$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: JKYkrRM/yZlQ0OgStEGRrd+u9wg4zm/YFExGkbMgcaY= Subject key identifier: 74:4E:F2:DB:09:C4:3F:32:5C:40:87:99:DD:F1:05:F9:94:CB:D2:37 Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1AFC Signing time: Fri 20 Sep 2024 16:26:58 +0000 Manifest this update: Fri 20 Sep 2024 16:26:58 +0000 Manifest next update: Fri 27 Sep 2024 16:26:58 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: LdqZSE/1/jh//dpl9yfHUEYxNpMka/48BDGr4aj2IzA=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: Bhz7N8pZoKpTA86d7VHsfPqDjwr9atp9lYNrAhBYh2s=) 3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: c59MSrVHqgcEbaHqGs+kUo5YIngAyWH9D88+iqkZAwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 16:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6929 (0x1b11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Sep 20 16:26:58 2024 GMT Not After : Sep 27 16:26:58 2024 GMT Subject: CN=66eda252-7de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:1d:05:18:95:38:86:19:03:4b:d3:1c:f5: d0:f3:52:47:1e:d5:bb:76:31:3c:62:39:9e:ec:c1: c4:2a:1c:a1:d9:02:d6:3d:74:92:05:f6:5b:db:79: a2:41:02:3e:0f:b1:45:4e:36:5a:44:0d:ef:f7:81: 57:a3:e0:95:bb:8e:c7:aa:56:a4:2d:96:4d:66:b5: 69:25:8e:74:cc:d8:fc:98:c9:92:23:0c:cb:35:ea: b3:d4:60:1c:4b:21:b1:4c:69:58:4b:04:24:58:3c: 3d:79:74:53:44:fb:02:8a:8e:b8:41:f2:94:fe:5b: 0b:82:0e:2d:b6:54:6c:ad:71:cf:33:84:2a:b2:3b: 23:a4:9e:ea:9c:cf:75:82:d3:3e:72:a0:66:33:d3: 84:3e:65:9d:7f:9b:86:ab:99:17:fc:97:6f:7b:19: 54:86:e7:a6:43:8a:57:c3:2b:24:37:ad:a1:02:a1: 5f:27:cb:66:aa:fc:e6:bd:cc:15:fb:cd:da:94:b0: 69:c0:ba:d7:e3:37:2c:27:e0:19:24:ac:f5:19:2c: b1:7f:5f:9a:fa:cc:fb:2e:9a:08:13:f9:b6:04:cc: 03:f2:0e:7e:a7:26:63:07:c7:83:b3:84:a9:ba:80: f2:b4:94:37:35:73:f5:72:09:e1:84:4a:e3:06:ee: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:F2:DB:09:C4:3F:32:5C:40:87:99:DD:F1:05:F9:94:CB:D2:37 X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:35:8f:71:e4:18:e7:a7:ce:e5:72:d6:f7:3d:35:99:22:3b: 70:5e:06:aa:53:1a:ad:38:ee:b8:fe:93:9f:07:bf:d3:05:78: 70:cf:69:7d:91:b4:3c:f8:2c:bd:d4:43:a6:38:1b:2d:0a:29: b0:08:9e:bd:63:6f:e8:16:7e:32:6a:5a:4c:e1:82:cd:5d:6b: a2:bd:00:5a:f0:f9:95:99:27:61:f3:79:f3:22:3d:76:b1:cf: c6:86:4a:a5:35:31:3f:51:fd:ed:88:75:c2:78:a0:b3:e8:5b: b1:b5:ef:39:4b:99:97:3f:ee:b4:af:10:df:a2:46:40:89:0d: 33:2e:ea:63:a9:a0:10:fa:e6:ef:69:64:3a:30:60:0d:0e:36: 7c:e4:7f:42:00:dd:4f:8a:9e:f3:69:19:6c:1d:eb:af:99:a6: 1d:f8:55:73:2d:b7:ff:f2:cd:c1:a2:ee:31:92:25:2d:7b:45: 97:5c:7a:3a:00:3b:12:3f:b9:f3:37:e2:62:05:2e:3e:ec:63: cb:df:c4:3b:0d:c0:c4:13:41:f1:89:55:fe:3e:41:58:ee:f9: 99:ad:9b:79:8c:7d:84:de:e3:f1:5b:19:7e:07:71:7b:26:74: 78:81:ac:68:cd:ed:73:72:ee:7b:3e:1c:95:d2:86:a0:94:a7: 2f:94:af:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjQwOTIwMTYyNjU4WhcNMjQwOTI3MTYyNjU4WjAYMRYwFAYD VQQDEw02NmVkYTI1Mi03ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunodBRiVOIYZA0vTHPXQ81JHHtW7djE8Yjme7MHEKhyh2QLWPXSSBfZb23mi QQI+D7FFTjZaRA3v94FXo+CVu47HqlakLZZNZrVpJY50zNj8mMmSIwzLNeqz1GAc SyGxTGlYSwQkWDw9eXRTRPsCio64QfKU/lsLgg4ttlRsrXHPM4QqsjsjpJ7qnM91 gtM+cqBmM9OEPmWdf5uGq5kX/JdvexlUhuemQ4pXwyskN62hAqFfJ8tmqvzmvcwV +83alLBpwLrX4zcsJ+AZJKz1GSyxf1+a+sz7LpoIE/m2BMwD8g5+pyZjB8eDs4Sp uoDytJQ3NXP1cgnhhErjBu6t1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRO8tsJ xD8yXECHmd3xBfmUy9I3MB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyNY9x5Bjnp87lctb3PTWZIjtwXgaqUxqtOO64/pOfB7/TBXhwz2l9 kbQ8+Cy91EOmOBstCimwCJ69Y2/oFn4yalpM4YLNXWuivQBa8PmVmSdh83nzIj12 sc/GhkqlNTE/Uf3tiHXCeKCz6Fuxte85S5mXP+60rxDfokZAiQ0zLupjqaAQ+ubv aWQ6MGANDjZ85H9CAN1Pip7zaRlsHeuvmaYd+FVzLbf/8s3Bou4xkiUte0WXXHo6 ADsSP7nzN+JiBS4+7GPL38Q7DcDEE0HxiVX+PkFY7vmZrZt5jH2E3uPxWxl+B3F7 JnR4gaxoze1zcu57PhyV0oaglKcvlK/Q -----END CERTIFICATE-----Generated at Fri Sep 20 18:53:49 2024 by rpki-client on console-fra.rpki-client.org