$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: gpIolmH+t7DWyLC36DoufepkcFAcizHtmEgXOYQP2Tw= Subject key identifier: 4D:BB:F3:04:04:5F:1F:47:D9:95:82:06:0D:6A:3E:DF:58:05:4A:E3 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: 36 Signing time: Sun 15 Sep 2024 09:57:44 +0000 Manifest this update: Sun 15 Sep 2024 09:57:43 +0000 Manifest next update: Sun 22 Sep 2024 09:57:43 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: SPQlS9hFmVYxnd2qFBjlKra4wv1Hh2wjLjXkHVjb44k=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: 13jDFbSB4Wbq97/o1FA1VIeJskGUmF86MlXT/FUyldw=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: MFVbhCl11Kzm7cn7M1nmvHQU8bIuYVjXgotLCGuAQv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Sep 15 09:57:43 2024 GMT Not After : Sep 22 09:57:43 2024 GMT Subject: CN=66e6af97-e8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:20:40:80:82:b6:36:bd:70:35:3b:5d:ff:3c: bd:a0:c9:c8:bb:a5:87:2d:61:12:ce:47:33:11:5f: a3:cc:df:c6:17:96:c0:10:c7:46:12:f1:86:6e:50: 08:1f:fd:0f:79:d5:61:11:96:2f:18:33:f0:5b:fc: c2:0e:08:9c:5b:c3:f7:64:00:29:be:04:26:40:dc: e8:fa:e7:bd:64:d7:14:7d:bf:98:e5:e8:64:04:f6: ca:83:0e:a9:41:01:de:35:f7:7b:e7:0b:bf:0c:98: 8c:f1:14:7a:29:3b:44:a5:4d:5a:2d:7b:99:6c:ca: 5a:95:90:a8:3b:7b:ef:c6:87:98:c2:39:a7:5c:bc: 63:bd:72:f2:36:b1:57:7b:b4:22:16:51:b2:48:97: bf:ff:2d:79:d3:fb:84:6c:ea:f1:62:3a:fc:91:b8: 10:2b:a8:a0:ed:10:84:91:5b:c2:95:17:92:0d:53: a5:fd:92:58:23:d2:3e:a5:8d:18:48:39:29:66:24: 3b:44:19:ae:c4:e9:9d:45:f4:ea:fc:44:f6:26:8d: 5b:af:73:7c:93:2b:16:f4:f8:1b:00:b5:2c:3d:3b: 6d:34:37:e8:cc:47:b7:4d:69:60:f1:f0:b7:2a:dd: 71:19:d9:38:6c:7f:9d:f7:2e:bb:e2:68:5b:6c:38: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BB:F3:04:04:5F:1F:47:D9:95:82:06:0D:6A:3E:DF:58:05:4A:E3 X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:76:5c:64:fa:8a:ca:aa:f8:3c:9a:ef:9a:04:9d:33:d9:99: f9:44:7f:7d:85:03:40:aa:d7:fc:c9:73:d5:7e:42:f5:b6:bf: 87:64:6d:ca:dd:53:24:3e:de:ea:1e:69:b2:1c:c0:ab:be:30: b9:24:7a:d0:aa:4f:df:d6:52:c2:c7:e5:b8:b6:14:bd:bc:21: bf:bb:85:72:d2:b3:7c:16:fd:6c:dc:3d:84:31:e4:25:ef:50: 15:93:9d:e1:cf:8b:8b:eb:45:dc:f8:1e:a7:53:da:24:e4:69: b7:ad:10:dc:0c:a1:bb:c9:cd:c5:39:99:6e:8a:2b:83:91:cf: d5:ff:48:09:83:28:04:fd:cf:83:f1:37:ba:a2:50:78:fd:bb: 11:75:f7:ce:d5:ff:87:ae:f2:ec:ff:e6:99:5d:64:64:d9:eb: 87:9b:c9:b7:78:7b:37:cb:59:da:5e:5e:24:ca:01:a0:39:24: 31:13:4c:68:94:01:ce:27:36:2b:e3:3c:f9:89:a0:2d:9d:f7: 30:f9:17:72:fa:e4:7f:fc:42:c2:90:16:5b:a2:d4:ac:a5:51: bd:da:16:61:29:01:db:0b:0f:73:08:b7:dc:87:98:79:9c:57: 87:bd:c2:47:2b:0c:41:f7:e6:91:88:85:00:d0:89:74:03:64: d7:85:b8:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0VEMzExMC8GA1UEBRMoQTc0MUVCNDEwRDRCOEU0NkZGNDhBQjcwQTFEQTAwNkEz RENGNDFBMzAeFw0yNDA5MTUwOTU3NDNaFw0yNDA5MjIwOTU3NDNaMBgxFjAUBgNV BAMTDTY2ZTZhZjk3LWU4YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqIECAgrY2vXA1O13/PL2gyci7pYctYRLORzMRX6PM38YXlsAQx0YS8YZuUAgf /Q951WERli8YM/Bb/MIOCJxbw/dkACm+BCZA3Oj6571k1xR9v5jl6GQE9sqDDqlB Ad4193vnC78MmIzxFHopO0SlTVote5lsylqVkKg7e+/Gh5jCOadcvGO9cvI2sVd7 tCIWUbJIl7//LXnT+4Rs6vFiOvyRuBArqKDtEISRW8KVF5INU6X9klgj0j6ljRhI OSlmJDtEGa7E6Z1F9Or8RPYmjVuvc3yTKxb0+BsAtSw9O200N+jMR7dNaWDx8Lcq 3XEZ2Thsf533LrviaFtsOBQvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTbvzBARf H0fZlYIGDWo+31gFSuMwHwYDVR0jBBgwFoAUp0HrQQ1Ljkb/SKtwodoAaj3PQaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRUQzLzNDMTYxRkE2MjE2 QzExRUY4MEIxNTMyQkM0RjlBRTAyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDBIclFRMUxqa2JfU0t0d29kb0FhajNQUWFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RUQzLzNDMTYxRkE2MjE2QzExRUY4MEIxNTMyQkM0RjlBRTAyL3AwSHJRUTFMamti X1NLdHdvZG9BYWozUFFhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALZ2XGT6isqq+Dya75oEnTPZmflEf32FA0Cq1/zJc9V+QvW2v4dkbcrd UyQ+3uoeabIcwKu+MLkketCqT9/WUsLH5bi2FL28Ib+7hXLSs3wW/WzcPYQx5CXv UBWTneHPi4vrRdz4HqdT2iTkabetENwMobvJzcU5mW6KK4ORz9X/SAmDKAT9z4Px N7qiUHj9uxF1987V/4eu8uz/5pldZGTZ64ebybd4ezfLWdpeXiTKAaA5JDETTGiU Ac4nNivjPPmJoC2d9zD5F3L65H/8QsKQFlui1KylUb3aFmEpAdsLD3MIt9yHmHmc V4e9wkcrDEH35pGIhQDQiXQDZNeFuIA= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:08 2024 by rpki-client on console-fra.rpki-client.org