$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: HYoUo1mSc9gp5P6dwJYubwK7SobhoPD/3N3HDepftoQ= Subject key identifier: 50:34:8E:90:18:4F:54:D7:09:FC:E1:51:DC:91:09:F3:A4:81:7A:24 Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: 21 Signing time: Thu 19 Sep 2024 06:08:32 +0000 Manifest this update: Thu 19 Sep 2024 06:08:32 +0000 Manifest next update: Thu 26 Sep 2024 06:08:32 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: ZVqxrhG63x3X0XtwTxt3mV77iEQ/ff4r6oJAfwvkQU4=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: rE+0lealMQunqmP7T0ZCFPfRDHKLNmLXQBimJeKVcUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Sep 19 06:08:32 2024 GMT Not After : Sep 26 06:08:32 2024 GMT Subject: CN=66ebbfe0-17c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:21:27:63:ed:9d:ba:6b:37:de:ff:01:11: 66:76:0b:01:f1:25:f8:60:4d:08:69:b9:82:72:0a: 55:39:dd:94:3e:72:42:96:71:51:ef:c1:bc:6d:a0: 46:28:b8:37:9c:38:0a:bb:1e:0a:d8:4f:03:b2:d7: 4c:0c:fa:6d:ac:ac:2d:1f:ae:d9:f0:1f:5e:27:1f: 07:be:51:54:a1:1f:83:66:da:79:6d:2c:4e:79:52: a2:57:25:c3:06:93:09:70:12:80:84:23:4f:63:c3: 4f:69:af:19:42:49:a8:6b:b7:ea:97:e9:f2:90:4c: 36:de:71:e0:25:12:84:67:b9:f8:cd:00:e1:88:84: be:ca:60:fb:34:a6:64:cc:1c:18:82:5f:43:ca:6d: 43:70:c6:e6:6a:21:f0:3f:5f:1d:fe:44:0d:48:1b: c7:90:e2:0a:3e:53:c3:fb:a4:2c:5e:c7:fa:97:d0: 29:96:b1:94:07:65:ae:42:71:c0:60:6d:83:e9:ea: d1:65:0a:03:44:b7:50:97:91:fc:5d:a2:05:24:4e: 94:a9:78:f7:1c:99:94:d8:44:a0:50:cf:fc:ba:3c: f4:35:b1:56:60:68:96:32:53:df:4c:23:52:d4:92: e8:66:43:3b:ce:c7:5d:6f:f3:b2:39:e6:f3:63:52: 3c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:8E:90:18:4F:54:D7:09:FC:E1:51:DC:91:09:F3:A4:81:7A:24 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ff:03:08:40:07:82:22:fc:c7:de:45:8a:e1:a5:62:6f:c6: 85:0c:6d:9b:e2:f3:eb:e8:1e:20:64:7b:ee:96:be:bd:ec:4c: d4:12:7d:27:a5:0f:22:4b:dc:f1:2e:68:cf:8f:70:d3:00:fb: 62:6f:ba:2d:52:05:d2:23:bc:c3:71:56:2f:90:b3:b7:37:08: a1:b0:a2:b1:eb:ce:96:fa:59:6b:9e:90:0f:d7:6b:02:43:2c: 71:48:30:62:97:fa:59:a2:5b:fc:fe:2f:08:f6:25:fd:4f:6d: 55:e8:21:28:5c:ee:df:25:f3:0d:35:5e:d0:04:cf:d4:79:e5: 17:12:25:b2:4c:5a:fe:27:9d:3b:05:09:7b:1f:04:79:5a:74: 33:32:83:fa:56:4d:3a:a1:ea:40:ea:1d:98:c8:7c:1d:24:79: 54:52:33:c9:56:b4:0b:9b:89:48:e9:f0:56:08:f6:76:45:90: 88:ee:5d:91:b4:54:4a:b7:62:dd:9e:3f:d1:ab:66:c6:7d:d9: f1:22:77:a5:94:f9:26:22:db:e0:01:cb:df:f8:8b:e8:cf:60: a9:94:03:6a:40:8d:b3:25:d9:ab:e7:c3:56:24:27:81:d7:d0: e9:68:e0:81:6e:f2:b0:8d:ad:e3:18:e6:f1:21:88:f5:85:f3: fb:2f:16:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzREMDExMC8GA1UEBRMoRTA2RkU4NDFDNkJCNDk4QTFGQkY2N0VFM0FBOEM4QTlD NTM4N0QwRjAeFw0yNDA5MTkwNjA4MzJaFw0yNDA5MjYwNjA4MzJaMBgxFjAUBgNV BAMTDTY2ZWJiZmUwLTE3YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYlSEnY+2dums33v8BEWZ2CwHxJfhgTQhpuYJyClU53ZQ+ckKWcVHvwbxtoEYo uDecOAq7HgrYTwOy10wM+m2srC0frtnwH14nHwe+UVShH4Nm2nltLE55UqJXJcMG kwlwEoCEI09jw09prxlCSahrt+qX6fKQTDbeceAlEoRnufjNAOGIhL7KYPs0pmTM HBiCX0PKbUNwxuZqIfA/Xx3+RA1IG8eQ4go+U8P7pCxex/qX0CmWsZQHZa5CccBg bYPp6tFlCgNEt1CXkfxdogUkTpSpePccmZTYRKBQz/y6PPQ1sVZgaJYyU99MI1LU kuhmQzvOx11v87I55vNjUjxHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUDSOkBhP VNcJ/OFR3JEJ86SBeiQwHwYDVR0jBBgwFoAU4G/oQca7SYofv2fuOqjIqcU4fQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNEQwL0VDRjgwRjg2NDVC NzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNEdfb1FjYTdTWW9mdjJmdU9xaklxY1U0ZlE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NEQwL0VDRjgwRjg2NDVCNzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lv ZnYyZnVPcWpJcWNVNGZROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAET/AwhAB4Ii/MfeRYrhpWJvxoUMbZvi8+voHiBke+6Wvr3sTNQSfSel DyJL3PEuaM+PcNMA+2Jvui1SBdIjvMNxVi+Qs7c3CKGworHrzpb6WWuekA/XawJD LHFIMGKX+lmiW/z+Lwj2Jf1PbVXoIShc7t8l8w01XtAEz9R55RcSJbJMWv4nnTsF CXsfBHladDMyg/pWTTqh6kDqHZjIfB0keVRSM8lWtAubiUjp8FYI9nZFkIjuXZG0 VEq3Yt2eP9GrZsZ92fEid6WU+SYi2+ABy9/4i+jPYKmUA2pAjbMl2avnw1YkJ4HX 0Olo4IFu8rCNreMY5vEhiPWF8/svFrc= -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:24 2024 by rpki-client on console-fra.rpki-client.org