$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft File: bath0S4_GW9RaThyPIAnWZxddVI.mft (raw, json) Hash identifier: koT1aTacrbDqrr4iylpEnrt/YTP4y46ZQBtU/PuNC9c= Subject key identifier: 0B:C2:21:66:59:3F:EC:95:F2:EB:BE:CA:AD:F6:F5:65:1F:69:5C:6E Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 Certificate issuer: /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft Manifest number: 33 Signing time: Sun 15 Sep 2024 10:01:48 +0000 Manifest this update: Sun 15 Sep 2024 10:01:48 +0000 Manifest next update: Sun 22 Sep 2024 10:01:48 +0000 Files and hashes: 1: bath0S4_GW9RaThyPIAnWZxddVI.crl (hash: mHcQSChgrO0eq9Tv851LrIUHPZiPmK8wcDTrd4VKdts=) 2: F2022074272711EF91A40124C4F9AE02.roa (hash: UgSans1dKX/IYLF307H9wWjQO8qhKZGKUPwGt0P+vBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Validity Not Before: Sep 15 10:01:48 2024 GMT Not After : Sep 22 10:01:48 2024 GMT Subject: CN=66e6b08c-640f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:bd:95:86:75:99:8d:d3:79:9f:ef:8c:10: af:89:d0:c7:0f:87:63:14:8d:06:da:57:dc:f9:84: 21:33:cd:e7:60:ed:63:7c:9b:3f:92:e5:6b:41:92: 2f:f1:76:42:ac:f4:c6:f9:4d:a5:74:bb:06:4f:d3: 88:85:6d:d2:6f:a2:13:76:c5:95:bf:2f:7e:cc:72: 33:be:d3:a3:d4:56:43:ab:b1:32:47:bd:76:22:42: 29:83:9e:a8:32:2b:1b:ab:8c:c1:97:05:17:26:6c: c9:1b:0b:6b:62:ea:44:95:5f:90:ee:ae:ca:fb:7c: 83:37:39:76:56:af:49:cd:65:84:cf:5b:c1:da:74: 97:8a:02:72:33:38:34:08:43:ea:81:30:21:e0:08: 19:28:48:52:8e:4f:b0:e0:8a:12:12:7a:b6:45:06: ec:0f:14:f5:6f:63:74:60:3c:d6:d5:e0:26:2d:88: d2:b7:51:d3:99:4b:28:08:ea:1c:60:72:47:0f:00: d3:81:0b:55:d1:16:bf:f4:68:e1:2d:e7:c8:ed:2e: 86:98:02:84:f3:47:c4:99:96:b8:a4:a4:82:6d:7b: 54:a0:0c:20:07:6b:ad:ea:20:8f:8c:1d:24:e8:5f: a6:2f:e1:58:ba:cc:44:2f:a1:93:f3:43:0c:f5:ef: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C2:21:66:59:3F:EC:95:F2:EB:BE:CA:AD:F6:F5:65:1F:69:5C:6E X509v3 Authority Key Identifier: keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:41:d4:08:72:8f:b6:0d:78:e5:66:23:f2:03:da:94:de:ba: 8b:74:c3:5d:58:8f:6c:b4:69:40:73:fa:d2:1a:98:de:c9:a7: 4d:f6:2f:d1:cb:e0:50:69:0f:32:29:91:bc:48:93:70:41:47: 80:6d:98:44:7d:ae:18:02:d1:63:b8:60:79:44:05:67:3a:dc: 24:c1:70:5e:1e:cd:6f:6e:28:b4:21:76:24:00:f2:d8:6a:9f: 4b:21:22:01:a7:7e:d3:d3:54:25:cb:84:0e:74:95:cc:91:ce: f0:3f:2c:60:00:5a:2c:ab:84:3d:b3:e7:40:d6:b6:05:05:da: c1:6e:e8:dd:36:93:7c:55:ec:77:e4:3a:d8:10:dd:ac:02:ba: f8:4d:d3:d2:ba:1d:b5:b5:2b:54:0c:fd:59:d6:fe:df:e3:5f: e6:36:8c:0b:fb:36:65:d0:6c:57:bd:04:40:9b:61:26:6e:49: c9:74:fa:7e:57:86:f3:4a:76:07:1b:8c:be:69:c0:a6:4d:99: 41:38:f4:fa:47:45:2b:5f:b7:38:1a:34:f1:d5:f0:df:cc:84: fc:ce:06:d3:57:a2:f5:bc:0d:3f:86:dc:9b:76:4e:b6:3a:33: 8f:ff:02:d8:31:af:63:03:34:8c:c0:76:e1:2e:05:8a:36:42: e3:f5:33:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUJDQzExMC8GA1UEBRMoNkRBQjYxRDEyRTNGMTk2RjUxNjkzODcyM0M4MDI3NTk5 QzVENzU1MjAeFw0yNDA5MTUxMDAxNDhaFw0yNDA5MjIxMDAxNDhaMBgxFjAUBgNV BAMTDTY2ZTZiMDhjLTY0MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKgr2VhnWZjdN5n++MEK+J0McPh2MUjQbaV9z5hCEzzedg7WN8mz+S5WtBki/x dkKs9Mb5TaV0uwZP04iFbdJvohN2xZW/L37McjO+06PUVkOrsTJHvXYiQimDnqgy KxurjMGXBRcmbMkbC2ti6kSVX5Dursr7fIM3OXZWr0nNZYTPW8HadJeKAnIzODQI Q+qBMCHgCBkoSFKOT7DgihISerZFBuwPFPVvY3RgPNbV4CYtiNK3UdOZSygI6hxg ckcPANOBC1XRFr/0aOEt58jtLoaYAoTzR8SZlrikpIJte1SgDCAHa63qII+MHSTo X6Yv4Vi6zEQvoZPzQwz17zOZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC8IhZlk/ 7JXy677Krfb1ZR9pXG4wHwYDVR0jBBgwFoAUbath0S4/GW9RaThyPIAnWZxddVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQkNDLzJBRTg5ODFBMjcy NzExRUY5MTQzRTYyMkM0RjlBRTAyL2JhdGgwUzRfR1c5UmFUaHlQSUFuV1p4ZGRW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmF0aDBTNF9HVzlSYVRoeVBJQW5XWnhkZFZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QkNDLzJBRTg5ODFBMjcyNzExRUY5MTQzRTYyMkM0RjlBRTAyL2JhdGgwUzRfR1c5 UmFUaHlQSUFuV1p4ZGRWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpB1Ahyj7YNeOVmI/ID2pTeuot0w11Yj2y0aUBz+tIamN7Jp032L9HL 4FBpDzIpkbxIk3BBR4BtmER9rhgC0WO4YHlEBWc63CTBcF4ezW9uKLQhdiQA8thq n0shIgGnftPTVCXLhA50lcyRzvA/LGAAWiyrhD2z50DWtgUF2sFu6N02k3xV7Hfk OtgQ3awCuvhN09K6HbW1K1QM/VnW/t/jX+Y2jAv7NmXQbFe9BECbYSZuScl0+n5X hvNKdgcbjL5pwKZNmUE49PpHRStftzgaNPHV8N/MhPzOBtNXovW8DT+G3Jt2TrY6 M4//Atgxr2MDNIzAduEuBYo2QuP1M8M= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:13 2024 by rpki-client on console-fra.rpki-client.org