$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: EbaFQPvvfk6FWFndUt0Y7LixDvWe58T7MWjnc5MOOcA= Subject key identifier: 17:94:DB:0E:F8:5B:28:79:8C:68:E2:EF:34:06:C8:54:DC:24:D1:D5 Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: 22 Signing time: Sun 15 Sep 2024 10:18:18 +0000 Manifest this update: Sun 15 Sep 2024 10:18:18 +0000 Manifest next update: Sun 22 Sep 2024 10:18:18 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: gJ7huVPnOe/8d/rGOGD+zdP7fRyW/I7P3Y1N64WZZDI=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: q/DDrGFL5S2NU9DAF/3ZYujxHcWmF0oksvSTie/kXHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Sep 15 10:18:18 2024 GMT Not After : Sep 22 10:18:18 2024 GMT Subject: CN=66e6b46a-0903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ad:81:b4:37:52:04:50:2f:35:95:56:dd:fd: 3c:50:ae:3d:2b:6d:42:fd:70:cc:b0:e0:e4:14:3c: 5a:c4:7b:0d:49:7c:59:d5:6a:35:32:eb:aa:4e:da: d1:b0:86:07:02:ea:f8:1a:1f:0e:cf:df:5a:73:f7: d0:ef:7b:f9:21:78:18:d9:5d:e4:8a:39:b1:1c:9d: 26:12:44:88:0e:26:9c:5d:99:87:bd:32:95:92:1b: a1:e9:60:32:60:c7:03:7e:f5:28:a8:09:15:42:21: 75:65:6a:b4:83:05:56:55:5d:c5:f7:9f:5d:67:16: aa:d9:f3:66:5a:3f:14:98:9a:8b:13:3b:d5:1c:02: 14:31:a3:ec:ca:c4:5b:69:b6:49:21:ec:89:e0:20: aa:2e:4e:75:d8:14:c8:93:c6:6b:f3:00:4a:1f:46: 94:02:5a:86:81:57:a3:c2:75:58:19:60:3e:26:34: 87:da:e3:59:5e:53:84:5f:79:89:0a:32:62:ae:cf: 8b:e7:dd:2d:2d:19:a7:12:2e:55:cc:2e:0d:ca:ef: c4:9e:1b:22:4c:d9:b1:0e:02:ae:0e:af:ca:4d:d5: 9e:ac:05:38:86:5b:fc:53:81:70:25:1b:65:e3:68: 99:58:31:a6:de:0a:d8:ee:76:91:18:0a:e0:9c:97: 82:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:DB:0E:F8:5B:28:79:8C:68:E2:EF:34:06:C8:54:DC:24:D1:D5 X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4e:89:07:ed:90:af:1c:0b:ac:e4:86:20:23:79:61:14:94: 3f:16:c4:e0:4a:51:82:3b:35:e0:fa:4a:52:37:3a:a2:63:4d: a5:09:fd:72:0d:87:12:80:35:bc:aa:68:cb:82:10:11:6e:eb: 2a:5f:0a:f1:0a:84:0d:82:06:61:4c:36:b7:32:64:bd:e3:aa: 25:a7:6f:37:96:d5:58:08:6d:dc:22:1a:d0:9f:5b:e9:81:6a: 3d:f3:34:1f:0a:2d:4d:9c:b8:f5:30:5a:9d:89:ba:2c:e7:e0: f9:4c:fd:dc:4f:e1:8c:3d:10:41:1d:a9:59:87:f9:2f:e9:05: de:be:0a:b0:3d:02:44:55:cc:5b:89:45:2d:ee:61:7d:42:5d: fd:83:62:f5:ad:07:5d:8e:51:b8:42:fa:f2:5a:04:2d:48:b8: 04:c9:73:49:11:1d:e9:fa:2b:81:e4:a8:4a:6d:27:b3:8e:a3: e8:b8:6f:22:63:b1:69:ae:e8:82:8e:97:13:0d:e6:e7:73:33: c7:3f:74:08:63:06:45:5e:5b:fa:67:e7:d9:25:7e:41:05:22: e6:b2:1f:9a:b5:93:e2:cd:70:5d:b7:26:7d:1e:ee:26:0d:af: 25:28:ca:48:21:bd:b6:15:82:7d:01:2b:fb:a2:f2:ec:38:b8: 1c:e2:1d:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEQ4ODExMC8GA1UEBRMoRDA5OUVFQTlGNUNEQjZGRTRDNkVGOThFOEQ4Q0YzMzY0 QjlENjI2MTAeFw0yNDA5MTUxMDE4MThaFw0yNDA5MjIxMDE4MThaMBgxFjAUBgNV BAMTDTY2ZTZiNDZhLTA5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkrYG0N1IEUC81lVbd/TxQrj0rbUL9cMyw4OQUPFrEew1JfFnVajUy66pO2tGw hgcC6vgaHw7P31pz99Dve/kheBjZXeSKObEcnSYSRIgOJpxdmYe9MpWSG6HpYDJg xwN+9SioCRVCIXVlarSDBVZVXcX3n11nFqrZ82ZaPxSYmosTO9UcAhQxo+zKxFtp tkkh7IngIKouTnXYFMiTxmvzAEofRpQCWoaBV6PCdVgZYD4mNIfa41leU4RfeYkK MmKuz4vn3S0tGacSLlXMLg3K78SeGyJM2bEOAq4Or8pN1Z6sBTiGW/xTgXAlG2Xj aJlYMabeCtjudpEYCuCcl4INAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF5TbDvhb KHmMaOLvNAbIVNwk0dUwHwYDVR0jBBgwFoAU0JnuqfXNtv5MbvmOjYzzNkudYmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwRDg4L0I5ODZEOTFBNDMx MDExRUY4ODQxMTc4MkM0RjlBRTAyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFlt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEpudXFmWE50djVNYnZtT2pZenpOa3VkWW1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw RDg4L0I5ODZEOTFBNDMxMDExRUY4ODQxMTc4MkM0RjlBRTAyLzBKbnVxZlhOdHY1 TWJ2bU9qWXp6Tmt1ZFltRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIhOiQftkK8cC6zkhiAjeWEUlD8WxOBKUYI7NeD6SlI3OqJjTaUJ/XIN hxKANbyqaMuCEBFu6ypfCvEKhA2CBmFMNrcyZL3jqiWnbzeW1VgIbdwiGtCfW+mB aj3zNB8KLU2cuPUwWp2Juizn4PlM/dxP4Yw9EEEdqVmH+S/pBd6+CrA9AkRVzFuJ RS3uYX1CXf2DYvWtB12OUbhC+vJaBC1IuATJc0kRHen6K4HkqEptJ7OOo+i4byJj sWmu6IKOlxMN5udzM8c/dAhjBkVeW/pn59klfkEFIuayH5q1k+LNcF23Jn0e7iYN ryUoykghvbYVgn0BK/ui8uw4uBziHY4= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:44 2024 by rpki-client on console-fra.rpki-client.org