$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: 70Yy7ubGaX1a/n20YmqHd7b8P9iSR1ztOa2Mf4rAU1M= Subject key identifier: 97:4A:1D:18:49:46:EF:64:77:5B:F5:04:29:45:F5:28:EA:2E:B0:CD Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 18 Signing time: Wed 23 Oct 2024 06:37:31 +0000 Manifest this update: Wed 23 Oct 2024 06:37:31 +0000 Manifest next update: Wed 30 Oct 2024 06:37:31 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: 5upPga9OOsjoK6nQIn0i77jfB/p9JwdvWeNsfpJmDZI=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Oct 23 06:37:31 2024 GMT Not After : Oct 30 06:37:31 2024 GMT Subject: CN=671899ab-50ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:56:fa:91:45:6a:35:01:3b:44:50:21:8a:77: 0a:ce:81:1c:eb:9c:0c:ba:ac:32:55:7d:6a:a5:a1: aa:3d:5c:26:b4:59:67:d4:89:80:e3:7f:95:a0:73: dc:5c:5b:47:80:48:72:f9:82:8e:5c:50:15:8b:0d: 45:b2:ff:03:34:35:f9:52:5c:d7:f5:73:30:7a:21: a4:ce:f9:21:81:48:91:40:e1:03:3e:d7:e2:4e:69: 1b:0c:86:bf:bf:40:c7:4d:1f:27:e9:e1:4d:ba:8e: 80:04:81:c4:60:64:74:d4:39:63:2b:41:d2:c2:51: a5:fe:6b:ed:cb:45:e9:1f:32:bd:ad:c0:44:10:4d: c0:bb:09:94:4c:00:90:c8:33:05:ba:2b:bd:e5:b5: 36:6d:ac:54:30:07:8a:a5:b3:3e:96:f1:07:6a:71: c4:e6:5f:db:c1:a6:63:63:e2:53:06:d6:3d:f7:05: 11:0a:49:1f:01:39:1d:5f:95:23:43:e8:0e:bc:2e: 90:e4:8c:bd:08:6c:75:cc:2f:e7:08:0c:d4:44:27: 3c:f1:db:4b:9c:ef:9a:76:23:e2:df:aa:86:a5:b8: 11:ea:55:b1:7f:b7:ad:15:71:67:84:89:e2:1c:b8: d7:03:d1:88:c5:0c:fd:fb:8d:b1:9e:17:9d:3e:3c: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4A:1D:18:49:46:EF:64:77:5B:F5:04:29:45:F5:28:EA:2E:B0:CD X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d3:19:af:4d:f0:1d:f8:ac:eb:fd:41:ef:78:82:24:5a:4b: eb:46:d6:89:eb:cc:64:aa:07:94:25:27:0e:e8:94:ba:63:be: 5b:58:af:86:e4:b2:74:85:94:25:77:ac:66:b5:ba:41:bb:0c: 2c:3c:05:70:72:32:db:18:bd:9a:22:f5:35:7c:64:e5:2c:a9: 20:00:dd:31:f0:55:bb:77:7f:14:01:5c:07:b2:f0:33:21:34: be:d0:c7:cf:51:46:65:8f:39:cb:48:b6:9c:21:c2:62:1e:78: f3:ab:b3:b5:ce:9e:71:21:bd:78:4f:68:e7:7b:00:ea:4c:6b: be:42:13:a7:40:35:49:49:ed:83:a2:ea:e3:88:30:99:2e:bf: 81:1f:74:64:e2:2e:fa:d0:b6:ec:d2:4d:60:cd:20:37:ac:97: bd:1c:d9:03:45:c3:d4:67:f5:7d:83:54:aa:3a:4d:8b:b3:7f: 8f:2e:67:35:2d:0b:06:79:6d:21:45:89:c7:39:69:75:63:45: 34:f4:09:12:e2:65:b9:c7:af:e6:de:31:15:a8:ee:4e:62:70: c9:3f:59:b7:47:9e:35:8b:aa:32:2d:c2:5c:82:22:19:4d:40: 1e:00:e0:89:3c:50:84:c8:f4:a3:f8:6a:ee:5c:c0:60:37:b9: 24:d5:8f:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUFCOTExMC8GA1UEBRMoRjlDRDcwRTc2MkJFNjk1RjRCQTQ5MDJBQTIwQjk0MEY3 NzBBMDYzODAeFw0yNDEwMjMwNjM3MzFaFw0yNDEwMzAwNjM3MzFaMBgxFjAUBgNV BAMTDTY3MTg5OWFiLTUwZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmVvqRRWo1ATtEUCGKdwrOgRzrnAy6rDJVfWqloao9XCa0WWfUiYDjf5Wgc9xc W0eASHL5go5cUBWLDUWy/wM0NflSXNf1czB6IaTO+SGBSJFA4QM+1+JOaRsMhr+/ QMdNHyfp4U26joAEgcRgZHTUOWMrQdLCUaX+a+3LRekfMr2twEQQTcC7CZRMAJDI MwW6K73ltTZtrFQwB4qlsz6W8QdqccTmX9vBpmNj4lMG1j33BREKSR8BOR1flSND 6A68LpDkjL0IbHXML+cIDNREJzzx20uc75p2I+LfqoaluBHqVbF/t60VcWeEieIc uNcD0YjFDP37jbGeF50+PLO7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl0odGElG 72R3W/UEKUX1KOousM0wHwYDVR0jBBgwFoAU+c1w52K+aV9LpJAqoguUD3cKBjgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5QUI5L0M3NkY5MkMwNkU4 NDExRUZBM0NEOTgzRkM0RjlBRTAyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0Jq Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWMxdzUySy1hVjlMcEpBcW9ndVVEM2NLQmpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 QUI5L0M3NkY5MkMwNkU4NDExRUZBM0NEOTgzRkM0RjlBRTAyLy1jMXc1MkstYVY5 THBKQXFvZ3VVRDNjS0JqZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHzTGa9N8B34rOv9Qe94giRaS+tG1onrzGSqB5QlJw7olLpjvltYr4bk snSFlCV3rGa1ukG7DCw8BXByMtsYvZoi9TV8ZOUsqSAA3THwVbt3fxQBXAey8DMh NL7Qx89RRmWPOctItpwhwmIeePOrs7XOnnEhvXhPaOd7AOpMa75CE6dANUlJ7YOi 6uOIMJkuv4EfdGTiLvrQtuzSTWDNIDesl70c2QNFw9Rn9X2DVKo6TYuzf48uZzUt CwZ5bSFFicc5aXVjRTT0CRLiZbnHr+beMRWo7k5icMk/WbdHnjWLqjItwlyCIhlN QB4A4Ik8UITI9KP4au5cwGA3uSTVj9s= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org