$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: 6VyvLH8XwnJ3sCzlfyBRQifrFD8uXFisb19nRUuzo6s= Subject key identifier: 69:7C:C2:B4:0F:BB:B3:18:BB:8D:5C:7E:9A:91:F5:7F:31:19:31:AB Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 21 Signing time: Sun 15 Sep 2024 10:19:18 +0000 Manifest this update: Sun 15 Sep 2024 10:19:18 +0000 Manifest next update: Sun 22 Sep 2024 10:19:18 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: EM6Fu2lvczGiKWIwbKBzUGo7NwfBLyKhjyhWyWEnU/I=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: 3HXgfR2xDybCR9JbXAm4K9BmBrTeyB6NLob5uNWXRyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Sep 15 10:19:18 2024 GMT Not After : Sep 22 10:19:18 2024 GMT Subject: CN=66e6b4a6-af04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:c5:cb:7e:3f:4f:ac:7d:c7:fe:c9:39:d7: 9f:27:7f:fc:d6:cf:23:0d:e3:5c:32:a9:38:ff:df: 43:79:86:db:79:23:28:ac:4d:2a:40:c8:c0:f1:f5: cf:29:89:9a:5d:69:57:64:6a:48:02:7f:0c:b2:07: 80:ef:61:d2:14:8b:b4:5c:16:c5:24:ce:6c:14:06: a4:74:23:e2:36:d8:2c:45:98:45:ce:8c:9d:25:0b: 1e:5d:c8:76:31:be:18:ce:01:c5:da:29:49:05:da: c8:55:95:76:04:b6:80:62:e4:c1:1b:2e:96:fc:34: c9:94:72:6e:9c:34:b4:20:b0:23:72:97:eb:b3:b7: bc:b4:e7:29:c8:d3:53:b1:b6:8f:de:9e:dd:86:1e: 69:a5:85:fc:38:a5:86:c6:cf:a3:e3:cf:13:50:a4: 0a:87:9d:27:b6:a7:84:bf:a1:33:ab:71:dd:cc:63: 0d:9f:da:b7:4b:1b:54:b3:dd:37:d5:ad:f1:92:00: d7:c8:60:14:02:cf:a1:a1:bd:aa:bd:d4:44:99:e0: 17:3b:03:d2:94:da:f1:a3:ed:e2:93:b4:4a:63:18: 84:72:73:b2:5d:63:35:be:05:ac:53:8c:20:5c:aa: 0e:e9:41:71:2c:01:aa:ad:03:74:6d:02:df:7d:6b: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7C:C2:B4:0F:BB:B3:18:BB:8D:5C:7E:9A:91:F5:7F:31:19:31:AB X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2f:b8:4a:b7:c1:db:12:2d:01:b0:ba:ac:9f:aa:58:89:a2: c2:70:e6:07:a7:a6:eb:b9:af:28:14:7f:35:dd:35:62:e4:09: 8e:fc:ed:e6:24:51:6e:2c:81:6d:d7:6e:da:be:43:2f:1a:49: 2e:0f:15:d0:c5:c0:45:7b:d4:1e:7e:9f:38:b4:62:64:08:ae: ed:d3:db:da:cf:0d:49:e8:fe:a7:2d:ff:ca:f3:75:5d:65:38: 8c:69:5b:f9:24:c8:46:19:a9:24:bc:cd:a5:cc:d7:f1:77:4a: 00:39:cc:e0:2e:71:18:d1:3f:67:0d:af:88:7f:e3:3d:87:89: 24:11:f6:4c:16:15:32:78:de:cf:8f:cc:3e:4b:51:2e:b4:2e: 3d:2c:c1:64:6a:a1:29:f2:59:e2:2a:ba:b7:6a:6f:69:01:09: 1a:66:16:16:b0:b9:86:11:c4:ba:eb:81:59:88:fa:66:3c:5f: a5:3b:c5:2d:f5:7f:38:65:29:93:ec:45:b6:96:44:c1:44:3f: 98:cc:93:4b:c7:93:11:40:b9:06:d7:c7:6a:8b:73:5c:94:bb: 27:e0:e2:20:1f:d1:b1:21:4a:18:06:e4:8d:76:ff:a8:bd:34: 54:a6:ca:97:1c:e5:05:81:2c:54:59:db:96:c3:30:43:6e:d7: b0:06:98:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkRBOTExMC8GA1UEBRMoQjRFN0UzNDRBRENFMzZEODRGMUYzQUJDQ0QxNEIyNEMx NTEyQkJBQTAeFw0yNDA5MTUxMDE5MThaFw0yNDA5MjIxMDE5MThaMBgxFjAUBgNV BAMTDTY2ZTZiNGE2LWFmMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuNsXLfj9PrH3H/sk5158nf/zWzyMN41wyqTj/30N5htt5IyisTSpAyMDx9c8p iZpdaVdkakgCfwyyB4DvYdIUi7RcFsUkzmwUBqR0I+I22CxFmEXOjJ0lCx5dyHYx vhjOAcXaKUkF2shVlXYEtoBi5MEbLpb8NMmUcm6cNLQgsCNyl+uzt7y05ynI01Ox to/ent2GHmmlhfw4pYbGz6PjzxNQpAqHnSe2p4S/oTOrcd3MYw2f2rdLG1Sz3TfV rfGSANfIYBQCz6Ghvaq91ESZ4Bc7A9KU2vGj7eKTtEpjGIRyc7JdYzW+BaxTjCBc qg7pQXEsAaqtA3RtAt99a+ETAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaXzCtA+7 sxi7jVx+mpH1fzEZMaswHwYDVR0jBBgwFoAUtOfjRK3ONthPHzq8zRSyTBUSu6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCREE5LzM2QTUzMEY2NDRC RDExRUZCNzNEQjc3QkM0RjlBRTAyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdE9malJLM09OdGhQSHpxOHpSU3lUQlVTdTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC REE5LzM2QTUzMEY2NDRCRDExRUZCNzNEQjc3QkM0RjlBRTAyL3RPZmpSSzNPTnRo UEh6cTh6UlN5VEJVU3U2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4vuEq3wdsSLQGwuqyfqliJosJw5genpuu5rygUfzXdNWLkCY787eYk UW4sgW3Xbtq+Qy8aSS4PFdDFwEV71B5+nzi0YmQIru3T29rPDUno/qct/8rzdV1l OIxpW/kkyEYZqSS8zaXM1/F3SgA5zOAucRjRP2cNr4h/4z2HiSQR9kwWFTJ43s+P zD5LUS60Lj0swWRqoSnyWeIqurdqb2kBCRpmFhawuYYRxLrrgVmI+mY8X6U7xS31 fzhlKZPsRbaWRMFEP5jMk0vHkxFAuQbXx2qLc1yUuyfg4iAf0bEhShgG5I12/6i9 NFSmypcc5QWBLFRZ25bDMENu17AGmNc= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:41 2024 by rpki-client on console-fra.rpki-client.org