$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: Zhh/LZnij+Y2smWhDcz0DQ7ydFWgpKNBVOcpoSU3swU= Subject key identifier: 64:45:DE:82:F3:97:E6:15:9E:0E:F3:EC:BF:56:69:82:1C:9F:3C:2A Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: 21 Signing time: Thu 19 Sep 2024 06:07:22 +0000 Manifest this update: Thu 19 Sep 2024 06:07:21 +0000 Manifest next update: Thu 26 Sep 2024 06:07:21 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: C3krVwzUVSUK7kAhnrWESncOfhXsDJ1ULlsHVzBU2ZQ=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: PWJ2Cs2LxUKJ+e1M3VEz765niJLh/sYfiYQBfZ6dULY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Sep 19 06:07:21 2024 GMT Not After : Sep 26 06:07:21 2024 GMT Subject: CN=66ebbf99-39ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:61:0c:40:bb:9e:b0:6f:c2:3c:88:22:3c:6c: 32:ed:d4:9a:78:64:02:9a:cb:a9:ca:26:46:93:e9: 6c:5e:47:ac:50:6e:f3:21:60:d1:ff:a9:f8:23:18: b1:4d:6e:0d:fb:9c:69:5c:04:be:28:c3:da:4c:9c: dd:e0:d5:e4:9e:17:b0:ef:a9:c4:eb:65:20:a7:62: 6c:4f:39:c8:5c:86:96:c5:72:c7:fb:6c:ca:c5:15: a4:19:57:1f:c8:b1:5e:75:e6:dc:eb:6e:96:da:9e: 3f:7b:d4:7d:a6:d1:7f:2d:d0:ef:ee:85:06:c0:54: e6:88:51:78:9a:63:9d:5e:51:6b:37:71:31:71:9f: 61:5a:09:33:6c:be:ed:a0:85:d3:35:10:77:3f:f3: ef:11:12:b5:46:14:6d:8f:65:89:79:ff:b6:7e:ff: 59:ba:a4:7e:30:d3:0b:20:57:f5:f2:89:af:5d:ef: 05:f2:19:73:b4:ef:2b:f6:d2:d3:32:e9:4d:49:70: eb:57:fc:94:a6:31:49:1b:8d:2d:7f:2e:2e:b1:b4: d3:cf:52:73:9b:9a:43:91:a4:e3:50:c6:9b:59:af: c2:91:c4:09:2d:d0:9e:88:c5:29:2d:eb:44:7b:f2: 0c:f5:69:1b:5a:d6:32:05:5b:ca:20:87:ba:3f:df: b9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:45:DE:82:F3:97:E6:15:9E:0E:F3:EC:BF:56:69:82:1C:9F:3C:2A X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:13:a3:43:99:45:9f:3a:9c:e2:f1:59:d7:d5:51:45:3f:1e: 97:eb:0b:5a:57:b9:c5:4c:14:a3:88:62:30:12:ff:dc:92:84: 17:a0:7e:00:09:7e:e4:4e:23:88:86:18:69:34:5a:c7:82:bd: 62:f1:43:d3:b7:c7:97:36:f6:ad:57:9c:81:42:bb:fb:74:dd: e7:c6:75:f5:62:a2:ac:03:a0:ab:d5:8a:91:60:17:21:a9:3a: 53:30:43:d6:fe:af:89:46:ad:db:8f:54:c5:f7:0f:9d:0b:1a: 09:c4:48:f7:9f:20:0f:49:00:e8:36:78:a9:93:e8:06:e2:87: 2e:89:72:34:48:a7:2e:2c:91:60:1d:34:10:73:58:12:f3:57: 93:71:b5:b2:8f:56:7c:6b:47:52:b5:79:39:19:19:17:ee:22: fa:2a:9b:c1:36:e1:74:6b:c3:a4:7f:97:cc:5d:c6:d1:24:17: 68:a2:01:6d:53:1f:c5:ac:c7:57:10:66:0d:57:b6:70:24:17: 2e:b5:c5:f4:3e:41:a8:2c:08:74:4e:eb:1d:ef:35:92:27:8b: 7b:a2:82:48:b8:84:b6:ef:b9:84:10:44:b1:03:92:aa:e3:8c: ec:0a:24:e6:ad:a5:65:dc:e9:02:43:01:30:f2:a4:4e:58:ef: a9:02:b0:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUNBNzExMC8GA1UEBRMoMDFCQjI4RkRCRTE1NUE4NjYyQzVFRTY4MENGREYwQzk4 RDRFQkQxRDAeFw0yNDA5MTkwNjA3MjFaFw0yNDA5MjYwNjA3MjFaMBgxFjAUBgNV BAMTDTY2ZWJiZjk5LTM5ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhYQxAu56wb8I8iCI8bDLt1Jp4ZAKay6nKJkaT6WxeR6xQbvMhYNH/qfgjGLFN bg37nGlcBL4ow9pMnN3g1eSeF7DvqcTrZSCnYmxPOchchpbFcsf7bMrFFaQZVx/I sV515tzrbpbanj971H2m0X8t0O/uhQbAVOaIUXiaY51eUWs3cTFxn2FaCTNsvu2g hdM1EHc/8+8RErVGFG2PZYl5/7Z+/1m6pH4w0wsgV/Xyia9d7wXyGXO07yv20tMy 6U1JcOtX/JSmMUkbjS1/Li6xtNPPUnObmkORpONQxptZr8KRxAkt0J6IxSkt60R7 8gz1aRta1jIFW8ogh7o/37lBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZEXegvOX 5hWeDvPsv1ZpghyfPCowHwYDVR0jBBgwFoAUAbso/b4VWoZixe5oDP3wyY1OvR0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQ0E3LzUxN0U2RTRDNDVC MjExRUZBNURGNkQxOUM0RjlBRTAyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQWJzb19iNFZXb1ppeGU1b0RQM3d5WTFPdlIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB Q0E3LzUxN0U2RTRDNDVCMjExRUZBNURGNkQxOUM0RjlBRTAyL0Fic29fYjRWV29a aXhlNW9EUDN3eVkxT3ZSMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsTo0OZRZ86nOLxWdfVUUU/HpfrC1pXucVMFKOIYjAS/9yShBegfgAJ fuROI4iGGGk0WseCvWLxQ9O3x5c29q1XnIFCu/t03efGdfVioqwDoKvVipFgFyGp OlMwQ9b+r4lGrduPVMX3D50LGgnESPefIA9JAOg2eKmT6Abihy6JcjRIpy4skWAd NBBzWBLzV5NxtbKPVnxrR1K1eTkZGRfuIvoqm8E24XRrw6R/l8xdxtEkF2iiAW1T H8Wsx1cQZg1XtnAkFy61xfQ+QagsCHRO6x3vNZIni3uigki4hLbvuYQQRLEDkqrj jOwKJOatpWXc6QJDATDypE5Y76kCsJM= -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:25 2024 by rpki-client on console-fra.rpki-client.org