$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: gn9J9jyBQXZbrczCWFm7z2MN0RVps+MADYedn7VeUTY= Subject key identifier: 81:3A:D9:19:18:50:9C:FC:1C:E7:5B:11:64:9C:D8:87:EC:A2:E7:5F Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 29 Signing time: Thu 19 Sep 2024 05:59:35 +0000 Manifest this update: Thu 19 Sep 2024 05:59:35 +0000 Manifest next update: Thu 26 Sep 2024 05:59:35 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: xkpLXFOvOnrBAJED8VwLYedtD/xbz7wP9Ff/ebtPRh0=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: AFifu1YP8FleMFw0L6x+s4qXy39ubAWolO6tvcH8Ipg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Sep 19 05:59:35 2024 GMT Not After : Sep 26 05:59:35 2024 GMT Subject: CN=66ebbdc7-ac84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4d:9a:d3:e1:ae:d1:3e:6e:47:af:c5:1d:6f: 1a:2a:7e:cb:fd:d1:4b:ea:c8:23:a4:37:6a:15:8e: 69:bf:bf:8a:91:8c:b8:43:48:7b:f0:1e:9a:cc:a1: 54:03:18:b7:69:8a:ad:bb:08:13:bc:5d:e7:5a:54: 57:d6:2a:e5:62:39:cf:b3:38:57:a0:f3:7d:70:4c: 0d:a6:46:8b:e5:72:d8:8c:0e:a6:dc:f4:f2:c0:a6: 29:0f:d0:5c:2c:f8:d5:32:09:22:f2:41:fd:2d:a5: 43:90:01:78:f5:e1:6e:5a:1e:b4:47:d7:d9:cc:de: c7:41:cd:0e:c6:4d:6c:f6:17:d9:90:8e:06:08:4a: d5:01:b2:3d:51:cb:13:34:ba:24:21:c1:1d:3e:11: b7:9f:33:48:ab:18:21:2d:fc:ba:72:1f:c9:92:d9: a8:53:5b:20:0c:a4:09:d7:0d:8d:b8:65:8d:6b:9b: 08:a4:b1:b2:31:a1:aa:cb:4d:9d:a9:ce:eb:42:5a: 11:fc:f4:63:9f:33:57:a1:a7:8b:22:81:44:13:0d: 26:7c:33:39:66:a3:e5:89:93:d6:e8:f9:90:bc:68: 79:75:db:33:b2:8a:ae:8e:e0:81:08:9d:92:ad:ba: 18:24:7d:3c:a2:86:4c:1b:b0:21:77:9d:b2:da:44: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3A:D9:19:18:50:9C:FC:1C:E7:5B:11:64:9C:D8:87:EC:A2:E7:5F X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:77:68:5f:f2:18:af:58:e4:77:5b:37:75:ba:d3:94:31:59: 6c:1b:53:64:55:75:f5:3a:db:a5:9d:98:31:34:f7:d3:7a:2c: 04:cc:5e:12:4a:bd:00:4f:0c:90:85:4f:6e:aa:a7:e5:df:fe: 59:3e:82:6d:d6:ec:1e:b6:6c:d6:9b:2a:f9:11:f1:9f:38:20: 40:6c:7b:c9:97:a4:11:4c:4d:aa:67:0e:12:97:5c:24:7c:88: c7:b9:ae:d9:f0:e2:cc:6e:65:d0:2f:cc:b8:4f:b1:29:4b:eb: 85:07:30:ab:26:44:13:88:ae:fb:43:14:d1:e3:db:14:03:94: b9:5a:5c:fd:79:03:69:a8:46:ac:c0:72:82:b0:03:5b:bf:41: ce:01:58:7c:fb:3c:df:30:1d:2f:ce:e4:41:e1:0c:37:fc:1d: df:9a:2b:8f:b6:ed:43:ba:5b:4e:06:bb:32:ef:17:3a:5f:55: d4:47:f9:45:3a:a2:02:8b:19:cc:24:30:2a:c7:c6:6e:0a:2e: 0f:91:70:70:09:48:0b:63:18:aa:86:49:1e:91:07:c9:3b:48: 34:30:b2:b5:74:b1:f6:c2:28:ed:da:7d:f6:fb:f4:23:0f:d3: c9:73:de:3e:5c:8e:22:75:68:f3:1f:1d:94:92:0a:58:5e:d3: 7b:e0:37:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjJCRDExMC8GA1UEBRMoRDFFRUJEMTYyNERDREU1MTk0MTBFRDVENjRFNkQ1MTM5 ODRCNzdEMDAeFw0yNDA5MTkwNTU5MzVaFw0yNDA5MjYwNTU5MzVaMBgxFjAUBgNV BAMTDTY2ZWJiZGM3LWFjODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnTZrT4a7RPm5Hr8Udbxoqfsv90UvqyCOkN2oVjmm/v4qRjLhDSHvwHprMoVQD GLdpiq27CBO8XedaVFfWKuViOc+zOFeg831wTA2mRovlctiMDqbc9PLApikP0Fws +NUyCSLyQf0tpUOQAXj14W5aHrRH19nM3sdBzQ7GTWz2F9mQjgYIStUBsj1RyxM0 uiQhwR0+EbefM0irGCEt/LpyH8mS2ahTWyAMpAnXDY24ZY1rmwiksbIxoarLTZ2p zutCWhH89GOfM1ehp4sigUQTDSZ8Mzlmo+WJk9bo+ZC8aHl12zOyiq6O4IEInZKt uhgkfTyihkwbsCF3nbLaRJyTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgTrZGRhQ nPwc51sRZJzYh+yi518wHwYDVR0jBBgwFoAU0e69FiTc3lGUEO1dZObVE5hLd9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGMkJELzNFRTI3Njc2Mzg5 NjExRUY5RURFODEzNkM0RjlBRTAyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGU2OUZpVGMzbEdVRU8xZFpPYlZFNWhMZDlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG MkJELzNFRTI3Njc2Mzg5NjExRUY5RURFODEzNkM0RjlBRTAyLzBlNjlGaVRjM2xH VUVPMWRaT2JWRTVoTGQ5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC93aF/yGK9Y5HdbN3W605QxWWwbU2RVdfU626WdmDE099N6LATMXhJK vQBPDJCFT26qp+Xf/lk+gm3W7B62bNabKvkR8Z84IEBse8mXpBFMTapnDhKXXCR8 iMe5rtnw4sxuZdAvzLhPsSlL64UHMKsmRBOIrvtDFNHj2xQDlLlaXP15A2moRqzA coKwA1u/Qc4BWHz7PN8wHS/O5EHhDDf8Hd+aK4+27UO6W04GuzLvFzpfVdRH+UU6 ogKLGcwkMCrHxm4KLg+RcHAJSAtjGKqGSR6RB8k7SDQwsrV0sfbCKO3affb79CMP 08lz3j5cjiJ1aPMfHZSSClhe03vgN0c= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:47 2024 by rpki-client on console-fra.rpki-client.org