$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: YRS206NTBC5Bhm2gFgxzjko1crecpIkW+7CpOEE1Ob0= Subject key identifier: A6:8B:F9:45:E7:D7:EB:E9:2F:82:70:1D:C1:74:31:82:B3:9D:30:92 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: 3D Signing time: Sun 15 Sep 2024 09:56:23 +0000 Manifest this update: Sun 15 Sep 2024 09:56:22 +0000 Manifest next update: Sun 22 Sep 2024 09:56:22 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: JRESVPjirgWIKXvDgqOQLL6M90Gb8SkCR2p1CRjc+uc=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: MjGt04itAcx8gNx2WflFnwPVZOKhZPX7R3K5xPavI28=) 3: E54E2BA427E311EFA1F13E50C4F9AE02.roa (hash: noi9vMpJxQUtKVLAV8OgBZW8LGMcUNSfSgmOxpsSweY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Sep 15 09:56:22 2024 GMT Not After : Sep 22 09:56:22 2024 GMT Subject: CN=66e6af47-90c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:eb:d9:3f:7f:b5:44:17:7b:b8:27:85:7e: 5a:27:67:ce:79:1e:a5:a0:1f:dc:ba:87:55:b7:9f: f3:fb:d4:77:40:7c:c4:1c:11:45:d1:43:57:ec:f4: 08:b9:8e:0c:23:ab:d9:31:3e:6d:f3:92:3a:30:38: c4:89:df:f1:a3:a8:63:a6:4f:d5:fb:fb:b6:b3:e1: f3:b0:a1:6e:9d:be:97:a2:e9:20:0a:1e:97:fc:13: 9f:2e:02:c3:7a:9d:6f:91:d3:67:5a:ea:94:0e:0e: 3a:0b:4c:8b:9a:f0:d4:e6:2f:14:0a:96:99:0e:98: 59:e7:ef:29:6b:58:dd:a2:81:5d:91:34:64:12:e1: a6:af:89:87:bf:fa:cc:46:52:8f:b8:9d:db:85:cf: a6:45:01:5b:d2:b8:ed:94:ad:10:e4:52:2b:30:0d: af:30:fc:1c:c7:6e:0d:63:bd:8e:93:f8:c9:32:2d: e8:e1:f7:c8:01:ae:3a:08:5e:fb:eb:8c:2b:18:40: 64:37:89:c9:51:6f:5a:b6:e5:57:e6:73:7d:11:cf: 81:8b:5a:87:07:28:cd:f3:10:63:3a:e5:aa:3a:18: 48:e8:6f:12:30:76:2c:cf:50:2c:c1:b5:a8:ef:eb: 8c:1a:fc:6f:0a:a0:1f:57:2c:76:dd:3b:90:65:42: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8B:F9:45:E7:D7:EB:E9:2F:82:70:1D:C1:74:31:82:B3:9D:30:92 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:1c:0c:a9:16:ca:d0:1c:c7:82:0a:c1:75:64:7e:bb:f0:94: 55:e1:7d:d8:46:af:67:72:7d:06:13:88:26:07:ee:0c:9c:15: 3d:2f:02:c5:03:80:02:ab:61:41:be:26:6b:21:91:24:c9:cd: 4f:9c:5e:ec:b5:a8:64:75:b7:20:63:1e:f6:4b:34:7a:cb:bc: 1d:95:6c:12:04:c5:a9:ad:ee:df:80:4e:80:28:3b:1d:91:d2: e2:d5:23:89:0d:6b:9d:3b:70:12:05:8c:5e:a7:d8:cf:06:be: 97:18:69:65:a6:5c:ba:ac:7e:4b:ee:6a:67:4a:2a:76:19:6c: b9:0a:ea:8c:b2:b0:76:67:f1:e1:66:f2:5f:4d:a0:e3:d4:31: dd:c6:3b:c8:8a:56:37:88:3d:76:d9:c0:5b:7c:25:c2:1b:ad: 3f:b8:71:b5:2b:54:c0:ac:fa:8e:1f:ad:47:72:13:01:05:98: 83:1c:d1:b3:58:a4:e2:a5:c2:9e:25:7c:ae:ed:82:cf:45:ed: a0:d5:01:a4:2f:5c:e4:9c:1d:b1:20:5a:98:7c:3f:05:fa:dc: 7b:79:aa:2b:fd:01:2b:b7:d9:fe:79:52:64:49:30:c3:6d:d5: 4d:e5:7b:06:10:b9:8b:97:e7:72:91:b5:d8:e1:c9:12:39:a3: 66:a4:f8:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OThFQzExMC8GA1UEBRMoRTU4RjBGNTJBNEQyRDFERTQ0Njc1QUNBMTc1NTdCRjk4 MkVDN0Q3OTAeFw0yNDA5MTUwOTU2MjJaFw0yNDA5MjIwOTU2MjJaMBgxFjAUBgNV BAMTDTY2ZTZhZjQ3LTkwYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCs+vZP3+1RBd7uCeFflonZ855HqWgH9y6h1W3n/P71HdAfMQcEUXRQ1fs9Ai5 jgwjq9kxPm3zkjowOMSJ3/GjqGOmT9X7+7az4fOwoW6dvpei6SAKHpf8E58uAsN6 nW+R02da6pQODjoLTIua8NTmLxQKlpkOmFnn7ylrWN2igV2RNGQS4aaviYe/+sxG Uo+4nduFz6ZFAVvSuO2UrRDkUiswDa8w/BzHbg1jvY6T+MkyLejh98gBrjoIXvvr jCsYQGQ3iclRb1q25Vfmc30Rz4GLWocHKM3zEGM65ao6GEjobxIwdizPUCzBtajv 64wa/G8KoB9XLHbdO5BlQu8rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpov5RefX 6+kvgnAdwXQxgrOdMJIwHwYDVR0jBBgwFoAU5Y8PUqTS0d5EZ1rKF1V7+YLsfXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5OEVDLzIxRTVBMzBBMUVF MTExRUY5M0Y5ODUzREM0RjlBRTAyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVk4UFVxVFMwZDVFWjFyS0YxVjctWUxzZlhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 OEVDLzIxRTVBMzBBMUVFMTExRUY5M0Y5ODUzREM0RjlBRTAyLzVZOFBVcVRTMGQ1 RVoxcktGMVY3LVlMc2ZYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMccDKkWytAcx4IKwXVkfrvwlFXhfdhGr2dyfQYTiCYH7gycFT0vAsUD gAKrYUG+JmshkSTJzU+cXuy1qGR1tyBjHvZLNHrLvB2VbBIExamt7t+AToAoOx2R 0uLVI4kNa507cBIFjF6n2M8GvpcYaWWmXLqsfkvuamdKKnYZbLkK6oyysHZn8eFm 8l9NoOPUMd3GO8iKVjeIPXbZwFt8JcIbrT+4cbUrVMCs+o4frUdyEwEFmIMc0bNY pOKlwp4lfK7tgs9F7aDVAaQvXOScHbEgWph8PwX63Ht5qiv9ASu32f55UmRJMMNt 1U3lewYQuYuX53KRtdjhyRI5o2ak+D8= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:20 2024 by rpki-client on console-ams.rpki-client.org