$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft File: rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json) Hash identifier: Jbd9Qv5MoXu2dqqROsaJN8cZV4pdJbpe6swiCEhytoE= Subject key identifier: 3E:E4:F2:84:1C:08:00:57:DD:40:49:F4:D5:C5:04:AA:22:1C:CC:91 Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 Certificate issuer: /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft Manifest number: 18 Signing time: Thu 19 Sep 2024 06:14:45 +0000 Manifest this update: Thu 19 Sep 2024 06:14:44 +0000 Manifest next update: Thu 26 Sep 2024 06:14:44 +0000 Files and hashes: 1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: N1/RQshzSA9Mrwhc56qDmB2nvoYbXvtSuWWIfKWZ1Mo=) 2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: PmKB7v6narbsfvRh5TaIR4bk0nlj1W0GlQb30nMXpbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Validity Not Before: Sep 19 06:14:44 2024 GMT Not After : Sep 26 06:14:44 2024 GMT Subject: CN=66ebc155-f773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:3c:f0:4f:47:90:e4:10:7d:4d:6c:72:4d: a5:1b:b8:1d:64:9d:4c:ac:e7:1b:0b:97:ba:e9:67: e9:aa:7b:56:3b:57:92:2c:d0:a4:31:85:db:9d:8b: f2:e4:11:e9:b2:12:0f:47:80:9b:06:3d:24:de:13: b2:7d:59:c7:22:0f:1a:16:0a:98:6e:29:45:c3:c5: 4b:26:4d:1b:8b:11:75:a3:0b:c8:6b:0b:34:43:96: 9e:e5:cf:e6:3f:21:3f:b4:1c:53:6e:73:9e:e2:c2: 95:60:d7:26:1b:6c:08:d8:0e:6c:b0:bc:62:01:f7: 76:f1:3b:51:0a:4d:ea:6d:15:5a:cb:eb:67:14:4d: 9b:bd:98:26:0d:90:18:c6:b8:db:bf:eb:01:96:9a: 09:4c:ad:33:77:aa:5a:ee:71:0f:c4:d7:a0:89:07: a6:0c:ab:b0:e7:53:d0:79:cf:07:03:de:97:19:52: ac:81:08:2e:2e:b5:d5:b8:ba:6b:a2:a1:ab:68:3b: a1:b5:60:9b:df:d2:cb:35:01:e1:9a:53:a8:8f:f7: e0:30:b8:3b:b4:25:b1:0d:2a:dd:43:a8:bb:d1:17: fa:ae:d9:fa:25:f8:a7:9c:95:86:39:f1:46:06:57: cc:b4:48:ab:03:ec:42:ee:f4:53:e6:9e:af:ac:ef: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E4:F2:84:1C:08:00:57:DD:40:49:F4:D5:C5:04:AA:22:1C:CC:91 X509v3 Authority Key Identifier: keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:62:fc:66:b5:bd:e8:b1:37:52:6a:16:1a:f0:6a:47:7a:b9: 8b:e0:be:38:6c:d4:c7:34:fd:78:aa:be:bf:78:67:57:78:ec: 35:cc:a7:b2:7c:75:bb:8b:b6:0b:cb:5a:fd:66:e2:1b:4e:f2: cc:3e:f9:9f:41:01:a5:74:f4:da:3a:94:41:0d:34:8d:83:83: 8f:a9:ca:1e:98:49:b4:36:7a:4a:fb:45:98:46:4e:9b:54:f8: 4d:74:9d:23:80:cb:6b:21:f4:ef:fe:6a:6d:cc:06:ab:1b:eb: a8:b1:77:69:f0:b5:50:7a:f3:39:d6:0e:78:2b:d5:ba:ee:4b: 10:2d:79:34:14:c7:69:17:52:49:ef:83:bb:44:65:b8:50:be: ef:7d:be:5c:56:60:2b:84:82:3f:f5:7f:85:7c:ef:10:79:d2: 4b:28:04:89:f7:cc:8c:25:98:92:1a:47:3e:b8:cf:cc:ec:66: da:2b:cd:30:15:f1:f2:c2:fe:14:de:b2:4e:7b:ed:26:b2:d5: 2b:93:45:aa:ab:8b:ad:61:0b:64:8d:80:aa:33:c1:34:18:d5: d2:3a:15:06:79:50:02:5e:8b:c8:1d:a0:bf:e6:da:5c:03:c6: 50:d8:35:38:43:ad:fb:1d:5c:bf:fb:58:e7:ef:31:46:3c:eb: 46:fa:6b:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTY5QTExMC8GA1UEBRMoQUU2NThFQTM3N0VBMTE4NDBCMDhFQTZDODhEOTA5MEU4 QjZDNTIwNDAeFw0yNDA5MTkwNjE0NDRaFw0yNDA5MjYwNjE0NDRaMBgxFjAUBgNV BAMTDTY2ZWJjMTU1LWY3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVczzwT0eQ5BB9TWxyTaUbuB1knUys5xsLl7rpZ+mqe1Y7V5Is0KQxhdudi/Lk EemyEg9HgJsGPSTeE7J9WcciDxoWCphuKUXDxUsmTRuLEXWjC8hrCzRDlp7lz+Y/ IT+0HFNuc57iwpVg1yYbbAjYDmywvGIB93bxO1EKTeptFVrL62cUTZu9mCYNkBjG uNu/6wGWmglMrTN3qlrucQ/E16CJB6YMq7DnU9B5zwcD3pcZUqyBCC4utdW4umui oatoO6G1YJvf0ss1AeGaU6iP9+AwuDu0JbENKt1DqLvRF/qu2fol+KeclYY58UYG V8y0SKsD7ELu9FPmnq+s77crAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPuTyhBwI AFfdQEn01cUEqiIczJEwHwYDVR0jBBgwFoAUrmWOo3fqEYQLCOpsiNkJDotsUgQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNjlBLzhCMEU3MzgwNTg5 MjExRUY4NkIxMjU2NEM0RjlBRTAyL3JtV09vM2ZxRVlRTENPcHNpTmtKRG90c1Vn US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcm1XT28zZnFFWVFMQ09wc2lOa0pEb3RzVWdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NjlBLzhCMEU3MzgwNTg5MjExRUY4NkIxMjU2NEM0RjlBRTAyL3JtV09vM2ZxRVlR TENPcHNpTmtKRG90c1VnUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB5i/Ga1veixN1JqFhrwakd6uYvgvjhs1Mc0/Xiqvr94Z1d47DXMp7J8 dbuLtgvLWv1m4htO8sw++Z9BAaV09No6lEENNI2Dg4+pyh6YSbQ2ekr7RZhGTptU +E10nSOAy2sh9O/+am3MBqsb66ixd2nwtVB68znWDngr1bruSxAteTQUx2kXUknv g7tEZbhQvu99vlxWYCuEgj/1f4V87xB50ksoBIn3zIwlmJIaRz64z8zsZtorzTAV 8fLC/hTesk577Say1SuTRaqri61hC2SNgKozwTQY1dI6FQZ5UAJei8gdoL/m2lwD xlDYNThDrfsdXL/7WOfvMUY860b6a/g= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:03 2024 by rpki-client on console-ams.rpki-client.org