$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft File: mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json) Hash identifier: Mht8zTJ6D8xbb+NOIwfwAWqU3VxcJFgRKXlbjkpsBxw= Subject key identifier: 99:11:35:81:73:D2:70:BD:91:2F:FD:59:D9:40:A2:AF:3C:DA:D2:4C Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 Certificate issuer: /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft Manifest number: 21 Signing time: Sun 15 Sep 2024 10:17:56 +0000 Manifest this update: Sun 15 Sep 2024 10:17:55 +0000 Manifest next update: Sun 22 Sep 2024 10:17:55 +0000 Files and hashes: 1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: zNABVZ7LSsXF2MRuuJdYMQUSlMlC+Gckn/cAVf251Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Validity Not Before: Sep 15 10:17:55 2024 GMT Not After : Sep 22 10:17:55 2024 GMT Subject: CN=66e6b454-d7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:e9:8d:07:e0:cb:0d:11:a5:68:af:c1:45: 2a:34:96:e4:bd:04:68:2c:17:5e:dd:ea:6f:b0:77: 83:d6:3a:12:24:fc:a3:cc:8f:08:e4:40:9b:e1:ae: 8e:9d:71:7d:1b:2c:86:77:92:1a:47:56:57:b2:07: e4:80:56:4f:2f:52:95:16:59:0c:af:f8:98:20:b7: 6d:0d:b5:ee:1b:9e:cf:8f:49:97:dd:8d:97:f2:7c: 2d:d9:bb:32:b2:c9:22:3d:b9:ea:3a:d8:9a:c6:77: f7:49:7b:33:8a:9a:bc:0a:35:f9:7e:6a:17:28:60: a4:2b:c4:76:d1:9f:b4:49:c0:51:e1:16:0d:42:a5: 82:4e:da:ad:fc:6e:99:2b:5c:a3:b7:b1:36:93:e4: 6b:61:ac:58:e5:65:7d:99:fc:bf:16:8c:6a:a0:56: ed:54:1e:8d:cc:e2:90:00:c4:e8:40:f5:00:9c:b1: be:37:9b:fc:55:18:f2:b8:43:a7:b3:91:81:5a:16: 99:8e:f2:a5:a9:51:f8:4f:40:ef:70:24:89:3a:70: 1d:a1:8e:a9:10:23:d8:ae:1d:ce:a3:dd:e7:53:23: 67:ef:4e:a3:59:70:ac:22:af:2b:c9:a6:c0:d8:e1: a6:36:4e:cc:f9:86:9c:9b:a5:9a:64:46:0b:46:83: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:35:81:73:D2:70:BD:91:2F:FD:59:D9:40:A2:AF:3C:DA:D2:4C X509v3 Authority Key Identifier: keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:35:46:c2:a0:5b:5d:ab:81:9f:99:86:a3:24:48:bb:09:c0: 7d:ea:27:ab:d3:91:1a:4c:fc:b3:c7:76:36:6a:32:a0:14:37: a7:d6:86:a7:37:de:b6:20:bc:19:83:f1:86:3f:6e:01:b2:01: d8:4c:ef:cf:a1:71:47:01:2a:b0:2b:d8:4f:01:6f:e9:3c:f2: d8:7c:1e:65:39:97:33:27:da:e7:40:44:41:bf:20:ac:6c:f2: c6:b0:df:8c:b3:22:3d:29:7a:a1:2b:2a:c2:e3:09:19:48:95: bd:89:3b:6f:64:25:1b:cb:b1:5e:b8:48:df:0b:d3:5b:6d:1d: 05:92:7b:45:34:87:9e:68:09:33:08:2d:d4:bd:ee:67:4a:26: 4c:a3:07:57:ea:d6:f5:bb:3c:41:a1:e9:71:e8:21:f9:8e:9c: e4:36:1b:41:de:88:aa:fd:6b:ec:26:a0:8d:15:66:2f:a3:94: 42:1e:b5:2e:3c:d9:71:74:26:57:cc:e3:20:6b:10:2a:ac:a5: 84:df:e3:fe:3c:27:89:73:bc:f4:f6:cc:e3:75:dc:dc:e9:60: fa:af:f4:d0:70:e3:2a:bf:de:78:03:6e:e4:6b:af:e0:59:8a: a4:ba:e5:cd:8f:5f:61:26:1f:d9:da:7b:f3:bc:06:13:3c:3e: e8:9b:e7:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjFEQjExMC8GA1UEBRMoOTlDMTA2RTg3RkUxRDY0MTFBRUM3MUY4MDM5NDYyMkM4 ODFBQUFEOTAeFw0yNDA5MTUxMDE3NTVaFw0yNDA5MjIxMDE3NTVaMBgxFjAUBgNV BAMTDTY2ZTZiNDU0LWQ3ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDuOmNB+DLDRGlaK/BRSo0luS9BGgsF17d6m+wd4PWOhIk/KPMjwjkQJvhro6d cX0bLIZ3khpHVleyB+SAVk8vUpUWWQyv+Jggt20Nte4bns+PSZfdjZfyfC3ZuzKy ySI9ueo62JrGd/dJezOKmrwKNfl+ahcoYKQrxHbRn7RJwFHhFg1CpYJO2q38bpkr XKO3sTaT5GthrFjlZX2Z/L8WjGqgVu1UHo3M4pAAxOhA9QCcsb43m/xVGPK4Q6ez kYFaFpmO8qWpUfhPQO9wJIk6cB2hjqkQI9iuHc6j3edTI2fvTqNZcKwiryvJpsDY 4aY2Tsz5hpybpZpkRgtGgyZ9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmRE1gXPS cL2RL/1Z2UCirzza0kwwHwYDVR0jBBgwFoAUmcEG6H/h1kEa7HH4A5RiLIgaqtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMURCLzM2NTE0MEVFNDMx MDExRUY4NjhCMkI4MUM0RjlBRTAyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWNFRzZIX2gxa0VhN0hINEE1UmlMSWdhcXRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC MURCLzM2NTE0MEVFNDMxMDExRUY4NjhCMkI4MUM0RjlBRTAyL21jRUc2SF9oMWtF YTdISDRBNVJpTElnYXF0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE01RsKgW12rgZ+ZhqMkSLsJwH3qJ6vTkRpM/LPHdjZqMqAUN6fWhqc3 3rYgvBmD8YY/bgGyAdhM78+hcUcBKrAr2E8Bb+k88th8HmU5lzMn2udAREG/IKxs 8saw34yzIj0peqErKsLjCRlIlb2JO29kJRvLsV64SN8L01ttHQWSe0U0h55oCTMI LdS97mdKJkyjB1fq1vW7PEGh6XHoIfmOnOQ2G0HeiKr9a+wmoI0VZi+jlEIetS48 2XF0JlfM4yBrECqspYTf4/48J4lzvPT2zON13NzpYPqv9NBw4yq/3ngDbuRrr+BZ iqS65c2PX2EmH9nae/O8BhM8Puib580= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:33 2024 by rpki-client on console-ams.rpki-client.org