$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: wsY39cmFGS4wUIhmYkiSalbwmTrBTTXzfBile+ahSUY= Subject key identifier: 06:EF:55:D6:34:39:D0:F8:C1:49:AF:19:EC:2B:51:25:F6:8F:C0:E4 Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 24 Signing time: Sun 15 Sep 2024 10:16:28 +0000 Manifest this update: Sun 15 Sep 2024 10:16:26 +0000 Manifest next update: Sun 22 Sep 2024 10:16:26 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: +ko5GAbi46pcPj6ccOuhXGLAbodziN//ytC/mrQ1nLc=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: pr/FonujJs8CRNXZXFhUXfAX9ms1i2o+BQHIlp1z64k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Sep 15 10:16:26 2024 GMT Not After : Sep 22 10:16:26 2024 GMT Subject: CN=66e6b3fb-cd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:ce:e8:74:da:a8:36:a9:35:ff:c6:d0:47: 2a:c9:31:27:57:ae:22:29:af:4e:79:84:68:b1:6d: 53:14:cd:17:83:6a:fd:43:63:75:9b:e5:ee:8f:60: 4a:f8:85:17:98:df:be:2d:15:e5:6b:3c:20:1e:bd: 56:bb:89:eb:68:82:bb:f0:31:8f:85:e7:0b:19:d6: 8c:e1:96:85:01:cd:d5:67:f7:6a:66:5c:81:4c:01: 31:25:6c:43:31:10:60:b7:74:8e:89:3f:12:20:61: 99:7e:c8:05:23:cf:0a:ae:1b:49:af:77:dd:9b:30: 2e:08:e6:40:45:db:d8:99:b9:5c:19:9b:2e:97:fa: 3d:6e:fc:e2:90:59:c3:2b:28:eb:04:06:bc:5e:ec: 1b:bc:2a:f6:e6:11:96:cd:b1:10:87:69:ae:7b:e2: c0:19:e7:e0:d0:03:7e:47:d3:78:89:a1:76:29:10: 47:aa:cf:82:47:a8:9e:24:74:3c:79:b9:a3:9f:b1: 1a:ac:f2:39:bc:84:8c:04:47:ee:02:22:b1:22:ff: 06:3d:50:4c:53:88:ff:8a:39:3a:75:32:ae:6c:47: e8:10:3f:41:60:6f:6d:03:c2:65:f8:4f:f3:5d:d0: c4:96:c0:1b:95:c0:1e:6e:b0:b8:9e:c1:2b:9d:d8: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EF:55:D6:34:39:D0:F8:C1:49:AF:19:EC:2B:51:25:F6:8F:C0:E4 X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c2:0b:0d:01:42:a6:55:2e:55:92:0f:03:04:c0:01:0c:82: 2c:de:4b:e0:a6:31:43:5e:7f:75:49:c3:f1:bc:87:3d:88:fe: 63:12:bd:18:27:57:f3:ff:26:2a:e8:2a:2f:3f:5e:de:a4:b6: 96:24:15:f5:7a:58:e1:f9:b8:36:7c:dc:e4:d9:f6:52:f1:00: f9:51:f7:ad:a2:37:fb:60:af:df:d6:ce:7d:98:d3:d6:7a:96: d2:59:7e:ab:9e:7a:49:fd:6e:96:7b:19:cf:61:b0:81:05:49: 09:3f:38:93:7b:b5:34:34:f6:78:aa:67:eb:84:3a:d0:80:d7: 38:46:bc:1a:8e:f1:71:34:8e:19:72:b3:0d:97:66:06:f7:7c: 37:9c:3e:ae:a7:f8:e5:6b:07:8d:93:7f:b7:a2:2c:6c:48:7f: f8:e1:0b:29:73:39:1a:5b:91:43:b9:8b:7d:44:cc:e6:d3:0a: 45:6a:7b:9a:0e:3c:53:11:59:b0:31:16:8a:f9:93:9a:2a:33: a6:29:03:75:c4:4e:c1:23:73:a7:cd:81:ae:53:47:9a:55:ab: 6b:09:63:a1:7f:0b:ca:53:d2:13:30:f0:74:d7:fa:bb:61:29: 06:90:f5:90:58:1b:29:d0:01:e3:a2:4a:af:9e:07:a0:1a:47: 41:19:46:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUY0RDExMC8GA1UEBRMoRjExRjU3NkQ2QjBDREIyQUE5MkRDRjlENEU3NzMyNzM2 MEQ1NTc2NzAeFw0yNDA5MTUxMDE2MjZaFw0yNDA5MjIxMDE2MjZaMBgxFjAUBgNV BAMTDTY2ZTZiM2ZiLWNkNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Wc7odNqoNqk1/8bQRyrJMSdXriIpr055hGixbVMUzReDav1DY3Wb5e6PYEr4 hReY374tFeVrPCAevVa7ietogrvwMY+F5wsZ1ozhloUBzdVn92pmXIFMATElbEMx EGC3dI6JPxIgYZl+yAUjzwquG0mvd92bMC4I5kBF29iZuVwZmy6X+j1u/OKQWcMr KOsEBrxe7Bu8KvbmEZbNsRCHaa574sAZ5+DQA35H03iJoXYpEEeqz4JHqJ4kdDx5 uaOfsRqs8jm8hIwER+4CIrEi/wY9UExTiP+KOTp1Mq5sR+gQP0Fgb20DwmX4T/Nd 0MSWwBuVwB5usLiewSud2G5xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBu9V1jQ5 0PjBSa8Z7CtRJfaPwOQwHwYDVR0jBBgwFoAU8R9XbWsM2yqpLc+dTncyc2DVV2cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRjREL0ZGNjc4QzcyM0ZE NzExRUY4RkJCNjk1NUM0RjlBRTAyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFI5WGJXc00yeXFwTGMtZFRuY3ljMkRWVjJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF RjREL0ZGNjc4QzcyM0ZENzExRUY4RkJCNjk1NUM0RjlBRTAyLzhSOVhiV3NNMnlx cExjLWRUbmN5YzJEVlYyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABzCCw0BQqZVLlWSDwMEwAEMgizeS+CmMUNef3VJw/G8hz2I/mMSvRgn V/P/JiroKi8/Xt6ktpYkFfV6WOH5uDZ83OTZ9lLxAPlR962iN/tgr9/Wzn2Y09Z6 ltJZfqueekn9bpZ7Gc9hsIEFSQk/OJN7tTQ09niqZ+uEOtCA1zhGvBqO8XE0jhly sw2XZgb3fDecPq6n+OVrB42Tf7eiLGxIf/jhCylzORpbkUO5i31EzObTCkVqe5oO PFMRWbAxFor5k5oqM6YpA3XETsEjc6fNga5TR5pVq2sJY6F/C8pT0hMw8HTX+rth KQaQ9ZBYGynQAeOiSq+eB6AaR0EZRsQ= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:32 2024 by rpki-client on console-ams.rpki-client.org