$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: MQfmni1E5ggD/yO3inxeVtWWEG/8f213a7p3jmgNSLE= Subject key identifier: C0:AD:83:01:B7:B4:4B:78:0D:9F:D2:53:55:04:5E:33:2D:CE:FB:2C Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: 3C Signing time: Sun 15 Sep 2024 09:51:55 +0000 Manifest this update: Sun 15 Sep 2024 09:51:54 +0000 Manifest next update: Sun 22 Sep 2024 09:51:54 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: v8AiIBsgPbDAR7crWyVIzc9Rk3w6x/PoUtYWZQvLON8=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: AxkYcRwZSnao8zH0VaeL2puNq47Z8ulmK+DHFGZowcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Sep 15 09:51:54 2024 GMT Not After : Sep 22 09:51:54 2024 GMT Subject: CN=66e6ae3b-90ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2d:06:8b:93:75:86:18:3c:b6:97:ad:57:a8: 32:4b:2f:d8:79:4b:29:ff:34:95:9b:87:86:2e:00: 99:21:ec:0f:cd:f5:6b:57:7a:7e:d5:7b:9c:1c:c3: 04:36:b9:05:97:a7:cf:f3:89:21:8e:80:ad:ed:47: b5:16:4f:08:90:fb:44:b8:72:61:97:37:6e:11:2c: 86:03:b8:ef:39:4a:e1:e8:50:3d:3b:41:5f:a2:cc: 7b:be:b2:c4:2f:43:57:4e:6d:0a:0b:09:17:9c:c6: 35:25:c4:bf:a7:18:69:c9:75:f1:b4:24:fc:d8:b9: 56:f3:22:8c:09:cd:7d:f1:22:2e:de:ce:97:a9:c0: 7d:b7:4d:d9:92:1a:1a:9a:b9:3e:9f:85:56:40:b9: bf:9b:79:da:72:58:fc:41:28:20:d6:d3:ec:30:54: a9:96:11:a9:aa:30:fc:69:fb:e5:52:d8:e3:e9:93: fa:9d:86:9c:48:ef:50:b8:48:f1:2c:b5:7d:15:d0: 59:b7:0f:4f:ba:e4:bc:f2:81:2d:c2:76:39:95:17: 70:30:d3:39:43:a6:93:5d:98:2b:d0:87:03:46:5c: 11:8a:51:63:c1:5c:da:b5:77:17:fb:6c:96:c3:10: 44:5d:17:7e:9a:20:ff:19:d8:83:5b:7f:5c:0e:98: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AD:83:01:B7:B4:4B:78:0D:9F:D2:53:55:04:5E:33:2D:CE:FB:2C X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:93:5c:e9:64:44:f7:fa:52:36:39:74:ed:2c:f1:9b:5d:75: 88:86:ba:37:8b:b4:8a:22:ad:88:fc:00:8a:fc:86:20:71:11: cc:21:da:93:8d:a1:50:6e:5d:e7:3f:89:83:4f:ac:d1:ce:79: 66:09:e9:66:82:c7:0b:51:c4:79:7d:46:41:05:55:66:c2:30: ba:16:8e:ac:d3:88:b8:19:92:55:8f:af:74:a9:68:42:6c:e7: 84:03:e6:2f:09:2c:6f:59:bd:c9:fb:20:1c:fd:76:4e:a7:83: c0:57:bc:a1:b9:e5:59:4f:4d:72:4d:0b:09:8c:19:4b:64:80: f2:38:75:a0:22:e6:03:c0:84:e2:9e:3a:d6:7a:aa:c2:7e:66: 2e:ee:6f:f3:5c:8b:06:37:f7:23:ed:b7:2e:b4:67:f5:f9:2c: 69:c8:a8:83:74:ce:4a:66:f1:e8:60:b4:7a:41:13:f2:4f:5c: e0:77:03:1f:03:85:05:6a:e9:5b:8f:9e:82:61:db:9d:34:71: 5c:62:9c:fe:e3:d7:2b:90:ef:fa:a3:a0:27:8a:31:08:cd:29: 65:79:bb:e2:83:3d:be:ef:5f:e3:71:dc:12:8f:09:3f:54:1d: f8:dc:8e:70:16:a5:3a:90:ea:59:b0:d3:8f:00:aa:80:2b:d4: de:93:a8:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTQwMzExMC8GA1UEBRMoRDc4RjMwOTA0RTc1REY5NENFQjc1OTY2QUY4MzhFNzYz RUE4OTc2MjAeFw0yNDA5MTUwOTUxNTRaFw0yNDA5MjIwOTUxNTRaMBgxFjAUBgNV BAMTDTY2ZTZhZTNiLTkwY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbLQaLk3WGGDy2l61XqDJLL9h5Syn/NJWbh4YuAJkh7A/N9WtXen7Ve5wcwwQ2 uQWXp8/ziSGOgK3tR7UWTwiQ+0S4cmGXN24RLIYDuO85SuHoUD07QV+izHu+ssQv Q1dObQoLCRecxjUlxL+nGGnJdfG0JPzYuVbzIowJzX3xIi7ezpepwH23TdmSGhqa uT6fhVZAub+bedpyWPxBKCDW0+wwVKmWEamqMPxp++VS2OPpk/qdhpxI71C4SPEs tX0V0Fm3D0+65LzygS3CdjmVF3Aw0zlDppNdmCvQhwNGXBGKUWPBXNq1dxf7bJbD EERdF36aIP8Z2INbf1wOmDSFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwK2DAbe0 S3gNn9JTVQReMy3O+ywwHwYDVR0jBBgwFoAU148wkE5135TOt1lmr4OOdj6ol2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNDAzLzgwMjA3MkU4MThC RTExRUZBREE3RTUxREM0RjlBRTAyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTQ4d2tFNTEzNVRPdDFsbXI0T09kajZvbDJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NDAzLzgwMjA3MkU4MThCRTExRUZBREE3RTUxREM0RjlBRTAyLzE0OHdrRTUxMzVU T3QxbG1yNE9PZGo2b2wySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN+TXOlkRPf6UjY5dO0s8ZtddYiGujeLtIoirYj8AIr8hiBxEcwh2pON oVBuXec/iYNPrNHOeWYJ6WaCxwtRxHl9RkEFVWbCMLoWjqzTiLgZklWPr3SpaEJs 54QD5i8JLG9Zvcn7IBz9dk6ng8BXvKG55VlPTXJNCwmMGUtkgPI4daAi5gPAhOKe OtZ6qsJ+Zi7ub/NciwY39yPtty60Z/X5LGnIqIN0zkpm8ehgtHpBE/JPXOB3Ax8D hQVq6VuPnoJh2500cVxinP7j1yuQ7/qjoCeKMQjNKWV5u+KDPb7vX+Nx3BKPCT9U HfjcjnAWpTqQ6lmw048AqoAr1N6TqJk= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:13 2024 by rpki-client on console-fra.rpki-client.org