$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: +lxc1nse/gIgQr7/JP1pdFgGLnxW50U1JKLFxzHnFpk= Subject key identifier: 5A:66:0D:62:9B:EC:42:2F:88:E9:08:31:DC:D6:34:D2:80:6A:E1:0B Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: 34 Signing time: Sun 15 Sep 2024 10:01:08 +0000 Manifest this update: Sun 15 Sep 2024 10:01:07 +0000 Manifest next update: Sun 22 Sep 2024 10:01:07 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: 9xPVaxSpsObh5jR8QNLJYFtjGh91t/2C8AzWdRhESBs=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: 8iMIdtLXj06lz9OEogd1EHlmS5FT+UFNcxatrFBmqJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Sep 15 10:01:07 2024 GMT Not After : Sep 22 10:01:07 2024 GMT Subject: CN=66e6b064-bf4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:04:d4:fc:3b:7c:28:43:54:cd:d5:9c:03: bc:d0:16:89:ce:d3:66:61:b3:0a:3f:76:f2:ab:fe: e7:f7:7d:f9:b4:fb:a5:83:e7:d3:6d:d1:85:7e:53: ac:ca:80:33:2e:55:c2:10:4e:92:ee:63:bb:f3:17: 4a:68:0c:9c:cb:60:c7:ed:18:37:2b:cf:39:7e:96: 28:2b:6b:90:7d:3b:cc:d2:b8:40:7c:0c:59:d1:4d: b0:7a:cc:af:26:1e:d8:14:89:56:bc:21:1d:a4:71: e3:43:fc:eb:17:60:96:51:d2:84:f3:02:bb:ca:fe: 6e:e6:7d:a6:e7:2a:0e:1e:1b:64:2d:35:ae:f0:5a: ac:e0:2e:7c:e5:9b:84:33:5b:15:8f:79:a3:8d:b8: 5e:56:4f:be:d6:10:9a:5b:9d:7c:60:46:c1:52:66: 9a:e8:b8:ab:a5:28:e2:97:da:35:0a:cf:a1:35:73: 81:e3:41:38:55:eb:97:43:cd:64:ae:fd:f3:16:de: 7e:c0:a9:37:5f:24:7c:6d:b6:22:fb:ff:7a:9f:71: d5:85:db:ab:f2:a0:2e:b0:89:3f:a7:0d:b1:b0:e1: 81:cf:44:0a:cd:8e:5b:ca:ee:d4:ce:fd:10:5d:28: 95:5d:49:a9:41:13:58:fe:0a:6b:3f:ca:3a:d7:b4: 05:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:66:0D:62:9B:EC:42:2F:88:E9:08:31:DC:D6:34:D2:80:6A:E1:0B X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a2:22:01:43:57:0a:ff:cd:f5:8b:c5:77:13:a7:a6:c7:0e: ae:78:4f:43:02:7c:91:2d:c4:2f:d6:a6:85:ce:6c:a1:fd:72: df:0a:0f:5c:7f:34:0d:5c:bd:e7:13:f2:bd:97:fb:50:d8:8f: 6f:20:6a:9b:07:b0:99:ca:fa:80:62:08:2d:2d:ca:5d:83:00: ed:2b:34:a3:40:ba:f4:f1:e8:c2:63:a8:73:f3:3e:52:63:58: 3c:5b:52:15:19:3b:af:b2:76:ba:da:6b:42:df:1d:54:a6:0e: f9:25:38:fd:b0:5a:da:27:1d:b2:e5:9a:16:c2:85:98:8b:d7: ce:13:e6:4f:50:da:d9:f1:46:f1:0a:44:f3:37:a8:13:f4:37: 03:9f:9a:88:0d:80:de:71:b9:97:0c:38:e0:5d:b5:8c:67:7d: f1:7c:6c:2b:76:4e:5f:2f:ff:81:11:2d:4f:ae:e4:e0:f4:4d: cf:d5:d7:fb:db:f5:bf:74:9b:93:9d:48:03:b5:55:f7:51:0e: f8:c6:6c:a0:b3:0d:f2:e1:a4:dd:9e:96:ba:cb:42:ae:f0:bb: 6f:98:21:6e:f1:b1:6e:7a:f0:88:dd:9a:fe:82:e8:68:08:e8: e0:c6:81:5a:0b:5d:3c:fc:b2:ee:43:0b:95:73:b4:f3:b6:fb: e7:29:ee:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3NzExMC8GA1UEBRMoMTYzMTVBNjhBNzQ1MDgwQkREQjZDOEYwMTU2RDA0MzA2 ODkzMUI1NzAeFw0yNDA5MTUxMDAxMDdaFw0yNDA5MjIxMDAxMDdaMBgxFjAUBgNV BAMTDTY2ZTZiMDY0LWJmNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDASwTU/Dt8KENUzdWcA7zQFonO02Zhswo/dvKr/uf3ffm0+6WD59Nt0YV+U6zK gDMuVcIQTpLuY7vzF0poDJzLYMftGDcrzzl+ligra5B9O8zSuEB8DFnRTbB6zK8m HtgUiVa8IR2kceND/OsXYJZR0oTzArvK/m7mfabnKg4eG2QtNa7wWqzgLnzlm4Qz WxWPeaONuF5WT77WEJpbnXxgRsFSZprouKulKOKX2jUKz6E1c4HjQThV65dDzWSu /fMW3n7AqTdfJHxttiL7/3qfcdWF26vyoC6wiT+nDbGw4YHPRArNjlvK7tTO/RBd KJVdSalBE1j+Cms/yjrXtAVlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWmYNYpvs Qi+I6Qgx3NY00oBq4QswHwYDVR0jBBgwFoAUFjFaaKdFCAvdtsjwFW0EMGiTG1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4Rjc3L0NEMjg3MzgyMjVD MTExRUY5MDA5N0Y1QUM0RjlBRTAyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmpGYWFLZEZDQXZkdHNqd0ZXMEVNR2lURzFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 Rjc3L0NEMjg3MzgyMjVDMTExRUY5MDA5N0Y1QUM0RjlBRTAyL0ZqRmFhS2RGQ0F2 ZHRzandGVzBFTUdpVEcxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEiiIgFDVwr/zfWLxXcTp6bHDq54T0MCfJEtxC/WpoXObKH9ct8KD1x/ NA1cvecT8r2X+1DYj28gapsHsJnK+oBiCC0tyl2DAO0rNKNAuvTx6MJjqHPzPlJj WDxbUhUZO6+ydrraa0LfHVSmDvklOP2wWtonHbLlmhbChZiL184T5k9Q2tnxRvEK RPM3qBP0NwOfmogNgN5xuZcMOOBdtYxnffF8bCt2Tl8v/4ERLU+u5OD0Tc/V1/vb 9b90m5OdSAO1VfdRDvjGbKCzDfLhpN2elrrLQq7wu2+YIW7xsW568Ijdmv6C6GgI 6ODGgVoLXTz8su5DC5VztPO2++cp7pQ= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:35 2024 by rpki-client on console-ams.rpki-client.org