$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: kGJiVHMvq/1khaYEGNAZSndtqM9VE0BpZMzdgWp3FkA= Subject key identifier: 38:08:8E:E1:C6:48:64:DF:A6:63:70:B8:07:41:66:9A:12:21:F9:C3 Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: 45 Signing time: Sun 15 Sep 2024 09:51:35 +0000 Manifest this update: Sun 15 Sep 2024 09:51:35 +0000 Manifest next update: Sun 22 Sep 2024 09:51:35 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: 8lMLgQRSz/FzqyCjLcWVL9d3kor1ZUm7hW2WBbp2Oxo=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: Q/69ePRbisNpHiEdg/AGJ0JZCRTMD/uYjUaXppEDwMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Sep 15 09:51:35 2024 GMT Not After : Sep 22 09:51:35 2024 GMT Subject: CN=66e6ae27-3a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:bd:bc:ec:cf:2e:4a:0b:25:46:8d:f2:76: fa:58:12:35:d1:1d:5d:e9:eb:62:66:fc:10:9a:37: b6:4c:9b:81:d6:d3:bb:00:a4:d8:c0:99:6a:13:c3: d8:19:20:20:c1:f7:2c:a8:2b:a7:93:d6:18:b2:f8: c7:6c:f0:b0:e4:3d:a2:5e:b0:6f:4a:e5:7c:e5:5f: 71:93:a0:75:45:b4:fd:df:75:44:2b:50:8c:99:32: 1c:34:c4:9c:0b:9d:91:05:c6:84:8b:f8:79:98:0f: 08:15:f5:50:b3:7d:55:44:09:a3:1d:75:81:f3:a6: b4:07:0c:71:74:0b:0f:53:a3:60:81:04:9f:f9:ea: f5:81:10:36:12:f0:86:e8:d5:23:a0:96:71:7b:ca: 13:d1:77:0b:17:47:8a:e2:3d:11:18:9e:bd:f6:cd: 70:66:e6:c2:d0:9b:75:4f:2e:70:44:69:01:5f:3a: 1c:2e:47:ab:06:d9:4c:e3:21:9d:b0:6d:2c:0c:87: b5:54:e9:d2:6c:d6:01:5c:1f:36:88:5c:cf:a5:96: 3f:e7:d5:d6:8f:f6:26:30:25:2d:ac:e5:26:34:eb: c3:86:33:ba:17:22:45:58:8b:27:10:f9:7d:38:b8: e7:ee:8d:8a:8b:25:84:11:f0:83:38:0c:90:bc:8f: 8d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:08:8E:E1:C6:48:64:DF:A6:63:70:B8:07:41:66:9A:12:21:F9:C3 X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:11:8b:f6:21:ab:9c:dc:51:f0:1b:45:b2:23:de:19:9b:f8: 80:ff:8b:20:de:28:87:db:19:28:cb:e6:3e:6f:65:b1:f7:12: 3a:de:9f:2c:1e:ef:f8:42:ea:55:2a:2d:4f:4c:fa:6e:7c:dc: 2e:4b:7a:2d:a8:c3:34:d8:3f:62:46:38:a0:5c:61:34:b2:bd: 5e:45:86:e2:82:ab:1e:05:68:10:72:98:07:cc:0f:f8:e5:7d: 24:15:87:0d:d4:5a:dd:b1:44:c2:41:83:b8:e2:d4:6e:21:5c: 87:48:2e:ec:40:1f:6a:7e:d3:35:f3:28:5c:49:6c:fe:a4:d6: 83:dc:4b:53:53:2f:0b:d1:fc:94:cc:9f:1c:be:cc:df:6d:88: 00:c3:3a:1c:dc:e9:7e:74:e6:66:ae:81:dc:d3:27:4f:df:d9: 9d:aa:06:80:80:a7:13:e7:1f:5b:29:57:06:b3:3b:a7:01:2f: 1b:94:ff:8a:4d:fe:71:f8:ee:6a:63:35:67:40:08:57:6d:33: 97:b0:6a:2b:fa:b2:c4:48:26:e9:34:18:87:9b:6a:ba:19:73: e4:0d:93:17:87:aa:a2:d8:02:ed:bd:79:f8:99:5f:d0:b1:54: e0:99:95:50:92:63:18:64:30:43:a9:0f:60:41:d6:61:c0:e4: 78:74:5e:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY5OTExMC8GA1UEBRMoQTc0Q0U3REFENUZCNTA0REIxNkJCRTcwQzJGOURGMEFB OUYwMDYwOTAeFw0yNDA5MTUwOTUxMzVaFw0yNDA5MjIwOTUxMzVaMBgxFjAUBgNV BAMTDTY2ZTZhZTI3LTNhNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHF7287M8uSgslRo3ydvpYEjXRHV3p62Jm/BCaN7ZMm4HW07sApNjAmWoTw9gZ ICDB9yyoK6eT1hiy+Mds8LDkPaJesG9K5XzlX3GToHVFtP3fdUQrUIyZMhw0xJwL nZEFxoSL+HmYDwgV9VCzfVVECaMddYHzprQHDHF0Cw9To2CBBJ/56vWBEDYS8Ibo 1SOglnF7yhPRdwsXR4riPREYnr32zXBm5sLQm3VPLnBEaQFfOhwuR6sG2UzjIZ2w bSwMh7VU6dJs1gFcHzaIXM+llj/n1daP9iYwJS2s5SY068OGM7oXIkVYiycQ+X04 uOfujYqLJYQR8IM4DJC8j43RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOAiO4cZI ZN+mY3C4B0FmmhIh+cMwHwYDVR0jBBgwFoAUp0zn2tX7UE2xa75wwvnfCqnwBgkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjk5LzU1ODZFRjZBMTdF OTExRUZBMkNENTAxN0M0RjlBRTAyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jn ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDB6bjJ0WDdVRTJ4YTc1d3d2bmZDcW53QmdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE Njk5LzU1ODZFRjZBMTdFOTExRUZBMkNENTAxN0M0RjlBRTAyL3Awem4ydFg3VUUy eGE3NXd3dm5mQ3Fud0Jnay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC4Ri/Yhq5zcUfAbRbIj3hmb+ID/iyDeKIfbGSjL5j5vZbH3Ejrenywe 7/hC6lUqLU9M+m583C5Lei2owzTYP2JGOKBcYTSyvV5FhuKCqx4FaBBymAfMD/jl fSQVhw3UWt2xRMJBg7ji1G4hXIdILuxAH2p+0zXzKFxJbP6k1oPcS1NTLwvR/JTM nxy+zN9tiADDOhzc6X505maugdzTJ0/f2Z2qBoCApxPnH1spVwazO6cBLxuU/4pN /nH47mpjNWdACFdtM5ewaiv6ssRIJuk0GIebaroZc+QNkxeHqqLYAu29efiZX9Cx VOCZlVCSYxhkMEOpD2BB1mHA5Hh0XkY= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:22 2024 by rpki-client on console-ams.rpki-client.org