$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft File: sejBHBQOD6dR6L-mWlnHFd1-HFM.mft (raw, json) Hash identifier: 6tNGTUaXKV2hP3d/FUEEBP+ZFZEF2Z7+eU9gZyn11ko= Subject key identifier: 14:6E:5F:17:08:D4:61:9E:98:F5:2D:3A:41:D3:05:6C:78:70:CE:63 Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53 Certificate issuer: /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft Manifest number: 3A Signing time: Sun 15 Sep 2024 09:54:39 +0000 Manifest this update: Sun 15 Sep 2024 09:54:38 +0000 Manifest next update: Sun 22 Sep 2024 09:54:38 +0000 Files and hashes: 1: sejBHBQOD6dR6L-mWlnHFd1-HFM.crl (hash: 4QaILGkafqnOYFacKAz+M3eBUAZsghP6jznFo5tNN9k=) 2: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (hash: bREM+yzO5wyUbhfkHhA6GjUfp9xT1XvvZTTNlSGuxMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53 Validity Not Before: Sep 15 09:54:38 2024 GMT Not After : Sep 22 09:54:38 2024 GMT Subject: CN=66e6aede-11d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:b1:48:ce:5f:12:9b:4d:01:ae:2e:c6:cb: 76:a6:5d:84:a3:39:7c:f8:4e:2f:85:bd:e9:35:81: 7b:c5:9e:7a:8a:2d:fd:76:40:79:d1:eb:40:54:b6: 18:16:10:ed:2f:e8:22:77:5a:9f:49:2f:4a:f3:d5: 34:6e:93:e5:b8:84:7a:65:7c:77:4e:c7:75:3f:31: 62:c9:7a:85:6b:9c:a3:15:1a:42:b6:63:f1:59:6f: dd:21:ba:bf:13:5c:7e:7d:a4:4a:7c:b4:48:d9:02: 6d:1a:18:c3:0b:40:5c:a1:4f:c7:aa:bd:7e:17:21: 0e:dc:8e:d6:57:44:2b:2e:b0:a9:16:b2:b8:a3:ff: bd:df:49:1b:e0:f9:b2:2c:08:99:4e:fb:e0:63:18: 06:2e:54:03:c1:3a:f8:bb:72:57:2b:3c:98:0c:b9: db:fe:4b:ec:85:9c:0d:74:15:5e:cf:c7:f9:df:9b: bb:d7:fd:d9:b0:cf:08:0d:f7:ad:af:5c:1b:23:a4: 47:7a:dd:6d:f8:d0:08:33:df:38:c8:b1:71:a8:1f: ee:67:0f:70:95:b0:4b:82:3b:c5:3a:d4:e7:6e:ad: 31:59:42:3a:14:0e:dc:c7:bf:f4:9f:13:4f:ad:87: 5d:e7:15:e8:5e:72:7f:a5:8d:e4:0f:46:d8:6d:7c: de:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6E:5F:17:08:D4:61:9E:98:F5:2D:3A:41:D3:05:6C:78:70:CE:63 X509v3 Authority Key Identifier: keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0f:5d:7a:4e:2b:5a:8f:6e:b4:22:b9:2f:7a:ef:0f:6c:e5: 0f:22:da:a1:71:8b:63:43:52:a1:49:3d:02:7f:6f:27:8f:ca: 9a:2b:d9:d7:5d:f1:58:14:18:c9:33:e6:ee:fd:c4:0d:05:59: 2a:21:1e:31:c0:27:02:f8:de:e8:41:d6:ab:d5:7f:95:2d:cc: 7c:14:43:03:47:b5:b3:0c:0c:94:a2:44:96:31:bc:37:41:38: 90:0f:88:67:1c:2c:ec:22:95:fc:cc:a7:a8:52:c9:99:e0:80: f7:a1:e0:af:2e:e7:45:90:dc:c0:a5:b0:25:07:51:e0:e4:91: 4d:9b:8e:18:cf:87:6e:2d:32:6d:02:58:59:6d:6a:86:e6:0e: 6e:7c:b7:a3:ac:af:49:dd:b0:ea:43:a8:42:1c:90:48:1a:88: 62:78:d9:8e:91:39:69:c6:cb:cd:65:6e:ac:0f:21:27:c0:db: 51:76:2e:bd:b3:67:90:a3:e9:ef:48:77:2a:fb:27:86:41:27: 1b:46:90:9f:52:e9:48:10:48:a1:cc:16:3a:ab:64:3c:5f:e8: e1:ff:ee:de:89:f0:47:5f:fb:42:d5:cc:8a:af:29:15:80:20: c7:d9:ec:ef:0e:b2:c7:75:b9:a8:21:75:42:62:0b:5b:8d:34: 17:0f:36:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTlGNjExMC8GA1UEBRMoQjFFOEMxMUMxNDBFMEZBNzUxRThCRkE2NUE1OUM3MTVE RDdFMUM1MzAeFw0yNDA5MTUwOTU0MzhaFw0yNDA5MjIwOTU0MzhaMBgxFjAUBgNV BAMTDTY2ZTZhZWRlLTExZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7dLFIzl8Sm00Bri7Gy3amXYSjOXz4Ti+Fvek1gXvFnnqKLf12QHnR60BUthgW EO0v6CJ3Wp9JL0rz1TRuk+W4hHplfHdOx3U/MWLJeoVrnKMVGkK2Y/FZb90hur8T XH59pEp8tEjZAm0aGMMLQFyhT8eqvX4XIQ7cjtZXRCsusKkWsrij/73fSRvg+bIs CJlO++BjGAYuVAPBOvi7clcrPJgMudv+S+yFnA10FV7Px/nfm7vX/dmwzwgN962v XBsjpEd63W340Agz3zjIsXGoH+5nD3CVsEuCO8U61OdurTFZQjoUDtzHv/SfE0+t h13nFehecn+ljeQPRthtfN4jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFG5fFwjU YZ6Y9S06QdMFbHhwzmMwHwYDVR0jBBgwFoAUsejBHBQOD6dR6L+mWlnHFd1+HFMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOUY2LzhGMjNDRTg0MUQ1 RjExRUZCODM3NEQzREM0RjlBRTAyL3NlakJIQlFPRDZkUjZMLW1XbG5IRmQxLUhG TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2VqQkhCUU9ENmRSNkwtbVdsbkhGZDEtSEZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OUY2LzhGMjNDRTg0MUQ1RjExRUZCODM3NEQzREM0RjlBRTAyL3NlakJIQlFPRDZk UjZMLW1XbG5IRmQxLUhGTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB8PXXpOK1qPbrQiuS967w9s5Q8i2qFxi2NDUqFJPQJ/byePypor2ddd 8VgUGMkz5u79xA0FWSohHjHAJwL43uhB1qvVf5UtzHwUQwNHtbMMDJSiRJYxvDdB OJAPiGccLOwilfzMp6hSyZnggPeh4K8u50WQ3MClsCUHUeDkkU2bjhjPh24tMm0C WFltaobmDm58t6Osr0ndsOpDqEIckEgaiGJ42Y6ROWnGy81lbqwPISfA21F2Lr2z Z5Cj6e9Idyr7J4ZBJxtGkJ9S6UgQSKHMFjqrZDxf6OH/7t6J8Edf+0LVzIqvKRWA IMfZ7O8Ossd1uaghdUJiC1uNNBcPNqs= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:12 2024 by rpki-client on console-fra.rpki-client.org