$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: GU3XEOD4xSkBj6n5wFVD+z0o7W0NF2/5gjZ4khZf+Tw= Subject key identifier: 53:D3:AB:97:F0:D9:5C:F0:B5:2E:0B:E4:BB:3D:6E:DC:99:DF:1B:24 Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: 39 Signing time: Sun 15 Sep 2024 09:56:33 +0000 Manifest this update: Sun 15 Sep 2024 09:56:32 +0000 Manifest next update: Sun 22 Sep 2024 09:56:32 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: 8saZT49AFRkQ9qFytxyj7qIx5ojvs6bGWFUU2iYruGY=) 2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: nUYZgdQadurE/wuqTHuLZMufVFF/OgkunOtB48BXYGM=) 3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: yYgtDAeJ69GvfRCqyHXz48nXP8uRHB56oa+sMfYurxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Sep 15 09:56:32 2024 GMT Not After : Sep 22 09:56:32 2024 GMT Subject: CN=66e6af51-35d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:c1:23:f3:6e:64:8a:1c:9a:39:03:7d:b2: 21:56:9a:c8:28:ea:c9:fa:6d:b2:9f:fc:aa:e4:60: 16:36:f5:eb:89:de:58:5e:d7:99:64:23:78:32:c6: 71:d1:cd:e0:d6:92:7a:df:51:67:a8:86:40:8b:0e: 6f:8d:27:d3:eb:8c:ec:6f:7f:b6:14:68:db:97:00: 7b:f9:a8:8e:6f:c2:f7:98:44:fd:0e:f8:54:9f:74: c1:db:c1:6f:f3:1b:91:b4:5a:17:64:39:19:26:14: f7:9b:d5:c3:55:0d:4f:07:91:45:42:d0:f6:2e:32: 4d:c1:10:35:76:af:28:b3:4f:28:70:b3:8c:d0:04: 52:da:b2:bb:8e:39:e7:90:6d:dd:42:f3:f7:8f:cb: d6:74:6c:fa:70:ba:f5:8b:6a:c0:4a:d5:e8:02:9f: aa:b8:db:ab:c1:1b:91:e8:a5:d8:2f:21:01:56:f3: e7:ff:a4:c3:23:15:d5:df:92:4e:5c:e8:32:01:f1: 0c:43:1e:c1:d1:71:4a:01:a5:19:36:48:9d:e3:97: 3b:88:3e:1e:4c:83:8c:72:3c:26:e3:a4:46:f7:b7: 55:b8:ae:48:6d:17:04:b4:88:59:ef:21:fc:20:ed: 9b:80:1d:29:65:80:03:e0:b8:59:65:c6:88:3d:4f: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D3:AB:97:F0:D9:5C:F0:B5:2E:0B:E4:BB:3D:6E:DC:99:DF:1B:24 X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:14:c3:54:ac:e9:ef:a2:28:5f:0b:25:f4:ed:4f:40:a8:05: be:98:52:70:78:c5:52:26:a5:14:21:e8:f9:0f:15:fa:3f:6d: 8d:5a:e3:d3:af:18:76:e1:f9:a1:a8:90:69:16:0d:59:87:06: 61:8b:c9:ac:73:61:92:58:dd:f3:68:c5:65:7c:6f:d8:85:94: 7c:c0:ab:34:48:7a:33:fb:03:87:78:65:57:d4:c3:61:fe:08: b4:f2:ed:02:04:7e:53:08:2f:b3:d7:82:1f:d9:7c:4b:b0:2c: e7:96:b7:3b:fd:6a:f8:b6:e5:e1:c9:bc:36:16:53:87:19:2e: 1b:41:d2:40:b2:c4:55:fe:6d:3d:b7:8e:07:74:28:e4:7a:ee: a7:fc:53:a7:0f:74:f0:b8:e8:de:5c:1f:02:b5:3c:56:02:3a: 99:c6:25:91:72:1f:62:b6:47:ff:34:da:e4:89:8e:81:48:48: ac:eb:e9:f1:39:bd:29:f8:85:56:da:98:cb:28:bd:0e:b8:3f: 0f:79:2c:85:f9:05:45:de:7c:59:b4:74:06:fd:e9:d8:20:5d: d7:65:25:82:36:35:42:bd:2b:3e:f7:c2:ff:17:dc:6f:d8:04: 6d:a3:50:b7:b3:92:f3:1d:07:dd:2a:ff:9d:79:e1:f1:cb:ac: 16:26:02:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzcxMTExMC8GA1UEBRMoRTQyOUQ0MjlFNjZCNzk3QjNEOEExQ0JFMjQ5MTU3N0FE QzM4QTQ4RTAeFw0yNDA5MTUwOTU2MzJaFw0yNDA5MjIwOTU2MzJaMBgxFjAUBgNV BAMTDTY2ZTZhZjUxLTM1ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk1sEj825kihyaOQN9siFWmsgo6sn6bbKf/KrkYBY29euJ3lhe15lkI3gyxnHR zeDWknrfUWeohkCLDm+NJ9PrjOxvf7YUaNuXAHv5qI5vwveYRP0O+FSfdMHbwW/z G5G0WhdkORkmFPeb1cNVDU8HkUVC0PYuMk3BEDV2ryizTyhws4zQBFLasruOOeeQ bd1C8/ePy9Z0bPpwuvWLasBK1egCn6q426vBG5HopdgvIQFW8+f/pMMjFdXfkk5c 6DIB8QxDHsHRcUoBpRk2SJ3jlzuIPh5Mg4xyPCbjpEb3t1W4rkhtFwS0iFnvIfwg 7ZuAHSllgAPguFllxog9T0VtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU9Orl/DZ XPC1Lgvkuz1u3JnfGyQwHwYDVR0jBBgwFoAU5CnUKeZreXs9ihy+JJFXetw4pI4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNzExL0M3RDFCMDU0MUVF MzExRUY5MEQyMTIzNEM0RjlBRTAyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUNuVUtlWnJlWHM5aWh5LUpKRlhldHc0cEk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NzExL0M3RDFCMDU0MUVFMzExRUY5MEQyMTIzNEM0RjlBRTAyLzVDblVLZVpyZVhz OWloeS1KSkZYZXR3NHBJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACIUw1Ss6e+iKF8LJfTtT0CoBb6YUnB4xVImpRQh6PkPFfo/bY1a49Ov GHbh+aGokGkWDVmHBmGLyaxzYZJY3fNoxWV8b9iFlHzAqzRIejP7A4d4ZVfUw2H+ CLTy7QIEflMIL7PXgh/ZfEuwLOeWtzv9avi25eHJvDYWU4cZLhtB0kCyxFX+bT23 jgd0KOR67qf8U6cPdPC46N5cHwK1PFYCOpnGJZFyH2K2R/802uSJjoFISKzr6fE5 vSn4hVbamMsovQ64Pw95LIX5BUXefFm0dAb96dggXddlJYI2NUK9Kz73wv8X3G/Y BG2jULezkvMdB90q/5154fHLrBYmAv0= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:25 2024 by rpki-client on console-ams.rpki-client.org