$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft File: KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json) Hash identifier: dhFqsRDxmoS4KSlMKSA0V5Y4LzGLC5gZQgQ3214zXZo= Subject key identifier: 59:09:41:07:47:1D:54:04:23:33:A0:DB:41:3C:10:94:E3:77:E4:2C Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft Manifest number: 24 Signing time: Sun 15 Sep 2024 10:15:18 +0000 Manifest this update: Sun 15 Sep 2024 10:15:17 +0000 Manifest next update: Sun 22 Sep 2024 10:15:17 +0000 Files and hashes: 1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: 5neu7fUDQfIcV8jqmbbhiiBw/hRi2DsqKGBuZEk2nvY=) 2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: M9SMB7jrl3DCJBDHj0otMuwBBH52v1DYheoMwHI+3Dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Validity Not Before: Sep 15 10:15:17 2024 GMT Not After : Sep 22 10:15:17 2024 GMT Subject: CN=66e6b3b5-2751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:cc:af:af:85:e3:76:53:f8:45:49:63:bb: 30:6a:c5:9f:44:bf:f5:9e:b4:c8:89:0d:06:8b:4f: 2a:b2:21:5f:ee:80:f7:85:87:5f:bf:8e:a3:46:3e: 43:fe:43:ea:66:15:dc:d2:48:fb:68:a0:6b:f9:44: 98:05:b2:04:8f:86:41:5c:07:4e:1c:d1:4c:ed:38: 8e:d3:0e:6a:48:66:bd:e1:2a:88:91:d2:67:b2:4f: a1:f1:11:78:cf:20:d1:96:e4:f1:c1:e8:0c:01:63: 53:97:70:e9:04:27:2b:96:a3:6b:5a:23:39:dd:92: 38:df:8d:30:16:4c:07:94:a9:ce:11:b7:89:b2:2c: 39:55:0b:4b:b7:0c:5f:d2:9f:4f:39:d1:6c:39:a0: db:12:99:9a:53:b0:34:47:fb:e2:45:98:65:a1:a7: de:e6:cd:07:6e:3c:ec:fa:cb:b0:9a:d1:0d:2f:77: 79:20:21:fd:27:bf:b9:24:a9:44:43:63:f3:df:e6: c6:83:a0:96:2f:df:97:46:46:26:8b:2e:e9:c4:f5: b5:9f:41:16:15:ad:d2:0a:82:8d:bb:3f:79:09:7e: 37:25:a2:4f:db:12:ac:a3:22:ae:61:20:c5:de:9a: 74:36:81:1a:98:55:3e:6f:49:f4:2c:31:9b:88:42: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:09:41:07:47:1D:54:04:23:33:A0:DB:41:3C:10:94:E3:77:E4:2C X509v3 Authority Key Identifier: keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:84:6a:46:ba:0c:74:b5:43:04:47:6c:bf:90:d4:ff:e6:6d: f8:6f:7e:7d:ec:64:06:68:db:1b:21:95:c0:b2:a1:99:a7:ac: bc:8d:37:bf:cb:00:f8:bb:72:9c:b8:78:c0:eb:c4:8e:cf:09: 4e:0c:f2:29:5a:4f:aa:f3:14:f3:e6:0e:c0:1b:b4:8c:f1:45: 2b:10:ec:79:da:79:9a:24:6b:1c:91:4e:55:4c:e2:5c:3a:63: 5b:a7:af:91:55:af:73:71:ad:f1:3b:86:a0:4c:42:47:46:c8: c8:9b:e5:ea:f4:9c:09:6d:20:b2:40:d9:ab:b9:9d:52:0f:59: 65:a7:03:02:78:39:20:95:2b:c7:46:89:ad:17:91:14:5e:26: b6:a8:c5:39:5d:af:11:64:ae:93:c4:df:c4:c1:e0:e7:34:f2: fb:82:8b:22:4e:72:0b:e6:3a:ed:17:9a:d8:18:75:49:de:6d: 03:25:5d:98:ed:fd:47:2a:23:10:7f:2f:e5:2a:d5:24:48:e7: 25:73:75:0d:e1:33:57:f3:80:4c:56:82:6c:68:34:0e:96:7a: 0e:4a:ae:ae:f9:12:da:2c:cf:0a:62:08:92:9a:0a:e2:27:8e: ab:b1:7f:d7:c7:91:ee:e3:62:01:62:58:45:22:e5:7e:6d:15: 01:84:86:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTBFQzExMC8GA1UEBRMoMjkzQ0UxREVEMUE2NDA0QjAwQjJDMENDRkIzRjNDRUFG QjIxQTUwODAeFw0yNDA5MTUxMDE1MTdaFw0yNDA5MjIxMDE1MTdaMBgxFjAUBgNV BAMTDTY2ZTZiM2I1LTI3NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA4cyvr4XjdlP4RUljuzBqxZ9Ev/WetMiJDQaLTyqyIV/ugPeFh1+/jqNGPkP+ Q+pmFdzSSPtooGv5RJgFsgSPhkFcB04c0UztOI7TDmpIZr3hKoiR0meyT6HxEXjP INGW5PHB6AwBY1OXcOkEJyuWo2taIzndkjjfjTAWTAeUqc4Rt4myLDlVC0u3DF/S n0850Ww5oNsSmZpTsDRH++JFmGWhp97mzQduPOz6y7Ca0Q0vd3kgIf0nv7kkqURD Y/Pf5saDoJYv35dGRiaLLunE9bWfQRYVrdIKgo27P3kJfjclok/bEqyjIq5hIMXe mnQ2gRqYVT5vSfQsMZuIQnkNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWQlBB0cd VAQjM6DbQTwQlON35CwwHwYDVR0jBBgwFoAUKTzh3tGmQEsAssDM+z886vshpQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5MEVDLzI0QjhCRkUwM0U1 ODExRUY5OTZEQTMyMUM0RjlBRTAyL0tUemgzdEdtUUVzQXNzRE0tejg4NnZzaHBR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1R6aDN0R21RRXNBc3NETS16ODg2dnNocFFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 MEVDLzI0QjhCRkUwM0U1ODExRUY5OTZEQTMyMUM0RjlBRTAyL0tUemgzdEdtUUVz QXNzRE0tejg4NnZzaHBRZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKyEaka6DHS1QwRHbL+Q1P/mbfhvfn3sZAZo2xshlcCyoZmnrLyNN7/L APi7cpy4eMDrxI7PCU4M8ilaT6rzFPPmDsAbtIzxRSsQ7HnaeZokaxyRTlVM4lw6 Y1unr5FVr3NxrfE7hqBMQkdGyMib5er0nAltILJA2au5nVIPWWWnAwJ4OSCVK8dG ia0XkRReJraoxTldrxFkrpPE38TB4Oc08vuCiyJOcgvmOu0XmtgYdUnebQMlXZjt /UcqIxB/L+Uq1SRI5yVzdQ3hM1fzgExWgmxoNA6Weg5Krq75EtoszwpiCJKaCuIn jquxf9fHke7jYgFiWEUi5X5tFQGEhlA= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:35 2024 by rpki-client on console-ams.rpki-client.org