$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: 9OtMX8zvyZfKqAruJGdUUr3iaXzsywkv2XxsiuQpPMI= Subject key identifier: C5:34:4F:8E:B7:52:64:39:BF:83:1F:16:B5:D5:5D:C4:3C:45:03:5A Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 14 Signing time: Thu 19 Sep 2024 06:16:39 +0000 Manifest this update: Thu 19 Sep 2024 06:16:39 +0000 Manifest next update: Thu 26 Sep 2024 06:16:39 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: PjGMnDMyDeIiS7k28djmA4X63YvelkzJXqGbtqlVo84=) 2: 7DAE5EB25AE011EFBA58F07FC4F9AE02.roa (hash: fEssK/rdFbySAulrqFd8AKpPmu+MmmAD1cyPJC/0O8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Sep 19 06:16:39 2024 GMT Not After : Sep 26 06:16:39 2024 GMT Subject: CN=66ebc1c7-adfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:9e:1e:f6:2a:e4:e2:40:ac:9d:61:a3:9c: ba:95:4c:20:bf:29:0e:99:a4:71:ee:e2:5b:aa:24: 8c:df:98:3e:c8:a7:f5:6c:2b:47:94:11:77:ed:0d: e1:f3:56:04:72:19:be:a8:2b:37:10:2b:5a:36:f8: ec:99:b8:9e:6b:d8:ed:fd:12:45:99:85:4f:69:ca: eb:b1:85:ba:e5:65:b1:38:30:72:be:78:02:85:01: 78:e3:0a:c0:67:5d:9a:d1:52:5f:2d:d0:0c:67:48: ae:b1:c2:07:3b:ac:1e:85:1f:75:d2:50:0e:4b:0e: f0:f0:79:41:33:6e:15:61:58:0d:68:c7:ba:97:56: 55:b7:03:bd:03:db:ca:25:79:23:d8:d7:1e:21:6e: 0e:47:93:94:32:f4:a3:ed:29:6c:6d:98:f3:00:b8: 67:1b:e1:d1:c0:b7:82:32:8c:c1:84:5f:be:d9:24: d1:43:1b:57:f2:14:7c:6e:b3:e7:f0:ef:11:5c:6b: b7:89:de:d5:85:5f:80:f4:d7:63:a6:ae:fc:1d:09: 02:44:4e:e7:7a:f1:0d:94:37:6a:50:c4:ed:29:aa: ca:73:db:50:e4:78:c6:e0:bd:d6:e0:82:71:89:9e: c3:b3:07:86:e8:95:da:18:45:78:12:72:70:11:5b: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:34:4F:8E:B7:52:64:39:BF:83:1F:16:B5:D5:5D:C4:3C:45:03:5A X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:62:e3:5d:41:14:ec:e2:4c:a4:6c:8f:50:49:0f:04:b6:8c: d2:75:77:3f:fc:31:35:ff:5b:a6:5a:48:49:d1:eb:32:91:a9: d2:c6:df:8e:1a:2e:0f:8d:a7:fb:39:f5:1c:85:0f:05:a6:26: 3d:b0:74:70:af:7b:6d:0a:2d:8c:cf:5b:ee:54:56:8d:9d:15: d5:65:03:b7:cd:60:3b:63:fc:5c:2c:c2:64:a8:16:a7:99:b9: 86:f1:f7:1b:07:98:b5:a2:f4:08:23:f1:fb:cc:d0:65:ff:1d: f0:dd:2f:fe:65:eb:57:25:fa:41:7d:0b:2f:5b:9c:78:b1:a4: 23:0e:84:9d:9a:e2:f1:81:28:31:a7:fe:22:e4:67:b1:8c:59: ac:ca:46:c2:aa:bd:43:99:c1:f9:11:ba:fe:ab:5c:b5:07:3f: ae:9d:c1:d7:4c:ee:76:86:05:13:10:1d:09:db:f6:19:42:9e: c6:2f:4f:42:86:a7:55:f6:12:23:03:8f:ab:c8:3c:b9:fd:7d: cd:75:64:51:50:09:f8:64:ca:8c:41:f4:86:e4:4d:7a:d8:48: 9e:73:56:6a:10:83:b2:0d:18:66:b9:b2:66:fc:13:e4:8b:6d: ed:c4:79:84:1c:1f:ef:08:1d:dd:1d:1b:4e:37:d4:99:82:c4: ab:3a:11:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDY5MDExMC8GA1UEBRMoMDJDRkY3Nzk4RjA1M0U5QzgxRkRDQ0VENzk2MkVDQkI3 NkMxRDIxQTAeFw0yNDA5MTkwNjE2MzlaFw0yNDA5MjYwNjE2MzlaMBgxFjAUBgNV BAMTDTY2ZWJjMWM3LWFkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS5J4e9irk4kCsnWGjnLqVTCC/KQ6ZpHHu4luqJIzfmD7Ip/VsK0eUEXftDeHz VgRyGb6oKzcQK1o2+OyZuJ5r2O39EkWZhU9pyuuxhbrlZbE4MHK+eAKFAXjjCsBn XZrRUl8t0AxnSK6xwgc7rB6FH3XSUA5LDvDweUEzbhVhWA1ox7qXVlW3A70D28ol eSPY1x4hbg5Hk5Qy9KPtKWxtmPMAuGcb4dHAt4IyjMGEX77ZJNFDG1fyFHxus+fw 7xFca7eJ3tWFX4D012OmrvwdCQJETud68Q2UN2pQxO0pqspz21DkeMbgvdbggnGJ nsOzB4boldoYRXgScnARWzZ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxTRPjrdS ZDm/gx8WtdVdxDxFA1owHwYDVR0jBBgwFoAUAs/3eY8FPpyB/czteWLsu3bB0how DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NjkwLzQwOUM5NzBBNUFF MDExRUY4NTgyNzA3RkM0RjlBRTAyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQXNfM2VZOEZQcHlCX2N6dGVXTHN1M2JCMGhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NjkwLzQwOUM5NzBBNUFFMDExRUY4NTgyNzA3RkM0RjlBRTAyL0FzXzNlWThGUHB5 Ql9jenRlV0xzdTNiQjBoby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVi411BFOziTKRsj1BJDwS2jNJ1dz/8MTX/W6ZaSEnR6zKRqdLG344a Lg+Np/s59RyFDwWmJj2wdHCve20KLYzPW+5UVo2dFdVlA7fNYDtj/FwswmSoFqeZ uYbx9xsHmLWi9Agj8fvM0GX/HfDdL/5l61cl+kF9Cy9bnHixpCMOhJ2a4vGBKDGn /iLkZ7GMWazKRsKqvUOZwfkRuv6rXLUHP66dwddM7naGBRMQHQnb9hlCnsYvT0KG p1X2EiMDj6vIPLn9fc11ZFFQCfhkyoxB9IbkTXrYSJ5zVmoQg7INGGa5smb8E+SL be3EeYQcH+8IHd0dG0431JmCxKs6EYE= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:51 2024 by rpki-client on console-ams.rpki-client.org