$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: ezK4y4+yFROSGAAYLBAnZDiN167TX5eksK0Zxli8NgM= Subject key identifier: 8C:DF:D4:88:B7:89:99:4D:63:F1:20:2D:54:1E:56:B3:7C:78:02:5D Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: 2F Signing time: Sun 15 Sep 2024 10:03:28 +0000 Manifest this update: Sun 15 Sep 2024 10:03:27 +0000 Manifest next update: Sun 22 Sep 2024 10:03:27 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: h+p2Hq0ygIo6o9cUu/lSrZCcaqsPVg0ZvusR7MZWGmo=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: RR1qcCzhqZZueAB6z0MEcO43o3VFIzEo4W3o/o/hAbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Validity Not Before: Sep 15 10:03:27 2024 GMT Not After : Sep 22 10:03:27 2024 GMT Subject: CN=66e6b0ef-3dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:75:7c:ee:2b:2d:7d:d9:65:35:d3:42:f0: dd:20:3f:d0:7a:b8:1e:22:3c:f8:71:0e:d3:e3:dc: 3d:87:96:a4:b2:cf:02:ae:ce:cc:9d:75:d1:1e:e8: 36:d1:e6:73:b6:ae:b8:cf:8e:b6:d4:97:82:97:c6: 02:d5:0d:21:84:f8:1b:36:c3:40:cf:a8:44:b8:d6: a9:f6:4f:0e:e0:2a:1b:7f:46:2d:c0:9d:6c:cc:46: 3f:a9:f9:22:57:53:7c:78:c2:e7:4a:da:d7:8c:95: e8:e9:85:9f:11:8b:5e:0f:5a:cc:c6:89:a8:d2:6b: a0:d1:80:9d:46:49:b5:14:b9:47:ce:09:10:fd:77: 29:7f:0b:19:02:e3:d1:54:27:9a:53:d5:80:6e:64: 9c:f5:00:e5:cb:0a:6a:a0:e5:73:49:6c:58:fd:60: f9:0a:6b:16:8b:02:be:0b:37:bc:78:ea:68:f3:97: e8:b7:16:1d:4e:77:82:ee:04:83:c7:9f:6b:78:06: 2b:75:ab:bd:f8:28:a2:78:6f:ae:5f:21:33:c3:f6: 47:87:93:64:81:cf:b7:1a:48:1c:ae:97:7d:cb:28: 11:90:5e:45:ff:16:47:c4:bd:77:b2:83:ac:9e:11: 1a:07:36:ce:6d:37:1f:92:2e:96:16:d6:2c:53:19: 51:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DF:D4:88:B7:89:99:4D:63:F1:20:2D:54:1E:56:B3:7C:78:02:5D X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:15:2a:47:ac:d5:d9:20:66:f3:93:57:cf:f9:79:a8:29:03: f5:0a:02:89:45:3a:61:51:3b:f3:a6:e2:56:95:60:95:d1:36: 5e:41:b6:97:69:0a:ad:61:46:96:b0:7d:20:86:38:2d:d3:99: 76:1b:36:1b:b5:2f:14:3c:5d:07:a5:53:84:61:68:1d:93:8d: 6c:4a:33:c7:c8:65:37:4c:80:a6:46:64:23:e6:81:28:ff:b2: 64:51:0c:8a:2e:e7:ed:9f:62:77:97:c4:28:4d:cf:fa:f6:10: f6:96:55:b6:eb:c3:47:0c:68:fb:c2:cd:3a:78:1b:87:27:ef: 2c:94:60:19:31:0c:07:9e:8b:31:96:2a:9d:f7:1d:b1:94:7c: 6b:07:4e:7a:25:ef:6a:7c:c1:f7:35:12:0d:73:8a:f7:23:f6: aa:94:16:35:3e:01:9e:5f:71:9e:66:44:d8:43:ec:f1:97:ea: 95:44:fb:fe:eb:b9:71:03:0b:a0:9b:84:93:ee:45:ee:b7:26: ec:bd:14:b3:05:94:3c:de:6d:9b:3b:5e:50:05:37:91:61:13: eb:f6:38:ae:64:da:60:7d:75:5a:df:bb:4c:2b:7f:72:b1:46: a7:dc:2b:86:46:92:be:d7:f4:db:63:1f:f9:69:56:9b:3e:63: 38:c0:bf:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUVCQTExMC8GA1UEBRMoMTU2RDRBOUM2RjE1RUIyQjRCM0YzNjdENjlGQUEyNTEw MTI4MDc4ODAeFw0yNDA5MTUxMDAzMjdaFw0yNDA5MjIxMDAzMjdaMBgxFjAUBgNV BAMTDTY2ZTZiMGVmLTNkYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/B3V87istfdllNdNC8N0gP9B6uB4iPPhxDtPj3D2HlqSyzwKuzsydddEe6DbR 5nO2rrjPjrbUl4KXxgLVDSGE+Bs2w0DPqES41qn2Tw7gKht/Ri3AnWzMRj+p+SJX U3x4wudK2teMlejphZ8Ri14PWszGiajSa6DRgJ1GSbUUuUfOCRD9dyl/CxkC49FU J5pT1YBuZJz1AOXLCmqg5XNJbFj9YPkKaxaLAr4LN7x46mjzl+i3Fh1Od4LuBIPH n2t4Bit1q734KKJ4b65fITPD9keHk2SBz7caSByul33LKBGQXkX/FkfEvXeyg6ye ERoHNs5tNx+SLpYW1ixTGVHzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjN/UiLeJ mU1j8SAtVB5Ws3x4Al0wHwYDVR0jBBgwFoAUFW1KnG8V6ytLPzZ9afqiUQEoB4gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RUJBLzcyRTU0Q0ZFMkM1 MzExRUY5MUJGN0MzMEM0RjlBRTAyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlcxS25HOFY2eXRMUHpaOWFmcWlVUUVvQjRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RUJBLzcyRTU0Q0ZFMkM1MzExRUY5MUJGN0MzMEM0RjlBRTAyL0ZXMUtuRzhWNnl0 TFB6WjlhZnFpVVFFb0I0Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYVKkes1dkgZvOTV8/5eagpA/UKAolFOmFRO/Om4laVYJXRNl5Btpdp Cq1hRpawfSCGOC3TmXYbNhu1LxQ8XQelU4RhaB2TjWxKM8fIZTdMgKZGZCPmgSj/ smRRDIou5+2fYneXxChNz/r2EPaWVbbrw0cMaPvCzTp4G4cn7yyUYBkxDAeeizGW Kp33HbGUfGsHTnol72p8wfc1Eg1zivcj9qqUFjU+AZ5fcZ5mRNhD7PGX6pVE+/7r uXEDC6CbhJPuRe63Juy9FLMFlDzebZs7XlAFN5FhE+v2OK5k2mB9dVrfu0wrf3Kx RqfcK4ZGkr7X9NtjH/lpVps+YzjAv7s= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:36 2024 by rpki-client on console-ams.rpki-client.org