$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft File: Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json) Hash identifier: d4y94EEa1cmnSGPRIra+nwyVixzN2RpgU8cYlJXye+Q= Subject key identifier: 5B:20:E1:C2:9F:6E:85:58:54:09:88:D5:EE:9C:B2:0B:42:5C:20:A3 Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB Certificate issuer: /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft Manifest number: 28 Signing time: Sun 15 Sep 2024 10:10:38 +0000 Manifest this update: Sun 15 Sep 2024 10:10:38 +0000 Manifest next update: Sun 22 Sep 2024 10:10:38 +0000 Files and hashes: 1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: CMckpb6C/5xo4QY+28539xSoea3jGsGHfiNcmrllu2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Validity Not Before: Sep 15 10:10:38 2024 GMT Not After : Sep 22 10:10:38 2024 GMT Subject: CN=66e6b29e-5079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:9f:d9:3c:df:a7:39:92:fd:ff:84:0d:36: 57:d3:5e:f9:18:70:2d:bb:24:04:ad:30:e4:ad:d1: ed:63:ed:5e:df:ac:d9:6c:67:37:e9:49:ba:db:5b: a8:22:d5:4a:06:e8:07:8e:fc:bb:ee:b2:ce:ad:9d: b9:42:c4:ea:57:28:89:ea:09:e3:f8:c4:70:67:37: f0:82:97:bd:0a:8c:39:e4:6f:f8:9f:94:33:0d:07: 4c:02:e8:5b:29:70:37:5a:76:8d:cb:80:ea:7f:0a: 91:ea:a3:52:53:a1:a7:e0:85:c1:fd:83:d2:32:66: ea:c0:7c:45:ec:99:73:86:44:5b:04:c0:32:10:79: c5:83:54:85:94:e0:98:f4:11:1b:b7:4f:b2:83:67: f7:2b:a3:05:73:f5:59:55:45:89:3b:f5:8c:fb:37: 11:d3:1b:78:7b:c1:82:9a:8c:6b:cc:d1:16:ee:ab: 68:71:e2:ab:2d:d5:71:82:c6:93:76:44:b3:10:c7: 06:7f:e1:91:e7:b9:ad:3b:46:09:fd:93:b8:ad:44: ec:af:c2:cc:a9:7b:0a:22:2f:e6:9b:a3:a8:df:2d: 90:73:6a:4b:13:93:16:e6:9d:3b:2f:20:6d:c0:55: 91:61:b0:12:82:7c:f8:8b:7d:d3:3c:a2:9e:ee:68: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:20:E1:C2:9F:6E:85:58:54:09:88:D5:EE:9C:B2:0B:42:5C:20:A3 X509v3 Authority Key Identifier: keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:12:d2:ee:b9:21:0d:2f:ed:07:2b:cf:b1:02:1f:f1:f7:f6: e5:c2:50:ea:41:34:c4:0c:dc:83:4f:93:e7:da:41:f0:d7:60: 26:22:ad:48:f6:c7:82:f5:c8:05:15:0b:38:6d:0e:d4:16:db: 42:8b:c9:a2:26:9e:80:c0:48:c5:d5:53:bd:5c:fb:a8:cd:93: 89:af:86:02:af:a0:b0:ce:33:88:f3:1c:ff:cd:95:35:df:3a: ad:e2:89:de:2c:e2:06:63:62:32:db:98:ba:8f:50:15:27:72: 76:c2:5b:16:a4:89:11:be:56:37:33:7e:04:e3:ce:07:89:05: 8f:c0:29:ee:96:ef:ec:3f:fb:22:69:fa:19:0e:54:98:3e:51: c4:3c:6b:d5:55:d3:d1:57:58:f5:50:14:ce:e6:49:82:98:e7: c1:2d:33:e4:32:94:63:db:ad:93:30:60:54:cc:ee:1f:a6:ff: ec:58:68:45:d5:3e:37:90:68:82:03:b1:e9:85:be:4d:b7:1f: 46:97:53:34:16:83:3e:2a:dc:e4:8b:56:ad:7b:af:f3:03:be: 5c:49:77:1b:87:fc:cd:e2:3b:09:f3:38:11:e8:40:23:8e:90: f9:e6:66:28:a7:5f:95:42:8c:79:30:5f:bd:93:83:ea:24:f3: f1:4c:d9:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk1QTExMC8GA1UEBRMoMjMxQkE5OTlEOEU4ODI0RjYyMjJCODU2ODVEMDdERDQ3 QTcwNDZEQjAeFw0yNDA5MTUxMDEwMzhaFw0yNDA5MjIxMDEwMzhaMBgxFjAUBgNV BAMTDTY2ZTZiMjllLTUwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs0Z/ZPN+nOZL9/4QNNlfTXvkYcC27JAStMOSt0e1j7V7frNlsZzfpSbrbW6gi 1UoG6AeO/Lvuss6tnblCxOpXKInqCeP4xHBnN/CCl70KjDnkb/iflDMNB0wC6Fsp cDdado3LgOp/CpHqo1JToafghcH9g9IyZurAfEXsmXOGRFsEwDIQecWDVIWU4Jj0 ERu3T7KDZ/crowVz9VlVRYk79Yz7NxHTG3h7wYKajGvM0Rbuq2hx4qst1XGCxpN2 RLMQxwZ/4ZHnua07Rgn9k7itROyvwsypewoiL+abo6jfLZBzaksTkxbmnTsvIG3A VZFhsBKCfPiLfdM8op7uaGAhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWyDhwp9u hVhUCYjV7pyyC0JcIKMwHwYDVR0jBBgwFoAUIxupmdjogk9iIrhWhdB91HpwRtsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTVBLzVBMTlCRENBMzdB RTExRUY4QTQ1OEUzN0M0RjlBRTAyL0l4dXBtZGpvZ2s5aUlyaFdoZEI5MUhwd1J0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXh1cG1kam9nazlpSXJoV2hkQjkxSHB3UnRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTVBLzVBMTlCRENBMzdBRTExRUY4QTQ1OEUzN0M0RjlBRTAyL0l4dXBtZGpvZ2s5 aUlyaFdoZEI5MUhwd1J0cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYS0u65IQ0v7Qcrz7ECH/H39uXCUOpBNMQM3INPk+faQfDXYCYirUj2 x4L1yAUVCzhtDtQW20KLyaImnoDASMXVU71c+6jNk4mvhgKvoLDOM4jzHP/NlTXf Oq3iid4s4gZjYjLbmLqPUBUncnbCWxakiRG+VjczfgTjzgeJBY/AKe6W7+w/+yJp +hkOVJg+UcQ8a9VV09FXWPVQFM7mSYKY58EtM+QylGPbrZMwYFTM7h+m/+xYaEXV PjeQaIIDsemFvk23H0aXUzQWgz4q3OSLVq17r/MDvlxJdxuH/M3iOwnzOBHoQCOO kPnmZiinX5VCjHkwX72Tg+ok8/FM2Ug= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:42 2024 by rpki-client on console-fra.rpki-client.org