$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft File: b6Yr4K15obTDhpuhmQ8hTfazzic.mft (raw, json) Hash identifier: ByEUDGqHZyc9YIs+Y1pbf+Bm5tuWdoQNBxYNPOR6U4k= Subject key identifier: A2:CA:FC:1B:2C:31:1A:E8:D4:2E:5A:66:E1:C7:72:21:48:C7:F7:A5 Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft Manifest number: 39 Signing time: Sun 15 Sep 2024 09:58:03 +0000 Manifest this update: Sun 15 Sep 2024 09:58:02 +0000 Manifest next update: Sun 22 Sep 2024 09:58:02 +0000 Files and hashes: 1: b6Yr4K15obTDhpuhmQ8hTfazzic.crl (hash: tgxFbvhXNz/nPj8heZnaE/6SITSXtU+SbO1qmPenekQ=) 2: 97C37F28224E11EFA102930CC4F9AE02.roa (hash: XEcOOUEz3Z7BOU8cKRk91rC7DEWF566W1gBPB6naKko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: Sep 15 09:58:02 2024 GMT Not After : Sep 22 09:58:02 2024 GMT Subject: CN=66e6afab-fa64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:12:ca:02:41:b7:be:f1:e9:48:80:a4:ae: 51:86:43:07:cd:b6:d8:42:a2:85:93:e8:05:6f:8b: 9f:c8:5d:ce:eb:db:fe:b5:da:9f:49:7a:52:a4:3e: b7:61:f9:22:e9:0c:f3:06:f8:10:56:54:7e:57:97: f5:a8:8a:f2:91:cb:c3:09:a0:d1:f9:c2:71:a4:73: 69:50:85:0a:a6:3d:01:17:d3:87:9f:7d:53:6a:0d: c4:5b:26:67:d5:24:23:67:64:01:10:d0:76:17:89: a8:08:1a:c0:86:6b:22:34:46:d3:48:83:fc:6f:ad: 8d:ad:1a:6e:cc:60:4c:1c:e7:53:7d:1e:4a:ea:71: 0b:8e:34:62:24:79:3d:a0:58:51:88:f7:0a:61:d9: fd:18:d9:c5:b5:2c:9e:15:55:74:ec:88:50:b5:d8: bf:1b:ee:a9:db:5f:ce:8a:8b:b1:1b:d2:51:a8:fa: 68:e9:bd:71:aa:09:7c:0c:d3:98:3d:0f:e0:54:ae: fd:c1:21:b5:3f:c0:1a:0c:9f:5f:c9:9e:09:8e:c9: 69:1c:1b:ee:e0:84:31:eb:ec:d5:53:1d:f4:97:63: cc:e1:89:6b:ef:e2:07:75:aa:1f:1a:a7:8d:5a:74: 53:73:02:d6:f1:c2:f6:11:e3:59:3f:f5:1d:7d:36: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CA:FC:1B:2C:31:1A:E8:D4:2E:5A:66:E1:C7:72:21:48:C7:F7:A5 X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:54:44:26:ef:9b:c9:b0:90:f4:00:0e:2f:53:ec:65:74:1e: d0:92:de:bd:8c:28:07:fa:f9:17:1c:dc:54:03:77:7a:8b:a9: dc:22:8f:3a:05:86:66:04:c1:49:6a:68:d5:49:7b:3d:e0:33: 0a:83:a7:e1:a4:23:29:35:91:a5:0b:ee:5f:3e:04:31:af:ee: 64:01:98:4e:13:f8:87:b9:e3:d4:ce:06:a5:aa:ba:0f:ce:5a: 8b:85:f7:de:8b:ff:76:ed:ba:0e:fc:ca:c2:7f:5d:c8:4c:77: eb:8b:10:ec:a2:59:a1:57:e4:e1:b1:5f:fa:c6:1b:e7:19:d6: f5:75:a6:3d:8a:5f:44:4d:43:71:62:b6:21:be:43:75:80:7b: e6:52:b1:f9:8f:e7:da:39:18:a3:d9:ea:f9:2f:8c:a1:ef:38: 08:0b:fb:c2:2a:bb:89:90:87:72:11:2c:75:ae:f5:a0:d6:50: 4d:90:f0:e4:7d:72:86:d1:ea:49:da:64:ab:a8:46:4b:78:20: b7:dd:03:1c:34:22:2d:07:cf:85:b4:e0:a5:d7:d7:01:f6:1f: ad:35:0c:00:f7:f3:7a:80:b5:34:fb:8a:fc:34:a5:24:23:58: 0a:b2:5c:3d:0c:7a:a9:62:ec:14:ba:d9:c2:f1:aa:cd:39:aa: b0:15:ae:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODgyQTExMC8GA1UEBRMoNkZBNjJCRTBBRDc5QTFCNEMzODY5QkExOTkwRjIxNERG NkIzQ0UyNzAeFw0yNDA5MTUwOTU4MDJaFw0yNDA5MjIwOTU4MDJaMBgxFjAUBgNV BAMTDTY2ZTZhZmFiLWZhNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnxxLKAkG3vvHpSICkrlGGQwfNtthCooWT6AVvi5/IXc7r2/612p9JelKkPrdh +SLpDPMG+BBWVH5Xl/WoivKRy8MJoNH5wnGkc2lQhQqmPQEX04effVNqDcRbJmfV JCNnZAEQ0HYXiagIGsCGayI0RtNIg/xvrY2tGm7MYEwc51N9HkrqcQuONGIkeT2g WFGI9wph2f0Y2cW1LJ4VVXTsiFC12L8b7qnbX86Ki7Eb0lGo+mjpvXGqCXwM05g9 D+BUrv3BIbU/wBoMn1/JngmOyWkcG+7ghDHr7NVTHfSXY8zhiWvv4gd1qh8ap41a dFNzAtbxwvYR41k/9R19NsJTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUosr8Gywx GujULlpm4cdyIUjH96UwHwYDVR0jBBgwFoAUb6Yr4K15obTDhpuhmQ8hTfazzicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4ODJBL0I5QzBDOTdBMjFB MjExRUZCOTA2OUE2QUM0RjlBRTAyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenpp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjZZcjRLMTVvYlREaHB1aG1ROGhUZmF6emljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 ODJBL0I5QzBDOTdBMjFBMjExRUZCOTA2OUE2QUM0RjlBRTAyL2I2WXI0SzE1b2JU RGhwdWhtUThoVGZhenppYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1URCbvm8mwkPQADi9T7GV0HtCS3r2MKAf6+Rcc3FQDd3qLqdwijzoF hmYEwUlqaNVJez3gMwqDp+GkIyk1kaUL7l8+BDGv7mQBmE4T+Ie549TOBqWqug/O WouF996L/3btug78ysJ/XchMd+uLEOyiWaFX5OGxX/rGG+cZ1vV1pj2KX0RNQ3Fi tiG+Q3WAe+ZSsfmP59o5GKPZ6vkvjKHvOAgL+8Iqu4mQh3IRLHWu9aDWUE2Q8OR9 cobR6knaZKuoRkt4ILfdAxw0Ii0Hz4W04KXX1wH2H601DAD383qAtTT7ivw0pSQj WAqyXD0Meqli7BS62cLxqs05qrAVrjI= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:36 2024 by rpki-client on console-ams.rpki-client.org