$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft File: -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json) Hash identifier: 8xu/9DYlPIHYzSnreT/fEDOTsq+Ks/FhSPIAM8kJTgA= Subject key identifier: C3:20:F5:31:BF:3D:1B:E9:77:DE:6D:3D:5B:51:61:CA:29:89:1A:01 Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56 Certificate issuer: /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft Manifest number: 16 Signing time: Thu 19 Sep 2024 06:19:42 +0000 Manifest this update: Thu 19 Sep 2024 06:19:41 +0000 Manifest next update: Thu 26 Sep 2024 06:19:41 +0000 Files and hashes: 1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: 2CnK/O6s0ep7+/HGYn7Fv4mAp4QrtlVApoVe949f+Q8=) 2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56 Validity Not Before: Sep 19 06:19:41 2024 GMT Not After : Sep 26 06:19:41 2024 GMT Subject: CN=66ebc27e-1a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:71:a8:67:97:1d:69:96:9d:d3:98:93:4c: 58:08:2b:7b:91:6a:a8:cb:7d:1b:4e:63:da:c0:ea: 23:96:f8:6c:43:60:dd:4d:3f:59:3d:18:df:a4:67: 80:c1:33:71:cd:21:19:85:fb:bb:58:4f:c0:28:f6: aa:46:fd:43:8f:b2:5f:1d:29:1e:ab:13:88:48:48: 60:7f:b9:ab:1e:0d:fe:39:26:ba:18:7c:02:92:4a: fe:1c:0c:d1:31:1f:91:cc:69:59:c4:87:fd:93:dc: a4:26:bb:66:df:01:ca:87:5a:99:3b:84:10:40:1d: 5e:aa:ba:c1:c2:c5:ca:59:f2:37:5f:dc:72:3c:2d: 30:06:49:80:85:99:22:32:25:59:98:06:ac:cb:f8: 83:83:9d:7a:0b:8f:32:6d:e8:f2:26:92:de:49:79: 00:68:dd:40:0a:fa:ee:80:64:92:65:67:64:f4:ff: 04:a5:d2:e5:7c:e8:80:92:6a:be:5c:bf:94:a2:8e: f2:ac:e3:1c:af:6b:60:04:3b:18:2a:60:34:a3:7e: 74:26:f2:8b:35:ae:d3:69:7a:f8:5e:22:bc:2a:a7: 5d:58:96:f0:c5:b9:86:f9:42:a8:1f:11:86:67:aa: 8b:79:62:fe:b3:a0:07:dc:7c:6a:37:bd:72:1e:28: df:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:20:F5:31:BF:3D:1B:E9:77:DE:6D:3D:5B:51:61:CA:29:89:1A:01 X509v3 Authority Key Identifier: keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:1c:d8:88:a5:4e:1a:aa:30:89:5a:44:d1:fc:14:7c:4c:b1: 37:73:ec:db:40:16:81:fe:e2:21:bf:1f:5c:46:7b:70:40:44: 76:f0:16:69:46:c2:ca:03:30:e0:f7:7d:ed:9f:9c:13:f9:90: 28:ba:ad:c5:23:ce:77:96:4c:90:ff:df:af:d9:49:21:2d:df: da:6a:ea:1f:f7:a2:86:6e:58:7b:39:0d:eb:b6:1f:81:6b:9b: 70:42:61:f3:e8:3f:ab:52:72:8b:03:63:6d:bd:59:c2:6e:58: cc:3b:bb:07:ec:82:ec:0d:58:76:b7:95:6e:3f:0c:05:8b:d8: 06:c4:28:46:54:89:00:33:11:a8:98:5c:29:29:b6:9d:d6:cb: f4:00:97:f1:b7:16:49:31:20:6c:e6:28:db:4e:19:1d:36:de: 44:cb:c8:be:3c:6c:65:65:37:8c:71:f8:5b:fb:a8:a9:df:30: 7c:fb:ce:f5:85:76:cf:c3:2a:2d:76:fa:fa:10:14:68:05:83: f4:bd:a7:cd:71:f2:66:c8:cd:ac:62:4c:d1:f9:4a:c1:8d:3b: df:1c:63:10:7d:b5:8a:89:09:34:7d:c4:89:01:8a:5b:60:87: 99:1a:5a:10:27:c5:7d:61:89:d7:bf:19:08:7f:2c:5c:e9:f2: e9:a4:a8:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkI4NDExMC8GA1UEBRMoRjg1QUZENkU3NDVCMEEzNDdDQTY5NkVFOEVCQzE2N0Qw OEE0NEY1NjAeFw0yNDA5MTkwNjE5NDFaFw0yNDA5MjYwNjE5NDFaMBgxFjAUBgNV BAMTDTY2ZWJjMjdlLTFhNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAaHGoZ5cdaZad05iTTFgIK3uRaqjLfRtOY9rA6iOW+GxDYN1NP1k9GN+kZ4DB M3HNIRmF+7tYT8Ao9qpG/UOPsl8dKR6rE4hISGB/uaseDf45JroYfAKSSv4cDNEx H5HMaVnEh/2T3KQmu2bfAcqHWpk7hBBAHV6qusHCxcpZ8jdf3HI8LTAGSYCFmSIy JVmYBqzL+IODnXoLjzJt6PImkt5JeQBo3UAK+u6AZJJlZ2T0/wSl0uV86ICSar5c v5SijvKs4xyva2AEOxgqYDSjfnQm8os1rtNpevheIrwqp11YlvDFuYb5QqgfEYZn qot5Yv6zoAfcfGo3vXIeKN+nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwyD1Mb89 G+l33m09W1FhyimJGgEwHwYDVR0jBBgwFoAU+Fr9bnRbCjR8ppbujrwWfQikT1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQjg0LzBGQjRERjlDNUJB MDExRUY5MUQzMEU1RUM0RjlBRTAyLy1GcjliblJiQ2pSOHBwYnVqcndXZlFpa1Qx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUZyOWJuUmJDalI4cHBidWpyd1dmUWlrVDFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky Qjg0LzBGQjRERjlDNUJBMDExRUY5MUQzMEU1RUM0RjlBRTAyLy1GcjliblJiQ2pS OHBwYnVqcndXZlFpa1QxWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQc2IilThqqMIlaRNH8FHxMsTdz7NtAFoH+4iG/H1xGe3BARHbwFmlG wsoDMOD3fe2fnBP5kCi6rcUjzneWTJD/36/ZSSEt39pq6h/3ooZuWHs5Deu2H4Fr m3BCYfPoP6tScosDY229WcJuWMw7uwfsguwNWHa3lW4/DAWL2AbEKEZUiQAzEaiY XCkptp3Wy/QAl/G3FkkxIGzmKNtOGR023kTLyL48bGVlN4xx+Fv7qKnfMHz7zvWF ds/DKi12+voQFGgFg/S9p81x8mbIzaxiTNH5SsGNO98cYxB9tYqJCTR9xIkBiltg h5kaWhAnxX1hide/GQh/LFzp8umkqHE= -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:18 2024 by rpki-client on console-fra.rpki-client.org