$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft File: Syj186m-bJVf8b4Pe1CAOrF-tGA.mft (raw, json) Hash identifier: i+QEOvjchbJl0ea4PG959YZKq43Gne8BrUxnTW4Jnak= Subject key identifier: 9B:2D:AB:CE:4A:3C:43:9E:9F:12:F2:94:66:85:9B:23:F2:A5:F5:3E Authority key identifier: 4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60 Certificate issuer: /CN=A91DC324/serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft Manifest number: 30 Signing time: Sun 15 Sep 2024 10:06:20 +0000 Manifest this update: Sun 15 Sep 2024 10:06:19 +0000 Manifest next update: Sun 22 Sep 2024 10:06:19 +0000 Files and hashes: 1: Syj186m-bJVf8b4Pe1CAOrF-tGA.crl (hash: 2bzAfuALOJnQVljCG+OkRrjyBIR3XprhJdoGXtKPHMg=) 2: 8E20940E32AE11EFAE6AE719C4F9AE02.roa (hash: deEx+RaooY/v2zuNK6Z4bMh+A406WK5212/1xqrRouE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC324/serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460 Validity Not Before: Sep 15 10:06:19 2024 GMT Not After : Sep 22 10:06:19 2024 GMT Subject: CN=66e6b19c-3aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:26:d8:9a:e4:f5:2f:25:e8:be:4d:d2:64: d8:9f:cf:14:37:81:52:cb:c0:c1:33:f9:89:86:23: 94:b1:34:9a:e5:ee:ab:eb:5d:ed:c7:67:43:29:51: c6:2e:de:32:0b:66:df:a8:6e:dc:3a:23:e3:e0:26: d5:c8:f4:c0:76:ad:af:93:ce:64:68:f2:69:10:3a: c3:4e:0d:da:36:92:9f:04:a3:71:59:9f:0d:1a:c4: 94:e2:a8:b2:f8:98:ec:d3:32:c6:8a:f6:69:d2:5c: 3a:cb:92:8d:f6:bf:aa:16:24:b5:3f:cd:86:3c:0e: c9:f0:79:2f:33:39:a6:88:d6:56:96:8c:83:6e:3b: 80:cc:e6:f6:ab:36:ac:70:a0:76:f5:cf:ba:fd:ab: f3:bd:90:84:63:9e:5c:e4:a4:64:7a:82:e2:2f:66: 1a:7e:b8:5c:e6:ad:d2:65:98:36:8c:13:2e:6d:85: bd:30:bc:c5:2e:b5:51:5e:f6:99:c2:e1:d5:28:a0: a4:fa:5d:19:e5:0b:e1:96:7a:c4:18:17:ae:b4:d6: 71:d9:c7:bc:8f:d0:16:c5:4e:45:37:58:26:7b:87: ec:b7:77:fe:83:74:ba:1c:5f:48:30:41:e4:94:64: 80:00:84:fc:46:47:cc:5e:7a:bb:c9:76:e2:0e:57: 9e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2D:AB:CE:4A:3C:43:9E:9F:12:F2:94:66:85:9B:23:F2:A5:F5:3E X509v3 Authority Key Identifier: keyid:4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:29:12:03:18:30:0c:a3:9f:90:ff:e0:c9:1b:7f:63:30:79: e4:2a:7e:4f:e1:69:d2:01:14:10:09:a9:e1:83:1b:ff:2f:54: 55:28:e5:99:16:04:51:15:35:b2:17:40:fd:e4:ea:50:da:7d: e6:42:6b:9a:7e:e1:ff:ef:f1:5d:be:47:84:17:d8:f7:68:36: 2e:ee:9e:9d:eb:69:70:56:d8:a5:a3:80:7d:73:3b:a9:a3:ef: 30:89:76:08:1f:13:4c:0d:b1:fb:84:ec:65:31:36:de:b6:72: 16:54:d1:ee:fa:76:92:3f:6c:3c:7f:45:5a:31:b7:d6:e0:a3: fb:25:a2:08:ef:6f:a1:77:1b:41:30:37:19:a3:41:1c:b3:fa: 46:1a:79:00:4e:11:67:f8:c6:e4:0c:6e:7f:bb:b5:25:2b:14: 01:43:55:62:a7:47:06:48:4d:52:51:8f:11:d3:c4:10:33:c7: 57:53:b4:aa:fe:6c:49:15:95:d8:ca:32:05:b8:ce:36:a1:4c: 0f:fb:23:2a:59:08:88:e1:81:26:c2:c4:aa:78:12:4e:47:e1: 07:f7:9c:9c:40:c6:e0:ce:57:4e:a6:27:4e:47:ae:33:90:dd: 44:32:10:ec:7a:7b:4a:a5:38:dd:76:34:31:66:2d:6e:0e:e6: 20:13:fb:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzMyNDExMC8GA1UEBRMoNEIyOEY1RjNBOUJFNkM5NTVGRjFCRTBGN0I1MDgwM0FC MTdFQjQ2MDAeFw0yNDA5MTUxMDA2MTlaFw0yNDA5MjIxMDA2MTlaMBgxFjAUBgNV BAMTDTY2ZTZiMTljLTNhZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP1SbYmuT1LyXovk3SZNifzxQ3gVLLwMEz+YmGI5SxNJrl7qvrXe3HZ0MpUcYu 3jILZt+obtw6I+PgJtXI9MB2ra+TzmRo8mkQOsNODdo2kp8Eo3FZnw0axJTiqLL4 mOzTMsaK9mnSXDrLko32v6oWJLU/zYY8DsnweS8zOaaI1laWjINuO4DM5varNqxw oHb1z7r9q/O9kIRjnlzkpGR6guIvZhp+uFzmrdJlmDaMEy5thb0wvMUutVFe9pnC 4dUooKT6XRnlC+GWesQYF6601nHZx7yP0BbFTkU3WCZ7h+y3d/6DdLocX0gwQeSU ZIAAhPxGR8xeervJduIOV57PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmy2rzko8 Q56fEvKUZoWbI/Kl9T4wHwYDVR0jBBgwFoAUSyj186m+bJVf8b4Pe1CAOrF+tGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDMzI0Lzk4MkM3NjEyMzFF MDExRUY5OTk1M0QyMkM0RjlBRTAyL1N5ajE4Nm0tYkpWZjhiNFBlMUNBT3JGLXRH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU3lqMTg2bS1iSlZmOGI0UGUxQ0FPckYtdEdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD MzI0Lzk4MkM3NjEyMzFFMDExRUY5OTk1M0QyMkM0RjlBRTAyL1N5ajE4Nm0tYkpW ZjhiNFBlMUNBT3JGLXRHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKwpEgMYMAyjn5D/4Mkbf2MweeQqfk/hadIBFBAJqeGDG/8vVFUo5ZkW BFEVNbIXQP3k6lDafeZCa5p+4f/v8V2+R4QX2PdoNi7unp3raXBW2KWjgH1zO6mj 7zCJdggfE0wNsfuE7GUxNt62chZU0e76dpI/bDx/RVoxt9bgo/slogjvb6F3G0Ew NxmjQRyz+kYaeQBOEWf4xuQMbn+7tSUrFAFDVWKnRwZITVJRjxHTxBAzx1dTtKr+ bEkVldjKMgW4zjahTA/7IypZCIjhgSbCxKp4Ek5H4Qf3nJxAxuDOV06mJ05HrjOQ 3UQyEOx6e0qlON12NDFmLW4O5iAT+3Q= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:13 2024 by rpki-client on console-fra.rpki-client.org