$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json) Hash identifier: kFJ1HB626nhfRynsVaB/KZqpCXTxSG8nb0A4hLSPlyA= Subject key identifier: 3B:13:EE:72:1B:C7:A7:29:13:B7:51:67:C6:BC:82:BD:FC:F3:DC:C7 Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft Manifest number: 09 Signing time: Wed 23 Oct 2024 06:49:00 +0000 Manifest this update: Wed 23 Oct 2024 06:49:00 +0000 Manifest next update: Wed 30 Oct 2024 06:49:00 +0000 Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: Oj0ymM5fTNrZphkC8wCUkNQWmLcuJQGarNeFmPCUM6Q=) 2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Validity Not Before: Oct 23 06:49:00 2024 GMT Not After : Oct 30 06:49:00 2024 GMT Subject: CN=67189c5c-0230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:14:d7:d1:66:de:b7:a4:2e:3f:c0:22:e7:d9: 3c:54:ed:ec:bc:2b:ef:1f:46:d3:0d:cb:16:82:69: 96:ff:7f:e1:e8:9d:cc:43:d7:ed:9e:c2:f0:b2:81: 15:f4:16:39:75:28:b5:4a:8d:c0:45:eb:d8:1e:b8: 3f:f2:fc:80:37:20:69:fe:d2:6e:4d:f0:17:86:c5: 30:bc:9f:9b:be:ee:42:97:f2:64:30:58:d3:0d:cd: 17:26:bd:6a:18:c3:e5:90:8c:5c:e1:0f:90:c5:e1: 46:9f:b1:cb:bf:94:39:37:98:84:d2:b4:f8:84:5f: 46:3e:57:55:c9:6f:b2:c9:c1:cf:05:12:1a:2c:71: df:0b:4b:0d:de:f6:76:16:1f:47:5e:16:07:07:6f: ff:68:98:0f:8b:77:02:4b:0b:3d:fa:1e:52:a0:fe: 7d:e8:ca:59:41:ac:d6:78:08:b7:c8:18:92:8b:ed: e1:b5:73:4a:6d:10:63:53:80:b3:2a:db:f2:ae:ea: c8:51:dd:a4:c3:5c:ef:41:6b:7b:18:8c:9c:05:fa: fc:11:5d:c7:1a:43:49:9b:92:06:b7:d8:5a:06:f7: 50:e2:0b:87:61:e7:7b:b8:ca:e3:bc:a1:cb:53:a8: 99:51:d7:56:b0:de:8a:7f:37:6d:9a:ef:bb:ed:9b: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:EE:72:1B:C7:A7:29:13:B7:51:67:C6:BC:82:BD:FC:F3:DC:C7 X509v3 Authority Key Identifier: keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fa:61:a2:af:9f:1e:84:d6:a7:bb:3a:95:20:54:d1:20:8a: 1d:fa:67:a9:2a:75:bf:34:91:24:4f:6f:57:2b:f4:87:cd:18: d6:d3:ed:da:fa:34:e9:56:1d:b6:7a:a4:62:f9:9c:8b:0b:f5: 6b:9b:cd:7a:f9:79:21:19:8b:07:c0:db:95:3f:89:49:ab:e0: 5b:23:96:98:64:7a:d1:2e:a7:b2:d0:4f:d3:e5:6a:c5:7e:54: 8f:db:a4:4f:a0:cf:15:28:4c:ab:95:69:45:9a:a3:56:a6:1e: c8:11:35:bf:8d:1d:74:06:75:eb:10:57:0e:96:10:62:2d:e2: 60:dc:98:9e:1b:f1:a2:d0:a6:13:be:07:84:13:16:81:39:52: 0e:2f:af:85:ab:17:35:08:f2:f6:72:e1:52:94:6e:33:ef:7d: b0:63:6f:ea:05:f5:90:1d:1b:08:56:23:af:49:3a:c7:e4:0f: 45:86:a7:ea:b5:46:35:7a:7e:ab:b6:f1:7e:0f:bd:cd:b6:af: 1a:09:b3:af:35:1b:28:6a:32:6f:05:03:09:20:75:b7:a2:19: 33:52:41:28:9c:12:8c:b8:24:d2:ad:68:bc:c2:d7:15:a4:74: f9:ee:50:74:9f:d9:39:3e:15:26:5d:aa:de:42:db:3b:a6:1f: a1:fe:54:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjYzMzExMC8GA1UEBRMoMTNEN0ExM0I0MjNCQjZFODdBMUE3NUI3NDkzRjBCQzE5 RDBDRUFBMzAeFw0yNDEwMjMwNjQ5MDBaFw0yNDEwMzAwNjQ5MDBaMBgxFjAUBgNV BAMTDTY3MTg5YzVjLTAyMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0FNfRZt63pC4/wCLn2TxU7ey8K+8fRtMNyxaCaZb/f+HoncxD1+2ewvCygRX0 Fjl1KLVKjcBF69geuD/y/IA3IGn+0m5N8BeGxTC8n5u+7kKX8mQwWNMNzRcmvWoY w+WQjFzhD5DF4Uafscu/lDk3mITStPiEX0Y+V1XJb7LJwc8FEhoscd8LSw3e9nYW H0deFgcHb/9omA+LdwJLCz36HlKg/n3oyllBrNZ4CLfIGJKL7eG1c0ptEGNTgLMq 2/Ku6shR3aTDXO9Ba3sYjJwF+vwRXccaQ0mbkga32FoG91DiC4dh53u4yuO8octT qJlR11aw3op/N22a77vtmzZVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOxPuchvH pykTt1FnxryCvfzz3McwHwYDVR0jBBgwFoAUE9ehO0I7tuh6GnW3ST8LwZ0M6qMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0QwQUI5M0U0ODZE OTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRTllaE8wSTd0dWg2R25XM1NUOEx3WjBNNnFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NjMzL0QwQUI5M0U0ODZEOTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVo NkduVzNTVDhMd1owTTZxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFf6YaKvnx6E1qe7OpUgVNEgih36Z6kqdb80kSRPb1cr9IfNGNbT7dr6 NOlWHbZ6pGL5nIsL9WubzXr5eSEZiwfA25U/iUmr4FsjlphketEup7LQT9PlasV+ VI/bpE+gzxUoTKuVaUWao1amHsgRNb+NHXQGdesQVw6WEGIt4mDcmJ4b8aLQphO+ B4QTFoE5Ug4vr4WrFzUI8vZy4VKUbjPvfbBjb+oF9ZAdGwhWI69JOsfkD0WGp+q1 RjV6fqu28X4Pvc22rxoJs681GyhqMm8FAwkgdbeiGTNSQSicEoy4JNKtaLzC1xWk dPnuUHSf2Tk+FSZdqt5C2zumH6H+VFA= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org