$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: FtGJQ2w6erSDoxwjHevtFdpxPCl9pHiUjM0NpEcyCoA= Subject key identifier: EB:F5:D7:6C:D2:C7:F2:4C:7F:7D:2D:26:06:30:D4:90:78:61:D0:17 Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: 4A Signing time: Sun 15 Sep 2024 09:45:13 +0000 Manifest this update: Sun 15 Sep 2024 09:45:13 +0000 Manifest next update: Sun 22 Sep 2024 09:45:13 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: ZyIDQVzjHy1FOvFPIKUA8O5mNWRKcHHX6C4UVb4MFqs=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: 7KS0JUdz+JcF4TmwudYybbwgUgc23JZA1l2TeoYilJA=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: 182l8b9p/OlfyaygMCMB4sCC54jSfxtVFJlOaiNG5UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: Sep 15 09:45:13 2024 GMT Not After : Sep 22 09:45:13 2024 GMT Subject: CN=66e6aca9-57b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:c6:f6:a5:23:ee:9c:9a:2f:1d:17:46:e8: ff:4d:c1:85:89:12:d2:b4:5c:37:a0:34:97:d9:15: 97:d9:f2:7e:d5:4f:23:31:9f:be:a9:e5:07:b0:23: 22:8c:fd:20:94:f9:32:15:6c:72:3c:96:c4:81:9a: 9a:aa:25:5d:70:57:fe:21:53:d8:f0:bb:09:a9:71: d0:49:50:eb:2a:3f:15:ea:62:01:18:36:a7:f1:1f: a6:d6:06:2f:75:3e:ae:15:ef:d8:48:83:60:3f:1d: b6:f5:f3:e4:fd:be:51:9b:8b:f6:7d:84:e8:bf:60: f4:00:21:f7:77:b3:9d:c6:17:52:ce:64:a4:ff:f1: 2e:2d:f7:c1:6f:30:82:f4:03:8c:83:ea:2e:6d:8c: b8:cd:ac:e1:5c:04:cb:84:29:d5:b3:ef:60:81:4a: aa:cf:f4:8f:ce:ea:ad:b9:9a:06:0b:5e:b7:31:e2: e0:27:13:f5:c7:98:cd:09:cc:57:0c:f7:01:5a:16: 7c:18:ae:73:87:34:0d:28:78:8e:c1:09:d6:83:f2: 8e:a5:51:48:e2:93:5b:be:f0:02:4a:6c:ec:50:e2: 2f:4c:42:1a:f1:8e:ff:54:03:36:17:62:2d:5e:95: 61:4f:cc:7a:4a:f1:4a:5b:cf:6c:da:61:f0:08:22: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F5:D7:6C:D2:C7:F2:4C:7F:7D:2D:26:06:30:D4:90:78:61:D0:17 X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:08:58:24:41:a8:0e:bd:c2:d5:04:74:da:55:b4:cb:e6:fd: bf:4c:7c:9f:14:ed:f8:ba:68:e0:25:60:ce:1f:04:e4:5b:75: 56:12:e6:37:5c:d3:76:be:91:d0:39:a2:bc:ae:eb:81:3e:3a: f6:3d:55:63:74:ee:ea:b5:08:e7:b6:c1:55:02:33:b6:9b:25: d8:fc:1b:b1:07:c0:a8:e3:d1:6f:10:29:98:b0:1d:14:c3:05: 06:23:0e:bd:9b:28:55:72:58:76:3f:46:d5:7f:6d:d4:61:61: 78:36:97:68:d4:df:ca:09:51:1d:c7:28:44:e0:a4:70:47:bc: 95:7a:71:97:76:90:c2:7b:ee:be:ee:e5:1d:6c:08:17:77:b4: 5a:40:a3:5f:3e:1c:d6:5c:aa:73:63:02:29:5a:91:0d:6d:5b: 54:48:2a:24:55:9c:4b:40:7d:b0:93:45:01:14:de:44:c9:7c: f8:97:19:40:ff:2f:22:b9:68:f0:b3:63:46:ba:84:1b:c7:0d: 4a:3b:30:c5:5c:1c:2b:e1:2d:f2:aa:11:77:92:f3:94:e7:dd: de:64:90:86:73:31:6d:8d:31:f2:56:0e:32:cc:1a:cb:9a:42: 6e:f3:2b:17:b7:27:7a:eb:bb:1d:0e:ab:08:3c:99:8e:13:3e: 7e:2c:43:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjI0MTExMC8GA1UEBRMoMjlDRDhERjg4MDZFMTE2NzRDQkM1RjlERjREQkY4RDIz RTBDMjI4MzAeFw0yNDA5MTUwOTQ1MTNaFw0yNDA5MjIwOTQ1MTNaMBgxFjAUBgNV BAMTDTY2ZTZhY2E5LTU3YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD3Mb2pSPunJovHRdG6P9NwYWJEtK0XDegNJfZFZfZ8n7VTyMxn76p5QewIyKM /SCU+TIVbHI8lsSBmpqqJV1wV/4hU9jwuwmpcdBJUOsqPxXqYgEYNqfxH6bWBi91 Pq4V79hIg2A/Hbb18+T9vlGbi/Z9hOi/YPQAIfd3s53GF1LOZKT/8S4t98FvMIL0 A4yD6i5tjLjNrOFcBMuEKdWz72CBSqrP9I/O6q25mgYLXrcx4uAnE/XHmM0JzFcM 9wFaFnwYrnOHNA0oeI7BCdaD8o6lUUjik1u+8AJKbOxQ4i9MQhrxjv9UAzYXYi1e lWFPzHpK8Upbz2zaYfAIIgx3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6/XXbNLH 8kx/fS0mBjDUkHhh0BcwHwYDVR0jBBgwFoAUKc2N+IBuEWdMvF+d9Nv40j4MIoMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGMjQxL0VCMjEzNjg4MEJG NjExRUY5Q0E5QzE1MUM0RjlBRTAyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlv TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2MyTi1JQnVFV2RNdkYtZDlOdjQwajRNSW9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG MjQxL0VCMjEzNjg4MEJGNjExRUY5Q0E5QzE1MUM0RjlBRTAyL0tjMk4tSUJ1RVdk TXZGLWQ5TnY0MGo0TUlvTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKAIWCRBqA69wtUEdNpVtMvm/b9MfJ8U7fi6aOAlYM4fBORbdVYS5jdc 03a+kdA5oryu64E+OvY9VWN07uq1COe2wVUCM7abJdj8G7EHwKjj0W8QKZiwHRTD BQYjDr2bKFVyWHY/RtV/bdRhYXg2l2jU38oJUR3HKETgpHBHvJV6cZd2kMJ77r7u 5R1sCBd3tFpAo18+HNZcqnNjAilakQ1tW1RIKiRVnEtAfbCTRQEU3kTJfPiXGUD/ LyK5aPCzY0a6hBvHDUo7MMVcHCvhLfKqEXeS85Tn3d5kkIZzMW2NMfJWDjLMGsua Qm7zKxe3J3rrux0Oqwg8mY4TPn4sQy0= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:10 2024 by rpki-client on console-fra.rpki-client.org