$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json) Hash identifier: Y9NRMZum4jZz98pYc9tGpWWIbe4MWqjTTyY1oAj8wGk= Subject key identifier: 0A:50:82:D1:0D:47:48:81:C4:42:01:ED:B7:24:FA:A1:C9:12:1A:CC Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft Manifest number: 31 Signing time: Sun 15 Sep 2024 10:07:39 +0000 Manifest this update: Sun 15 Sep 2024 10:07:38 +0000 Manifest next update: Sun 22 Sep 2024 10:07:38 +0000 Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: oGReIka9aS1zI63HSTR2Kos/0Rk5SbCDnRpgMMbsrFU=) 2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: f4DCasN1alZ70tb2pHL9Cyk/z0rne/HgPP80BOvFb+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Validity Not Before: Sep 15 10:07:38 2024 GMT Not After : Sep 22 10:07:38 2024 GMT Subject: CN=66e6b1eb-aa82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:fb:a0:8d:b2:ef:53:d6:9a:0a:9f:f3:34: 40:ba:9e:9f:66:f8:10:c1:58:ed:89:79:63:4c:44: 0f:a9:2b:b4:fe:f9:ad:cd:62:b6:42:2d:2b:10:fe: af:1a:71:c6:ef:37:54:d4:ea:56:84:45:87:d8:d0: 9f:42:c3:56:2c:51:c8:7e:72:30:76:ad:20:d7:28: 44:b1:06:0b:25:c4:7c:b6:0e:99:a6:c1:7a:01:aa: 13:d6:01:71:94:20:cc:64:83:f2:e8:9d:8e:91:1b: a8:d2:7f:c8:58:e4:49:02:26:c8:73:92:81:e9:a5: 8b:e2:9e:86:ac:29:07:58:3e:ab:0c:99:c0:74:00: 45:f5:06:cb:c8:0b:ab:6c:1d:ab:e1:ad:6e:ab:e3: 4f:bc:18:b6:13:ea:69:3b:58:15:ff:48:e1:9a:70: d4:a7:73:23:27:0d:32:76:c1:e7:78:85:95:d2:c2: f9:3b:0c:b7:25:99:77:12:0b:8a:51:c2:bb:17:b5: 94:91:45:a6:3b:09:26:17:d6:3d:69:1f:a4:dd:55: ea:07:6a:a3:e7:76:2e:3e:2d:2e:03:f7:73:e9:34: 04:65:84:59:43:fa:27:0f:ca:23:1b:9c:07:52:8a: 18:ff:1f:3c:07:6d:99:13:65:a4:e2:99:6b:e9:c7: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:50:82:D1:0D:47:48:81:C4:42:01:ED:B7:24:FA:A1:C9:12:1A:CC X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:92:87:00:3e:26:e1:8c:f8:cf:f0:b0:9d:be:f8:a9:88:42: aa:c2:f2:10:13:f8:a6:49:9b:50:ff:15:5b:3e:4d:2a:e8:2c: 39:30:46:36:1d:f4:ce:dc:d1:8d:36:1f:9c:30:9c:5e:51:d8: 88:ed:71:e0:85:0f:cf:24:c6:2b:80:1f:88:31:a5:3f:31:af: ea:d0:50:02:dc:47:1f:9b:5c:cf:85:e4:9b:43:62:9b:52:7d: fe:39:56:e6:a8:b0:a6:fb:69:dd:9e:05:a5:e1:7c:5a:d3:75: 55:0b:21:27:07:1b:fd:89:26:01:8e:2d:59:7e:54:85:24:11: 31:10:fe:9c:93:26:96:9a:ae:16:d5:45:a3:8b:42:cc:7b:e4: e2:34:0e:de:cb:a4:72:02:ae:5e:ba:c4:17:45:74:b2:03:4d: 3b:d4:12:36:39:1f:ab:1a:08:d5:7c:91:79:97:0a:ce:f0:8a: 0b:eb:b5:6d:14:47:f9:ee:2a:02:d1:79:47:48:c0:45:35:cf: ba:26:bd:fd:88:06:d9:c1:ca:ce:ff:cf:c0:db:59:21:c0:c6: ec:0a:57:a2:19:c3:de:4c:be:5a:05:43:70:8e:12:3f:ca:f0: e7:3b:ab:fb:89:48:45:03:4d:2e:20:97:ab:52:0c:16:80:a4: 33:84:6e:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NERBNTExMC8GA1UEBRMoNDYzMEE0QjAyNkE5M0QwREZBQThFQ0VDNTc5Q0M1MjEz ODJFNEU1ODAeFw0yNDA5MTUxMDA3MzhaFw0yNDA5MjIxMDA3MzhaMBgxFjAUBgNV BAMTDTY2ZTZiMWViLWFhODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV9/ugjbLvU9aaCp/zNEC6np9m+BDBWO2JeWNMRA+pK7T++a3NYrZCLSsQ/q8a ccbvN1TU6laERYfY0J9Cw1YsUch+cjB2rSDXKESxBgslxHy2DpmmwXoBqhPWAXGU IMxkg/LonY6RG6jSf8hY5EkCJshzkoHppYvinoasKQdYPqsMmcB0AEX1BsvIC6ts HavhrW6r40+8GLYT6mk7WBX/SOGacNSncyMnDTJ2wed4hZXSwvk7DLclmXcSC4pR wrsXtZSRRaY7CSYX1j1pH6TdVeoHaqPndi4+LS4D93PpNARlhFlD+icPyiMbnAdS ihj/HzwHbZkTZaTimWvpx6tZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUClCC0Q1H SIHEQgHttyT6ockSGswwHwYDVR0jBBgwFoAURjCksCapPQ36qOzsV5zFITguTlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REE1L0JEMzQ1NDlDMzJB NDExRUY4MjJFMEYxQUM0RjlBRTAyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRs Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUmpDa3NDYXBQUTM2cU96c1Y1ekZJVGd1VGxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 REE1L0JEMzQ1NDlDMzJBNDExRUY4MjJFMEYxQUM0RjlBRTAyL1JqQ2tzQ2FwUFEz NnFPenNWNXpGSVRndVRsZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEKShwA+JuGM+M/wsJ2++KmIQqrC8hAT+KZJm1D/FVs+TSroLDkwRjYd 9M7c0Y02H5wwnF5R2IjtceCFD88kxiuAH4gxpT8xr+rQUALcRx+bXM+F5JtDYptS ff45VuaosKb7ad2eBaXhfFrTdVULIScHG/2JJgGOLVl+VIUkETEQ/pyTJpaarhbV RaOLQsx75OI0Dt7LpHICrl66xBdFdLIDTTvUEjY5H6saCNV8kXmXCs7wigvrtW0U R/nuKgLReUdIwEU1z7omvf2IBtnBys7/z8DbWSHAxuwKV6IZw95MvloFQ3COEj/K 8Oc7q/uJSEUDTS4gl6tSDBaApDOEbpw= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:11 2024 by rpki-client on console-fra.rpki-client.org