$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json) Hash identifier: 37hxpPoTJGZTUuwV4lCSOrBWiOoI+/rMGOOYYDY0rps= Subject key identifier: 1A:A8:82:AD:56:6A:11:09:8B:EA:6A:C6:65:25:74:E0:22:D1:78:A7 Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft Manifest number: 42 Signing time: Sun 15 Sep 2024 09:48:20 +0000 Manifest this update: Sun 15 Sep 2024 09:48:19 +0000 Manifest next update: Sun 22 Sep 2024 09:48:19 +0000 Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: vt6dSRQSRGzomEW8zD50UunXTbVyqspZDAH/yXrvzas=) 2: A697738410FA11EF9A068536C4F9AE02.roa (hash: Zv0ZFs3ilUsRHmjHi746Q/P+ClsZujQ8kkuNmYui824=) 3: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: oCCDEtGddaMKQfOelMIcnjIu17ZvyL6EU64SchGV+9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Validity Not Before: Sep 15 09:48:19 2024 GMT Not After : Sep 22 09:48:19 2024 GMT Subject: CN=66e6ad64-e7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:6f:9b:88:3d:5c:09:fc:d3:48:a1:7b:a4: db:0a:07:e6:af:62:b0:b1:b9:22:1f:79:35:52:9f: 83:35:a1:95:c2:44:c0:60:b7:32:99:f9:9d:25:02: 19:67:35:36:b4:5e:91:ff:3a:be:4a:82:d5:f4:00: b7:9c:7e:e3:21:7c:3e:d7:ce:62:ec:61:61:3c:67: 5f:a9:07:59:1b:d0:b4:71:ca:f6:15:96:9d:90:8f: f8:e0:00:83:db:2d:13:1a:d2:fa:46:d0:a7:44:1b: d3:0e:fe:96:89:d8:ff:98:81:5a:86:c2:12:48:f8: 89:ba:eb:2c:8b:25:35:a6:b3:ca:df:72:b3:0f:61: 59:3e:2a:1b:cb:af:5e:8b:0a:86:7f:31:0b:df:23: 8b:f5:b0:35:d7:b7:ef:dd:39:0b:be:88:85:02:5b: f2:47:9e:60:b6:a4:f3:4c:03:64:a6:b0:62:21:09: 8d:da:bc:ea:78:cf:98:75:67:11:d0:76:35:65:86: 94:92:90:98:d6:be:a0:1c:3a:a2:7e:ab:3a:e9:89: 21:d8:05:4b:2d:25:1d:f3:bf:51:14:13:c5:eb:68: fa:93:fb:7d:af:6e:f7:92:1a:f5:d0:9f:61:8f:7d: 7d:fa:b5:41:32:b1:03:23:d1:3f:0f:79:c3:4d:8e: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:82:AD:56:6A:11:09:8B:EA:6A:C6:65:25:74:E0:22:D1:78:A7 X509v3 Authority Key Identifier: keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:37:74:e3:02:11:4b:28:e2:9d:f1:a8:c1:de:0c:d4:21:21: c2:fe:12:88:e2:bd:61:a7:68:96:ee:8d:ad:86:77:a3:56:aa: 0d:94:71:74:47:d3:56:aa:55:61:0f:ec:06:50:94:c9:40:d1: 4c:bb:1c:93:76:98:2c:3d:c9:52:0e:2d:34:4d:db:3a:f4:df: b2:5a:c4:03:d4:5d:d3:fd:95:c5:45:c7:4b:8f:02:41:bd:bf: 89:b7:1b:17:7d:1e:a6:97:f2:40:66:46:90:2b:a4:f8:4c:fa: 78:a2:cb:ea:b6:4a:5a:a2:32:24:7d:d6:9c:43:00:0e:f8:ce: ba:65:be:fb:0c:67:6e:27:12:bf:38:f9:a4:ac:fa:3d:5f:a4: 31:71:9b:e5:2d:77:d4:eb:b6:8b:63:e2:05:ec:75:a1:1d:99: d3:8a:68:d3:13:d2:fd:a7:2e:0d:62:a4:4e:52:37:0d:a6:8b: 77:f1:f1:c6:3e:63:92:26:f0:bc:16:9b:3c:d2:ae:b0:c6:ea: 21:b0:f6:bf:33:08:6f:85:49:1a:26:a0:d2:21:60:d8:b8:2c: 41:5f:39:33:83:c2:89:86:ac:c4:58:e3:6f:73:6d:ab:e4:d3: bb:7d:91:7d:7c:3a:97:eb:47:28:1c:08:f8:59:30:86:17:76: f4:0f:63:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzNGMTExMC8GA1UEBRMoODA3QzA0MEZBOTAxRTVEODY5NUE2NTM0REU2NkMzRDZB MEJGQkNDNTAeFw0yNDA5MTUwOTQ4MTlaFw0yNDA5MjIwOTQ4MTlaMBgxFjAUBgNV BAMTDTY2ZTZhZDY0LWU3ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC59m+biD1cCfzTSKF7pNsKB+avYrCxuSIfeTVSn4M1oZXCRMBgtzKZ+Z0lAhln NTa0XpH/Or5KgtX0ALecfuMhfD7XzmLsYWE8Z1+pB1kb0LRxyvYVlp2Qj/jgAIPb LRMa0vpG0KdEG9MO/paJ2P+YgVqGwhJI+Im66yyLJTWms8rfcrMPYVk+KhvLr16L CoZ/MQvfI4v1sDXXt+/dOQu+iIUCW/JHnmC2pPNMA2SmsGIhCY3avOp4z5h1ZxHQ djVlhpSSkJjWvqAcOqJ+qzrpiSHYBUstJR3zv1EUE8XraPqT+32vbveSGvXQn2GP fX36tUEysQMj0T8PecNNjkuzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGqiCrVZq EQmL6mrGZSV04CLReKcwHwYDVR0jBBgwFoAUgHwED6kB5dhpWmU03mbD1qC/vMUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDM0YxLzk1QjcxMUM0MTBG OTExRUY4ODhDNTIyRkM0RjlBRTAyL2dId0VENmtCNWRocFdtVTAzbWJEMXFDX3ZN VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0h3RUQ2a0I1ZGhwV21VMDNtYkQxcUNfdk1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD M0YxLzk1QjcxMUM0MTBGOTExRUY4ODhDNTIyRkM0RjlBRTAyL2dId0VENmtCNWRo cFdtVTAzbWJEMXFDX3ZNVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJI3dOMCEUso4p3xqMHeDNQhIcL+EojivWGnaJbuja2Gd6NWqg2UcXRH 01aqVWEP7AZQlMlA0Uy7HJN2mCw9yVIOLTRN2zr037JaxAPUXdP9lcVFx0uPAkG9 v4m3Gxd9HqaX8kBmRpArpPhM+niiy+q2SlqiMiR91pxDAA74zrplvvsMZ24nEr84 +aSs+j1fpDFxm+Utd9Trtotj4gXsdaEdmdOKaNMT0v2nLg1ipE5SNw2mi3fx8cY+ Y5Im8LwWmzzSrrDG6iGw9r8zCG+FSRomoNIhYNi4LEFfOTODwomGrMRY429zbavk 07t9kX18OpfrRygcCPhZMIYXdvQPYyY= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:12 2024 by rpki-client on console-fra.rpki-client.org