$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: jOiNbNXufzPBzx60MzQJdt3Q911sGHIuwbRRlcv0MAQ= Subject key identifier: E7:6B:1A:CA:4A:B8:A6:AA:EF:24:5A:F6:2A:3E:44:93:CB:FC:5B:2C Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: 10 Signing time: Wed 23 Oct 2024 06:43:42 +0000 Manifest this update: Wed 23 Oct 2024 06:43:42 +0000 Manifest next update: Wed 30 Oct 2024 06:43:42 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: IbGxQGB4VcbL1UMZlXf+IXXSGAx5qdm3CLiyVp9ESDw=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Oct 23 06:43:42 2024 GMT Not After : Oct 30 06:43:42 2024 GMT Subject: CN=67189b1e-debe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:67:e0:d1:78:e5:61:8d:e6:e9:71:fe:52: e2:be:d4:d2:99:4b:d9:3e:67:05:21:75:20:b3:80: d3:90:2d:e1:c7:05:79:95:a8:8d:4a:ef:58:78:52: a6:1e:26:50:32:2e:bc:06:15:94:e9:5e:39:b3:ae: ce:64:72:77:c1:88:d8:37:09:c2:3f:17:b4:0d:58: b2:19:17:a6:ba:1b:41:a0:0c:42:d2:3c:5e:d5:7d: 0b:16:ce:80:61:1b:3b:26:79:ab:ba:61:60:de:bb: c7:ed:09:04:2c:e0:a6:f0:7d:25:d2:68:93:eb:79: e2:e4:79:ed:f5:b1:e8:68:32:bd:19:92:f3:ea:57: 0d:31:d8:cb:d9:5e:7c:ce:5c:af:67:1f:2a:11:f9: c5:d0:ff:13:f1:43:0c:8a:57:fb:4f:da:9e:f5:f7: 65:17:db:18:8f:f5:73:38:db:0f:70:3c:19:8a:33: 01:21:1d:56:cb:3c:04:84:ea:47:f5:e7:28:51:34: b8:0c:7c:e8:cb:2e:bb:f8:06:c1:10:66:9d:86:35: 97:6c:56:0b:18:10:cd:87:36:52:7d:73:3d:bb:76: 38:d7:71:eb:c0:d9:60:89:33:71:4d:3d:27:35:f1: b4:ca:3f:41:f7:43:c6:14:67:75:a0:93:cf:4e:bf: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6B:1A:CA:4A:B8:A6:AA:EF:24:5A:F6:2A:3E:44:93:CB:FC:5B:2C X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9c:73:81:fa:0a:9c:b6:80:15:42:da:19:53:c3:aa:21:47: 70:83:28:61:8b:83:b1:4b:9c:34:51:e3:49:cc:c4:cd:cc:5d: 66:4e:37:30:d5:42:14:11:f3:4d:66:e2:b9:bd:f1:67:8a:8d: 1e:38:43:7f:a6:ad:bb:38:d4:2b:82:53:02:0b:de:2f:76:c8: 77:92:07:18:91:c2:a3:e0:fa:53:b1:c9:a7:ef:b1:93:d7:1f: f5:39:fe:31:6a:8b:66:f5:39:f5:bd:85:99:0d:a8:e4:bd:1c: c1:b7:b2:02:19:67:ff:84:16:09:90:a2:e5:ef:b8:80:8b:98: 90:62:e1:ed:9d:67:09:45:1b:9f:65:1d:f8:38:2a:f9:47:06: 27:0a:9e:9f:bb:a6:d4:c3:45:2a:b5:68:4a:8a:dc:79:f1:e1: ea:91:4d:8c:d3:04:4e:a6:8a:70:d1:91:cf:27:a3:9c:e9:b8: af:6e:ce:2f:3c:3b:2e:37:39:bb:52:5d:b0:bc:47:2a:fa:2c: 5a:a4:67:9c:21:f7:bc:5e:8a:de:73:f6:c4:b8:fb:5b:cc:88: 04:a9:9e:1e:f8:6d:cf:ba:79:16:85:a4:b8:ea:e9:2a:29:00: 7a:c7:42:6e:26:37:b0:b2:c7:a8:9f:a5:a4:84:3e:4c:39:ef: 2e:47:4e:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTkwRjExMC8GA1UEBRMoOUM2OEY0MDNGMDI0MDE3QkREMjZENkREMEQyMDI3QTQw MkI5RjI4MTAeFw0yNDEwMjMwNjQzNDJaFw0yNDEwMzAwNjQzNDJaMBgxFjAUBgNV BAMTDTY3MTg5YjFlLWRlYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeR2fg0XjlYY3m6XH+UuK+1NKZS9k+ZwUhdSCzgNOQLeHHBXmVqI1K71h4UqYe JlAyLrwGFZTpXjmzrs5kcnfBiNg3CcI/F7QNWLIZF6a6G0GgDELSPF7VfQsWzoBh Gzsmeau6YWDeu8ftCQQs4KbwfSXSaJPreeLkee31sehoMr0ZkvPqVw0x2MvZXnzO XK9nHyoR+cXQ/xPxQwyKV/tP2p7192UX2xiP9XM42w9wPBmKMwEhHVbLPASE6kf1 5yhRNLgMfOjLLrv4BsEQZp2GNZdsVgsYEM2HNlJ9cz27djjXcevA2WCJM3FNPSc1 8bTKP0H3Q8YUZ3Wgk89Ov/6dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU52saykq4 pqrvJFr2Kj5Ek8v8WywwHwYDVR0jBBgwFoAUnGj0A/AkAXvdJtbdDSAnpAK58oEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOTBGL0JGQTk2RkFBN0JF QzExRUY5OTlGQkMxOUM0RjlBRTAyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbkdqMEFfQWtBWHZkSnRiZERTQW5wQUs1OG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx OTBGL0JGQTk2RkFBN0JFQzExRUY5OTlGQkMxOUM0RjlBRTAyL25HajBBX0FrQVh2 ZEp0YmREU0FucEFLNThvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE+cc4H6Cpy2gBVC2hlTw6ohR3CDKGGLg7FLnDRR40nMxM3MXWZONzDV QhQR801m4rm98WeKjR44Q3+mrbs41CuCUwIL3i92yHeSBxiRwqPg+lOxyafvsZPX H/U5/jFqi2b1OfW9hZkNqOS9HMG3sgIZZ/+EFgmQouXvuICLmJBi4e2dZwlFG59l Hfg4KvlHBicKnp+7ptTDRSq1aEqK3Hnx4eqRTYzTBE6minDRkc8no5zpuK9uzi88 Oy43ObtSXbC8Ryr6LFqkZ5wh97xeit5z9sS4+1vMiASpnh74bc+6eRaFpLjq6Sop AHrHQm4mN7Cyx6ifpaSEPkw57y5HTqw= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org