$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: UUjOr7UmP5xqs/sNVpfQ1KRvO+E7+lVB1LqOF7p8lQQ= Subject key identifier: E1:5A:CC:18:6D:92:77:A7:1E:ED:76:BF:82:A1:AB:B7:25:5B:12:FE Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0C43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0C0A Signing time: Sun 24 Nov 2024 18:18:36 +0000 Manifest this update: Sun 24 Nov 2024 18:18:35 +0000 Manifest next update: Sun 01 Dec 2024 18:18:35 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: Klpwdwvpx6FbjP65f5DRz2NfZdZjoLuQ61+PO1UmHbI=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: a6Xwc4IgmpEHrW4twM+UR9anddZ08NYax5VtnbtXTkI=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: Gy8EKBzby7TbA7bANPsKrh8185xtB8FfvgQKdW33eec=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: ZMkvn8M/+ZjeMYlcx5BpRn45pEDyzj9iUfMiESTYCg8=) 5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: Y0Xjy0NkWka/3Qez2EmWXAAasDaGl97FsPDAHdKjWqE=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0DoL/2IpHaxAw9TImjiB81cUOFzWeL1Jqh3GctUyL3w=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: dMeU+VWkNLHSsE/YjflyFx6fuE/Tkj6eZEDgHPwyvpw=) 8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /x4gISDdQ58Cm6cZRirKRBC5irA+dN86MCQWeCpo8e4=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: l0LcGN3bLpC6egx6E1ErrRqx4ZIHX8gGWW4UD/kKTdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Nov 24 18:18:35 2024 GMT Not After : Dec 1 18:18:35 2024 GMT Subject: CN=67436dfc-27f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0d:2c:ea:b1:67:14:c3:ed:7c:86:f8:0a:74: c2:33:3f:c5:61:4d:b9:37:6a:b5:ec:44:b9:a5:df: 6e:99:c0:e5:c9:bd:41:88:97:1f:37:e7:23:ae:e9: a7:70:5b:7e:a3:bc:8d:02:28:f3:2b:ad:03:74:5d: 76:70:77:33:d0:bf:ae:90:2a:b9:63:4a:33:e7:89: 3b:d1:03:31:e7:a3:33:60:77:e0:71:31:6e:94:48: ed:79:2c:67:6b:f6:35:05:22:26:7a:87:44:5f:9b: 27:6e:fe:62:7b:c8:e3:68:a5:0c:13:55:dd:d0:cc: 43:cf:f3:a9:e4:c9:f6:37:28:cf:5b:a4:12:f3:71: 66:00:e1:00:08:4e:d6:b8:7f:b6:5d:56:65:35:43: 5d:8f:76:bb:d9:d6:82:4e:30:be:b9:1d:8d:8f:c4: 81:07:ae:30:a7:c8:a7:95:75:b1:dd:40:d4:b0:b1: f1:83:a0:f6:72:f8:a4:bc:ce:6d:9d:ba:17:35:c0: 3a:3f:18:5d:a7:ec:65:58:7a:81:3f:c0:68:a6:54: 78:51:b8:98:e1:a8:f5:47:cc:78:62:dc:46:8e:38: 84:b6:0a:c3:fa:5c:b6:ab:9d:ce:15:4d:51:11:7a: 58:26:7a:27:12:5e:c8:58:08:c4:94:34:8c:f5:46: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5A:CC:18:6D:92:77:A7:1E:ED:76:BF:82:A1:AB:B7:25:5B:12:FE X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a1:c5:64:87:93:2f:5c:73:a4:06:56:05:4c:72:ed:1a:d1: f6:62:cf:89:48:77:03:48:65:72:43:23:e2:ce:83:30:16:c5: c2:34:65:ee:de:42:74:92:32:7d:c7:ec:95:b7:38:74:f9:67: df:c0:23:39:62:e8:ed:59:cc:9a:5a:01:f9:0c:9b:ea:2a:15: 1f:98:d0:96:13:c5:f6:d2:86:c1:08:83:5d:29:3c:a2:74:4c: 5d:97:9a:0a:ba:9c:ca:5b:b0:08:3f:40:24:f3:97:94:1e:5d: 9c:c6:e8:fe:a5:76:e7:a9:45:c2:86:6b:a1:f8:5a:f2:98:1e: a0:1e:b1:f6:05:f1:f4:2a:5c:75:17:62:c5:fe:d9:82:18:5c: 21:f4:8f:1a:28:10:49:4a:1d:19:2f:85:37:c8:4c:ff:4c:50: 10:ac:df:8f:17:79:59:95:09:62:49:e4:0d:1f:f9:0b:dc:37: f2:69:a6:cf:00:54:c6:b2:24:99:41:14:c3:a7:37:65:20:af: a9:5d:13:34:0f:1a:dc:43:ee:81:06:4e:6f:69:26:eb:57:92: 05:1e:a9:0e:a4:95:44:3e:16:3d:81:f5:05:33:9a:20:a3:0a: d3:8e:ca:a8:b2:34:ca:e3:41:c6:6b:56:a8:43:b5:23:48:25: 2b:3a:f1:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjQxMTI0MTgxODM1WhcNMjQxMjAxMTgxODM1WjAYMRYwFAYD VQQDEw02NzQzNmRmYy0yN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A0s6rFnFMPtfIb4CnTCMz/FYU25N2q17ES5pd9umcDlyb1BiJcfN+cjrumn cFt+o7yNAijzK60DdF12cHcz0L+ukCq5Y0oz54k70QMx56MzYHfgcTFulEjteSxn a/Y1BSImeodEX5snbv5ie8jjaKUME1Xd0MxDz/Op5Mn2NyjPW6QS83FmAOEACE7W uH+2XVZlNUNdj3a72daCTjC+uR2Nj8SBB64wp8inlXWx3UDUsLHxg6D2cvikvM5t nboXNcA6Pxhdp+xlWHqBP8BoplR4UbiY4aj1R8x4YtxGjjiEtgrD+ly2q53OFU1R EXpYJnonEl7IWAjElDSM9Ub4qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFazBht knenHu12v4Khq7clWxL+MB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmocVkh5MvXHOkBlYFTHLtGtH2Ys+JSHcDSGVyQyPizoMwFsXCNGXu 3kJ0kjJ9x+yVtzh0+WffwCM5YujtWcyaWgH5DJvqKhUfmNCWE8X20obBCINdKTyi dExdl5oKupzKW7AIP0Ak85eUHl2cxuj+pXbnqUXChmuh+FrymB6gHrH2BfH0Klx1 F2LF/tmCGFwh9I8aKBBJSh0ZL4U3yEz/TFAQrN+PF3lZlQliSeQNH/kL3DfyaabP AFTGsiSZQRTDpzdlIK+pXRM0DxrcQ+6BBk5vaSbrV5IFHqkOpJVEPhY9gfUFM5og owrTjsqosjTK40HGa1aoQ7UjSCUrOvEf -----END CERTIFICATE-----Generated at Sun Nov 24 20:09:51 2024 by rpki-client on console-ams.rpki-client.org