$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: /WPTF0dTxQhPcpsGeL2CtXyzRqHIMEwpyxhTaxnx07s= Subject key identifier: 89:BD:2C:56:6B:E3:81:2E:B5:E9:87:7E:00:34:6D:9E:2E:E4:6D:39 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: 3A Signing time: Sun 15 Sep 2024 10:00:28 +0000 Manifest this update: Sun 15 Sep 2024 10:00:27 +0000 Manifest next update: Sun 22 Sep 2024 10:00:27 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: MimtIi1mkIQDDBh1LdWzoBM6jRa5Ysb336fmcVBR48s=) 2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: Ig8+Vj7msP69DeMaHArdqVKnxDzk4tSne1MZpXRqLK0=) 3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: HHoEjJtkFTBdrNU9U4PlS7w1Esr2CS45jVgLsGJvEos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Sep 15 10:00:27 2024 GMT Not After : Sep 22 10:00:27 2024 GMT Subject: CN=66e6b03c-ceb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:51:24:35:45:4a:0b:47:b1:eb:39:44:0f:72: 41:90:dd:af:fe:05:50:60:18:c5:28:1a:e4:05:8c: 12:ad:6e:fe:2f:77:4c:ec:a8:50:c5:be:7f:c2:ea: 19:85:bb:fc:b1:56:9f:04:2d:a5:3d:a1:21:9d:4f: a1:0a:f0:4e:7c:5f:11:c6:3d:43:c6:b9:ab:f1:da: b3:33:ab:99:f5:6b:4c:ca:f1:dc:c7:d8:44:52:1f: cf:01:b1:b2:a8:86:05:6d:4f:83:70:a1:60:70:65: 4e:93:b0:d6:6c:9d:94:5b:1e:14:c3:8b:61:d4:a2: 10:40:d4:8d:d1:bf:ca:9c:21:ca:fc:49:49:4e:0a: 48:04:70:c6:3f:15:04:17:93:ae:d4:2d:a3:8b:61: eb:c3:54:db:3d:6f:b6:a3:c4:40:51:44:96:33:b5: 41:c2:30:f8:c6:29:5d:c0:c8:58:a4:9b:6a:d3:d5: 9d:29:b1:7d:55:4f:c0:2f:50:97:a5:4d:be:74:ad: 93:1f:34:98:34:10:af:40:37:23:21:a3:a7:c0:e3: 7e:e7:fb:6c:80:6e:6b:af:d1:3b:c2:96:0b:83:69: 8c:db:8b:ce:42:d6:b3:91:cf:3f:46:08:85:2a:d8: b3:d6:f9:e2:cf:ee:58:42:f9:c5:b6:38:83:75:de: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:2C:56:6B:E3:81:2E:B5:E9:87:7E:00:34:6D:9E:2E:E4:6D:39 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c3:89:a9:9a:a1:97:d3:0f:1a:83:2d:32:06:9b:d2:5d:1a: ab:13:c6:a0:1f:a5:81:10:e9:a7:c2:a6:5e:80:78:85:d6:f3: 2a:97:68:b0:7a:d5:6f:d4:04:a6:73:5d:3b:62:d3:8c:d2:a7: e1:5a:87:4f:15:dd:22:c0:6f:92:50:c6:9c:06:ad:60:63:f1: 54:e3:a2:d2:c0:0c:f1:1d:19:b3:87:d6:a4:b6:65:1c:ef:b2: d5:1a:45:3e:80:63:e7:17:f6:f3:ec:b6:7b:ed:ad:ce:5c:26: 55:b6:17:13:b7:12:b4:09:f0:a9:e8:df:16:8b:5b:84:7a:1f: 3a:6b:10:02:e8:d0:f2:45:df:3f:d2:d8:0d:f5:d3:fd:6b:57: 46:92:ad:03:4a:23:8d:17:8b:82:c5:20:6d:24:ab:44:55:58: c3:b5:fb:b7:45:6f:50:69:e5:f9:34:b5:e8:ed:85:31:53:a3: e6:e0:4d:c8:a3:f2:b4:2e:28:a7:59:c4:94:ee:39:6f:1c:b1: 40:78:76:a2:14:44:ec:d6:90:5f:5b:a4:d5:61:ec:8b:5f:db: 58:42:d3:d3:4a:b1:e5:a3:ca:75:21:07:05:8c:c2:40:90:a5: 4d:da:65:95:54:03:14:f6:c6:52:63:5a:2f:54:c7:5c:43:d2: 8a:af:b4:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEY2NTExMC8GA1UEBRMoREFENUUwRDczRDA1NEE2OTdCMjI4MzlBRjFGQTRBQ0Q5 NEY1MEExQTAeFw0yNDA5MTUxMDAwMjdaFw0yNDA5MjIxMDAwMjdaMBgxFjAUBgNV BAMTDTY2ZTZiMDNjLWNlYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfUSQ1RUoLR7HrOUQPckGQ3a/+BVBgGMUoGuQFjBKtbv4vd0zsqFDFvn/C6hmF u/yxVp8ELaU9oSGdT6EK8E58XxHGPUPGuavx2rMzq5n1a0zK8dzH2ERSH88BsbKo hgVtT4NwoWBwZU6TsNZsnZRbHhTDi2HUohBA1I3Rv8qcIcr8SUlOCkgEcMY/FQQX k67ULaOLYevDVNs9b7ajxEBRRJYztUHCMPjGKV3AyFikm2rT1Z0psX1VT8AvUJel Tb50rZMfNJg0EK9ANyMho6fA437n+2yAbmuv0TvClguDaYzbi85C1rORzz9GCIUq 2LPW+eLP7lhC+cW2OIN13soRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUib0sVmvj gS616Yd+ADRtni7kbTkwHwYDVR0jBBgwFoAU2tXg1z0FSml7IoOa8fpKzZT1Chow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RjY1L0FDNjNBREM2MjUy NDExRUY4MkE5NUI3NEM0RjlBRTAyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnRYZzF6MEZTbWw3SW9PYThmcEt6WlQxQ2hvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RjY1L0FDNjNBREM2MjUyNDExRUY4MkE5NUI3NEM0RjlBRTAyLzJ0WGcxejBGU21s N0lvT2E4ZnBLelpUMUNoby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvDiamaoZfTDxqDLTIGm9JdGqsTxqAfpYEQ6afCpl6AeIXW8yqXaLB6 1W/UBKZzXTti04zSp+Fah08V3SLAb5JQxpwGrWBj8VTjotLADPEdGbOH1qS2ZRzv stUaRT6AY+cX9vPstnvtrc5cJlW2FxO3ErQJ8Kno3xaLW4R6HzprEALo0PJF3z/S 2A310/1rV0aSrQNKI40Xi4LFIG0kq0RVWMO1+7dFb1Bp5fk0tejthTFTo+bgTcij 8rQuKKdZxJTuOW8csUB4dqIUROzWkF9bpNVh7Itf21hC09NKseWjynUhBwWMwkCQ pU3aZZVUAxT2xlJjWi9Ux1xD0oqvtBc= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:10 2024 by rpki-client on console-fra.rpki-client.org