$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft File: e0Coz49PGgbDbiA08Yo4v5jKWxg.mft (raw, json) Hash identifier: UPBf2koZxqbhHXbduzttiUeYh5tlenS/XeDtrHIVvsA= Subject key identifier: 89:3A:7D:21:95:CE:90:38:59:BC:FF:05:FE:5A:8D:21:32:61:06:0E Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 Certificate issuer: /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft Manifest number: 0121 Signing time: Thu 21 Nov 2024 03:00:14 +0000 Manifest this update: Thu 21 Nov 2024 03:00:13 +0000 Manifest next update: Thu 28 Nov 2024 03:00:13 +0000 Files and hashes: 1: e0Coz49PGgbDbiA08Yo4v5jKWxg.crl (hash: xTjzqSVsn4NmLkfLnIcN59RQGKkliPXZO7og2UpolIU=) 2: A74C3132F49211ED8659177BC4F9AE02.roa (hash: J6N5IV7MCpXlVeF8cR4PHiRc9CQaom2wbzrHsgmKoxg=) 3: 2F9915D8718D11EE97E3E022C4F9AE02.roa (hash: l7v8jCh+6Pph9kyKmndNAaIV1W+fpuYotDnXZzaMmeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Validity Not Before: Nov 21 03:00:13 2024 GMT Not After : Nov 28 03:00:13 2024 GMT Subject: CN=673ea23e-a1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:2e:58:8e:1a:c0:e7:50:e7:9d:02:e4:e8: 44:e0:d2:a6:26:c3:ea:aa:43:e0:82:b8:01:eb:e2: 82:4d:4f:a8:f3:ad:87:68:40:fa:bf:47:f5:4e:64: 82:1d:3e:9b:8d:97:09:82:ad:0c:28:68:1d:7c:3f: 8d:49:f5:f8:94:f0:72:a2:7f:bf:30:96:40:ab:24: c8:a8:d0:c4:c4:ab:98:ab:01:46:2c:8a:a5:4f:65: ec:43:dc:bf:fe:50:f6:f2:ac:22:30:01:95:a4:75: 28:48:9f:74:34:4a:dd:a0:27:a2:c6:1c:34:7f:bc: 7c:1b:12:78:9d:81:ae:bd:e5:c6:05:c5:60:51:f2: 61:98:db:58:43:b7:f9:8c:18:bb:b4:b1:7e:df:20: 81:48:d0:84:51:1d:20:e7:7f:64:f5:0a:68:80:9f: b2:06:55:ae:33:80:96:4f:2e:79:88:81:27:14:02: 5a:fb:e6:11:f0:8e:88:64:5b:2b:82:0a:42:eb:b7: 90:5c:7d:24:a3:6e:36:56:ea:54:ef:78:f8:17:12: 4e:e5:21:8c:ef:9a:bd:97:7e:9b:65:73:07:0e:af: 47:72:3a:da:64:5a:d2:df:6b:b7:0e:d7:d7:c6:7a: be:09:3c:45:08:c9:d4:33:60:9d:15:14:e2:8d:8a: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3A:7D:21:95:CE:90:38:59:BC:FF:05:FE:5A:8D:21:32:61:06:0E X509v3 Authority Key Identifier: keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5f:44:35:ad:07:e0:e2:48:79:d9:a0:70:ad:70:b2:fe:64: 53:8d:f8:00:16:59:2c:3f:3b:6f:e1:25:e7:45:56:1f:d9:f2: cf:d4:72:01:70:b0:6d:92:7e:9a:07:b6:6a:91:a4:5e:bc:57: f7:2f:30:d7:1b:9d:c9:f2:6c:bc:d5:bd:85:02:75:26:ad:a0: 05:48:fb:8a:7c:b9:06:d3:4f:29:52:f5:b3:0e:3e:d9:61:16: 19:d1:1e:42:f0:9c:b8:6c:40:85:90:96:39:fa:6f:ca:37:33: 82:0f:99:e9:fb:5a:a0:3f:67:a5:0f:c9:17:93:34:7b:b2:ab: 58:33:1b:9a:2f:7d:45:c5:06:36:0e:db:22:b5:4f:7d:85:d7: 55:5f:85:96:83:99:c5:cc:d8:28:30:6c:68:9a:9e:0a:46:0f: 75:a1:24:44:35:8d:69:db:6b:ca:15:aa:6b:29:c4:6b:c7:8f: c4:32:9a:d0:e9:9c:76:8d:d3:b9:57:45:21:7b:2f:4b:b9:91: 5f:31:f4:48:4f:94:df:85:55:2b:ae:1c:d2:7a:1a:f5:ef:f9: b8:ac:de:31:f9:47:fe:0d:10:29:f9:4a:b0:c0:17:51:74:4f: 08:e8:b4:98:4c:7d:fc:c7:a0:16:73:56:48:50:57:3e:2b:46: eb:b6:b9:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDdCNDBBOENGOEY0RjFBMDZDMzZFMjAzNEYxOEEzOEJG OThDQTVCMTgwHhcNMjQxMTIxMDMwMDEzWhcNMjQxMTI4MDMwMDEzWjAYMRYwFAYD VQQDEw02NzNlYTIzZS1hMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBkuWI4awOdQ550C5OhE4NKmJsPqqkPggrgB6+KCTU+o862HaED6v0f1TmSC HT6bjZcJgq0MKGgdfD+NSfX4lPByon+/MJZAqyTIqNDExKuYqwFGLIqlT2XsQ9y/ /lD28qwiMAGVpHUoSJ90NErdoCeixhw0f7x8GxJ4nYGuveXGBcVgUfJhmNtYQ7f5 jBi7tLF+3yCBSNCEUR0g539k9QpogJ+yBlWuM4CWTy55iIEnFAJa++YR8I6IZFsr ggpC67eQXH0ko242VupU73j4FxJO5SGM75q9l36bZXMHDq9HcjraZFrS32u3DtfX xnq+CTxFCMnUM2CdFRTijYrDKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk6fSGV zpA4Wbz/Bf5ajSEyYQYOMB8GA1UdIwQYMBaAFHtAqM+PTxoGw24gNPGKOL+YylsY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xQjAwRUFFOEY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdnYkRiaUEwOFlvNHY1aktX eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UwQ296NDlQR2diRGJpQTA4WW80djVqS1d4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xQjAwRUFFOEY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdn YkRiaUEwOFlvNHY1aktXeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfX0Q1rQfg4kh52aBwrXCy/mRTjfgAFlksPztv4SXnRVYf2fLP1HIB cLBtkn6aB7ZqkaRevFf3LzDXG53J8my81b2FAnUmraAFSPuKfLkG008pUvWzDj7Z YRYZ0R5C8Jy4bECFkJY5+m/KNzOCD5np+1qgP2elD8kXkzR7sqtYMxuaL31FxQY2 DtsitU99hddVX4WWg5nFzNgoMGxomp4KRg91oSRENY1p22vKFaprKcRrx4/EMprQ 6Zx2jdO5V0Uhey9LuZFfMfRIT5TfhVUrrhzSehr17/m4rN4x+Uf+DRAp+UqwwBdR dE8I6LSYTH38x6AWc1ZIUFc+K0brtrl1 -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:06 2024 by rpki-client on console-ams.rpki-client.org