$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: H8NyjQgcWgovdm7DVnxVeJIB76LZ1ZbeIv6+WHBP3ac= Subject key identifier: B3:B3:30:08:6B:4D:6A:B9:87:B2:B4:BD:FA:85:D9:8F:4C:46:6B:7E Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 33FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 33FE Signing time: Fri 20 Sep 2024 15:13:26 +0000 Manifest this update: Fri 20 Sep 2024 15:13:26 +0000 Manifest next update: Fri 27 Sep 2024 15:13:26 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: cSNTrJREPsqeq7fKceYmb4AzL2FxjBA0hfTX7BJXlDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 15:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13310 (0x33fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Sep 20 15:13:26 2024 GMT Not After : Sep 27 15:13:26 2024 GMT Subject: CN=66ed9116-f745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:ec:e0:12:82:71:8d:93:bf:20:61:c9:fd: 38:9f:cd:a8:36:87:78:60:41:8e:3c:bb:bd:87:58: b2:ec:aa:24:f1:61:8d:4e:57:23:58:29:d6:9d:65: b9:16:42:2b:cd:76:88:8f:3a:b4:34:3c:fb:6b:af: 14:f0:2f:3b:1a:3e:14:93:8c:9b:dd:6f:7f:20:9b: 7c:ef:76:2c:36:eb:c5:e4:41:dd:20:c7:83:33:f4: 28:a8:23:a8:19:4b:12:7f:b4:ab:49:a6:ac:08:47: f5:f1:85:23:19:01:cd:d4:4b:cd:ba:0d:9f:bc:b1: 56:51:f3:73:e5:5a:bd:0b:4b:fd:c4:46:35:49:d5: f8:c1:2d:0e:54:79:ae:91:8a:fa:19:6a:dc:0b:aa: fd:95:9e:d1:1a:01:a2:a9:74:37:5d:49:92:d2:1d: 90:cd:24:3c:da:77:81:62:1a:d0:d1:55:7d:e7:79: 83:3d:4f:0c:48:0e:ea:bb:3b:37:6c:b1:fe:a8:09: d0:b3:e9:a7:e2:80:23:d2:39:32:4e:b5:d9:21:ab: a7:7e:d2:08:93:69:68:b2:c2:4d:68:b3:9a:67:b9: b4:83:9d:4c:bf:54:32:78:bd:e2:e3:6f:62:77:93: a2:92:a1:9d:4e:c6:ec:27:64:81:2f:b9:c6:80:f4: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B3:30:08:6B:4D:6A:B9:87:B2:B4:BD:FA:85:D9:8F:4C:46:6B:7E X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:33:04:e5:ef:1b:12:27:9d:0a:7c:24:22:76:03:bd:d5:43: 71:fc:10:7d:24:7a:fc:5d:9d:98:e7:91:2b:21:09:fa:89:98: 31:12:33:4e:92:82:23:a1:6b:e7:b3:82:7b:94:a0:1f:4d:ec: 25:42:ed:bc:27:74:5b:72:47:1b:9c:03:c6:f3:4f:85:a8:9f: c5:88:56:91:71:90:ca:21:75:92:ee:2c:4a:1a:c7:49:f5:88: 75:30:07:21:ae:01:eb:a9:21:b0:36:b7:75:41:8d:1b:46:72: 10:81:d3:9b:a7:12:3d:50:f4:4e:79:da:1a:ad:a0:6c:0a:2b: 54:5a:02:0e:3d:a0:0e:0a:fd:0e:e2:ca:9d:40:92:f6:a8:f9: 71:fb:98:8c:02:32:1b:1d:26:d9:a9:01:d7:de:06:08:80:a0: 86:3d:1f:80:de:25:15:97:70:de:df:7a:cd:bf:eb:fc:b4:23: 24:9c:29:8f:fa:2e:ec:e4:00:26:27:85:b4:a6:77:27:ab:b8: 04:6c:d2:0c:3a:dc:00:a2:aa:38:f0:cc:3d:75:66:ff:c3:ae: 7f:e6:64:c1:eb:33:1a:28:ac:72:82:35:f0:15:dd:71:8d:aa: 78:db:52:68:a4:50:1e:db:21:c3:1e:8d:8a:06:b6:95:5c:de: a6:e2:76:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjQwOTIwMTUxMzI2WhcNMjQwOTI3MTUxMzI2WjAYMRYwFAYD VQQDEw02NmVkOTExNi1mNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+7s4BKCcY2TvyBhyf04n82oNod4YEGOPLu9h1iy7Kok8WGNTlcjWCnWnWW5 FkIrzXaIjzq0NDz7a68U8C87Gj4Uk4yb3W9/IJt873YsNuvF5EHdIMeDM/QoqCOo GUsSf7SrSaasCEf18YUjGQHN1EvNug2fvLFWUfNz5Vq9C0v9xEY1SdX4wS0OVHmu kYr6GWrcC6r9lZ7RGgGiqXQ3XUmS0h2QzSQ82neBYhrQ0VV953mDPU8MSA7quzs3 bLH+qAnQs+mn4oAj0jkyTrXZIaunftIIk2lossJNaLOaZ7m0g51Mv1QyeL3i429i d5OikqGdTsbsJ2SBL7nGgPTYzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOzMAhr TWq5h7K0vfqF2Y9MRmt+MB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaMwTl7xsSJ50KfCQidgO91UNx/BB9JHr8XZ2Y55ErIQn6iZgxEjNO koIjoWvns4J7lKAfTewlQu28J3RbckcbnAPG80+FqJ/FiFaRcZDKIXWS7ixKGsdJ 9Yh1MAchrgHrqSGwNrd1QY0bRnIQgdObpxI9UPROedoaraBsCitUWgIOPaAOCv0O 4sqdQJL2qPlx+5iMAjIbHSbZqQHX3gYIgKCGPR+A3iUVl3De33rNv+v8tCMknCmP +i7s5AAmJ4W0pncnq7gEbNIMOtwAoqo48Mw9dWb/w65/5mTB6zMaKKxygjXwFd1x jap421JopFAe2yHDHo2KBraVXN6m4nbW -----END CERTIFICATE-----Generated at Fri Sep 20 16:42:15 2024 by rpki-client on console-ams.rpki-client.org