$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft File: vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json) Hash identifier: JnCUcoj82ULrSQJImqvSnJW9OYusXD8uhyJR9J2R7Ys= Subject key identifier: 47:B8:F4:73:83:D7:B3:4C:9F:82:0B:4C:11:FD:0F:09:AC:CC:F5:71 Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 Certificate issuer: /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft Manifest number: 28 Signing time: Sun 15 Sep 2024 10:11:31 +0000 Manifest this update: Sun 15 Sep 2024 10:11:30 +0000 Manifest next update: Sun 22 Sep 2024 10:11:30 +0000 Files and hashes: 1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: h8M+WNDHI4hhxjv1xScMMizHRTn0yhMlQxYEYejHnso=) 2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: 4S6LysWP6aXNqohWmOPlianyKt6L8nm45R0gNLc/r00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Validity Not Before: Sep 15 10:11:30 2024 GMT Not After : Sep 22 10:11:30 2024 GMT Subject: CN=66e6b2d2-68bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:c8:c0:e1:d3:0a:fe:2d:15:29:f7:76:cc: 24:c3:12:ea:fa:01:b9:2b:0a:10:23:52:e9:e8:22: 0c:73:a1:8a:07:cf:12:46:59:da:e8:a4:57:8e:13: f2:41:f9:7c:7b:15:72:37:37:fe:cf:a8:6d:79:ad: 74:1a:1c:8b:cf:28:c1:b2:0f:8f:f4:07:0b:58:ef: 2d:ec:9d:d6:cf:13:6e:51:33:f4:56:c6:25:73:50: cc:63:42:5e:82:83:1a:52:cd:fd:2a:13:14:ed:65: 5e:d4:60:40:73:79:24:9c:2e:1a:be:ce:e2:e1:21: 04:8d:d4:40:e7:04:2a:31:64:2d:9d:00:71:d8:2c: 82:d5:75:c0:72:a1:2c:02:4b:24:e4:78:8f:eb:e8: e1:b9:86:a0:0b:de:f9:2f:af:77:e6:3b:94:c9:32: 38:cf:1e:2c:77:74:5f:7b:44:02:82:67:0c:78:ca: d7:fa:a5:a7:bf:35:19:8a:b6:6d:6b:86:37:fb:31: 74:3c:3f:39:4d:42:30:c4:54:82:49:7a:42:85:9c: ac:29:3e:8e:ca:68:0c:ed:06:c7:a7:08:b2:bb:47: c1:cc:5d:ff:18:61:a2:e2:7f:43:00:fd:94:5c:5a: 56:0f:ca:e4:a6:3b:5e:85:7f:d9:fb:1f:0e:0a:0c: cb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B8:F4:73:83:D7:B3:4C:9F:82:0B:4C:11:FD:0F:09:AC:CC:F5:71 X509v3 Authority Key Identifier: keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:be:10:cd:00:a3:d4:06:eb:14:d9:7a:04:17:b2:eb:8e:22: b5:81:6f:34:e9:87:0c:3f:5d:3f:e7:d8:92:db:49:31:01:d8: 92:82:81:b2:87:79:77:0a:cc:67:4c:b8:fa:97:75:11:15:74: 15:f8:ba:41:0f:09:36:43:84:eb:02:ca:ab:40:f3:2f:c1:9f: 79:92:82:6f:1d:7e:8f:88:35:1f:2e:c5:7c:be:c5:e0:34:e1: e3:bd:63:c9:c3:03:56:bf:ea:74:44:50:70:7d:4c:c4:c6:b9: 77:e2:5a:3d:2c:bb:c4:71:c8:a7:0a:88:9a:77:76:5c:d7:2e: bd:dc:b8:5b:ac:95:1f:2b:e4:77:98:4c:07:e8:e9:a7:77:4e: a1:56:26:b3:c5:bb:51:36:6a:69:89:75:c8:b2:a6:a5:35:f0: 98:a8:41:1e:bc:17:b0:a0:1f:62:1a:00:3a:cd:02:9f:41:d0: ec:b2:6e:ae:bc:58:c7:5a:85:b4:47:a9:aa:48:90:27:92:02: 4b:f5:87:8b:b0:8f:47:f0:b5:b7:e0:9c:ae:b0:7c:7f:97:9b: 95:a5:8e:7b:3f:9b:7b:07:16:2d:8a:cb:bc:e5:a0:65:8b:ea: 43:e6:42:ec:d8:5e:ec:1e:9a:21:2d:c1:26:53:58:29:07:a5: 7c:80:b1:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI0MDExMC8GA1UEBRMoQkMwNTkzQzQ3REFDRjZDN0E3N0E0MUUwN0RFQjlBMDYx NjMxQTQ4NDAeFw0yNDA5MTUxMDExMzBaFw0yNDA5MjIxMDExMzBaMBgxFjAUBgNV BAMTDTY2ZTZiMmQyLTY4YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCr8jA4dMK/i0VKfd2zCTDEur6AbkrChAjUunoIgxzoYoHzxJGWdropFeOE/JB +Xx7FXI3N/7PqG15rXQaHIvPKMGyD4/0BwtY7y3sndbPE25RM/RWxiVzUMxjQl6C gxpSzf0qExTtZV7UYEBzeSScLhq+zuLhIQSN1EDnBCoxZC2dAHHYLILVdcByoSwC SyTkeI/r6OG5hqAL3vkvr3fmO5TJMjjPHix3dF97RAKCZwx4ytf6pae/NRmKtm1r hjf7MXQ8PzlNQjDEVIJJekKFnKwpPo7KaAztBsenCLK7R8HMXf8YYaLif0MA/ZRc WlYPyuSmO16Ff9n7Hw4KDMsdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR7j0c4PX s0yfggtMEf0PCazM9XEwHwYDVR0jBBgwFoAUvAWTxH2s9senekHgfeuaBhYxpIQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjQwLzI4NDBDOEE2MzhF MDExRUY5NEI4NEQ3RkM0RjlBRTAyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkFXVHhIMnM5c2VuZWtIZ2ZldWFCaFl4cElRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjQwLzI4NDBDOEE2MzhFMDExRUY5NEI4NEQ3RkM0RjlBRTAyL3ZBV1R4SDJzOXNl bmVrSGdmZXVhQmhZeHBJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2+EM0Ao9QG6xTZegQXsuuOIrWBbzTphww/XT/n2JLbSTEB2JKCgbKH eXcKzGdMuPqXdREVdBX4ukEPCTZDhOsCyqtA8y/Bn3mSgm8dfo+INR8uxXy+xeA0 4eO9Y8nDA1a/6nREUHB9TMTGuXfiWj0su8RxyKcKiJp3dlzXLr3cuFuslR8r5HeY TAfo6ad3TqFWJrPFu1E2ammJdciypqU18JioQR68F7CgH2IaADrNAp9B0Oyybq68 WMdahbRHqapIkCeSAkv1h4uwj0fwtbfgnK6wfH+Xm5Wljns/m3sHFi2Ky7zloGWL 6kPmQuzYXuwemiEtwSZTWCkHpXyAscE= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:44 2024 by rpki-client on console-fra.rpki-client.org