$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: mpoHNo9zqp4t4niI5Qs6N6W7fKxT8gXoy9nbjWAw/og= Subject key identifier: BA:DE:CC:BE:9C:3F:3E:CB:A9:BE:FD:49:81:2E:A8:C1:A0:62:FD:64 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 09 Signing time: Wed 23 Oct 2024 06:49:31 +0000 Manifest this update: Wed 23 Oct 2024 06:49:30 +0000 Manifest next update: Wed 30 Oct 2024 06:49:30 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: XGIyCmyhQm4SrvqWgNW4wI8b3KckFaERrlBDHpOPMWo=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Oct 23 06:49:30 2024 GMT Not After : Oct 30 06:49:30 2024 GMT Subject: CN=67189c7b-313f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:01:5a:c1:f9:f2:34:12:c9:02:d2:4c:48:1d: 2c:45:85:45:91:b4:4e:68:72:5a:61:26:74:73:84: 33:7e:0f:c3:7d:f4:42:ab:70:15:99:cc:f0:f2:e6: 6c:2f:c1:56:a3:ce:e6:bb:33:c8:6f:5d:a8:77:90: 63:ca:f0:bb:0d:c1:74:28:4b:af:a9:3f:ba:f1:fe: 9f:27:57:c9:23:03:4d:46:ef:9f:d5:50:fc:46:85: cf:c2:88:40:aa:55:e7:80:4f:9c:b3:3f:ef:d0:13: 4b:df:1c:5e:b9:eb:a1:08:90:2d:4d:86:be:d3:fb: b1:1f:18:00:4f:8e:cd:96:b8:f0:1e:65:9a:24:15: 83:33:80:3b:98:a3:be:1b:ab:cb:3d:68:d7:10:d5: 85:2f:ac:ce:4c:1d:b8:fc:5d:ec:7f:6d:c1:b0:2b: 29:ad:82:51:d5:7c:b4:24:bd:28:60:a0:ef:3e:30: c6:e8:b4:63:40:09:f9:c4:76:3e:71:9d:50:dc:9e: 10:00:48:f6:96:2d:33:cc:74:b9:1f:4b:48:9a:1c: 1e:58:79:20:9a:35:50:d9:fe:a6:91:5e:e1:38:43: fe:80:c5:d5:58:67:8a:69:cf:02:dd:9e:80:c9:59: d0:6c:69:5b:21:ca:46:15:9d:4b:38:d9:44:9f:53: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DE:CC:BE:9C:3F:3E:CB:A9:BE:FD:49:81:2E:A8:C1:A0:62:FD:64 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:43:34:72:f0:b2:82:23:9f:8a:e6:f0:89:23:07:ac:47:8e: 96:98:39:25:f4:57:08:a1:c6:a8:60:98:3a:1b:b3:d9:67:3c: 7d:3a:25:5c:d1:ac:c0:3b:a1:b3:5f:6a:1e:28:ba:3b:74:0a: 83:25:b0:f3:c5:db:d9:3e:2f:f1:91:1f:5f:65:ae:80:a6:6a: 41:30:53:fd:e8:77:0e:dd:ba:98:14:86:75:fc:86:1e:62:7a: 87:4a:ca:83:e0:3e:d6:03:7f:96:b1:94:be:48:b6:ff:3e:3f: b3:72:b1:bf:99:e6:7f:cc:f5:ed:fc:af:3a:23:65:c8:56:41: 6d:83:78:52:05:2c:42:17:b0:c8:04:3e:00:b0:7d:d9:26:62: a5:97:78:e6:b2:c8:0d:91:c1:cb:fa:ce:dd:0c:b7:12:1d:6a: de:71:f2:9f:3d:ec:82:47:70:9c:ad:68:8d:e0:b4:f3:f0:6c: b1:13:fd:4a:fe:7c:3b:0c:82:6e:6a:67:40:95:c3:64:dd:c7: 23:3c:cc:dc:41:be:a2:8a:54:23:04:ae:64:95:a4:a5:4d:9e: e6:4f:6b:2f:16:da:16:f8:75:b6:00:9c:1c:61:60:38:47:58: f2:c2:af:f6:18:6a:0a:87:be:b8:88:2c:0c:f1:c7:5e:77:5e: 4f:a9:70:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkY4QzExMC8GA1UEBRMoMDE3RDhEQjhBNzg4NzRBQjJGOUFEOTdERTU3QUZERTFC RTE2N0Q0NDAeFw0yNDEwMjMwNjQ5MzBaFw0yNDEwMzAwNjQ5MzBaMBgxFjAUBgNV BAMTDTY3MTg5YzdiLTMxM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtAVrB+fI0EskC0kxIHSxFhUWRtE5oclphJnRzhDN+D8N99EKrcBWZzPDy5mwv wVajzua7M8hvXah3kGPK8LsNwXQoS6+pP7rx/p8nV8kjA01G75/VUPxGhc/CiECq VeeAT5yzP+/QE0vfHF6566EIkC1Nhr7T+7EfGABPjs2WuPAeZZokFYMzgDuYo74b q8s9aNcQ1YUvrM5MHbj8Xex/bcGwKymtglHVfLQkvShgoO8+MMbotGNACfnEdj5x nVDcnhAASPaWLTPMdLkfS0iaHB5YeSCaNVDZ/qaRXuE4Q/6AxdVYZ4ppzwLdnoDJ WdBsaVshykYVnUs42USfU+bRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUut7Mvpw/ Psupvv1JgS6owaBi/WQwHwYDVR0jBBgwFoAUAX2NuKeIdKsvmtl95Xr94b4WfUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyRjhDLzU1NzlCOUIwODZF MDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVgyTnVLZUlkS3N2bXRsOTVYcjk0YjRXZlVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy RjhDLzU1NzlCOUIwODZFMDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtz dm10bDk1WHI5NGI0V2ZVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdDNHLwsoIjn4rm8IkjB6xHjpaYOSX0VwihxqhgmDobs9lnPH06JVzR rMA7obNfah4oujt0CoMlsPPF29k+L/GRH19lroCmakEwU/3odw7dupgUhnX8hh5i eodKyoPgPtYDf5axlL5Itv8+P7Nysb+Z5n/M9e38rzojZchWQW2DeFIFLEIXsMgE PgCwfdkmYqWXeOayyA2Rwcv6zt0MtxIdat5x8p897IJHcJytaI3gtPPwbLET/Ur+ fDsMgm5qZ0CVw2TdxyM8zNxBvqKKVCMErmSVpKVNnuZPay8W2hb4dbYAnBxhYDhH WPLCr/YYagqHvriILAzxx153Xk+pcPA= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:25 2024 by rpki-client on console-fra.rpki-client.org