$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: Dy/HEEda15LJefxaN0MCOh4mC+X2HkGMEP2cfcVIJUw= Subject key identifier: B6:5F:A4:C2:E1:BF:53:27:F4:67:D4:9D:C4:C8:67:85:81:07:85:5A Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: 4D Signing time: Sun 15 Sep 2024 09:45:02 +0000 Manifest this update: Sun 15 Sep 2024 09:45:01 +0000 Manifest next update: Sun 22 Sep 2024 09:45:01 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: pyTPNaJn3lRt/t1xqquLQPENZxLTB3kVJcSsGsTrg2w=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: C3Ga1a9eb1Df3VllPQUKdb207TqBrmGNq5XYCS2u3O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Sep 15 09:45:01 2024 GMT Not After : Sep 22 09:45:01 2024 GMT Subject: CN=66e6ac9d-6779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:ad:fb:b5:06:fb:fa:0e:0c:0e:1c:17:a9: 1f:87:ce:bf:5f:bb:49:92:85:91:3a:8b:26:78:1d: 9f:1d:62:cf:fb:fb:8f:3b:b5:2f:99:d1:05:8b:ba: 04:c7:63:8c:fb:fe:98:c8:cf:d6:a7:26:49:46:19: 09:50:c9:9a:45:99:24:4d:0e:5d:3a:aa:9c:17:59: f4:a4:a9:18:2d:a4:96:15:c2:04:78:04:e2:d8:8c: 4f:23:20:5c:68:07:b9:50:ee:bd:fc:a5:24:7f:60: f7:72:50:84:ad:99:c4:47:13:31:fd:19:4d:ba:67: ff:fb:2d:ae:fb:0e:aa:c0:d2:25:61:0c:40:09:cd: d2:5e:e5:61:2b:c8:70:ed:c5:30:2c:aa:34:68:30: 5b:f1:18:3e:32:ad:74:38:68:6b:a8:57:da:16:cc: f5:74:e0:3e:0b:6d:23:8f:e3:f6:11:d1:bf:9d:14: 04:fc:42:09:37:ae:b0:d7:8b:f2:4a:37:89:b6:51: a6:a4:c3:65:54:40:20:96:99:7f:81:9b:93:07:7c: cb:26:8a:4a:47:8a:17:b3:f5:ca:3e:41:60:db:14: f6:15:8b:ac:5f:d5:f4:f2:84:f1:ac:22:b9:42:e4: 20:a1:a2:13:e6:cf:8a:32:c3:52:b3:c3:06:be:76: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5F:A4:C2:E1:BF:53:27:F4:67:D4:9D:C4:C8:67:85:81:07:85:5A X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:68:44:74:f2:82:ed:40:ba:1f:4c:0b:cf:73:de:98:01:24: b8:97:f4:3c:88:6a:3c:08:c1:8e:1e:84:30:6e:76:08:17:35: 5a:48:86:1f:df:42:56:68:83:1b:29:99:40:d7:aa:88:1f:d6: ea:ec:85:17:08:04:60:a9:1d:6c:b8:27:12:4d:73:dc:c5:1a: 0b:68:dc:09:6c:fc:b6:52:ce:9b:69:bc:07:bb:17:59:a9:22: ce:df:58:12:1c:c9:c4:e9:75:77:3a:d2:7a:aa:b0:70:27:35: d7:20:10:09:ed:33:d6:e7:bc:68:7e:12:7e:a8:03:ef:c9:48: b1:7e:3b:9e:7c:ac:a0:30:40:9b:33:3f:2a:ef:3e:0c:27:07: 46:55:b9:eb:62:a9:33:d6:b1:a1:b4:af:11:9d:22:df:bf:12: 15:37:73:34:0c:0b:1a:22:85:72:3f:a2:6a:da:71:27:44:08: 12:19:e9:10:99:ee:f4:d5:b8:36:fc:87:6c:c1:2a:be:9a:30: 20:b2:02:ec:2e:90:c0:df:1d:b2:60:ef:9a:5d:ff:17:38:e1: 5e:be:22:41:fb:6b:1a:a1:1b:54:23:4a:f9:ab:c6:db:c9:11: 51:b7:0e:fa:cf:23:11:79:59:06:ce:54:3c:17:8f:ce:cd:4d: a6:2b:39:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDMyMzExMC8GA1UEBRMoQzcwREUyNzhBQjc3MjZEMjlDQTNBOEMwMjQwN0FBNUJB RTEyRUMwQTAeFw0yNDA5MTUwOTQ1MDFaFw0yNDA5MjIwOTQ1MDFaMBgxFjAUBgNV BAMTDTY2ZTZhYzlkLTY3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBRK37tQb7+g4MDhwXqR+Hzr9fu0mShZE6iyZ4HZ8dYs/7+487tS+Z0QWLugTH Y4z7/pjIz9anJklGGQlQyZpFmSRNDl06qpwXWfSkqRgtpJYVwgR4BOLYjE8jIFxo B7lQ7r38pSR/YPdyUIStmcRHEzH9GU26Z//7La77DqrA0iVhDEAJzdJe5WEryHDt xTAsqjRoMFvxGD4yrXQ4aGuoV9oWzPV04D4LbSOP4/YR0b+dFAT8Qgk3rrDXi/JK N4m2Uaakw2VUQCCWmX+Bm5MHfMsmikpHihez9co+QWDbFPYVi6xf1fTyhPGsIrlC 5CChohPmz4oyw1Kzwwa+dpLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtl+kwuG/ Uyf0Z9SdxMhnhYEHhVowHwYDVR0jBBgwFoAUxw3ieKt3JtKco6jAJAeqW64S7Aow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMzIzLzIyMEExRkQ4MDlF QjExRUZCQzREMTUzNEM0RjlBRTAyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdB by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHczaWVLdDNKdEtjbzZqQUpBZXFXNjRTN0FvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MzIzLzIyMEExRkQ4MDlFQjExRUZCQzREMTUzNEM0RjlBRTAyL3h3M2llS3QzSnRL Y282akFKQWVxVzY0UzdBby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHtoRHTygu1Auh9MC89z3pgBJLiX9DyIajwIwY4ehDBudggXNVpIhh/f QlZogxspmUDXqogf1urshRcIBGCpHWy4JxJNc9zFGgto3Als/LZSzptpvAe7F1mp Is7fWBIcycTpdXc60nqqsHAnNdcgEAntM9bnvGh+En6oA+/JSLF+O558rKAwQJsz PyrvPgwnB0ZVuetiqTPWsaG0rxGdIt+/EhU3czQMCxoihXI/omracSdECBIZ6RCZ 7vTVuDb8h2zBKr6aMCCyAuwukMDfHbJg75pd/xc44V6+IkH7axqhG1QjSvmrxtvJ EVG3DvrPIxF5WQbOVDwXj87NTaYrOa0= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:10 2024 by rpki-client on console-fra.rpki-client.org