$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json) Hash identifier: zcoXG3bJYqAud0JlX/qge2EIiCXYBfA/T9eKTpylZA4= Subject key identifier: 9D:FA:11:C5:DE:4A:BF:26:55:60:DB:D7:EA:F0:FD:39:6D:60:1C:D9 Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft Manifest number: 1E Signing time: Thu 19 Sep 2024 06:09:57 +0000 Manifest this update: Thu 19 Sep 2024 06:09:57 +0000 Manifest next update: Thu 26 Sep 2024 06:09:57 +0000 Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: 6jRdEekZ0q6jD6IuJ75nANHw/HvoZI5IFtyjfEBGKdg=) 2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: n0scqmjw+mL6oy2aKSd+h7xv61rcn17HzY6G2dTe7Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Validity Not Before: Sep 19 06:09:57 2024 GMT Not After : Sep 26 06:09:57 2024 GMT Subject: CN=66ebc035-dcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:33:8c:28:2b:35:9d:c3:cd:cb:ae:18:48: 48:6b:e0:1e:58:af:6a:f1:ec:02:1c:39:e9:c5:93: 5f:82:4f:88:14:f4:41:d6:d8:0b:c4:af:92:18:91: bb:9b:ef:f4:43:ff:3e:e6:f6:79:33:66:5c:ef:65: 0a:a2:c1:6a:c9:32:1b:c2:69:36:a4:81:07:32:57: 78:29:3c:1e:41:18:d5:b4:f3:83:8b:c2:88:ac:19: 88:07:72:ac:09:f9:8d:70:4c:c9:1a:b9:94:39:d5: 11:86:fc:26:56:3b:e1:db:34:ca:4a:7c:3e:02:29: 57:33:d4:97:c3:4e:e9:d2:a9:7a:77:9c:98:2e:3b: 62:95:e4:96:e2:2f:8a:80:5b:71:87:34:63:e8:fa: 92:91:81:18:5d:64:be:a4:fd:d9:23:2d:28:2e:68: 35:75:c4:7b:2d:d4:b1:08:8a:67:fc:7a:b3:e4:da: 7d:b9:5f:d8:06:43:0b:1b:f4:41:63:9a:20:46:49: 0e:dc:fc:8e:f2:f6:e0:36:83:1a:f6:06:7c:42:47: 7f:1b:b8:05:5f:75:07:8a:fc:49:22:3e:05:99:3a: 87:01:14:08:dd:4c:23:bd:41:e5:4f:c1:15:5d:24: ae:e0:79:b5:44:66:21:f8:f8:e3:4b:48:24:c2:eb: f7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FA:11:C5:DE:4A:BF:26:55:60:DB:D7:EA:F0:FD:39:6D:60:1C:D9 X509v3 Authority Key Identifier: keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:b2:fe:7a:6e:45:c8:3a:99:e9:49:ef:d3:cc:67:44:f1:55: dc:26:1a:7d:d1:d5:4b:22:ce:6d:3e:6b:c7:02:ad:70:9a:02: d9:04:b1:de:ed:ea:42:bd:c3:b9:e2:31:69:7b:68:79:01:f4: f2:b0:20:fc:fd:72:b7:eb:cd:c7:3a:98:77:69:25:1a:0b:dd: 77:ee:bf:99:4f:52:58:8e:fa:8b:0b:e0:c7:1b:29:c4:cf:c8: 3e:07:65:a9:9e:91:31:e7:33:f1:8d:04:80:eb:aa:07:19:4e: 1d:3e:73:04:c7:57:33:05:db:0e:6c:21:fa:ad:3d:77:bc:dd: d6:de:f6:11:75:63:62:26:ee:7b:9b:7b:eb:04:f4:96:15:73: 91:a3:76:f2:d1:1d:ef:53:e1:6a:21:0a:af:63:5a:54:79:7d: 84:30:a3:92:1b:00:e9:98:94:fe:bc:1f:c4:de:7e:20:f4:ec: 7d:f4:0b:2a:76:50:73:2f:b2:88:7d:1c:7e:51:99:89:cf:86: 27:63:04:e0:ea:6c:2f:5c:a7:8c:fe:26:d2:5f:01:85:5d:47: 15:aa:b9:48:6b:bc:8a:21:22:05:7a:40:7b:5c:4c:8d:4c:c5: c2:7c:a8:6c:f7:4b:4b:ea:87:d7:8d:10:cb:ca:34:89:75:3a: bf:11:ac:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTgxNDExMC8GA1UEBRMoMTE4RDlCREUzMTc1NEY5ODU0Q0I1NTQ3NDBBMjk5RjEz N0UyNDFFMjAeFw0yNDA5MTkwNjA5NTdaFw0yNDA5MjYwNjA5NTdaMBgxFjAUBgNV BAMTDTY2ZWJjMDM1LWRjYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiqTOMKCs1ncPNy64YSEhr4B5Yr2rx7AIcOenFk1+CT4gU9EHW2AvEr5IYkbub 7/RD/z7m9nkzZlzvZQqiwWrJMhvCaTakgQcyV3gpPB5BGNW084OLwoisGYgHcqwJ +Y1wTMkauZQ51RGG/CZWO+HbNMpKfD4CKVcz1JfDTunSqXp3nJguO2KV5JbiL4qA W3GHNGPo+pKRgRhdZL6k/dkjLSguaDV1xHst1LEIimf8erPk2n25X9gGQwsb9EFj miBGSQ7c/I7y9uA2gxr2BnxCR38buAVfdQeK/EkiPgWZOocBFAjdTCO9QeVPwRVd JK7gebVEZiH4+ONLSCTC6/cZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnfoRxd5K vyZVYNvX6vD9OW1gHNkwHwYDVR0jBBgwFoAUEY2b3jF1T5hUy1VHQKKZ8TfiQeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFODE0LzhDNTdGMTVBNEEz MDExRUZBODMwNzcxOUM0RjlBRTAyL0VZMmIzakYxVDVoVXkxVkhRS0taOFRmaVFl SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVkyYjNqRjFUNWhVeTFWSFFLS1o4VGZpUWVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF ODE0LzhDNTdGMTVBNEEzMDExRUZBODMwNzcxOUM0RjlBRTAyL0VZMmIzakYxVDVo VXkxVkhRS0taOFRmaVFlSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKKy/npuRcg6melJ79PMZ0TxVdwmGn3R1Usizm0+a8cCrXCaAtkEsd7t 6kK9w7niMWl7aHkB9PKwIPz9crfrzcc6mHdpJRoL3Xfuv5lPUliO+osL4McbKcTP yD4HZamekTHnM/GNBIDrqgcZTh0+cwTHVzMF2w5sIfqtPXe83dbe9hF1Y2Im7nub e+sE9JYVc5GjdvLRHe9T4WohCq9jWlR5fYQwo5IbAOmYlP68H8TefiD07H30Cyp2 UHMvsoh9HH5RmYnPhidjBODqbC9cp4z+JtJfAYVdRxWquUhrvIohIgV6QHtcTI1M xcJ8qGz3S0vqh9eNEMvKNIl1Or8RrOs= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:54 2024 by rpki-client on console-ams.rpki-client.org