a:d6:b7:33:a7:c5:98:4e:ee:5d:82:4b:6d:5e:d0:de:84:7c: d3:f3:aa:63:20:04:85:07:ab:11:4d:04:d8:4d:87:bc:1c:e5: ff:b1:6c:c7:84:9c:35:19:f8:f8:3a:3d:71:28:a3:32:62:82: 59:8d:cb:5a:27:f1:62:31:8a:0a:f0:84:46:46:ac:2e:c2:84: 74:e8:6c:12:9d:87:ed:87:e2:d5:8e:d2:b0:09:3f:1b:95:40: d2:49:14:2c:ff:bc:04:26:96:3e:10:1c:dc:fb:ca:4f:a8:8c: d0:8e:31:ca:b1:36:f5:5f:b6:c7:bb:ba:96:4a:0d:fe:c9:6d: ca:e5:f0:ff:9e:fa:36:1e:6e:10:2d:5b:6c:ac:4f:ce:e3:9a: 23:7f:45:6a:ae:df:23:dc:e5:0c:ca:18:47:a7:86:f4:2f:8e: 7a:12:f5:ef:49:9c:b3:d2:d5:da:f5:c5:1e:4f:89:87:fd:e9: 27:98:bc:df:01:c5:fd:20:78:a8:b4:b7:f4:de:03:08:6d:2b: f8:8f:cc:2c:87:85:d5:e3:26:c5:72:b1:0c:66:f2:34:a2:86: 2a:be:23:3e:2b:8a:e6:94:18:c6:d6:d2:d3:b5:dc:79:5f:a8: 9d:81:ad:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3 NEI3Qjk2MjIwHhcNMjQxMTIzMDI1NzQzWhcNMjQxMTMwMDI1NzQzWjAYMRYwFAYD VQQDEw02NzQxNDRhNy1jOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mXF4Yz1Mp7kvRWQvQ/t5cR+T9+//7QIVf/0G55liHxsT/1bbMZAuzXHNxcc 2l5ZcToqLGnA17VR8lMpZcX7bZREpB+5QMcyvmr4mnPtS0cyCEz11zBvjG3Csn0+ NNx2HaLhE20527BP1gXJGjJU9zoGmNof3+8xMJHF7ZtBRoDzQijjVFlmbVwhYSTD vuMOkgVXChgwXH7AmHLVZbh+kTXUX72OFri2K8oYgBBuB8aLYxHBI0TSmZSlwiSz NAd0sXoIVZIHwN88x5MXyL6JJLDL3C0Ui3f3RsJhTJc5N6a4s/e98yF5G+s2D6tK SB+Vu9MMpxQXXT5+4y3wABoAkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV+qfkS DqK671JJ5f3HuQzcOTbtMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu bnlfajBYcXlROHQwdDdsaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDENAU3ErJHTDWtIVL954yUdUqa1rczp8WYTu5dgkttXtDehHzT86pj IASFB6sRTQTYTYe8HOX/sWzHhJw1Gfj4Oj1xKKMyYoJZjctaJ/FiMYoK8IRGRqwu woR06GwSnYfth+LVjtKwCT8blUDSSRQs/7wEJpY+EBzc+8pPqIzQjjHKsTb1X7bH u7qWSg3+yW3K5fD/nvo2Hm4QLVtsrE/O45ojf0Vqrt8j3OUMyhhHp4b0L456EvXv SZyz0tXa9cUeT4mH/eknmLzfAcX9IHiotLf03gMIbSv4j8wsh4XV4ybFcrEMZvI0 ooYqviM+K4rmlBjG1tLTtdx5X6idga3D -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org