$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft File: 2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json) Hash identifier: 5+QbKW94GMqYusTX6WFfz8JIPrs20/drfJ1lKSmh+Sg= Subject key identifier: 0B:52:8A:B5:7A:AB:F1:70:9D:F9:01:B7:59:72:3A:E8:A8:C3:A4:31 Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft Manifest number: 3D Signing time: Sun 15 Sep 2024 09:55:34 +0000 Manifest this update: Sun 15 Sep 2024 09:55:33 +0000 Manifest next update: Sun 22 Sep 2024 09:55:33 +0000 Files and hashes: 1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: 3kajnnrCMDdRahihvzg4YlqffmV4dEHT0N1yGSI3cIg=) 2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: JB0KjJ0CYggpPTh2yx0KHgkWZKP0lJUbgO7Q4giWozY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Validity Not Before: Sep 15 09:55:33 2024 GMT Not After : Sep 22 09:55:33 2024 GMT Subject: CN=66e6af16-42a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:ba:1d:ff:1d:d5:ed:ca:41:10:8d:c7:93: bd:89:3f:96:5f:2f:ae:0f:98:3a:0c:34:53:48:06: 68:ac:b7:b5:e1:e5:13:7d:af:e5:b2:a8:50:5c:40: ee:7c:22:dc:bd:dc:de:69:dc:e8:d4:0e:ab:0d:d8: a2:07:5b:c7:e7:5a:a6:67:27:0f:08:d7:2c:c6:98: 75:bf:6f:a3:79:2f:65:73:bf:f5:ba:58:79:55:24: d8:ab:49:a7:42:8e:3a:e4:5b:8e:fb:7d:56:7a:6b: 64:7e:04:14:d5:6c:40:8d:7e:21:0d:e8:78:ef:90: 52:ce:4a:6d:50:7d:36:24:59:63:b3:3e:85:5e:38: 49:4d:58:2e:5d:32:3c:1f:bd:e9:ac:b0:4f:10:3b: 4d:21:45:87:32:bb:87:ab:09:21:e4:4a:2f:43:54: fb:87:3f:30:a7:d3:22:25:f1:5c:99:06:69:1e:28: 4d:4b:6e:7c:a5:bd:a4:b1:09:71:6b:76:5f:36:84: 80:b6:37:ef:f2:88:31:54:88:7d:fd:80:1b:bb:78: 99:0b:55:a9:85:ea:2e:05:d4:b0:88:16:9c:e4:dd: f2:5a:f1:28:5d:83:3d:b7:a3:88:4c:82:dc:34:00: d7:a5:32:36:3f:6a:84:39:0a:f1:18:41:07:a2:bb: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:52:8A:B5:7A:AB:F1:70:9D:F9:01:B7:59:72:3A:E8:A8:C3:A4:31 X509v3 Authority Key Identifier: keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8f:a7:eb:3c:1a:a2:95:40:29:9d:6d:29:c2:c8:8a:d0:be: 4b:55:73:aa:cb:7b:46:45:01:05:60:19:3c:73:88:94:d0:b8: 1d:a7:3b:c0:42:1d:35:04:86:d2:20:68:be:5a:ac:35:89:21: 69:39:18:30:41:26:d1:41:8b:a5:7c:97:7e:c9:b4:03:db:f8: 4e:2b:20:e2:07:64:d5:4e:65:1d:04:5b:f9:ca:97:0d:7f:e7: 1c:ff:63:72:a8:31:82:9e:21:31:80:4b:40:02:81:de:7b:da: da:dc:77:6a:c0:e0:38:82:eb:c4:c9:e0:4f:05:7f:eb:30:74: b0:3b:75:3d:c4:2e:33:e7:5a:9d:58:d8:39:23:0b:e8:88:85: 8d:ef:f6:71:66:b7:fa:13:05:cf:46:df:e9:00:1c:4a:18:54: e6:45:c2:c6:e6:5a:63:30:5d:e8:53:0c:5c:79:ec:77:23:f0: b3:f4:68:85:63:c0:60:f9:50:0c:a6:4c:a5:67:1e:bd:06:6c: fa:49:90:36:76:fd:b0:3d:6e:03:67:6c:58:0f:c6:01:8b:3e: 4b:2b:a4:e2:50:93:59:b1:5a:7c:94:4e:ce:50:83:47:60:01: 7f:c4:8b:e0:c3:1b:0b:4d:0f:41:28:75:9e:9b:e4:50:5e:24: 56:f5:b7:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjY5ODExMC8GA1UEBRMoREIwNjMwNzhGN0I5Nzc1MkZCODFEMDBGQTlCRDdDNTIz QjFDOTcwMzAeFw0yNDA5MTUwOTU1MzNaFw0yNDA5MjIwOTU1MzNaMBgxFjAUBgNV BAMTDTY2ZTZhZjE2LTQyYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGgrod/x3V7cpBEI3Hk72JP5ZfL64PmDoMNFNIBmist7Xh5RN9r+WyqFBcQO58 Ity93N5p3OjUDqsN2KIHW8fnWqZnJw8I1yzGmHW/b6N5L2Vzv/W6WHlVJNirSadC jjrkW477fVZ6a2R+BBTVbECNfiEN6HjvkFLOSm1QfTYkWWOzPoVeOElNWC5dMjwf vemssE8QO00hRYcyu4erCSHkSi9DVPuHPzCn0yIl8VyZBmkeKE1LbnylvaSxCXFr dl82hIC2N+/yiDFUiH39gBu7eJkLVamF6i4F1LCIFpzk3fJa8Shdgz23o4hMgtw0 ANelMjY/aoQ5CvEYQQeiu4g1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC1KKtXqr 8XCd+QG3WXI66KjDpDEwHwYDVR0jBBgwFoAU2wYwePe5d1L7gdAPqb18UjsclwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNjk4L0QzQzBFQ0UyMUU1 NTExRUZBQzk1OUYxOUM0RjlBRTAyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMndZd2VQZTVkMUw3Z2RBUHFiMThVanNjbHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky Njk4L0QzQzBFQ0UyMUU1NTExRUZBQzk1OUYxOUM0RjlBRTAyLzJ3WXdlUGU1ZDFM N2dkQVBxYjE4VWpzY2x3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE+Pp+s8GqKVQCmdbSnCyIrQvktVc6rLe0ZFAQVgGTxziJTQuB2nO8BC HTUEhtIgaL5arDWJIWk5GDBBJtFBi6V8l37JtAPb+E4rIOIHZNVOZR0EW/nKlw1/ 5xz/Y3KoMYKeITGAS0ACgd572trcd2rA4DiC68TJ4E8Ff+swdLA7dT3ELjPnWp1Y 2DkjC+iIhY3v9nFmt/oTBc9G3+kAHEoYVOZFwsbmWmMwXehTDFx57Hcj8LP0aIVj wGD5UAymTKVnHr0GbPpJkDZ2/bA9bgNnbFgPxgGLPksrpOJQk1mxWnyUTs5Qg0dg AX/Ei+DDGwtND0EodZ6b5FBeJFb1t4w= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:22 2024 by rpki-client on console-ams.rpki-client.org