$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: FghmuwaTcdZkMu8E1Ybeq4zdvkSaaju5/qf79yHx5Sw= Subject key identifier: EB:EF:9B:D1:26:07:64:33:2F:CA:43:42:48:E9:42:52:2E:87:CD:32 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 2B Signing time: Sun 15 Sep 2024 10:12:15 +0000 Manifest this update: Sun 15 Sep 2024 10:12:14 +0000 Manifest next update: Sun 22 Sep 2024 10:12:14 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: UYdU+mjFdolnVUhJbTDlCu/wV7fHot9KGzzyMBfEIPI=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: hMAkv0SPUa2fx1kdkftE1TeJlCXaC/PpyWLtj7Qjwao=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: RaPUG+Dh7qLyN+q+gPgCKOJ1sH5dp6IUHARU5/CAIwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Sep 15 10:12:14 2024 GMT Not After : Sep 22 10:12:14 2024 GMT Subject: CN=66e6b2ff-4398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:c1:11:6b:66:b9:ca:50:cc:6c:c3:8e:18: 8a:6d:3d:a9:14:6d:ad:9f:bf:cf:8b:8a:89:f6:fb: 90:c6:4e:2e:61:18:e5:d8:92:e3:bb:79:bd:f9:30: 80:76:27:09:f2:fb:b7:e1:6f:88:96:20:d3:ff:3a: 4d:ec:83:b9:93:a1:0b:70:8f:93:27:33:84:6e:8f: 43:22:8b:20:79:66:c6:91:4b:c9:ed:82:8a:70:0c: 10:eb:21:36:1e:2c:11:82:16:c7:d5:17:75:56:14: 80:e6:dd:f3:0b:78:1d:51:6c:c2:2b:f0:20:9a:0a: f3:6c:2d:9a:77:91:f3:e2:be:c5:d6:bc:dc:78:15: 79:ae:ce:9c:b6:75:f3:60:d9:29:7a:c1:4f:2e:c6: c8:7a:4a:7a:82:1c:61:1c:bc:27:d9:72:41:70:f1: fd:75:c6:75:97:2a:75:43:2b:38:57:44:fe:00:5e: 59:53:58:e8:c4:9a:15:82:19:76:9f:a0:d8:ec:6a: a5:bd:54:cc:6e:03:9d:5e:fe:71:40:3a:e0:d4:37: a1:4f:cf:e7:fe:e7:fc:dc:a0:c2:e8:67:58:b8:c0: 4a:ce:3a:df:69:59:2f:f2:94:c4:4b:dc:15:33:f2: 60:aa:5b:37:55:c5:8e:36:b4:8f:74:2b:87:1d:56: 39:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EF:9B:D1:26:07:64:33:2F:CA:43:42:48:E9:42:52:2E:87:CD:32 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:2c:08:61:86:4c:1c:ff:58:53:e2:5f:c8:98:97:46:9d:f8: 51:bf:11:8e:12:0c:75:3c:2a:d3:67:39:67:dd:f3:87:8e:82: d5:8f:35:83:b5:17:74:1f:ba:16:f9:f3:34:ef:8e:35:7b:1b: 74:15:45:4a:f9:de:fc:16:57:8c:4e:15:01:de:7f:4d:9a:8f: 1a:13:73:72:74:87:81:6b:f2:0c:8b:ea:57:05:b2:65:ea:9d: b9:8b:5d:8d:6b:16:ad:0b:3f:e6:55:c3:b5:97:cd:59:8f:32: 34:eb:0b:4e:2f:bd:9b:99:44:ae:98:3b:b8:da:df:87:77:57: 07:23:73:31:f1:d1:d8:94:65:de:5d:87:5c:39:8b:bb:b5:e6: dc:d5:db:6f:bf:f2:d6:f8:88:e8:ef:88:33:71:8b:8a:3d:45: ca:b7:08:a4:54:46:23:2e:99:ad:b5:fc:bf:f3:30:81:39:02: 68:35:b7:a8:c0:ae:ae:ab:01:d4:c5:09:b8:87:3d:7e:0c:11: 3a:af:83:dd:d1:f3:7a:30:56:99:32:e3:f0:d2:16:f8:ba:de: e2:0f:c1:d2:9c:f3:90:76:4c:aa:56:4d:47:ce:c6:ea:40:5b: 2b:3f:9f:cc:43:04:27:d3:11:8a:9c:53:ca:8c:55:7c:d5:ad: 7f:b2:e9:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTBERDExMC8GA1UEBRMoRDhCRDY3NjUxODM2NjAzNEI4ODg4NDhCM0I1NzE4RkE5 MDcwRTE5MjAeFw0yNDA5MTUxMDEyMTRaFw0yNDA5MjIxMDEyMTRaMBgxFjAUBgNV BAMTDTY2ZTZiMmZmLTQzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaUsERa2a5ylDMbMOOGIptPakUba2fv8+Lion2+5DGTi5hGOXYkuO7eb35MIB2 Jwny+7fhb4iWINP/Ok3sg7mToQtwj5MnM4Ruj0MiiyB5ZsaRS8ntgopwDBDrITYe LBGCFsfVF3VWFIDm3fMLeB1RbMIr8CCaCvNsLZp3kfPivsXWvNx4FXmuzpy2dfNg 2Sl6wU8uxsh6SnqCHGEcvCfZckFw8f11xnWXKnVDKzhXRP4AXllTWOjEmhWCGXaf oNjsaqW9VMxuA51e/nFAOuDUN6FPz+f+5/zcoMLoZ1i4wErOOt9pWS/ylMRL3BUz 8mCqWzdVxY42tI90K4cdVjllAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6++b0SYH ZDMvykNCSOlCUi6HzTIwHwYDVR0jBBgwFoAU2L1nZRg2YDS4iISLO1cY+pBw4ZIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMERELzY1NjMyNEY0MzhF QTExRUZCMEZCMjE3REM0RjlBRTAyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRa SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkwxblpSZzJZRFM0aUlTTE8xY1ktcEJ3NFpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx MERELzY1NjMyNEY0MzhFQTExRUZCMEZCMjE3REM0RjlBRTAyLzJMMW5aUmcyWURT NGlJU0xPMWNZLXBCdzRaSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQsCGGGTBz/WFPiX8iYl0ad+FG/EY4SDHU8KtNnOWfd84eOgtWPNYO1 F3Qfuhb58zTvjjV7G3QVRUr53vwWV4xOFQHef02ajxoTc3J0h4Fr8gyL6lcFsmXq nbmLXY1rFq0LP+ZVw7WXzVmPMjTrC04vvZuZRK6YO7ja34d3VwcjczHx0diUZd5d h1w5i7u15tzV22+/8tb4iOjviDNxi4o9Rcq3CKRURiMuma21/L/zMIE5Amg1t6jA rq6rAdTFCbiHPX4METqvg93R83owVpky4/DSFvi63uIPwdKc85B2TKpWTUfOxupA Wys/n8xDBCfTEYqcU8qMVXzVrX+y6Qo= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:42 2024 by rpki-client on console-fra.rpki-client.org