$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft File: e0Coz49PGgbDbiA08Yo4v5jKWxg.mft (raw, json) Hash identifier: Uqwgm4cqi8c9tdPS4sHqDyxrDXYKyfchBUiOLZxQCtk= Subject key identifier: 06:EC:35:1D:DE:5D:A3:1A:2D:FA:15:AC:BC:69:67:7A:8D:A2:FD:D2 Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 Certificate issuer: /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft Manifest number: BD Signing time: Tue 07 May 2024 06:25:58 +0000 Manifest this update: Tue 07 May 2024 06:25:58 +0000 Manifest next update: Tue 14 May 2024 06:25:58 +0000 Files and hashes: 1: e0Coz49PGgbDbiA08Yo4v5jKWxg.crl (hash: LnOrXo5tz6t1hJM3Ws5pHHTVwCS7ZWx3SsY9xyMvD0Y=) 2: A74C3132F49211ED8659177BC4F9AE02.roa (hash: J6N5IV7MCpXlVeF8cR4PHiRc9CQaom2wbzrHsgmKoxg=) 3: 2F9915D8718D11EE97E3E022C4F9AE02.roa (hash: l7v8jCh+6Pph9kyKmndNAaIV1W+fpuYotDnXZzaMmeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Validity Not Before: May 7 06:25:58 2024 GMT Not After : May 14 06:25:58 2024 GMT Subject: CN=6639c976-583b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:2b:2c:9f:1a:d2:fc:cf:3f:b8:ba:ec:ed: ca:35:b6:a8:fc:ba:b9:a1:24:9d:f3:1c:92:a5:c5: 03:3f:62:81:80:87:f7:77:7a:39:06:d5:6e:94:87: 41:86:9d:0a:c0:f6:05:06:f2:c0:3a:c8:1f:dd:a8: 71:78:05:78:7c:30:d0:37:34:f4:ea:c1:2a:be:14: f2:21:ab:e4:26:31:10:06:71:d1:9b:3d:0c:73:bf: 94:2c:2c:1c:0c:3b:0c:05:89:65:cb:0e:4f:9c:92: 81:04:06:91:ea:de:40:f0:f9:3a:56:90:2a:50:56: 10:56:3d:16:34:e4:c7:05:1e:8c:bc:7f:55:b7:f5: 8d:cb:08:c6:42:5c:fb:ea:87:11:1e:0e:dd:20:05: d7:2e:5a:8b:c8:d7:db:70:1c:7b:a0:d8:8f:98:07: 31:82:e2:54:79:86:b2:f8:32:d8:62:a8:0f:f2:db: d7:4d:ee:1f:32:f4:0d:38:5d:22:6f:a8:01:2b:5a: 88:02:9c:26:b7:d4:72:ce:6a:53:83:d3:ea:49:f0: f1:58:ef:22:5d:c6:ca:33:46:ff:17:42:1a:f7:c3: bf:40:ee:41:76:80:d9:18:59:d1:f3:f5:07:0b:a3: 7e:bf:b0:a1:28:12:1b:d1:d5:9a:2e:fd:3b:d7:ae: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EC:35:1D:DE:5D:A3:1A:2D:FA:15:AC:BC:69:67:7A:8D:A2:FD:D2 X509v3 Authority Key Identifier: keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:16:c4:ca:76:05:bc:a9:c8:e0:94:0c:ea:89:8c:80:d4:53: 27:25:66:31:1c:65:aa:1f:e6:4f:a0:fa:1f:0b:59:39:ce:da: f3:1d:1c:27:ec:44:59:c0:42:87:6f:54:28:b9:68:21:74:56: c5:09:c9:ff:aa:b3:f0:33:e5:62:16:84:d7:5d:c9:76:58:fc: e9:a1:f4:74:09:9f:5c:f0:30:7e:75:85:f0:11:a6:1e:cb:6c: d2:a2:be:dc:50:f7:bd:df:02:7c:ed:6f:28:0e:ef:4e:98:a1: 1c:0d:5a:39:f8:2b:22:8a:0f:25:7a:d5:a2:b3:07:06:3f:b1: 0a:c2:7b:af:ac:ac:65:64:c6:99:a2:1b:00:68:4b:2f:63:98: bd:83:20:e0:5a:12:66:36:e4:af:82:ed:4b:f5:5a:bf:23:2e: 7f:1e:d1:7b:e7:6a:8a:5e:11:9c:73:83:9e:61:f8:4d:91:c2: 30:a7:40:f3:97:ef:99:3e:d9:fc:82:5e:fc:7d:bb:8c:df:93: cf:2b:98:7b:35:d2:38:9e:e2:23:30:64:3c:4b:27:53:d5:00: e0:5d:fd:d1:f2:d6:3e:a5:db:ff:a0:a3:7b:9a:cd:ea:79:1c: d3:f3:df:b7:7b:8d:9f:8c:e5:58:7d:74:cc:3e:0b:76:06:4d: b2:7f:ff:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDdCNDBBOENGOEY0RjFBMDZDMzZFMjAzNEYxOEEzOEJG OThDQTVCMTgwHhcNMjQwNTA3MDYyNTU4WhcNMjQwNTE0MDYyNTU4WjAYMRYwFAYD VQQDEw02NjM5Yzk3Ni01ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWUrLJ8a0vzPP7i67O3KNbao/Lq5oSSd8xySpcUDP2KBgIf3d3o5BtVulIdB hp0KwPYFBvLAOsgf3ahxeAV4fDDQNzT06sEqvhTyIavkJjEQBnHRmz0Mc7+ULCwc DDsMBYllyw5PnJKBBAaR6t5A8Pk6VpAqUFYQVj0WNOTHBR6MvH9Vt/WNywjGQlz7 6ocRHg7dIAXXLlqLyNfbcBx7oNiPmAcxguJUeYay+DLYYqgP8tvXTe4fMvQNOF0i b6gBK1qIApwmt9RyzmpTg9PqSfDxWO8iXcbKM0b/F0Ia98O/QO5BdoDZGFnR8/UH C6N+v7ChKBIb0dWaLv07167d+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbsNR3e XaMaLfoVrLxpZ3qNov3SMB8GA1UdIwQYMBaAFHtAqM+PTxoGw24gNPGKOL+YylsY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xQjAwRUFFOEY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdnYkRiaUEwOFlvNHY1aktX eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UwQ296NDlQR2diRGJpQTA4WW80djVqS1d4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xQjAwRUFFOEY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdn YkRiaUEwOFlvNHY1aktXeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2FsTKdgW8qcjglAzqiYyA1FMnJWYxHGWqH+ZPoPofC1k5ztrzHRwn 7ERZwEKHb1QouWghdFbFCcn/qrPwM+ViFoTXXcl2WPzpofR0CZ9c8DB+dYXwEaYe y2zSor7cUPe93wJ87W8oDu9OmKEcDVo5+Csiig8letWiswcGP7EKwnuvrKxlZMaZ ohsAaEsvY5i9gyDgWhJmNuSvgu1L9Vq/Iy5/HtF752qKXhGcc4OeYfhNkcIwp0Dz l++ZPtn8gl78fbuM35PPK5h7NdI4nuIjMGQ8SydT1QDgXf3R8tY+pdv/oKN7ms3q eRzT89+3e42fjOVYfXTMPgt2Bk2yf//x -----END CERTIFICATE-----Generated at Tue May 7 07:01:20 2024 by rpki-client on console-fra.rpki-client.org