$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: ZRUn3VLXUpzy9QWLOZGPiYMnfexVC4SxH6XR7ZlBPzw= Subject key identifier: 90:5B:83:86:13:7E:E7:90:C6:B0:70:F9:C0:C0:F9:89:72:BA:6E:FA Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: 2B Signing time: Sun 15 Sep 2024 10:10:10 +0000 Manifest this update: Sun 15 Sep 2024 10:10:09 +0000 Manifest next update: Sun 22 Sep 2024 10:10:09 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: oCol4mbHEY47WP1WHw4R4K9DAU3np75BWfkkbEoLyyI=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: Sep 15 10:10:09 2024 GMT Not After : Sep 22 10:10:09 2024 GMT Subject: CN=66e6b281-fef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:41:b4:3e:30:bc:bf:81:12:26:b1:56:36: 60:13:dc:2a:c5:46:36:34:2d:9c:d9:34:b6:da:e0: 0a:88:89:e4:0b:a2:b8:bc:30:d4:01:30:d8:ce:6a: c1:4d:00:2f:3f:a1:fe:a8:99:89:b2:67:79:3c:f4: c9:15:59:a6:27:cb:aa:d7:75:6a:53:bd:b6:48:be: 9c:0a:b4:3f:6c:db:c4:5c:ce:8e:a0:49:52:d4:86: 4a:71:e9:6e:c2:87:f4:ca:f4:b4:e9:01:fe:4c:bb: 56:93:71:59:ed:ee:96:f5:56:c4:0e:3a:2b:e2:32: 3a:9d:c8:1f:5a:f8:8b:c1:70:fc:bc:b2:71:aa:a6: 28:79:fa:42:02:03:95:68:ad:2c:d3:0f:f3:fc:46: a2:46:38:20:8d:33:b2:79:b4:99:b6:a6:6f:f9:f7: 3c:ad:67:f4:7a:dc:f1:22:bf:45:b4:23:78:c4:d9: ef:11:14:67:f5:16:a5:19:60:a2:6e:60:b1:f8:f8: 97:26:76:fa:af:4b:ed:5a:74:7b:42:b6:5d:19:c5: f4:6f:75:1b:dd:2a:93:ab:b0:a9:ba:3b:84:b0:24: bf:de:fc:87:31:64:66:99:ec:ea:2d:73:98:d2:3b: ff:1f:a9:a6:78:67:08:96:08:85:73:ea:c2:be:68: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5B:83:86:13:7E:E7:90:C6:B0:70:F9:C0:C0:F9:89:72:BA:6E:FA X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a2:17:3a:96:f5:c3:cb:82:84:77:96:ae:c7:6a:b0:43:d9: d6:4d:cc:f4:62:43:ad:f6:75:b5:6a:fc:e0:bf:92:c4:4c:b4: a3:cd:2d:dd:bc:43:48:9d:a5:8f:e6:79:56:0a:85:79:04:97: 0d:6f:12:d5:b3:cc:79:a8:9d:24:9f:8c:4e:94:9b:2c:92:5d: 77:a8:6c:7e:3f:41:1b:1b:ec:04:37:98:fc:6e:b7:34:bf:24: 77:47:9b:1c:47:15:17:36:e2:bc:ee:64:8c:6a:6e:43:c2:da: 0e:1d:ca:14:1e:d3:55:eb:3d:15:d9:24:84:eb:93:f2:50:03: 92:34:2e:26:16:be:ef:cc:78:bf:c4:58:8f:40:06:5e:96:71: 9d:d2:62:97:8a:fa:97:b4:c8:f5:0c:37:a9:6f:f7:ee:2c:e7: 32:f9:a8:aa:48:dd:c1:a9:96:c2:36:68:e4:46:8b:7e:b7:d8: ed:d0:e4:c5:79:5e:b2:bb:c9:0d:71:f8:fa:0e:45:73:84:e7: 4e:ee:2a:fc:6d:ea:9c:ba:e2:e1:c1:0b:7a:8c:b3:d5:5b:8c: f3:4f:2b:92:54:55:6b:74:51:0b:9f:2b:09:20:e1:51:0a:19: 7f:70:2a:15:72:37:47:ac:b7:03:dc:63:30:60:17:ac:0e:c6: 46:55:cb:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjMwMjExMC8GA1UEBRMoMjFCRThDOEZFOTUzRjZFQzk3QjdGMTIxNjE3RUQ5MTA0 N0RBQTVBNDAeFw0yNDA5MTUxMDEwMDlaFw0yNDA5MjIxMDEwMDlaMBgxFjAUBgNV BAMTDTY2ZTZiMjgxLWZlZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjtUG0PjC8v4ESJrFWNmAT3CrFRjY0LZzZNLba4AqIieQLori8MNQBMNjOasFN AC8/of6omYmyZ3k89MkVWaYny6rXdWpTvbZIvpwKtD9s28Rczo6gSVLUhkpx6W7C h/TK9LTpAf5Mu1aTcVnt7pb1VsQOOiviMjqdyB9a+IvBcPy8snGqpih5+kICA5Vo rSzTD/P8RqJGOCCNM7J5tJm2pm/59zytZ/R63PEiv0W0I3jE2e8RFGf1FqUZYKJu YLH4+JcmdvqvS+1adHtCtl0ZxfRvdRvdKpOrsKm6O4SwJL/e/IcxZGaZ7Ootc5jS O/8fqaZ4ZwiWCIVz6sK+aJurAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkFuDhhN+ 55DGsHD5wMD5iXK6bvowHwYDVR0jBBgwFoAUIb6Mj+lT9uyXt/EhYX7ZEEfapaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MzAyL0EzMkZERkRFMzc0 NjExRUY5NjY1MzMyNkM0RjlBRTAyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWI2TWotbFQ5dXlYdF9FaFlYN1pFRWZhcGFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MzAyL0EzMkZERkRFMzc0NjExRUY5NjY1MzMyNkM0RjlBRTAyL0liNk1qLWxUOXV5 WHRfRWhZWDdaRUVmYXBhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGuiFzqW9cPLgoR3lq7HarBD2dZNzPRiQ632dbVq/OC/ksRMtKPNLd28 Q0idpY/meVYKhXkElw1vEtWzzHmonSSfjE6UmyySXXeobH4/QRsb7AQ3mPxutzS/ JHdHmxxHFRc24rzuZIxqbkPC2g4dyhQe01XrPRXZJITrk/JQA5I0LiYWvu/MeL/E WI9ABl6WcZ3SYpeK+pe0yPUMN6lv9+4s5zL5qKpI3cGplsI2aORGi3632O3Q5MV5 XrK7yQ1x+PoORXOE507uKvxt6py64uHBC3qMs9VbjPNPK5JUVWt0UQufKwkg4VEK GX9wKhVyN0estwPcYzBgF6wOxkZVy9w= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:42 2024 by rpki-client on console-fra.rpki-client.org