$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: k4tJF9fbkNDbbgcNQgIq50cZMPaBYOROrhz0QPZbtyI= Subject key identifier: E8:D7:12:9C:23:B2:C8:A9:BC:07:7C:7E:14:ED:A7:78:BC:79:D4:23 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: 35 Signing time: Sun 15 Sep 2024 09:59:27 +0000 Manifest this update: Sun 15 Sep 2024 09:59:26 +0000 Manifest next update: Sun 22 Sep 2024 09:59:26 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: jK0SpW7LCi/PSE+8FpzKu9Knnm5G3iumlBoVAJO8/Is=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: 6WMxEseQDOQi71AEegKWG3BFBRYdf0cjzTU5QeyGB6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Validity Not Before: Sep 15 09:59:26 2024 GMT Not After : Sep 22 09:59:26 2024 GMT Subject: CN=66e6affe-6380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:84:90:22:d4:75:0a:0a:9a:02:32:17:59: db:24:08:eb:4e:a8:16:9b:e2:8e:b3:6f:71:17:50: 6b:82:90:2d:71:b6:40:f9:b2:5e:82:43:e8:f5:d3: 80:63:7f:9a:9e:8d:f6:c3:e5:32:e2:45:fe:c0:6d: 42:17:43:28:78:fb:74:4b:2d:78:da:51:b3:a0:35: a8:75:10:db:83:ee:68:9d:95:a5:ba:2c:af:c2:71: 61:ad:d8:55:d7:5b:16:9b:f8:14:64:1e:0e:2f:bd: ca:9e:b8:f0:dc:e3:1f:6a:92:28:dd:b7:1c:95:48: 90:10:ad:ee:e9:5e:68:4e:e1:15:e4:27:f0:ce:e5: 48:3b:25:f2:03:24:b3:f1:e0:5e:ca:18:76:34:49: e7:08:c6:2a:82:ea:18:a7:af:7d:a0:80:54:53:d9: cb:e2:12:89:b3:fb:d6:d5:40:75:a2:92:af:e1:98: b7:f4:9a:12:8c:0a:e6:12:12:e9:3d:56:19:3b:33: 95:3f:af:05:ad:57:24:69:a6:06:fa:01:82:43:e0: d9:64:cc:f2:c2:bb:91:57:75:2f:0a:05:ca:12:cf: eb:90:6c:18:f5:6f:9d:dc:18:52:c2:eb:82:28:2f: 14:e5:eb:67:22:11:63:17:67:e8:b1:dd:aa:e0:40: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D7:12:9C:23:B2:C8:A9:BC:07:7C:7E:14:ED:A7:78:BC:79:D4:23 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:69:0f:70:02:00:3c:c6:9f:c6:85:cf:d4:c5:c1:92:7a:ec: 45:9d:6b:f9:19:fd:e9:44:13:c9:6a:82:e1:42:93:e7:bf:2d: 5f:43:27:6f:41:a4:62:9f:6a:16:cd:1c:99:e1:c7:23:8f:31: 93:f2:c5:0d:38:0c:eb:7e:7f:0d:59:65:58:38:4a:df:17:5e: d8:79:a3:72:67:2f:29:67:59:87:98:f2:42:1a:30:a3:38:af: 78:ce:59:23:06:48:b8:bc:f8:57:c0:23:0a:7f:a5:c8:15:0f: b3:71:14:aa:bd:c5:42:ec:a7:c3:7c:ac:1a:bc:6a:99:ef:8d: fd:76:87:d8:04:23:c0:ee:7d:b4:7b:ce:c4:70:82:70:54:74: fc:19:57:f2:5f:5a:5a:08:4d:b1:8d:14:dd:3c:78:de:a7:e4: d8:bc:7b:d6:2e:17:c3:4d:a5:67:fc:23:eb:e8:70:13:4d:1e: 7d:6a:0b:62:fd:f0:67:a3:ec:89:5e:c3:d5:cb:c7:1e:94:ff: ce:5e:bc:c9:c9:2b:62:2c:5d:6a:29:cf:e9:50:90:67:6d:56: 59:2b:0d:47:ff:18:f3:14:62:0f:e8:4c:84:ee:6b:89:c1:8c: b2:40:d2:7c:20:da:1d:7f:92:a8:60:4b:1c:36:28:c3:49:b4: 04:30:d8:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RUI5QTExMC8GA1UEBRMoODNFRjhGRTlFRTQ4NjlGMEI5NEE5NUY3NDZGNTg5NEJB MUZCMzBGMDAeFw0yNDA5MTUwOTU5MjZaFw0yNDA5MjIwOTU5MjZaMBgxFjAUBgNV BAMTDTY2ZTZhZmZlLTYzODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz7YSQItR1CgqaAjIXWdskCOtOqBab4o6zb3EXUGuCkC1xtkD5sl6CQ+j104Bj f5qejfbD5TLiRf7AbUIXQyh4+3RLLXjaUbOgNah1ENuD7midlaW6LK/CcWGt2FXX Wxab+BRkHg4vvcqeuPDc4x9qkijdtxyVSJAQre7pXmhO4RXkJ/DO5Ug7JfIDJLPx 4F7KGHY0SecIxiqC6hinr32ggFRT2cviEomz+9bVQHWikq/hmLf0mhKMCuYSEuk9 Vhk7M5U/rwWtVyRppgb6AYJD4NlkzPLCu5FXdS8KBcoSz+uQbBj1b53cGFLC64Io LxTl62ciEWMXZ+ix3argQEZzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6NcSnCOy yKm8B3x+FO2neLx51CMwHwYDVR0jBBgwFoAUg++P6e5IafC5SpX3RvWJS6H7MPAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQjlBL0U0QTY1RURFMjND MzExRUY4OTJERUIyMUM0RjlBRTAyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01Q QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZy0tUDZlNUlhZkM1U3BYM1J2V0pTNkg3TVBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF QjlBL0U0QTY1RURFMjNDMzExRUY4OTJERUIyMUM0RjlBRTAyL2ctLVA2ZTVJYWZD NVNwWDNSdldKUzZIN01QQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlpD3ACADzGn8aFz9TFwZJ67EWda/kZ/elEE8lqguFCk+e/LV9DJ29B pGKfahbNHJnhxyOPMZPyxQ04DOt+fw1ZZVg4St8XXth5o3JnLylnWYeY8kIaMKM4 r3jOWSMGSLi8+FfAIwp/pcgVD7NxFKq9xULsp8N8rBq8apnvjf12h9gEI8DufbR7 zsRwgnBUdPwZV/JfWloITbGNFN08eN6n5Ni8e9YuF8NNpWf8I+vocBNNHn1qC2L9 8Gej7Ilew9XLxx6U/85evMnJK2IsXWopz+lQkGdtVlkrDUf/GPMUYg/oTITua4nB jLJA0nwg2h1/kqhgSxw2KMNJtAQw2Ok= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:09 2024 by rpki-client on console-fra.rpki-client.org