$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: dh2i0jFhtor1tyM/lOH5VDHC2ZVDn403zrfa4lgu8Bo= Subject key identifier: C1:67:8C:16:61:E9:EA:E5:1B:1D:5E:4A:DD:3D:37:F2:B2:48:C5:48 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 4C Signing time: Sun 15 Sep 2024 09:43:51 +0000 Manifest this update: Sun 15 Sep 2024 09:43:50 +0000 Manifest next update: Sun 22 Sep 2024 09:43:50 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: w1hlIiTyUJr9HNtDxxv/n2l11VuNguLecEo3tLZNvqw=) 2: 334BC5E237B511EF81204F0BC4F9AE02.roa (hash: kJhE61v4vcRsPc/qy2/NN3jtHfg6YpOIubVaYhvgJk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Sep 15 09:43:50 2024 GMT Not After : Sep 22 09:43:50 2024 GMT Subject: CN=66e6ac57-a2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:58:2d:8d:30:37:27:96:5e:48:da:a9:2d: a9:e1:28:fd:fe:6c:64:ec:c1:ba:d6:29:9e:ca:fe: ff:eb:78:68:9f:13:c8:0c:0a:de:83:65:d7:65:b9: 3e:f6:35:f6:4f:20:b9:cc:1d:c1:d6:1e:c5:49:40: ec:5f:9e:44:70:72:fd:de:6e:2f:74:84:57:99:bf: c2:88:75:8c:df:0c:28:cd:51:92:1a:ca:01:d0:56: 13:46:92:fd:eb:14:b7:3c:ff:0a:59:c5:c6:57:94: 34:2d:2b:81:17:0f:a0:55:ec:40:1d:c1:bb:ac:6f: 33:d8:20:b3:6c:9f:c9:c2:3a:bd:38:33:fc:f1:8e: e0:6c:52:21:eb:3e:f2:e6:43:cc:7a:36:fc:e7:32: 31:c0:56:a1:6f:0a:9c:fb:6f:80:81:a3:4e:96:a8: c5:d7:e5:bf:50:b8:49:55:db:49:64:38:e1:bf:6e: 1f:e9:0e:4f:c3:c8:18:ff:a9:e8:4f:d3:4a:99:3a: df:7f:f7:f2:b3:5a:4a:22:9c:2a:13:e0:30:ca:83: 70:3b:d4:56:3a:45:7c:b7:ed:73:79:ae:ea:00:e5: 43:dc:e9:8b:73:b0:13:46:a8:e4:bf:99:0d:e2:6b: be:3f:e1:64:ff:4c:9b:c9:70:e0:d5:10:a2:4b:80: 3f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:67:8C:16:61:E9:EA:E5:1B:1D:5E:4A:DD:3D:37:F2:B2:48:C5:48 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ce:a7:f6:81:22:4d:b5:a9:88:6f:c8:0c:bf:6b:2a:7e:20: 03:2e:fe:4f:96:c8:c8:d0:31:88:5e:0b:f4:03:3e:4e:44:80: 68:a2:f7:b3:15:f7:0e:0d:cf:56:1c:33:93:21:ec:10:1b:22: c4:3a:0d:ca:69:f7:1c:4a:98:2a:3e:61:7d:fa:49:91:1f:2b: b8:71:c4:b3:5c:92:9d:d9:84:6d:27:e7:0a:d3:c5:59:b9:78: a0:6f:38:d1:7d:2f:60:4f:92:c4:82:89:db:8d:9c:50:2f:77: e0:4f:00:71:78:0a:e3:fe:d0:01:eb:b7:7f:e4:63:4c:e9:36: fd:09:79:20:99:03:a7:5d:cc:16:57:40:63:22:51:08:82:58: 72:ed:63:3f:81:73:ad:1d:89:49:f7:a4:7f:a2:13:5f:43:5a: 29:6e:e6:90:85:77:ea:6b:f4:d2:c4:d8:e7:6d:21:43:ab:67: fc:db:58:8c:6d:95:67:68:8b:61:f0:5e:53:04:26:d9:b3:3e: bc:79:e7:be:60:15:17:da:e8:9f:75:af:b7:be:b9:b0:9d:fd: c8:d0:3b:05:7d:00:38:3c:b5:cb:1f:d3:71:2f:d3:c2:c2:a3: a1:da:5d:7a:7e:f6:ae:a2:89:70:3a:5d:62:71:1b:07:a6:9b: 6b:c0:8b:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODBDMjExMC8GA1UEBRMoMkFCQTJBQTNDQjNGOTQ1ODFDNUQzRDkxQkEzNkI4QTlE OEU4REVBRDAeFw0yNDA5MTUwOTQzNTBaFw0yNDA5MjIwOTQzNTBaMBgxFjAUBgNV BAMTDTY2ZTZhYzU3LWEyYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm8FgtjTA3J5ZeSNqpLanhKP3+bGTswbrWKZ7K/v/reGifE8gMCt6DZddluT72 NfZPILnMHcHWHsVJQOxfnkRwcv3ebi90hFeZv8KIdYzfDCjNUZIaygHQVhNGkv3r FLc8/wpZxcZXlDQtK4EXD6BV7EAdwbusbzPYILNsn8nCOr04M/zxjuBsUiHrPvLm Q8x6NvznMjHAVqFvCpz7b4CBo06WqMXX5b9QuElV20lkOOG/bh/pDk/DyBj/qehP 00qZOt9/9/KzWkoinCoT4DDKg3A71FY6RXy37XN5ruoA5UPc6YtzsBNGqOS/mQ3i a74/4WT/TJvJcODVEKJLgD+JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwWeMFmHp 6uUbHV5K3T038rJIxUgwHwYDVR0jBBgwFoAUKroqo8s/lFgcXT2Ruja4qdjo3q0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MEMyLzk4M0U2MTUwMTcx QTExRUY4NjU3NzU0RkM0RjlBRTAyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS3JvcW84c19sRmdjWFQyUnVqYTRxZGpvM3EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MEMyLzk4M0U2MTUwMTcxQTExRUY4NjU3NzU0RkM0RjlBRTAyL0tyb3FvOHNfbEZn Y1hUMlJ1amE0cWRqbzNxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG/Op/aBIk21qYhvyAy/ayp+IAMu/k+WyMjQMYheC/QDPk5EgGii97MV 9w4Nz1YcM5Mh7BAbIsQ6Dcpp9xxKmCo+YX36SZEfK7hxxLNckp3ZhG0n5wrTxVm5 eKBvONF9L2BPksSCiduNnFAvd+BPAHF4CuP+0AHrt3/kY0zpNv0JeSCZA6ddzBZX QGMiUQiCWHLtYz+Bc60diUn3pH+iE19DWilu5pCFd+pr9NLE2OdtIUOrZ/zbWIxt lWdoi2HwXlMEJtmzPrx5575gFRfa6J91r7e+ubCd/cjQOwV9ADg8tcsf03Ev08LC o6HaXXp+9q6iiXA6XWJxGwemm2vAi44= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:12 2024 by rpki-client on console-fra.rpki-client.org