$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: JF0ucJctzqN6AmmOxnou1aPmfT0UCO3LzUBOsUHzBHU= Subject key identifier: B4:59:E9:55:BC:10:B5:23:09:AB:73:9F:1B:40:38:05:69:47:78:30 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: 1D Signing time: Sun 15 Sep 2024 10:23:35 +0000 Manifest this update: Sun 15 Sep 2024 10:23:35 +0000 Manifest next update: Sun 22 Sep 2024 10:23:35 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: 5GBkXbYWFEtpLaxu0kgO+t0KOlXIm+BLiapBYeudIaY=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: OVQ/CMJ4XqARrGXYEMgXeRxRPf3/PHnhFuc4e8fTgpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: Sep 15 10:23:35 2024 GMT Not After : Sep 22 10:23:35 2024 GMT Subject: CN=66e6b5a7-5c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:c2:23:2b:15:e7:8e:21:8a:45:6a:1b:b0: b9:78:1a:67:49:b7:2a:53:57:e5:84:76:5c:6e:9e: e8:70:95:08:cc:a9:e9:c6:81:76:9e:aa:88:ee:f5: 26:c1:4c:1d:f6:53:6a:2c:73:af:57:8f:7f:30:83: a6:4e:8f:1f:0d:dc:f7:52:ea:20:c4:d2:cc:25:dd: 09:d6:74:9b:5b:0c:93:fe:27:fb:1a:41:2b:18:0c: ea:5d:9b:82:84:1a:af:6d:72:9e:7f:ae:06:f1:6f: 20:9b:34:dc:e0:58:4a:24:30:9d:44:6e:d3:bf:0b: 0d:d9:42:73:fd:6e:69:f3:ca:de:00:94:82:21:90: a8:1a:52:0c:87:dc:ee:f5:28:55:aa:fd:aa:50:91: 02:a6:39:43:40:95:4b:0c:ea:aa:a4:94:62:24:fc: bb:39:55:69:05:bd:7a:5a:4c:e3:eb:90:f9:99:10: 90:2b:5b:b3:84:75:a4:6b:39:13:60:53:4a:2c:bc: 4a:78:bf:73:6d:f8:97:b8:82:4b:39:05:4e:b3:01: 4d:da:e4:94:07:15:8a:e6:b5:00:bd:e8:f4:24:c2: 14:33:0c:11:6e:30:89:2d:e4:cd:61:c2:7b:01:21: 6b:c8:36:56:27:95:2e:a5:37:0f:d5:f4:f3:0b:1c: 82:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:59:E9:55:BC:10:B5:23:09:AB:73:9F:1B:40:38:05:69:47:78:30 X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:94:78:c8:7a:8d:16:70:11:95:76:0a:ea:77:60:b3:1d:a2: b8:15:13:2e:c9:47:6f:f0:9c:67:c0:6d:5b:bf:60:d1:d4:fc: 35:2c:bd:a9:74:17:72:52:a0:54:18:5d:93:82:f9:cd:31:b0: 53:9f:ca:cc:3b:51:70:61:a4:44:3f:b2:07:40:cf:40:5f:44: 99:d0:43:c1:e4:49:3c:9b:76:a0:bb:e3:e1:d1:c6:84:96:1a: 79:bf:8d:a4:23:2c:c7:23:5f:18:8f:ce:d4:ca:9e:2d:1d:3b: 21:8f:5b:22:32:78:a9:11:0c:e0:e4:4c:fd:4d:5f:30:c0:20: cb:08:39:fa:3a:d6:f8:4b:1e:06:0c:c6:c8:f6:6a:9e:7d:b7: 9b:5a:6e:b2:f9:ad:66:16:5a:8d:55:54:a0:4d:a0:8c:39:00: bc:1c:a2:ec:80:ad:fa:51:bc:cf:70:e9:fc:00:b4:94:40:1f: 02:a8:89:47:09:b0:20:86:e2:aa:03:52:47:e3:0d:03:09:74: 64:bf:c0:25:a3:e3:ea:de:bd:7c:fc:78:82:af:2a:e6:11:af: 38:3a:86:a9:f3:2e:0e:56:1a:ac:8a:1e:e9:7a:f8:cc:61:34: e2:8b:82:b3:28:3b:39:4b:c6:50:8d:e6:f8:35:7a:e9:c6:c5: 80:43:41:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MENGNTExMC8GA1UEBRMoQ0JCQkJCMjRCMjJCNDM1RDFDQTQ5M0E5RDYzRENBNzc5 QkUwNzk2QTAeFw0yNDA5MTUxMDIzMzVaFw0yNDA5MjIxMDIzMzVaMBgxFjAUBgNV BAMTDTY2ZTZiNWE3LTVjNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/5sIjKxXnjiGKRWobsLl4GmdJtypTV+WEdlxunuhwlQjMqenGgXaeqoju9SbB TB32U2osc69Xj38wg6ZOjx8N3PdS6iDE0swl3QnWdJtbDJP+J/saQSsYDOpdm4KE Gq9tcp5/rgbxbyCbNNzgWEokMJ1EbtO/Cw3ZQnP9bmnzyt4AlIIhkKgaUgyH3O71 KFWq/apQkQKmOUNAlUsM6qqklGIk/Ls5VWkFvXpaTOPrkPmZEJArW7OEdaRrORNg U0osvEp4v3Nt+Je4gks5BU6zAU3a5JQHFYrmtQC96PQkwhQzDBFuMIkt5M1hwnsB IWvINlYnlS6lNw/V9PMLHII7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtFnpVbwQ tSMJq3OfG0A4BWlHeDAwHwYDVR0jBBgwFoAUy7u7JLIrQ10cpJOp1j3Kd5vgeWow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwQ0Y1LzUzOEMxOTYwNDky QjExRUZCRTEwMTg0RkM0RjlBRTAyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VX by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTd1N0pMSXJRMTBjcEpPcDFqM0tkNXZnZVdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw Q0Y1LzUzOEMxOTYwNDkyQjExRUZCRTEwMTg0RkM0RjlBRTAyL3k3dTdKTElyUTEw Y3BKT3AxajNLZDV2Z2VXby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2UeMh6jRZwEZV2Cup3YLMdorgVEy7JR2/wnGfAbVu/YNHU/DUsval0 F3JSoFQYXZOC+c0xsFOfysw7UXBhpEQ/sgdAz0BfRJnQQ8HkSTybdqC74+HRxoSW Gnm/jaQjLMcjXxiPztTKni0dOyGPWyIyeKkRDODkTP1NXzDAIMsIOfo61vhLHgYM xsj2ap59t5tabrL5rWYWWo1VVKBNoIw5ALwcouyArfpRvM9w6fwAtJRAHwKoiUcJ sCCG4qoDUkfjDQMJdGS/wCWj4+revXz8eIKvKuYRrzg6hqnzLg5WGqyKHul6+Mxh NOKLgrMoOzlLxlCN5vg1eunGxYBDQXk= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:45 2024 by rpki-client on console-fra.rpki-client.org