$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json) Hash identifier: TrZvyXFgR9j0LzWd9lTar75gy5WelTIcSpj3w/KbQhM= Subject key identifier: 44:D1:8C:37:16:E9:FA:31:3A:8E:2A:C3:C9:D2:E3:59:B9:30:48:9C Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft Manifest number: 2D Signing time: Sun 15 Sep 2024 10:05:14 +0000 Manifest this update: Sun 15 Sep 2024 10:05:14 +0000 Manifest next update: Sun 22 Sep 2024 10:05:14 +0000 Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: uyQyLesOQfzUwj7TRg/zHejaQHT6bYsJvabBxQm+a/k=) 2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: qL2lFwzQsNJvHM1X7F1IcBH5Nn+NnL8ACspFUTuHDlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Validity Not Before: Sep 15 10:05:14 2024 GMT Not After : Sep 22 10:05:14 2024 GMT Subject: CN=66e6b15a-bb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a6:f3:e8:13:c0:9d:6c:d5:ce:aa:e2:58:57: ba:a0:3f:f7:f9:d3:33:bc:c6:ec:ac:4f:39:1c:4b: d2:d9:11:4b:a2:82:1e:a5:64:04:54:73:f4:7b:e9: 68:0d:e0:7a:0c:a2:0d:1f:b8:33:ca:85:40:cb:46: 3c:ae:8d:39:a0:b1:9c:ca:79:d5:dc:0e:de:4f:00: 70:99:ce:eb:42:58:38:eb:8f:20:a5:2b:20:bb:f8: c5:4e:af:1f:20:7d:93:a3:e3:bc:e1:c6:5d:bd:46: 0c:8d:94:43:8e:ec:b0:37:d4:1e:4d:40:9e:e3:f1: 0c:42:36:a4:95:a2:34:11:7c:98:ff:93:e6:12:cb: 18:a3:a1:6c:10:5e:0f:be:40:4b:98:08:e5:81:3b: b9:e9:c6:99:d5:74:cb:d3:e3:da:ce:97:d4:9e:d5: 40:1c:73:9b:88:a1:04:d3:cd:da:40:3c:eb:a3:c2: 53:9f:1a:2f:52:4c:2a:70:45:cb:fc:0e:9c:1b:d4: 39:58:8b:2b:ef:65:8d:76:a3:8f:ca:49:bc:c7:4f: 60:ae:82:76:0b:b2:03:96:6f:db:b9:63:62:a6:f8: a9:2c:d4:bc:37:2d:df:88:1c:8f:42:01:25:58:c7: 88:97:70:28:a4:2a:3f:cd:8b:e8:c9:7c:74:e2:b9: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:8C:37:16:E9:FA:31:3A:8E:2A:C3:C9:D2:E3:59:B9:30:48:9C X509v3 Authority Key Identifier: keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:bf:86:14:ed:9a:bb:d2:2c:f6:87:6f:85:17:69:a5:48:e1: f6:13:b3:4c:18:f6:cd:38:b8:77:a0:40:f7:4e:01:58:a2:29: e2:cc:5b:55:5c:80:2a:19:82:35:c1:f2:55:94:c6:98:90:b0: 99:e9:1f:58:47:f5:29:b7:ea:2a:dc:f8:3c:9d:42:8b:a5:c7: dd:d3:58:81:54:76:37:cb:cd:71:a0:23:9a:45:cf:d9:21:53: bc:08:7c:b4:74:0d:7d:97:d5:cc:cc:a7:69:b6:01:49:b2:50: 40:45:30:ee:8d:ca:08:02:9b:cb:e3:7c:a2:4d:88:59:99:29: f4:21:8e:6f:66:90:2f:58:19:63:5a:59:6c:ec:e0:08:49:48: 4a:88:ad:2e:70:b7:00:b4:3c:86:03:59:79:4f:30:2c:9d:08: a8:96:8a:16:33:80:81:75:a6:bb:96:51:3a:20:77:b0:e0:ac: 74:a2:62:a9:ea:82:30:55:26:98:7d:3f:9f:33:80:0c:52:b4: 0f:5a:db:b5:d1:67:b1:eb:1a:1c:86:f0:49:cf:e2:c5:82:c7: f2:3b:58:b1:5e:cb:36:f5:5f:8f:71:a7:2b:50:36:53:1e:55: 9e:97:f3:55:25:78:f1:43:78:d9:e2:be:1c:a3:69:1b:a8:af: 84:4e:23:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTNFNzExMC8GA1UEBRMoOUQ2Qzc1MENFMDM5M0MyMDBBQkY4QTY3MUMxRjJDMjA2 QTBDQjQ3MTAeFw0yNDA5MTUxMDA1MTRaFw0yNDA5MjIxMDA1MTRaMBgxFjAUBgNV BAMTDTY2ZTZiMTVhLWJiMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzpvPoE8CdbNXOquJYV7qgP/f50zO8xuysTzkcS9LZEUuigh6lZARUc/R76WgN 4HoMog0fuDPKhUDLRjyujTmgsZzKedXcDt5PAHCZzutCWDjrjyClKyC7+MVOrx8g fZOj47zhxl29RgyNlEOO7LA31B5NQJ7j8QxCNqSVojQRfJj/k+YSyxijoWwQXg++ QEuYCOWBO7npxpnVdMvT49rOl9Se1UAcc5uIoQTTzdpAPOujwlOfGi9STCpwRcv8 Dpwb1DlYiyvvZY12o4/KSbzHT2CugnYLsgOWb9u5Y2Km+Kks1Lw3Ld+IHI9CASVY x4iXcCikKj/Ni+jJfHTiuX05AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURNGMNxbp +jE6jirDydLjWbkwSJwwHwYDVR0jBBgwFoAUnWx1DOA5PCAKv4pnHB8sIGoMtHEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExM0U3LzlEM0EyMDAwMkY1 NjExRUZBMjNFNUEyM0M0RjlBRTAyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRI RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbld4MURPQTVQQ0FLdjRwbkhCOHNJR29NdEhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx M0U3LzlEM0EyMDAwMkY1NjExRUZBMjNFNUEyM0M0RjlBRTAyL25XeDFET0E1UENB S3Y0cG5IQjhzSUdvTXRIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAm/hhTtmrvSLPaHb4UXaaVI4fYTs0wY9s04uHegQPdOAViiKeLMW1Vc gCoZgjXB8lWUxpiQsJnpH1hH9Sm36irc+DydQoulx93TWIFUdjfLzXGgI5pFz9kh U7wIfLR0DX2X1czMp2m2AUmyUEBFMO6NyggCm8vjfKJNiFmZKfQhjm9mkC9YGWNa WWzs4AhJSEqIrS5wtwC0PIYDWXlPMCydCKiWihYzgIF1pruWUTogd7DgrHSiYqnq gjBVJph9P58zgAxStA9a27XRZ7HrGhyG8EnP4sWCx/I7WLFeyzb1X49xpytQNlMe VZ6X81UlePFDeNnivhyjaRuor4ROI9s= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:08 2024 by rpki-client on console-fra.rpki-client.org