$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft File: eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft (raw, json) Hash identifier: iKVXKJwda6qYWemgy+4JgEk5S2DW34rHRykpMy4cNmg= Subject key identifier: 74:9B:A7:9B:93:3E:36:D3:3C:CE:71:D0:FF:1E:BD:57:FF:24:7D:11 Authority key identifier: 7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 Certificate issuer: /CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft Manifest number: 1F Signing time: Wed 23 Oct 2024 06:32:20 +0000 Manifest this update: Wed 23 Oct 2024 06:32:19 +0000 Manifest next update: Wed 30 Oct 2024 06:32:19 +0000 Files and hashes: 1: eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl (hash: GmNOsiDX6ZLOpHHEw5T/B1hhxREomu75s3v4NcgKghE=) 2: EF57F4D0646611EFA25D167EC4F9AE02.roa (hash: gGUuQZoCHoMxpbX892LJTwciHDZLV1IrcZ8alBZ8Tvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Validity Not Before: Oct 23 06:32:19 2024 GMT Not After : Oct 30 06:32:19 2024 GMT Subject: CN=67189874-fb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:8b:cc:c6:5f:f7:db:a9:b2:70:a6:db:7d: e6:16:d7:a7:ec:57:d5:4e:89:6c:7c:a9:b7:7f:7f: 22:b3:d5:a8:42:fe:8d:04:df:32:ba:9d:c7:1d:b3: 8e:bf:a1:d7:24:4e:01:0d:2e:ec:85:0d:cb:29:13: 85:dd:08:39:10:7d:dd:3e:c2:91:1d:59:3f:22:97: 39:60:8c:34:4f:24:e5:8a:40:f8:94:dd:26:6c:70: 38:38:35:6b:fb:63:7b:75:4c:0f:b5:11:7a:03:8c: d4:b1:05:88:d3:98:6a:a5:ad:9b:3f:98:b8:a2:56: 9f:96:95:98:7e:31:41:a8:9e:d3:4b:09:05:05:35: d3:0f:85:03:08:a9:a1:43:c5:40:84:ff:e3:fd:8a: 94:e4:aa:83:40:f6:25:c0:0d:19:74:3e:24:70:58: c3:04:95:b6:7f:c6:cc:6d:5b:b9:67:48:3a:47:27: 27:8c:5e:a2:81:e8:58:0d:f8:ce:b2:b6:bb:74:ca: c7:9b:cd:8e:b3:cc:e9:9b:92:e6:34:5b:66:bc:22: d5:9e:05:eb:c3:ee:0f:99:37:38:fc:db:0a:bd:84: a6:fa:ee:a4:ac:46:6f:3e:eb:5b:c2:49:c5:69:be: f1:10:d6:6b:cd:84:7c:94:db:a0:e7:f5:b1:4b:f7: 53:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9B:A7:9B:93:3E:36:D3:3C:CE:71:D0:FF:1E:BD:57:FF:24:7D:11 X509v3 Authority Key Identifier: keyid:7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:43:a6:c3:c4:40:95:fc:0f:5a:7c:d8:78:f3:3d:b7:f6:49: 91:bb:37:e9:d0:40:06:b2:76:27:b4:5b:fb:f7:c9:ca:80:35: 11:e9:0c:e2:3c:a9:6c:df:f9:5f:0b:97:02:a5:2f:d4:46:9b: a1:cf:7d:ce:82:7f:42:75:40:61:d6:1b:d1:c9:4b:95:6c:da: 8d:a3:4f:fe:f3:55:df:64:03:89:1c:e3:f0:ff:f5:a3:6c:ed: b6:15:84:bd:15:54:22:50:2f:ee:dd:f9:9d:da:97:35:1f:9d: 23:4c:2f:45:6e:d9:15:80:95:44:f1:f8:d2:7a:d3:d2:bd:7d: ad:a6:8c:7e:62:b8:1a:91:19:68:d8:2d:a7:6d:07:eb:66:1f: 53:aa:3c:c1:43:39:ab:59:48:ee:9e:6a:e3:40:c7:0f:6b:86: 6d:e1:1e:9f:9e:1a:9b:b5:72:01:1d:4a:43:04:67:7a:19:16: f9:12:97:6f:40:c4:db:51:be:d4:05:cc:2e:82:04:d8:97:2b: 87:5b:a8:b3:c9:8b:b9:09:d3:15:03:16:2e:ba:62:a3:fa:8d: 69:73:19:71:de:62:fa:e8:ef:88:0b:3a:ba:46:23:54:5b:26: a7:c8:52:36:33:a8:b0:74:ef:f7:72:c5:8e:c0:85:63:f3:5c: 1e:f3:35:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEMxODExMC8GA1UEBRMoN0EyODE2RTk2OTc5NzVDQUQ5MzQ5QjI2QjIwRjE0Qzgx QTkxNEM5ODAeFw0yNDEwMjMwNjMyMTlaFw0yNDEwMzAwNjMyMTlaMBgxFjAUBgNV BAMTDTY3MTg5ODc0LWZiNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0KIvMxl/326mycKbbfeYW16fsV9VOiWx8qbd/fyKz1ahC/o0E3zK6nccds46/ odckTgENLuyFDcspE4XdCDkQfd0+wpEdWT8ilzlgjDRPJOWKQPiU3SZscDg4NWv7 Y3t1TA+1EXoDjNSxBYjTmGqlrZs/mLiiVp+WlZh+MUGontNLCQUFNdMPhQMIqaFD xUCE/+P9ipTkqoNA9iXADRl0PiRwWMMElbZ/xsxtW7lnSDpHJyeMXqKB6FgN+M6y trt0ysebzY6zzOmbkuY0W2a8ItWeBevD7g+ZNzj82wq9hKb67qSsRm8+61vCScVp vvEQ1mvNhHyU26Dn9bFL91OHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdJunm5M+ NtM8znHQ/x69V/8kfREwHwYDVR0jBBgwFoAUeigW6Wl5dcrZNJsmsg8UyBqRTJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQzE4LzcxMkNGMEQ4NjQ2 NjExRUY4RTE4Rjg3QUM0RjlBRTAyL2VpZ1c2V2w1ZGNyWk5Kc21zZzhVeUJxUlRK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWlnVzZXbDVkY3JaTkpzbXNnOFV5QnFSVEpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QzE4LzcxMkNGMEQ4NjQ2NjExRUY4RTE4Rjg3QUM0RjlBRTAyL2VpZ1c2V2w1ZGNy Wk5Kc21zZzhVeUJxUlRKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJDpsPEQJX8D1p82HjzPbf2SZG7N+nQQAaydie0W/v3ycqANRHpDOI8 qWzf+V8LlwKlL9RGm6HPfc6Cf0J1QGHWG9HJS5Vs2o2jT/7zVd9kA4kc4/D/9aNs 7bYVhL0VVCJQL+7d+Z3alzUfnSNML0Vu2RWAlUTx+NJ609K9fa2mjH5iuBqRGWjY LadtB+tmH1OqPMFDOatZSO6eauNAxw9rhm3hHp+eGpu1cgEdSkMEZ3oZFvkSl29A xNtRvtQFzC6CBNiXK4dbqLPJi7kJ0xUDFi66YqP6jWlzGXHeYvro74gLOrpGI1Rb JqfIUjYzqLB07/dyxY7AhWPzXB7zNZA= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org