$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json) Hash identifier: 7/kmXoW/zL6Ypj+yNij2cPZi8ba0tcADlome6CkYB2g= Subject key identifier: CE:9E:FF:49:45:AE:F9:CF:06:EC:46:14:AB:73:0F:48:9C:43:FE:40 Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft Manifest number: 39 Signing time: Sun 15 Sep 2024 09:54:58 +0000 Manifest this update: Sun 15 Sep 2024 09:54:58 +0000 Manifest next update: Sun 22 Sep 2024 09:54:58 +0000 Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: DjXEQuwXC8gov7lHDh+xHysexBdrzkqoYZycITdV//I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Validity Not Before: Sep 15 09:54:58 2024 GMT Not After : Sep 22 09:54:58 2024 GMT Subject: CN=66e6aef2-d22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:5f:b8:d6:47:01:de:18:6e:db:19:1b:3c: 98:d2:1a:6f:54:67:f5:13:1b:bd:14:39:3e:a0:cf: 52:85:55:f8:11:fa:fd:2e:5a:fd:6c:e3:02:a4:d7: d2:ee:6c:b6:8c:52:41:5d:70:62:fa:c6:b7:47:82: 88:d2:49:e1:54:ec:bf:31:81:e8:c1:af:9a:e2:88: cb:70:4a:48:88:e4:d9:b3:c9:a7:55:9b:df:0e:91: a7:ee:dd:b3:cf:8c:34:de:be:1a:16:3d:08:28:c3: e0:71:dd:b8:c9:4e:03:c6:16:ad:5a:df:a8:19:8a: 45:8a:b0:44:19:27:f0:f2:b3:cb:3f:47:a6:60:83: f8:62:1f:cc:d0:3c:f1:b1:54:ec:f3:4e:1d:73:84: f4:f7:14:a8:b8:9a:29:c3:b8:83:9f:1d:20:6c:c1: 8f:c4:ce:82:9f:0e:27:0f:3c:18:ee:20:15:74:82: a7:aa:5a:c9:76:10:62:1d:55:e3:d0:15:47:35:cc: ef:b2:3a:f8:11:dd:8b:62:cb:0d:8f:29:1b:82:1b: bc:a5:df:78:df:71:24:92:2c:88:b8:2e:c5:19:0b: 60:29:d8:9a:1e:3d:5d:7e:07:f5:fa:19:3a:b1:d6: 2d:00:7a:fc:47:13:31:41:c0:58:35:54:9c:ec:50: 6c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9E:FF:49:45:AE:F9:CF:06:EC:46:14:AB:73:0F:48:9C:43:FE:40 X509v3 Authority Key Identifier: keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f5:78:00:fb:33:50:34:f7:07:c7:f1:a8:89:04:cc:c0:0d: 07:0e:31:7f:22:3f:32:f1:5a:47:ed:86:0a:4d:a5:6b:f2:16: f6:ef:73:62:3a:d6:f4:59:01:af:46:a9:40:4d:2a:ac:c4:8c: 4c:98:3d:72:06:a7:40:e7:00:8c:2b:fc:9f:70:c2:dd:1d:16: de:4f:cc:c3:91:ca:67:b2:54:cd:51:14:75:97:52:79:ad:ad: d5:c3:9c:30:3a:d9:aa:c2:38:f1:51:ff:ce:a9:f2:44:3c:03: ac:24:2a:4d:9c:f2:1e:dd:aa:38:a5:2e:b4:fd:76:c4:c1:9a: 67:ef:d7:71:39:bb:53:42:fb:ed:54:7a:ed:ee:f2:2b:21:6e: 2e:7f:73:3d:e9:1e:82:65:e9:45:75:09:c6:fa:c7:2c:49:68: 5c:88:84:32:4b:01:64:02:71:76:a9:07:21:ac:d4:2a:45:37: c7:90:33:de:ad:6c:0e:e9:80:1c:09:09:cc:e9:7b:d1:9d:96: 7d:e4:b8:68:af:51:06:e6:59:3e:3e:9a:cf:2a:62:b3:93:5b: f0:04:19:d8:e7:71:28:83:ed:a3:d6:f3:b5:77:8e:db:b8:7c: 76:0a:0e:47:08:bd:e8:b4:a3:9a:23:5b:ad:02:dc:a2:8b:74: 46:76:33:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTNEMzExMC8GA1UEBRMoQzBGRjFGMzI2N0Q4QUQ5ODEyOEIzRTM5N0NDRkY3OTcz Qjc1MDhDRDAeFw0yNDA5MTUwOTU0NThaFw0yNDA5MjIwOTU0NThaMBgxFjAUBgNV BAMTDTY2ZTZhZWYyLWQyMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDclF+41kcB3hhu2xkbPJjSGm9UZ/UTG70UOT6gz1KFVfgR+v0uWv1s4wKk19Lu bLaMUkFdcGL6xrdHgojSSeFU7L8xgejBr5riiMtwSkiI5NmzyadVm98Okafu3bPP jDTevhoWPQgow+Bx3bjJTgPGFq1a36gZikWKsEQZJ/Dys8s/R6Zgg/hiH8zQPPGx VOzzTh1zhPT3FKi4minDuIOfHSBswY/EzoKfDicPPBjuIBV0gqeqWsl2EGIdVePQ FUc1zO+yOvgR3Ytiyw2PKRuCG7yl33jfcSSSLIi4LsUZC2Ap2JoePV1+B/X6GTqx 1i0AevxHEzFBwFg1VJzsUGx5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzp7/SUWu +c8G7EYUq3MPSJxD/kAwHwYDVR0jBBgwFoAUwP8fMmfYrZgSiz45fM/3lzt1CM0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1M0QzLzQyNTI5RjlFMUQ4 ODExRUZBM0M2NEE1RUM0RjlBRTAyL3dQOGZNbWZZclpnU2l6NDVmTV8zbHp0MUNN MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1A4Zk1tZllyWmdTaXo0NWZNXzNsenQxQ00wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 M0QzLzQyNTI5RjlFMUQ4ODExRUZBM0M2NEE1RUM0RjlBRTAyL3dQOGZNbWZZclpn U2l6NDVmTV8zbHp0MUNNMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADf1eAD7M1A09wfH8aiJBMzADQcOMX8iPzLxWkfthgpNpWvyFvbvc2I6 1vRZAa9GqUBNKqzEjEyYPXIGp0DnAIwr/J9wwt0dFt5PzMORymeyVM1RFHWXUnmt rdXDnDA62arCOPFR/86p8kQ8A6wkKk2c8h7dqjilLrT9dsTBmmfv13E5u1NC++1U eu3u8ishbi5/cz3pHoJl6UV1Ccb6xyxJaFyIhDJLAWQCcXapByGs1CpFN8eQM96t bA7pgBwJCczpe9Gdln3kuGivUQbmWT4+ms8qYrOTW/AEGdjncSiD7aPW87V3jtu4 fHYKDkcIvei0o5ojW60C3KKLdEZ2M2g= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:09 2024 by rpki-client on console-fra.rpki-client.org