$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: t6+QMd2DY0k7Cl8VuZAyB+KybKxDuxWklW/xLs1ADqo= Subject key identifier: 2E:33:8D:59:73:C8:33:08:68:79:AB:C7:13:E0:BE:07:0A:03:3D:8B Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: 28 Signing time: Sun 15 Sep 2024 10:10:53 +0000 Manifest this update: Sun 15 Sep 2024 10:10:53 +0000 Manifest next update: Sun 22 Sep 2024 10:10:53 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: GG76aetnVnSzobSJGDlWYQf+9qv4GYIB8aEXHJyA//w=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qyHVBU6r1vopcSbtOHBuL6JaUanY0OBKOoUk8MRDDbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Sep 15 10:10:53 2024 GMT Not After : Sep 22 10:10:53 2024 GMT Subject: CN=66e6b2ad-e5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:07:94:db:7a:66:59:77:a0:77:28:f1:b5: 2d:66:ba:00:b1:dd:e8:2a:e0:95:88:22:a4:69:90: 9a:0e:36:26:ac:bc:5d:6a:2f:cd:0e:be:8c:11:b0: bf:2d:77:17:19:62:b2:a1:5e:a0:01:ea:e9:74:87: c9:1c:8f:79:ea:6f:18:8e:92:c8:86:c4:57:e0:91: 16:2b:e2:4e:dd:88:4a:a7:a9:97:97:22:7b:5e:12: 01:1d:a8:0d:a6:fb:46:8d:23:42:16:71:bb:53:5a: ab:b3:9f:ba:e1:e2:02:a9:bb:d4:93:d5:bb:d1:7a: 01:05:61:c9:5b:a9:23:53:24:96:af:c7:ce:d2:ff: 36:32:44:ab:41:f4:2a:a5:25:20:92:11:c0:5a:6f: 14:f0:47:7d:c8:5b:25:bb:a0:93:d7:be:20:17:b1: 59:6d:8b:d1:66:a7:0c:8d:c9:0f:5d:79:64:73:42: c3:e7:49:74:d3:10:d1:14:7e:62:75:c2:cf:76:e6: c6:f1:70:9f:4f:2a:25:61:18:59:c5:80:c6:f9:92: cb:67:19:41:a3:a9:eb:27:5d:d8:79:55:64:f4:31: 10:20:42:c2:17:f5:0c:de:4b:68:ba:d6:9f:6b:06: 08:ea:48:b1:70:72:4d:ad:dd:d7:09:21:7b:b1:7e: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:33:8D:59:73:C8:33:08:68:79:AB:C7:13:E0:BE:07:0A:03:3D:8B X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:83:9d:75:35:8a:65:12:46:03:50:76:a1:7b:df:be:9e:be: 4f:d3:58:d4:9a:98:33:d3:d0:92:af:56:53:52:1a:d0:f8:87: 29:66:34:a0:e8:65:62:7e:9a:6e:d6:a6:be:b7:7d:f9:b1:38: b3:9e:db:51:77:fb:b2:7f:04:72:da:cd:a8:91:2c:67:a6:ac: 05:7c:d6:8d:6f:ec:6b:9f:06:a0:00:15:48:b1:b6:00:03:53: 39:67:a6:f3:c5:d3:be:56:6a:a2:a3:12:74:b3:0d:cb:76:c0: 8b:b6:84:16:8f:8f:3f:1a:8e:cd:82:47:81:83:9d:c8:90:3a: 1a:df:e1:de:7c:40:bb:ce:c8:71:38:87:54:5e:8b:62:38:99: d6:42:9b:a2:9c:c9:29:7c:1a:23:ca:ff:06:49:20:d3:77:58: fd:1c:d4:14:4c:81:fe:09:1f:96:fa:7f:da:45:f1:f6:22:bf: ef:16:73:5a:8b:72:a6:92:9b:f9:83:52:34:e5:f7:30:03:ac: 33:4e:1c:e0:6c:11:20:ee:50:43:81:19:76:4d:da:b6:92:cf: c5:ce:dc:bb:7c:2d:ec:21:3f:d2:3e:96:4c:c6:81:f3:9f:4c: ce:bf:f7:95:5f:1f:dd:22:1e:6a:04:25:ff:ff:63:34:37:a6: c2:77:b8:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Nzk0ODExMC8GA1UEBRMoQUM5MzBCNjI1RDgzOUM1NjhEQTgxOTlFMzhGRjlEQjdF Mzc4MzNCRDAeFw0yNDA5MTUxMDEwNTNaFw0yNDA5MjIxMDEwNTNaMBgxFjAUBgNV BAMTDTY2ZTZiMmFkLWU1ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC5QeU23pmWXegdyjxtS1mugCx3egq4JWIIqRpkJoONiasvF1qL80OvowRsL8t dxcZYrKhXqAB6ul0h8kcj3nqbxiOksiGxFfgkRYr4k7diEqnqZeXInteEgEdqA2m +0aNI0IWcbtTWquzn7rh4gKpu9ST1bvRegEFYclbqSNTJJavx87S/zYyRKtB9Cql JSCSEcBabxTwR33IWyW7oJPXviAXsVlti9FmpwyNyQ9deWRzQsPnSXTTENEUfmJ1 ws925sbxcJ9PKiVhGFnFgMb5kstnGUGjqesnXdh5VWT0MRAgQsIX9QzeS2i61p9r BgjqSLFwck2t3dcJIXuxfp2dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULjONWXPI MwhoeavHE+C+BwoDPYswHwYDVR0jBBgwFoAUrJMLYl2DnFaNqBmeOP+dt+N4M70w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3OTQ4LzRGOTc2REY4MzdE MDExRUY4OTQ1NDcxQUM0RjlBRTAyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckpNTFlsMkRuRmFOcUJtZU9QLWR0LU40TTcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 OTQ4LzRGOTc2REY4MzdEMDExRUY4OTQ1NDcxQUM0RjlBRTAyL3JKTUxZbDJEbkZh TnFCbWVPUC1kdC1ONE03MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALqDnXU1imUSRgNQdqF7376evk/TWNSamDPT0JKvVlNSGtD4hylmNKDo ZWJ+mm7Wpr63ffmxOLOe21F3+7J/BHLazaiRLGemrAV81o1v7GufBqAAFUixtgAD UzlnpvPF075WaqKjEnSzDct2wIu2hBaPjz8ajs2CR4GDnciQOhrf4d58QLvOyHE4 h1Rei2I4mdZCm6KcySl8GiPK/wZJINN3WP0c1BRMgf4JH5b6f9pF8fYiv+8Wc1qL cqaSm/mDUjTl9zADrDNOHOBsESDuUEOBGXZN2raSz8XO3Lt8LewhP9I+lkzGgfOf TM6/95VfH90iHmoEJf//YzQ3psJ3uJ4= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:44 2024 by rpki-client on console-fra.rpki-client.org