$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json) Hash identifier: 0Ib7p6UpxjAl8i90WCbqDzVeWlYX+0YdAgbiiXIYeJs= Subject key identifier: 7C:3F:22:86:2C:15:93:C2:67:43:2A:27:30:A4:15:2D:26:8A:61:98 Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft Manifest number: 42 Signing time: Sun 15 Sep 2024 09:52:18 +0000 Manifest this update: Sun 15 Sep 2024 09:52:18 +0000 Manifest next update: Sun 22 Sep 2024 09:52:18 +0000 Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: Y9uIsnpj8uJkhJ2c3dsnsVCRqPCm6FgQr9Ai74x434g=) 2: 5500DE161CB711EF865A8A66C4F9AE02.roa (hash: bE9TZ3KFMkEX5C4mzL3f6K6AeBT6EY6Mdwh7TN4CO1U=) 3: 09B1648A287E11EFB064C714C4F9AE02.roa (hash: 8w9EStyxgd2lG6ezvMAPGGREPx/EAFVYZTJA5MrmYxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Validity Not Before: Sep 15 09:52:18 2024 GMT Not After : Sep 22 09:52:18 2024 GMT Subject: CN=66e6ae52-9ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:80:f4:93:9c:03:9a:45:e4:8e:d2:f5:9d:f1: 04:10:a8:be:ae:b4:fd:b4:22:44:25:38:0d:28:74: 05:61:6b:b0:76:36:fb:bd:76:db:42:a0:be:e2:9c: 47:60:cd:14:d8:e3:f7:20:ee:31:39:40:aa:a1:ed: 6f:ba:f4:b8:0d:8b:1d:2e:43:e6:21:02:c6:4f:ba: f3:db:8b:4b:d7:ef:c3:97:70:28:4b:c7:da:37:1a: 2c:d9:37:c6:bc:84:dc:58:98:8b:27:c4:80:a2:b7: f9:d5:29:c2:0c:86:87:d6:d5:8b:f2:1f:16:f6:10: 54:a2:63:a7:6b:d3:03:db:62:2f:2f:9d:fa:d1:6c: 5c:d4:0b:7b:c2:a9:a4:43:fc:dd:ce:ce:cd:48:c1: c0:b6:51:30:0e:be:60:41:d0:e1:12:df:a0:35:04: 50:68:9e:d9:91:47:7b:be:3b:8f:bc:1a:61:ca:db: 30:6d:f3:61:33:b8:d4:99:a2:44:a4:8f:81:31:d7: 5e:78:35:46:d6:8d:91:11:4e:01:ac:38:df:83:5a: 08:17:06:3a:84:6a:33:b2:32:1c:30:13:e9:c2:ef: b5:1c:3a:63:fb:49:12:f6:53:c4:74:3e:07:d7:97: 36:03:eb:f1:cd:61:05:11:54:08:27:44:88:c6:6b: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3F:22:86:2C:15:93:C2:67:43:2A:27:30:A4:15:2D:26:8A:61:98 X509v3 Authority Key Identifier: keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ba:a7:b0:b7:39:65:13:c7:fb:91:0d:16:cd:6a:5b:56:0a: e8:10:ad:5a:81:a3:f6:83:5d:14:50:d2:44:8c:11:3f:10:70: fc:bb:00:b8:52:7b:d1:55:cb:f5:fc:86:6f:f6:1e:8b:1a:79: b2:c9:65:f8:39:45:32:83:73:48:40:48:94:fc:d7:ff:29:8f: ac:ba:14:89:ed:02:4f:6e:00:29:e4:65:c5:b7:5f:76:9b:9b: c8:ab:77:ed:8c:ad:25:f3:8c:e2:e6:14:f6:bd:91:28:f3:f3: ea:ef:cf:7d:30:e6:73:d3:e4:fa:9f:c2:d7:fd:cf:1c:8e:b2: 0f:3c:f7:c0:d3:98:34:eb:94:02:8f:87:18:ff:3a:e5:a3:6d: 94:cc:09:89:23:c2:91:24:54:24:62:59:82:07:6d:bd:e4:cb: a3:76:23:f9:04:a3:72:93:cc:af:38:c9:31:ee:98:31:92:cc: 46:7b:ee:7b:49:e7:4f:cb:ed:d6:a8:0b:ed:41:d1:19:5a:52: 73:6f:b0:4c:93:70:5a:83:1b:3e:56:08:a1:f7:93:08:67:6c: 91:ef:ff:fe:f1:79:e0:b1:60:4b:89:3c:bf:20:db:75:9a:b5: d2:1d:1f:54:93:84:22:d6:a1:b4:b2:a3:ea:0b:57:6d:7c:8c: eb:d9:56:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUFFMDExMC8GA1UEBRMoODQzMjQ3QzBBQzE4MUZDMzY2NjZBNDQzNzIxQUYyMUQ5 REE2NTBEQTAeFw0yNDA5MTUwOTUyMThaFw0yNDA5MjIwOTUyMThaMBgxFjAUBgNV BAMTDTY2ZTZhZTUyLTlkZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsgPSTnAOaReSO0vWd8QQQqL6utP20IkQlOA0odAVha7B2Nvu9dttCoL7inEdg zRTY4/cg7jE5QKqh7W+69LgNix0uQ+YhAsZPuvPbi0vX78OXcChLx9o3GizZN8a8 hNxYmIsnxICit/nVKcIMhofW1YvyHxb2EFSiY6dr0wPbYi8vnfrRbFzUC3vCqaRD /N3Ozs1IwcC2UTAOvmBB0OES36A1BFBontmRR3u+O4+8GmHK2zBt82EzuNSZokSk j4Ex1154NUbWjZERTgGsON+DWggXBjqEajOyMhwwE+nC77UcOmP7SRL2U8R0PgfX lzYD6/HNYQURVAgnRIjGaygfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfD8ihiwV k8JnQyonMKQVLSaKYZgwHwYDVR0jBBgwFoAUhDJHwKwYH8NmZqRDchryHZ2mUNow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQUUwL0JDNTIxQTU0MTkw QTExRUZBOTBFQzkyOUM0RjlBRTAyL2hESkh3S3dZSDhObVpxUkRjaHJ5SFoybVVO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaERKSHdLd1lIOE5tWnFSRGNocnlIWjJtVU5vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QUUwL0JDNTIxQTU0MTkwQTExRUZBOTBFQzkyOUM0RjlBRTAyL2hESkh3S3dZSDhO bVpxUkRjaHJ5SFoybVVOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAm6p7C3OWUTx/uRDRbNaltWCugQrVqBo/aDXRRQ0kSMET8QcPy7ALhS e9FVy/X8hm/2HosaebLJZfg5RTKDc0hASJT81/8pj6y6FIntAk9uACnkZcW3X3ab m8ird+2MrSXzjOLmFPa9kSjz8+rvz30w5nPT5Pqfwtf9zxyOsg8898DTmDTrlAKP hxj/OuWjbZTMCYkjwpEkVCRiWYIHbb3ky6N2I/kEo3KTzK84yTHumDGSzEZ77ntJ 50/L7daoC+1B0RlaUnNvsEyTcFqDGz5WCKH3kwhnbJHv//7xeeCxYEuJPL8g23Wa tdIdH1SThCLWobSyo+oLV218jOvZVl4= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:25 2024 by rpki-client on console-ams.rpki-client.org