$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft File: mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json) Hash identifier: OemTr894G6lfB74xfg8Ts914IgHxZYVgArmmUZYuxtA= Subject key identifier: 0E:0D:58:B6:71:FB:74:32:6C:C6:CD:1A:BC:E3:DD:EF:E0:47:66:9F Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB Certificate issuer: /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft Manifest number: 2B Signing time: Sun 15 Sep 2024 10:08:24 +0000 Manifest this update: Sun 15 Sep 2024 10:08:24 +0000 Manifest next update: Sun 22 Sep 2024 10:08:24 +0000 Files and hashes: 1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: WzsbMoEpeBDJi6ewCeMvscXjw6V4uj4WKsy+UDh/J6Q=) 2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: 5xe8CAklHEvfHNnz1/f5nBginvtCFLJVR3UsgZ34D1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB Validity Not Before: Sep 15 10:08:24 2024 GMT Not After : Sep 22 10:08:24 2024 GMT Subject: CN=66e6b218-c9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:3d:4a:80:5d:aa:98:36:84:68:ca:4f:a2: 4f:b8:7c:b9:5b:76:d8:69:0e:2e:1b:13:84:b0:64: 4a:08:16:cb:f4:54:96:88:c7:a5:09:a5:9f:38:cc: 8f:5f:29:54:32:d2:5d:b7:21:60:84:a7:e1:41:35: b1:99:54:96:ea:08:3f:33:18:15:48:b2:45:ee:f5: 87:9e:8c:ab:e2:67:46:35:46:59:d5:a7:30:38:9d: 4b:35:77:3c:7f:5a:0f:0e:5e:39:05:77:ff:a2:8a: 8d:1f:16:b8:61:e4:ba:82:52:96:eb:ee:b1:e0:15: 16:29:b7:22:99:41:1a:aa:db:31:2f:78:c1:13:cb: 88:1e:a4:6e:ab:21:05:b8:cd:77:a7:d6:3e:1f:4f: aa:bd:e0:b4:94:82:9c:fc:64:39:53:4f:df:46:b4: 41:9a:84:d5:7e:91:2f:72:df:e6:68:96:bd:a5:8d: 51:32:9b:27:6a:5f:7f:f8:b6:ca:5f:d4:1b:e7:7a: 34:d8:d9:a4:22:1c:a8:79:46:d0:ff:b5:4b:92:60: 53:0b:e9:3b:e0:27:ba:b8:14:18:fb:33:22:41:60: 07:e8:98:ad:aa:d2:26:af:a7:c6:b1:d3:91:f0:e3: 45:68:bd:6c:47:cb:62:8d:66:65:a7:41:01:99:0e: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0D:58:B6:71:FB:74:32:6C:C6:CD:1A:BC:E3:DD:EF:E0:47:66:9F X509v3 Authority Key Identifier: keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6b:ab:14:95:fe:83:7a:23:b9:99:9e:4f:a8:d9:fc:84:88: c0:6c:12:3c:d8:04:b9:5c:f3:d0:39:d0:72:3b:7a:d9:a0:c4: f6:3c:80:7d:81:f4:6c:f0:bd:75:36:10:84:8d:a9:eb:eb:46: 98:68:2a:e3:84:b6:94:e8:f5:10:28:2a:ec:32:4a:0e:61:73: 5b:ba:94:6c:45:2d:42:40:26:0c:76:35:c1:83:c6:22:8c:29: 61:ea:08:ba:d2:11:6b:56:65:57:7f:92:4f:e8:27:0f:af:27: 21:8c:62:1a:7e:81:29:68:aa:82:50:dd:f4:8f:fa:f3:45:87: 6c:5f:e8:3d:ce:fc:56:5d:7c:a0:65:1a:8f:d3:03:53:46:65: 9e:40:24:3e:9a:5a:af:6e:a2:2d:02:11:49:45:27:a3:c0:28: 86:da:5d:3c:05:1e:28:d1:b7:1c:6e:82:a6:d2:bd:b5:b3:b9: b0:68:47:44:ee:fb:42:e8:34:76:98:a5:e0:aa:19:64:58:18: b1:bc:f4:76:36:b5:2e:29:7f:db:dd:55:74:f6:5c:b9:a1:8b: 46:4f:dc:40:a6:55:a2:0d:46:4c:60:60:56:a4:eb:7c:81:c5: 2a:5c:ae:64:02:c2:cb:72:ee:47:b7:f1:bf:55:4a:67:d6:16: 29:e2:74:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjREMzExMC8GA1UEBRMoOTk2QjE5NkZDQTNDNzIxODcxRUU5RTE0MTM5MzJCOEI1 MEVEMDlBQjAeFw0yNDA5MTUxMDA4MjRaFw0yNDA5MjIxMDA4MjRaMBgxFjAUBgNV BAMTDTY2ZTZiMjE4LWM5YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCET1KgF2qmDaEaMpPok+4fLlbdthpDi4bE4SwZEoIFsv0VJaIx6UJpZ84zI9f KVQy0l23IWCEp+FBNbGZVJbqCD8zGBVIskXu9YeejKviZ0Y1RlnVpzA4nUs1dzx/ Wg8OXjkFd/+iio0fFrhh5LqCUpbr7rHgFRYptyKZQRqq2zEveMETy4gepG6rIQW4 zXen1j4fT6q94LSUgpz8ZDlTT99GtEGahNV+kS9y3+Zolr2ljVEymydqX3/4tspf 1BvnejTY2aQiHKh5RtD/tUuSYFML6TvgJ7q4FBj7MyJBYAfomK2q0iavp8ax05Hw 40VovWxHy2KNZmWnQQGZDvHnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDg1YtnH7 dDJsxs0avOPd7+BHZp8wHwYDVR0jBBgwFoAUmWsZb8o8chhx7p4UE5Mri1DtCasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2NEQzLzE1NTA0OEVBMzM4 OTExRUY5OUZEMUMyN0M0RjlBRTAyL21Xc1piOG84Y2hoeDdwNFVFNU1yaTFEdENh cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbVdzWmI4bzhjaGh4N3A0VUU1TXJpMUR0Q2FzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 NEQzLzE1NTA0OEVBMzM4OTExRUY5OUZEMUMyN0M0RjlBRTAyL21Xc1piOG84Y2ho eDdwNFVFNU1yaTFEdENhcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ5rqxSV/oN6I7mZnk+o2fyEiMBsEjzYBLlc89A50HI7etmgxPY8gH2B 9GzwvXU2EISNqevrRphoKuOEtpTo9RAoKuwySg5hc1u6lGxFLUJAJgx2NcGDxiKM KWHqCLrSEWtWZVd/kk/oJw+vJyGMYhp+gSloqoJQ3fSP+vNFh2xf6D3O/FZdfKBl Go/TA1NGZZ5AJD6aWq9uoi0CEUlFJ6PAKIbaXTwFHijRtxxugqbSvbWzubBoR0Tu +0LoNHaYpeCqGWRYGLG89HY2tS4pf9vdVXT2XLmhi0ZP3ECmVaINRkxgYFak63yB xSpcrmQCwsty7ke38b9VSmfWFinidFY= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:08 2024 by rpki-client on console-fra.rpki-client.org