$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: DoUsBf3dnczXeQqHte9RRJzJ9yJJn3SYJOVse+UF5ZA= Subject key identifier: C1:80:A7:F6:F7:C5:E8:70:14:E5:03:10:4A:33:FB:4F:2B:64:B9:43 Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: 41 Signing time: Sun 15 Sep 2024 09:49:09 +0000 Manifest this update: Sun 15 Sep 2024 09:49:08 +0000 Manifest next update: Sun 22 Sep 2024 09:49:08 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: y+LxT7OpaEJIKpK2om1XmfMvTfBi7GUSihPFFa+2IJM=) 2: CF06918E129311EF9531F717C4F9AE02.roa (hash: A3Mx5CtZM3CMmMo1ePLTqN9jOQHbN6Y+N/7bDgUbfm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Sep 15 09:49:08 2024 GMT Not After : Sep 22 09:49:08 2024 GMT Subject: CN=66e6ad94-df4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:f2:e3:ee:0c:81:de:9d:14:c2:4e:61:f8: a0:db:b3:02:47:15:6e:3e:20:df:8a:de:81:c2:f2: 72:fa:ff:5e:ea:8a:f9:38:22:8e:39:af:94:7c:5a: 53:cf:82:46:63:4d:cb:fe:65:7d:c2:cb:7a:4e:02: 3f:b3:3c:5c:8b:8e:65:fd:f3:6f:a0:05:1a:09:5a: 85:e8:c1:53:69:8d:0c:fa:bf:59:cc:ea:c9:f9:43: d6:e9:70:aa:37:4b:98:ac:5c:77:c7:3e:43:6b:3a: 58:09:20:c2:e7:5d:b6:a1:aa:c2:2c:10:e5:6e:31: 2b:02:73:c6:45:f8:75:69:09:12:ea:cc:ff:1d:dc: de:a2:8a:17:65:77:2f:3c:bd:5e:16:dc:e1:6f:5a: f8:5f:f1:f5:f8:30:23:f6:32:26:50:3b:9a:7a:ac: 13:b6:5a:fb:f7:05:f2:12:1d:d6:68:a6:cf:8a:13: ff:23:1d:ef:a0:fc:80:15:fe:c4:66:ca:28:69:2d: ae:75:bb:5d:24:85:38:bb:9c:e2:ce:22:33:8f:4e: 98:50:f4:35:ef:67:71:45:ed:cb:6e:f4:8d:00:e4: e6:3d:93:8c:ec:42:4e:8c:0c:9a:e8:fb:d9:ad:f8: f2:cf:bd:f1:bb:35:61:28:37:5d:8f:5a:ab:eb:3f: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:80:A7:F6:F7:C5:E8:70:14:E5:03:10:4A:33:FB:4F:2B:64:B9:43 X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:af:74:12:9c:6c:f1:b9:2d:59:19:ba:ce:ab:c9:e5:2f:8b: 8a:83:9c:2b:f5:d3:ff:9d:38:1d:2c:ee:5d:21:2d:94:93:cf: 77:36:b3:e5:db:ec:19:c8:8a:48:bd:50:e5:df:67:e0:56:4f: 6c:97:ef:82:70:16:7d:e5:db:b6:a6:25:4a:6c:0f:2c:a8:58: 66:1f:b2:c4:a9:95:93:e3:5a:05:1b:32:9d:c2:9d:84:6f:b7: c5:3b:77:3c:aa:f5:a2:7a:20:8a:32:e5:3f:ca:33:45:4d:29: 8b:75:90:9f:fe:6b:a1:5c:52:d0:36:a0:eb:0e:75:f5:12:db: 58:a3:02:c2:9e:0c:aa:e4:0b:24:49:b0:93:cd:6a:41:04:21: e3:70:71:48:bc:cc:6f:0f:b1:8b:47:fb:21:36:50:53:0e:3d: ad:2a:ba:fd:b7:f8:ce:49:dc:8a:a7:45:31:d6:a3:a0:1a:cd: db:3c:13:81:d7:c6:16:d9:14:1d:54:72:c8:53:c3:13:74:17: 64:c2:c3:19:16:a6:c6:6e:3f:d4:b2:16:33:0b:f6:a2:8d:ef: 90:18:af:bd:41:d2:a9:5b:01:24:f0:ff:39:1e:6d:4b:51:0c: 87:7f:59:4e:c4:17:87:93:59:08:19:fd:bd:f1:97:b7:1d:a7: 3c:77:80:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEIwQTExMC8GA1UEBRMoRUU0QjA1NjE4NDM3RjE5NDhEOTI5OUY4QTRGOTI5QzE4 N0Q5N0YzMzAeFw0yNDA5MTUwOTQ5MDhaFw0yNDA5MjIwOTQ5MDhaMBgxFjAUBgNV BAMTDTY2ZTZhZDk0LWRmNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6dPLj7gyB3p0Uwk5h+KDbswJHFW4+IN+K3oHC8nL6/17qivk4Io45r5R8WlPP gkZjTcv+ZX3Cy3pOAj+zPFyLjmX982+gBRoJWoXowVNpjQz6v1nM6sn5Q9bpcKo3 S5isXHfHPkNrOlgJIMLnXbahqsIsEOVuMSsCc8ZF+HVpCRLqzP8d3N6iihdldy88 vV4W3OFvWvhf8fX4MCP2MiZQO5p6rBO2Wvv3BfISHdZops+KE/8jHe+g/IAV/sRm yihpLa51u10khTi7nOLOIjOPTphQ9DXvZ3FF7ctu9I0A5OY9k4zsQk6MDJro+9mt +PLPvfG7NWEoN12PWqvrP5/zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwYCn9vfF 6HAU5QMQSjP7TytkuUMwHwYDVR0jBBgwFoAU7ksFYYQ38ZSNkpn4pPkpwYfZfzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0QjBBLzRDRjBGNzA4MTI5 MjExRUZBQjEwNjU2NEM0RjlBRTAyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2tzRllZUTM4WlNOa3BuNHBQa3B3WWZaZnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 QjBBLzRDRjBGNzA4MTI5MjExRUZBQjEwNjU2NEM0RjlBRTAyLzdrc0ZZWVEzOFpT TmtwbjRwUGtwd1lmWmZ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMOvdBKcbPG5LVkZus6ryeUvi4qDnCv10/+dOB0s7l0hLZSTz3c2s+Xb 7BnIiki9UOXfZ+BWT2yX74JwFn3l27amJUpsDyyoWGYfssSplZPjWgUbMp3CnYRv t8U7dzyq9aJ6IIoy5T/KM0VNKYt1kJ/+a6FcUtA2oOsOdfUS21ijAsKeDKrkCyRJ sJPNakEEIeNwcUi8zG8PsYtH+yE2UFMOPa0quv23+M5J3IqnRTHWo6Aazds8E4HX xhbZFB1UcshTwxN0F2TCwxkWpsZuP9SyFjML9qKN75AYr71B0qlbASTw/zkebUtR DId/WU7EF4eTWQgZ/b3xl7cdpzx3gJo= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:09 2024 by rpki-client on console-fra.rpki-client.org