$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft File: F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json) Hash identifier: KTEK/LncDPzm3h01zTlQHIDXasr2lb2HR5tGfOVd9Zs= Subject key identifier: 46:38:26:59:71:7C:0B:66:B5:7A:A6:A5:E7:E8:2B:FD:6B:2B:2F:18 Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA Certificate issuer: /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft Manifest number: 35 Signing time: Sun 15 Sep 2024 09:58:47 +0000 Manifest this update: Sun 15 Sep 2024 09:58:46 +0000 Manifest next update: Sun 22 Sep 2024 09:58:46 +0000 Files and hashes: 1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: 2IJeljmUR9MH8wt3rSxs6I+ilnmOU2v2NBIUw8HdLuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA Validity Not Before: Sep 15 09:58:46 2024 GMT Not After : Sep 22 09:58:46 2024 GMT Subject: CN=66e6afd7-0317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:61:00:b3:17:ec:0c:3f:8f:41:6d:fd:27:f9: c3:19:d5:5f:a9:35:2f:8f:7a:cd:0f:46:47:28:15: 9e:bd:e1:79:27:55:6f:1f:35:f6:fb:33:4f:0a:0e: e4:73:4b:7d:14:e4:78:08:67:a3:82:3f:00:44:1f: aa:4c:b5:71:e2:49:c4:f9:6d:8b:76:0f:e8:a7:89: 85:10:2c:b0:fd:6e:ac:db:b0:b3:03:8a:9c:90:e4: 56:b3:0b:b9:85:4d:46:d4:30:46:f6:ab:f3:a0:53: f1:da:08:01:c5:3c:47:72:b7:82:9d:41:80:18:15: 7a:a5:4b:d8:3a:e6:be:cb:70:3e:01:01:be:b2:65: 05:2e:8c:64:a6:a3:21:d7:d8:cb:3a:6c:86:5b:bb: dd:44:c1:51:0a:45:cd:dc:39:f1:20:03:93:1d:3c: f6:86:09:0a:8f:67:ad:fe:41:c9:f1:fa:8f:c8:16: e7:e8:2d:ac:f0:75:74:08:97:48:a7:b3:0e:4b:42: 8f:26:07:aa:e0:32:e9:85:48:48:28:06:ba:ba:82: 07:75:fe:e2:5c:ce:ae:a9:3e:a5:b2:9a:53:79:ed: e0:de:dc:e4:71:8e:ba:5c:6b:b1:cb:88:00:4f:0c: d7:5e:da:85:fa:cc:a9:79:2f:74:5a:85:f9:f1:aa: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:38:26:59:71:7C:0B:66:B5:7A:A6:A5:E7:E8:2B:FD:6B:2B:2F:18 X509v3 Authority Key Identifier: keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:2f:1a:f3:59:73:3b:b8:88:6b:3d:84:90:ac:02:26:7b:ab: 43:04:8a:51:eb:e2:b7:2d:3e:ff:fd:2e:86:3b:6c:41:11:f2: fc:4f:00:6e:5d:8f:8d:32:ad:27:0b:ba:33:78:bf:38:e4:d7: 8d:51:e5:25:bd:cb:3f:57:e5:f2:63:49:62:73:03:35:ce:94: ac:cd:84:69:c5:47:35:79:2b:55:74:cc:77:e8:68:e5:0e:bf: c3:0d:bf:be:f0:d3:ce:91:c0:04:3f:da:61:d8:d1:75:88:ab: 04:b9:02:3d:5f:73:ef:5f:f5:1d:17:cf:4c:5b:2b:a1:3c:df: 44:94:14:00:be:45:90:12:5d:3b:18:c9:88:96:1d:b5:4e:60: d3:b9:97:19:d5:8a:3e:c3:82:61:1b:a2:33:c0:4c:95:8d:30: 80:70:24:64:ae:e8:ad:86:ae:8b:62:37:d2:c0:29:26:ef:85: b4:4d:6e:3a:7c:8f:ea:51:5b:b6:59:2c:c6:93:1d:d8:97:9e: 5d:8a:28:1e:58:d7:06:4b:b4:de:96:ed:12:8a:66:de:72:1d: 0f:d9:8c:e0:7a:a4:03:0c:39:90:0c:85:bb:d0:ff:f2:19:02: b0:23:85:73:2b:31:0c:53:4a:66:c7:ae:5b:46:b5:c2:ca:74: f3:8d:cf:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTAyMzExMC8GA1UEBRMoMTdFOTQxQUY5RUZCQjUxNUQ3QzI0QjQxOEU2OUY5ODY3 QzdBMTRDQTAeFw0yNDA5MTUwOTU4NDZaFw0yNDA5MjIwOTU4NDZaMBgxFjAUBgNV BAMTDTY2ZTZhZmQ3LTAzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxYQCzF+wMP49Bbf0n+cMZ1V+pNS+Pes0PRkcoFZ694XknVW8fNfb7M08KDuRz S30U5HgIZ6OCPwBEH6pMtXHiScT5bYt2D+iniYUQLLD9bqzbsLMDipyQ5FazC7mF TUbUMEb2q/OgU/HaCAHFPEdyt4KdQYAYFXqlS9g65r7LcD4BAb6yZQUujGSmoyHX 2Ms6bIZbu91EwVEKRc3cOfEgA5MdPPaGCQqPZ63+Qcnx+o/IFufoLazwdXQIl0in sw5LQo8mB6rgMumFSEgoBrq6ggd1/uJczq6pPqWymlN57eDe3ORxjrpca7HLiABP DNde2oX6zKl5L3RahfnxqrlHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURjgmWXF8 C2a1eqal5+gr/WsrLxgwHwYDVR0jBBgwFoAUF+lBr577tRXXwktBjmn5hnx6FMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MDIzL0ZDRjY0NzQwMjI4 MDExRUZBNzI4M0MxNEM0RjlBRTAyL0YtbEJyNTc3dFJYWHdrdEJqbW41aG54NkZN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRi1sQnI1Nzd0UlhYd2t0QmptbjVobng2Rk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MDIzL0ZDRjY0NzQwMjI4MDExRUZBNzI4M0MxNEM0RjlBRTAyL0YtbEJyNTc3dFJY WHdrdEJqbW41aG54NkZNby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJMvGvNZczu4iGs9hJCsAiZ7q0MEilHr4rctPv/9LoY7bEER8vxPAG5d j40yrScLujN4vzjk141R5SW9yz9X5fJjSWJzAzXOlKzNhGnFRzV5K1V0zHfoaOUO v8MNv77w086RwAQ/2mHY0XWIqwS5Aj1fc+9f9R0Xz0xbK6E830SUFAC+RZASXTsY yYiWHbVOYNO5lxnVij7DgmEbojPATJWNMIBwJGSu6K2GrotiN9LAKSbvhbRNbjp8 j+pRW7ZZLMaTHdiXnl2KKB5Y1wZLtN6W7RKKZt5yHQ/ZjOB6pAMMOZAMhbvQ//IZ ArAjhXMrMQxTSmbHrltGtcLKdPONz5Q= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:08 2024 by rpki-client on console-fra.rpki-client.org