$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft File: 6IdrUasrF3RAzUxM0uTwpZjgOBw.mft (raw, json) Hash identifier: xdeHd9gtJ3utUgyvggjGDA9jRTmzc28pZPAz+VTxg0E= Subject key identifier: E0:42:0B:E5:1B:36:16:31:CA:6F:AB:D1:1B:91:92:BB:80:91:01:A6 Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C Certificate issuer: /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft Manifest number: 33 Signing time: Sun 15 Sep 2024 10:03:43 +0000 Manifest this update: Sun 15 Sep 2024 10:03:42 +0000 Manifest next update: Sun 22 Sep 2024 10:03:42 +0000 Files and hashes: 1: 6IdrUasrF3RAzUxM0uTwpZjgOBw.crl (hash: BO35k/BM3mqGtV4h7+Bnaq4NHaf+30eZzMh+WxFnpdE=) 2: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (hash: H2+jKh4xZzJqTlXK+9On2PWXsSGlykUS9ZhMn+P1PmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Validity Not Before: Sep 15 10:03:42 2024 GMT Not After : Sep 22 10:03:42 2024 GMT Subject: CN=66e6b0fe-c478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:da:00:d8:f0:c5:ad:6e:fd:9f:81:bd:22: 9c:9f:81:41:c5:3e:50:93:45:9c:4b:74:6c:ca:6c: aa:64:d6:94:4f:ea:92:38:34:0e:1b:d2:e4:54:64: 95:eb:5e:23:e5:63:77:88:d1:eb:bd:6e:6b:c0:15: 46:c0:be:a5:03:e8:3a:63:6d:d6:c5:a3:cb:71:5f: 24:98:31:41:37:3c:71:74:56:f9:b0:da:68:a2:c7: e2:56:85:77:8a:ac:33:d0:52:df:03:23:92:2d:3c: 68:61:35:0f:0f:a9:01:9a:d9:b7:1c:3a:14:fc:a5: ec:39:3a:c8:87:8e:9e:d1:a1:25:39:86:89:ce:51: f0:d5:a7:b3:80:e6:40:54:7a:94:c6:62:12:df:23: 39:05:ac:e7:7c:5a:93:45:17:79:8a:67:83:79:06: 05:bf:1a:58:02:69:8d:c3:d0:e9:0b:53:68:d0:ba: 33:25:b6:59:94:1f:9c:b7:b9:a9:b2:c0:8d:08:e9: 84:e0:f4:9b:cb:03:a6:1d:d5:2b:9f:93:ae:c6:ba: ac:2b:d8:1b:6e:91:8d:98:09:9d:31:ac:0b:89:c9: 7d:18:5e:7e:7f:b3:b5:5a:66:72:fc:41:b6:52:9b: 64:0b:57:39:0c:f3:25:e0:07:ca:55:28:ff:0f:6b: 9c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:42:0B:E5:1B:36:16:31:CA:6F:AB:D1:1B:91:92:BB:80:91:01:A6 X509v3 Authority Key Identifier: keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:2e:e1:9e:ae:6e:81:0b:03:2a:ee:83:59:7f:a3:f6:8f:fa: 04:6b:28:6a:88:c4:2e:8b:51:69:ae:0b:79:e0:aa:a5:53:82: b5:ad:ab:b2:ec:ba:ae:c3:4d:03:84:30:11:5d:2d:8d:a1:8f: 44:3e:ba:1a:d0:eb:3a:91:df:9f:2c:74:e1:4f:ad:4f:26:5e: de:01:50:83:27:dd:ae:a5:9e:d5:6b:59:c3:62:24:00:f9:d5: b5:88:51:2e:17:4e:d6:41:0f:45:1b:e8:f1:51:c9:f3:65:e5: b6:c6:04:53:63:1e:41:86:03:63:cf:f7:08:44:bc:2d:f8:1e: 4c:94:46:ed:a7:f7:9b:a6:e5:5c:a0:1f:3b:75:66:43:c2:32: 71:aa:b6:b6:af:ec:bd:be:8e:ba:b1:1e:54:93:e3:b5:81:5a: ab:a6:98:20:a7:ee:1d:61:1c:e4:61:a7:e5:ba:43:cc:98:b7: 82:8e:4b:f5:9e:77:2b:13:6f:66:6d:33:23:6d:84:9b:fb:04: 69:3e:15:6a:dc:08:36:e0:66:75:8b:2e:88:5a:23:cf:8a:b8: 4d:4b:9e:eb:55:9f:5a:66:43:8d:ae:59:ef:8f:4d:dc:e7:bb: f9:3b:e7:54:8b:e8:5e:cc:c5:e1:19:fe:13:0b:b1:6f:5d:9d: a9:2b:f1:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QUUyMzExMC8GA1UEBRMoRTg4NzZCNTFBQjJCMTc3NDQwQ0Q0QzRDRDJFNEYwQTU5 OEUwMzgxQzAeFw0yNDA5MTUxMDAzNDJaFw0yNDA5MjIxMDAzNDJaMBgxFjAUBgNV BAMTDTY2ZTZiMGZlLWM0NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCujNoA2PDFrW79n4G9IpyfgUHFPlCTRZxLdGzKbKpk1pRP6pI4NA4b0uRUZJXr XiPlY3eI0eu9bmvAFUbAvqUD6DpjbdbFo8txXySYMUE3PHF0Vvmw2miix+JWhXeK rDPQUt8DI5ItPGhhNQ8PqQGa2bccOhT8pew5OsiHjp7RoSU5honOUfDVp7OA5kBU epTGYhLfIzkFrOd8WpNFF3mKZ4N5BgW/GlgCaY3D0OkLU2jQujMltlmUH5y3uamy wI0I6YTg9JvLA6Yd1Sufk67Guqwr2BtukY2YCZ0xrAuJyX0YXn5/s7VaZnL8QbZS m2QLVzkM8yXgB8pVKP8Pa5yxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4EIL5Rs2 FjHKb6vRG5GSu4CRAaYwHwYDVR0jBBgwFoAU6IdrUasrF3RAzUxM0uTwpZjgOBww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBRTIzLzNBNzJBQkZBMkM2 QzExRUZBMzQ2OTQyREM0RjlBRTAyLzZJZHJVYXNyRjNSQXpVeE0wdVR3cFpqZ09C dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklkclVhc3JGM1JBelV4TTB1VHdwWmpnT0J3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB RTIzLzNBNzJBQkZBMkM2QzExRUZBMzQ2OTQyREM0RjlBRTAyLzZJZHJVYXNyRjNS QXpVeE0wdVR3cFpqZ09Cdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHMu4Z6uboELAyrug1l/o/aP+gRrKGqIxC6LUWmuC3ngqqVTgrWtq7Ls uq7DTQOEMBFdLY2hj0Q+uhrQ6zqR358sdOFPrU8mXt4BUIMn3a6lntVrWcNiJAD5 1bWIUS4XTtZBD0Ub6PFRyfNl5bbGBFNjHkGGA2PP9whEvC34HkyURu2n95um5Vyg Hzt1ZkPCMnGqtrav7L2+jrqxHlST47WBWqummCCn7h1hHORhp+W6Q8yYt4KOS/We dysTb2ZtMyNthJv7BGk+FWrcCDbgZnWLLohaI8+KuE1LnutVn1pmQ42uWe+PTdzn u/k751SL6F7MxeEZ/hMLsW9dnakr8es= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:08 2024 by rpki-client on console-fra.rpki-client.org