$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json) Hash identifier: 2Dlwb2DePQZPrj8HdrrgDCWAmqzLbxHpnD2tM2VdLHY= Subject key identifier: E6:CF:DB:E3:56:60:92:11:74:88:EC:DF:FF:41:63:E6:1A:DA:EE:74 Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft Manifest number: 28 Signing time: Wed 23 Oct 2024 06:31:20 +0000 Manifest this update: Wed 23 Oct 2024 06:31:20 +0000 Manifest next update: Wed 30 Oct 2024 06:31:20 +0000 Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: Bd5+gQotm4UxbyNY72TgX+E4lvwBhCH4h5LuAd6Nk3o=) 2: 148C2ADE6E3D11EF83124D20C4F9AE02.roa (hash: 7pOM88D5K5C2lAAvwryoKHYIZAV4wCZAPcHqVdaPsO0=) 3: 3823A090624D11EF96988781C4F9AE02.roa (hash: MOL7wzUZJprydokDh162uhnudxpcUTsTqGfnMyoYJ4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Validity Not Before: Oct 23 06:31:20 2024 GMT Not After : Oct 30 06:31:20 2024 GMT Subject: CN=67189838-4610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:c5:94:76:ef:72:27:60:6b:6b:34:15:18: 1f:21:98:c6:4f:63:21:3c:01:f7:bc:d6:66:de:59: b0:1d:ec:c6:b7:6c:d6:e9:44:86:ce:43:ee:63:94: de:15:03:3a:55:00:3b:ab:2d:e2:59:a3:71:ae:e2: 14:3d:72:df:2f:23:59:4f:5a:69:c2:ad:c8:6d:cb: ac:f5:cd:c7:86:d3:3a:1d:d6:4d:c4:f6:b0:19:bd: e6:8e:0e:a3:5a:ac:9c:f7:d5:be:10:35:a5:2f:f8: f9:9e:08:99:a9:d0:b9:bf:70:91:f8:51:3a:9d:d7: 17:8f:a3:09:a9:7d:27:f3:3b:67:69:a3:75:d7:69: 04:81:4f:7a:eb:e5:a0:68:06:42:1c:28:c3:ff:de: b1:0e:35:a5:61:88:77:57:dd:25:38:a7:62:e8:d1: 45:27:8f:f4:2d:d0:d8:eb:33:39:fe:39:bd:c5:d2: a0:72:75:71:91:13:a8:0e:c9:d8:9a:39:ce:a5:0f: 4d:bc:ea:be:e9:aa:75:84:8d:e4:ca:55:b3:7a:97: c4:b7:58:e7:6f:12:1a:07:92:65:dd:27:ed:10:87: c6:a9:41:d9:b6:ed:aa:63:08:f0:20:b6:ca:5e:ac: 8d:34:d4:41:a4:f4:e0:6f:94:20:ca:9b:2b:19:f4: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CF:DB:E3:56:60:92:11:74:88:EC:DF:FF:41:63:E6:1A:DA:EE:74 X509v3 Authority Key Identifier: keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ed:84:85:3a:eb:da:e5:7f:62:53:2e:c5:98:4b:fb:27:1f: d8:e3:95:e6:32:9e:bd:3c:b8:76:98:e4:fc:fa:d8:92:e6:9f: 18:81:31:1e:65:40:8c:cd:36:0a:7b:83:24:29:f5:92:dd:b0: d2:a5:f9:da:44:ea:f8:19:22:7c:7d:98:4d:3c:f2:5b:d9:64: 6a:c6:56:72:19:b4:94:73:6f:12:16:43:89:2e:27:6b:33:55: ba:c7:0c:b8:6c:6f:05:45:23:eb:b6:a4:70:89:99:8b:44:d5: f5:71:14:91:7a:9c:8d:41:61:db:3a:3d:a9:b0:c2:27:74:2e: 68:dc:da:22:a7:ce:5c:a6:f8:94:03:af:ec:7c:b2:68:13:0f: f1:d2:41:da:64:49:61:da:99:26:d1:25:7e:86:30:49:7e:ea: e3:93:67:da:73:2f:7a:1c:d2:76:69:d4:39:9e:e3:68:0f:e1: f3:06:65:5c:21:22:94:b9:7c:f7:2b:a2:bc:90:fb:b8:bf:97: 5a:9b:e7:ad:9f:39:62:86:22:a5:bc:b7:a9:5c:c7:78:ec:63: 50:82:d0:5b:41:d8:dc:fc:d7:69:82:10:fa:f7:d1:e7:e3:7e: 09:bd:8d:7e:94:43:74:5a:76:f0:72:c2:44:c2:14:d9:46:43: da:08:e9:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUY2NDExMC8GA1UEBRMoMzJEMzUzNzQzQzhGRTJGMDhFOTdCMjJFNUI2MDlBQkMx NENDRkUzQjAeFw0yNDEwMjMwNjMxMjBaFw0yNDEwMzAwNjMxMjBaMBgxFjAUBgNV BAMTDTY3MTg5ODM4LTQ2MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpy8WUdu9yJ2BrazQVGB8hmMZPYyE8Afe81mbeWbAd7Ma3bNbpRIbOQ+5jlN4V AzpVADurLeJZo3Gu4hQ9ct8vI1lPWmnCrchty6z1zceG0zod1k3E9rAZveaODqNa rJz31b4QNaUv+PmeCJmp0Lm/cJH4UTqd1xePowmpfSfzO2dpo3XXaQSBT3rr5aBo BkIcKMP/3rEONaVhiHdX3SU4p2Lo0UUnj/Qt0NjrMzn+Ob3F0qBydXGRE6gOydia Oc6lD0286r7pqnWEjeTKVbN6l8S3WOdvEhoHkmXdJ+0Qh8apQdm27apjCPAgtspe rI001EGk9OBvlCDKmysZ9KF1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5s/b41Zg khF0iOzf/0Fj5hra7nQwHwYDVR0jBBgwFoAUMtNTdDyP4vCOl7IuW2CavBTM/jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RjY0Lzc3QkYwMTkyNjI0 QjExRUZBQjEyMEY0RkM0RjlBRTAyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9q cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTXROVGREeVA0dkNPbDdJdVcyQ2F2QlRNX2pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RjY0Lzc3QkYwMTkyNjI0QjExRUZBQjEyMEY0RkM0RjlBRTAyL010TlRkRHlQNHZD T2w3SXVXMkNhdkJUTV9qcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/thIU669rlf2JTLsWYS/snH9jjleYynr08uHaY5Pz62JLmnxiBMR5l QIzNNgp7gyQp9ZLdsNKl+dpE6vgZInx9mE088lvZZGrGVnIZtJRzbxIWQ4kuJ2sz VbrHDLhsbwVFI+u2pHCJmYtE1fVxFJF6nI1BYds6Pamwwid0Lmjc2iKnzlym+JQD r+x8smgTD/HSQdpkSWHamSbRJX6GMEl+6uOTZ9pzL3oc0nZp1Dme42gP4fMGZVwh IpS5fPcroryQ+7i/l1qb562fOWKGIqW8t6lcx3jsY1CC0FtB2Nz812mCEPr30efj fgm9jX6UQ3RadvBywkTCFNlGQ9oI6aw= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org