$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: DRPAaY9irZftHaq6ff+vnVq+uKhtN34Q8kBxpZrPvvk= Subject key identifier: 9A:75:7C:B7:7C:4B:79:50:42:78:73:93:4A:57:B1:D9:00:3C:5F:F3 Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: 36 Signing time: Sun 15 Sep 2024 09:58:18 +0000 Manifest this update: Sun 15 Sep 2024 09:58:18 +0000 Manifest next update: Sun 22 Sep 2024 09:58:18 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: 51I+nKoI6dD3OPH6VMnl59pExkH+MQjcrRFdEvBVL9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: Sep 15 09:58:18 2024 GMT Not After : Sep 22 09:58:18 2024 GMT Subject: CN=66e6afba-1c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:09:3c:61:4d:71:84:38:6d:3b:96:57:43: 3f:4f:ba:05:80:f3:53:2c:98:2a:e5:76:1f:2c:79: 23:00:1a:5d:69:6f:21:cc:75:6c:c6:d8:49:87:e0: 05:c5:2c:81:eb:a2:15:51:eb:07:3a:e1:5e:24:7b: 5d:0a:7a:58:37:84:8f:4a:65:e3:bb:1d:c7:0e:3f: 6d:5e:5a:d9:41:93:53:2a:a8:44:a8:ee:03:34:e9: c9:57:e5:21:5a:ad:45:7d:3b:80:41:c2:ff:16:5b: 1a:41:71:c7:0b:b5:c3:5a:fb:28:7b:b1:ad:17:46: 6f:d7:37:24:7b:69:67:fa:68:eb:d8:96:af:d3:34: 3d:52:53:89:59:ce:63:1f:0a:49:59:81:9d:a2:0f: 82:12:61:e6:2e:53:d6:d5:32:ab:fe:37:66:82:e3: 6c:f4:50:70:5d:2e:05:17:0c:ed:5c:2a:a0:49:f0: c9:27:4c:c5:e6:6a:1b:88:b4:82:67:12:fa:06:43: 1d:b4:87:2f:77:35:be:9b:fb:51:aa:56:1c:af:17: 37:d2:ea:8a:1a:0e:ea:7b:57:f1:70:58:59:93:2f: 5a:12:58:82:7c:65:68:21:76:ec:60:4f:31:94:0e: 96:9c:49:f6:62:78:f6:10:80:a7:48:0c:d5:81:41: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:7C:B7:7C:4B:79:50:42:78:73:93:4A:57:B1:D9:00:3C:5F:F3 X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:6f:4b:43:17:83:01:07:f0:b1:ea:ea:bd:5e:6b:a0:62:0a: 63:4f:8e:31:88:c2:4a:9d:ec:3c:c0:17:d3:14:f9:ca:70:f7: 63:90:df:d2:d7:83:b9:a3:5e:5e:56:54:54:bb:1e:2d:eb:ff: 37:04:85:13:34:d8:f4:17:17:bb:1e:39:88:94:7a:b3:87:6d: ef:6b:f7:6c:1c:f4:ca:0e:75:8d:e3:10:cb:94:1f:cd:ae:f8: 1d:5e:71:89:b1:7b:f7:f4:ec:1f:93:0f:3f:5e:98:35:7d:94: ed:7f:c4:54:86:1a:4c:b5:cf:41:63:97:d2:c7:01:11:10:2a: 11:51:cf:68:2a:8b:30:f1:fd:c3:cb:e0:b5:d4:c8:2e:e0:aa: b7:05:02:49:bb:4b:5c:25:60:62:b3:3d:cc:9f:84:e1:cc:12: f5:9c:be:81:a7:60:fe:6e:a8:e4:90:ed:e2:c1:6d:89:16:ce: 2a:56:12:44:f7:e6:02:5d:ca:5c:e2:9f:1a:20:a0:2c:4a:58: cc:2d:57:9c:01:3d:4c:ad:92:0c:58:f8:e7:78:c1:49:c5:37: d2:a6:f0:98:37:be:88:64:e4:0d:a2:a6:21:7f:2d:e5:40:be: 0d:a9:50:8c:9d:e3:cf:03:ce:e0:3f:86:84:15:ae:12:8d:b1: 7c:d2:89:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEIzMzExMC8GA1UEBRMoQkNFRTEyODA1Mzg5QjU3OEMzNUZEOEI0MjU1QTYwODFE MjY4M0Y3QzAeFw0yNDA5MTUwOTU4MThaFw0yNDA5MjIwOTU4MThaMBgxFjAUBgNV BAMTDTY2ZTZhZmJhLTFjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC+wk8YU1xhDhtO5ZXQz9PugWA81MsmCrldh8seSMAGl1pbyHMdWzG2EmH4AXF LIHrohVR6wc64V4ke10Kelg3hI9KZeO7HccOP21eWtlBk1MqqESo7gM06clX5SFa rUV9O4BBwv8WWxpBcccLtcNa+yh7sa0XRm/XNyR7aWf6aOvYlq/TND1SU4lZzmMf CklZgZ2iD4ISYeYuU9bVMqv+N2aC42z0UHBdLgUXDO1cKqBJ8MknTMXmahuItIJn EvoGQx20hy93Nb6b+1GqVhyvFzfS6ooaDup7V/FwWFmTL1oSWIJ8ZWghduxgTzGU DpacSfZiePYQgKdIDNWBQVBNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmnV8t3xL eVBCeHOTSlex2QA8X/MwHwYDVR0jBBgwFoAUvO4SgFOJtXjDX9i0JVpggdJoP3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0QjMzLzI0NEY4NDlBMjIx RTExRUY5MzQ0QTMwOUM0RjlBRTAyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Az dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk80U2dGT0p0WGpEWDlpMEpWcGdnZEpvUDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 QjMzLzI0NEY4NDlBMjIxRTExRUY5MzQ0QTMwOUM0RjlBRTAyL3ZPNFNnRk9KdFhq RFg5aTBKVnBnZ2RKb1Azdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABZvS0MXgwEH8LHq6r1ea6BiCmNPjjGIwkqd7DzAF9MU+cpw92OQ39LX g7mjXl5WVFS7Hi3r/zcEhRM02PQXF7seOYiUerOHbe9r92wc9MoOdY3jEMuUH82u +B1ecYmxe/f07B+TDz9emDV9lO1/xFSGGky1z0Fjl9LHAREQKhFRz2gqizDx/cPL 4LXUyC7gqrcFAkm7S1wlYGKzPcyfhOHMEvWcvoGnYP5uqOSQ7eLBbYkWzipWEkT3 5gJdylzinxogoCxKWMwtV5wBPUytkgxY+Od4wUnFN9Km8Jg3vohk5A2ipiF/LeVA vg2pUIyd488DzuA/hoQVrhKNsXzSidY= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:12 2024 by rpki-client on console-fra.rpki-client.org