$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: D+DE+ooYVO/ugcmTeV5k4JxIftkOz7EC8SS7wo6VUE4= Subject key identifier: FE:12:93:A5:32:63:05:86:F0:B3:8C:5B:F5:5C:FF:C9:C8:78:8A:8D Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: 2B Signing time: Sun 15 Sep 2024 10:09:07 +0000 Manifest this update: Sun 15 Sep 2024 10:09:06 +0000 Manifest next update: Sun 22 Sep 2024 10:09:06 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: PcC117z5o3s/0fDPlbrxOHbF60UX5vwVyN3J6iq0DB8=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: BGWFxC/B5z+W4syYv1KrB6WI1JIbx5pNt/4UAlcwzEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: Sep 15 10:09:06 2024 GMT Not After : Sep 22 10:09:06 2024 GMT Subject: CN=66e6b243-2ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:5d:ed:2d:ad:dc:7e:25:96:50:dc:e9:35: cc:b3:05:24:7e:05:a8:51:e4:3c:13:81:87:35:87: e0:3b:f5:77:00:3b:33:24:07:4f:c1:09:31:8c:8e: af:91:81:72:f9:1d:9a:bf:2f:87:d2:c4:2e:9d:3d: 0e:bf:fb:b3:91:89:ff:d6:c9:26:ab:56:c2:be:18: 41:9f:03:35:4c:42:69:4a:28:59:d4:c9:e8:61:d2: 13:f4:ba:2e:64:bf:29:b2:2f:09:92:b3:75:26:1e: 9e:52:c2:30:2d:9e:03:21:4a:9e:b4:92:a0:ea:86: 1c:27:ce:c1:b5:9e:5c:f3:e8:d4:26:14:91:2e:91: a2:69:5a:15:2a:9d:fa:f5:22:c0:f4:f6:d4:fc:b5: 90:a3:57:10:ca:f4:2c:55:db:5d:fd:26:a3:e5:29: 86:0e:5f:a7:58:6c:61:9e:c7:cf:21:ec:ce:8a:29: 7f:e7:03:ba:3f:b7:a8:2d:f7:90:b2:56:5e:77:c8: 59:3f:ec:80:0a:bb:5b:6b:bb:93:1f:28:fe:00:4d: e5:7a:8c:d5:2b:56:89:d3:f9:d3:73:fc:42:7a:2c: c1:ba:62:a0:c3:c9:58:25:b8:85:41:63:f1:93:df: 17:5d:d5:53:bf:29:41:5e:97:1e:2f:f6:96:0f:25: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:12:93:A5:32:63:05:86:F0:B3:8C:5B:F5:5C:FF:C9:C8:78:8A:8D X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:cf:3b:be:bf:96:15:f2:1a:72:40:14:8e:f5:c1:93:c0:58: 69:92:11:99:86:0b:be:bd:d0:a7:48:aa:7d:77:82:3e:31:dc: 4b:8b:b7:38:fb:36:d9:9b:87:db:80:c9:b6:d4:c5:2c:9e:99: 06:c7:e3:8a:59:8c:91:e9:b8:ff:35:20:6c:b3:48:6d:a4:11: 1b:e4:93:e2:06:ac:fa:4f:59:15:e0:99:50:ca:d2:f8:ea:49: d2:89:9a:9d:88:c0:cf:90:5e:c0:8f:8c:de:4c:29:ae:fe:0f: cb:90:3d:92:44:08:f5:e6:8a:13:ff:d7:a9:fd:19:a0:a9:b5: 1a:4d:1d:29:e2:f2:b7:67:9e:b0:56:0b:69:9e:3b:f1:1f:dd: 0e:f9:4f:c1:34:4a:15:72:35:1c:2b:12:32:13:dd:7d:0d:63: 22:8a:75:58:e9:f8:4b:bd:cc:6a:21:7b:8b:86:70:26:6e:b1: c7:9c:a4:cb:e5:86:3b:e3:61:ad:52:04:8e:f4:a4:85:79:94: 7f:d5:ee:09:2f:db:0f:a3:41:d9:ca:95:6e:fe:cf:41:f4:67: d5:89:8b:88:c2:f3:a9:51:5b:25:b9:ab:98:60:08:bc:bc:7c: 40:d2:97:45:ed:33:f3:77:d2:54:dc:0e:23:55:d3:a4:32:dc: 64:ba:54:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NzRGQjExMC8GA1UEBRMoOTIyNDE2NjU5NTU4MjE3QzkzNjI3Qjk2RDlDOUVBRkFD MUZBQTNFRTAeFw0yNDA5MTUxMDA5MDZaFw0yNDA5MjIxMDA5MDZaMBgxFjAUBgNV BAMTDTY2ZTZiMjQzLTJlZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXYl3tLa3cfiWWUNzpNcyzBSR+BahR5DwTgYc1h+A79XcAOzMkB0/BCTGMjq+R gXL5HZq/L4fSxC6dPQ6/+7ORif/WySarVsK+GEGfAzVMQmlKKFnUyehh0hP0ui5k vymyLwmSs3UmHp5SwjAtngMhSp60kqDqhhwnzsG1nlzz6NQmFJEukaJpWhUqnfr1 IsD09tT8tZCjVxDK9CxV2139JqPlKYYOX6dYbGGex88h7M6KKX/nA7o/t6gt95Cy Vl53yFk/7IAKu1tru5MfKP4ATeV6jNUrVonT+dNz/EJ6LMG6YqDDyVgluIVBY/GT 3xdd1VO/KUFelx4v9pYPJYO1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/hKTpTJj BYbws4xb9Vz/ych4io0wHwYDVR0jBBgwFoAUkiQWZZVYIXyTYnuW2cnq+sH6o+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NEZCLzgxNjk3MkM2MzQz OTExRUY5QzNEMjEzRUM0RjlBRTAyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8t NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2lRV1paVllJWHlUWW51VzJjbnEtc0g2by00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 NEZCLzgxNjk3MkM2MzQzOTExRUY5QzNEMjEzRUM0RjlBRTAyL2tpUVdaWlZZSVh5 VFludVcyY25xLXNINm8tNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTPO76/lhXyGnJAFI71wZPAWGmSEZmGC7690KdIqn13gj4x3EuLtzj7 Ntmbh9uAybbUxSyemQbH44pZjJHpuP81IGyzSG2kERvkk+IGrPpPWRXgmVDK0vjq SdKJmp2IwM+QXsCPjN5MKa7+D8uQPZJECPXmihP/16n9GaCptRpNHSni8rdnnrBW C2meO/Ef3Q75T8E0ShVyNRwrEjIT3X0NYyKKdVjp+Eu9zGohe4uGcCZuscecpMvl hjvjYa1SBI70pIV5lH/V7gkv2w+jQdnKlW7+z0H0Z9WJi4jC86lRWyW5q5hgCLy8 fEDSl0XtM/N30lTcDiNV06Qy3GS6VC8= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:42 2024 by rpki-client on console-fra.rpki-client.org