$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json) Hash identifier: IsjMyDOe5DzhA7Buw3I1uI7kdLAlN0YnoAblZSNYLTk= Subject key identifier: CA:B2:4C:FF:24:F4:81:18:9E:D5:3D:E5:92:1B:1D:B9:0B:33:E4:9B Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft Manifest number: 2A Signing time: Sun 15 Sep 2024 10:09:31 +0000 Manifest this update: Sun 15 Sep 2024 10:09:30 +0000 Manifest next update: Sun 22 Sep 2024 10:09:30 +0000 Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: qSYp/m7dZgIzfaFCCHuPhVpRe6sbCjItQWxOxkNsqOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Sep 15 10:09:30 2024 GMT Not After : Sep 22 10:09:30 2024 GMT Subject: CN=66e6b25a-da0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:4a:b8:b1:7a:8a:0b:51:f5:8f:df:15:be: 2b:22:f4:cb:b3:0b:50:d8:55:f7:22:2e:e8:d7:5e: 9f:a2:2e:f2:76:61:58:10:fa:8b:92:1a:f7:f8:44: 3b:41:2a:3c:dc:03:95:30:35:02:81:aa:75:ad:9f: c8:20:0e:b0:7d:b2:bb:70:7f:bc:38:08:4f:12:9e: 0f:8b:72:40:fa:04:97:2c:09:a9:5c:79:75:c1:9b: 1e:41:69:81:b4:26:6a:98:9b:4d:b6:89:96:44:d8: f3:2e:80:da:d3:4d:6a:d2:1e:e0:62:e6:ec:b9:2b: bf:db:37:65:0c:31:95:15:c2:46:b9:52:e8:27:e5: 8c:05:f7:e0:32:a1:9f:6c:5e:1b:bc:1f:2d:a9:df: 46:82:e9:23:a9:26:94:c1:50:7d:87:89:4c:cb:b5: ca:e0:28:54:3c:8b:fc:54:13:0b:bb:8e:39:e1:0c: 60:67:10:91:c6:bb:c0:85:f5:33:b8:10:b8:f7:5d: 4e:ab:df:3f:c6:2d:2e:32:7a:64:33:d8:99:06:72: 73:e1:5a:26:9b:a7:68:4a:1b:be:ce:5d:f0:1c:c4: 02:43:b0:1e:63:62:02:67:36:5e:82:45:74:45:f5: 3b:75:2a:c2:96:9a:d4:02:49:9c:9e:32:3a:a8:8a: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:4C:FF:24:F4:81:18:9E:D5:3D:E5:92:1B:1D:B9:0B:33:E4:9B X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:4a:07:90:ab:4e:1d:d0:15:03:12:e6:52:81:65:77:3b:84: 5a:7e:2f:12:7d:6a:d6:c5:43:e5:9b:32:10:45:9e:93:3e:a5: 3c:2d:a5:bf:1b:00:d8:34:9b:52:26:b9:ee:fa:ee:f9:54:a4: b6:07:f8:3e:21:d7:ae:9a:11:00:76:72:d3:50:c8:71:04:2e: d2:58:9d:3c:90:b6:c2:b4:77:46:c2:09:7f:36:9d:36:15:79: 24:4a:40:ed:24:7e:77:74:e5:49:fe:5b:67:51:52:f9:02:b1: f5:ae:f4:70:62:b4:32:9c:a0:60:63:1b:03:dd:9a:57:33:55: c8:ab:cf:ef:94:b3:66:98:43:f9:c8:1d:a8:3b:e3:fc:64:b5: 75:55:a0:a5:7a:53:38:62:4e:17:aa:6c:47:16:f1:16:28:00: 28:cf:38:b3:2a:18:b7:7c:75:d3:d2:5a:47:c1:a5:62:35:09: 92:51:78:fa:00:2e:63:fb:04:f5:10:05:02:b8:63:80:a6:16: 59:0a:af:6f:19:99:03:51:9f:24:6a:c6:65:89:05:0c:d5:1b: 6c:ea:32:ca:e5:2d:95:97:11:71:4b:1e:f0:92:9c:05:ea:29: dc:26:cf:77:cd:9e:2e:d5:f4:d2:27:7a:33:35:bc:7d:fe:ea: ad:37:6c:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODhDQTExMC8GA1UEBRMoRjYyNUU2Q0MwMzkwMjZGRjVCQzlENkJEQzQyRDhEMUMx OEFCRjMzQjAeFw0yNDA5MTUxMDA5MzBaFw0yNDA5MjIxMDA5MzBaMBgxFjAUBgNV BAMTDTY2ZTZiMjVhLWRhMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz3Uq4sXqKC1H1j98Vvisi9MuzC1DYVfciLujXXp+iLvJ2YVgQ+ouSGvf4RDtB KjzcA5UwNQKBqnWtn8ggDrB9srtwf7w4CE8Sng+LckD6BJcsCalceXXBmx5BaYG0 JmqYm022iZZE2PMugNrTTWrSHuBi5uy5K7/bN2UMMZUVwka5Uugn5YwF9+AyoZ9s Xhu8Hy2p30aC6SOpJpTBUH2HiUzLtcrgKFQ8i/xUEwu7jjnhDGBnEJHGu8CF9TO4 ELj3XU6r3z/GLS4yemQz2JkGcnPhWiabp2hKG77OXfAcxAJDsB5jYgJnNl6CRXRF 9Tt1KsKWmtQCSZyeMjqoispDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyrJM/yT0 gRie1T3lkhsduQsz5JswHwYDVR0jBBgwFoAU9iXmzAOQJv9byda9xC2NHBir8zsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4OENBLzU2OTZFNzQ2MzQ2 NTExRUZBRjZERUI0RUM0RjlBRTAyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWlYbXpBT1FKdjlieWRhOXhDMk5IQmlyOHpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 OENBLzU2OTZFNzQ2MzQ2NTExRUZBRjZERUI0RUM0RjlBRTAyLzlpWG16QU9RSnY5 YnlkYTl4QzJOSEJpcjh6cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACRKB5CrTh3QFQMS5lKBZXc7hFp+LxJ9atbFQ+WbMhBFnpM+pTwtpb8b ANg0m1Imue767vlUpLYH+D4h166aEQB2ctNQyHEELtJYnTyQtsK0d0bCCX82nTYV eSRKQO0kfnd05Un+W2dRUvkCsfWu9HBitDKcoGBjGwPdmlczVcirz++Us2aYQ/nI Hag74/xktXVVoKV6UzhiTheqbEcW8RYoACjPOLMqGLd8ddPSWkfBpWI1CZJRePoA LmP7BPUQBQK4Y4CmFlkKr28ZmQNRnyRqxmWJBQzVG2zqMsrlLZWXEXFLHvCSnAXq Kdwmz3fNni7V9NInejM1vH3+6q03bLI= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:36 2024 by rpki-client on console-ams.rpki-client.org