$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: aEZt8gBBgnsa95TL5lN73zYSFpcSm73CHjUalmbPlCg= Subject key identifier: 9A:FB:CC:70:D4:84:C8:1C:06:16:E3:1F:72:51:5E:95:97:0C:78:11 Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: 46 Signing time: Sun 15 Sep 2024 09:45:23 +0000 Manifest this update: Sun 15 Sep 2024 09:45:22 +0000 Manifest next update: Sun 22 Sep 2024 09:45:22 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: Gn3znuwWTeWVkId152wR+/0jC4TW3AoiVIZUE74444c=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: XJ6Cl0k/r34t0UIzqumXdg3IJ/QU+9th/mHz4X1ySQs=) 3: EC82D1D00C0A11EF86081F2FC4F9AE02.roa (hash: /1qMdbu2VC9jieePRc6g2z78HH9wc3bqvzcmrwLCwgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Sep 15 09:45:22 2024 GMT Not After : Sep 22 09:45:22 2024 GMT Subject: CN=66e6acb3-533b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:3d:84:af:ac:d9:20:91:25:dc:e1:d7:af: b3:ea:fe:38:39:87:74:40:6d:e9:c9:a8:4a:68:4a: e4:d8:7f:bf:85:fd:5f:f6:9d:5b:a9:36:bd:57:56: e6:c0:85:38:6f:f8:6b:18:da:c3:23:0d:a9:01:8a: 5c:58:ef:e5:b7:4c:83:73:10:29:70:2a:4d:d3:25: 0c:1b:63:6a:8d:6c:a6:19:3d:6d:64:e8:d5:df:a2: 30:a9:e9:01:ac:0e:a6:ca:fe:0f:7e:75:3a:e2:47: f0:2b:53:ea:95:37:0f:6b:46:e1:15:23:98:a3:61: f0:7e:3a:7f:df:5d:17:c1:0e:22:d1:31:8e:2a:f8: 3e:a2:23:6e:a5:84:94:59:27:ea:01:f2:c6:c3:38: 50:16:ba:9e:94:33:91:ca:39:a7:71:62:42:64:8a: e0:c9:6f:fe:86:b3:d9:92:3d:04:95:2b:a5:1b:e7: 35:56:ab:b1:8b:2b:7f:b6:31:15:c4:b2:67:56:8f: 23:76:b2:c4:a1:44:0e:48:e8:1f:fa:f1:01:e6:a8: 24:77:36:47:d9:fd:3b:3c:bc:5a:c7:39:5d:9c:a3: cf:c8:f8:74:e0:f7:b0:88:a8:a9:c0:c5:e0:98:75: c3:b7:aa:15:a6:71:d5:2f:3c:3e:e2:9a:8b:1a:97: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FB:CC:70:D4:84:C8:1C:06:16:E3:1F:72:51:5E:95:97:0C:78:11 X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ee:8e:05:16:b2:29:9e:27:b3:06:0c:db:58:97:da:fb:e8: 92:b9:a8:39:18:e1:38:c4:c6:e6:8c:8b:da:0e:ff:29:88:ff: 67:07:5d:c6:92:51:33:1a:00:37:b8:01:8e:b3:cd:d9:34:1a: 17:07:3e:61:81:ab:44:f7:0e:39:2c:84:a5:ef:72:f1:cd:8b: 31:34:cd:21:86:35:64:df:b1:bf:e6:18:4d:66:4a:84:d8:6f: 71:f2:dc:b4:7a:6a:d5:b0:0b:01:90:ca:bf:38:78:2c:ab:61: d6:3b:33:2e:39:ce:7e:59:49:b8:ea:c2:8f:ef:a5:c9:58:66: 63:7c:86:1d:0a:d2:04:f0:37:9e:2f:7d:9c:1b:85:6b:a0:17: b4:fa:77:7d:af:c9:69:fc:d3:48:a0:7d:52:93:3d:b2:38:b2: eb:11:45:be:f2:af:af:76:cc:84:b4:8a:ea:58:9f:73:e3:6d: 8f:e0:d6:84:c4:80:0b:0b:e9:37:a3:e9:2e:8b:14:b8:dc:69: 8e:cf:17:6f:d5:08:b4:26:77:bb:58:6d:ae:27:42:78:91:4f: 7e:db:ae:09:12:de:a7:aa:25:1f:81:85:47:6e:13:93:b6:41: c8:10:81:48:c3:c0:82:15:49:69:5b:f6:cb:70:35:2a:46:29: b3:d1:01:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEY2QzExMC8GA1UEBRMoRDlDREMwODk0ODJBNjc0OUI1MjAwNTFDMEYzODVGNjJE RThDQjQ5MzAeFw0yNDA5MTUwOTQ1MjJaFw0yNDA5MjIwOTQ1MjJaMBgxFjAUBgNV BAMTDTY2ZTZhY2IzLTUzM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG3j2Er6zZIJEl3OHXr7Pq/jg5h3RAbenJqEpoSuTYf7+F/V/2nVupNr1XVubA hThv+GsY2sMjDakBilxY7+W3TINzEClwKk3TJQwbY2qNbKYZPW1k6NXfojCp6QGs DqbK/g9+dTriR/ArU+qVNw9rRuEVI5ijYfB+On/fXRfBDiLRMY4q+D6iI26lhJRZ J+oB8sbDOFAWup6UM5HKOadxYkJkiuDJb/6Gs9mSPQSVK6Ub5zVWq7GLK3+2MRXE smdWjyN2ssShRA5I6B/68QHmqCR3NkfZ/Ts8vFrHOV2co8/I+HTg97CIqKnAxeCY dcO3qhWmcdUvPD7imosal5qlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmvvMcNSE yBwGFuMfclFelZcMeBEwHwYDVR0jBBgwFoAU2c3AiUgqZ0m1IAUcDzhfYt6MtJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjZDL0I4ODIzNzI4MEMw OTExRUY5QkQ5MTMyQ0M0RjlBRTAyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmMzQWlVZ3FaMG0xSUFVY0R6aGZZdDZNdEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 RjZDL0I4ODIzNzI4MEMwOTExRUY5QkQ5MTMyQ0M0RjlBRTAyLzJjM0FpVWdxWjBt MUlBVWNEemhmWXQ2TXRKTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3ujgUWsimeJ7MGDNtYl9r76JK5qDkY4TjExuaMi9oO/ymI/2cHXcaS UTMaADe4AY6zzdk0GhcHPmGBq0T3DjkshKXvcvHNizE0zSGGNWTfsb/mGE1mSoTY b3Hy3LR6atWwCwGQyr84eCyrYdY7My45zn5ZSbjqwo/vpclYZmN8hh0K0gTwN54v fZwbhWugF7T6d32vyWn800igfVKTPbI4susRRb7yr692zIS0iupYn3PjbY/g1oTE gAsL6Tej6S6LFLjcaY7PF2/VCLQmd7tYba4nQniRT37brgkS3qeqJR+BhUduE5O2 QcgQgUjDwIIVSWlb9stwNSpGKbPRAZE= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:20 2024 by rpki-client on console-ams.rpki-client.org