$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json) Hash identifier: fJMKsuSuXtwQu7EpsqQGf0z93WzGOqw3lZIFTY/dpp4= Subject key identifier: FB:23:B3:D4:B5:3E:75:28:2A:A5:A6:1B:21:11:17:75:3B:C1:4A:B0 Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft Manifest number: 26 Signing time: Sun 15 Sep 2024 10:14:23 +0000 Manifest this update: Sun 15 Sep 2024 10:14:23 +0000 Manifest next update: Sun 22 Sep 2024 10:14:23 +0000 Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: HX2KdWuiuIOmQyEv0MSeqvmhY4jEfwBkAnGYdAkZSts=) 2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: cLMsRe3bjQqt9KTlSv77ZsvirHU5HvmwxB64rB3nwQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Validity Not Before: Sep 15 10:14:23 2024 GMT Not After : Sep 22 10:14:23 2024 GMT Subject: CN=66e6b37f-d0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:4d:32:84:bf:db:f4:19:6e:a6:c5:c9:21: 98:b5:6e:75:52:7e:8a:93:50:b5:b8:3a:92:a4:0c: b5:14:2f:ac:c5:21:10:d4:32:e6:23:89:19:f6:b4: 93:5c:f6:80:36:34:9a:e6:df:dd:69:1f:ce:3a:ed: e7:dd:0b:fa:92:61:14:e5:76:85:f0:63:51:cd:0f: 57:79:6e:9f:73:f1:a8:fd:0f:4f:5d:eb:fe:98:4d: 10:04:b7:7d:2c:02:5d:05:1f:11:f3:2a:71:c7:f9: cb:fb:04:ae:9f:ef:4c:76:0e:5b:42:ee:24:cf:70: e3:43:53:11:69:65:2c:d4:d1:e7:9b:0c:f2:7e:a2: 28:f7:5d:05:05:be:a4:40:be:67:bd:a4:44:05:7c: d3:b7:f4:38:9d:5e:4c:3a:43:59:b5:02:da:9f:28: 75:9f:9e:ca:cb:97:98:36:c6:1b:cd:4b:c9:8e:bc: 68:24:ce:79:28:39:b6:3b:58:6c:7f:a4:35:5a:4d: 03:28:ec:be:94:38:dc:ad:7a:30:03:ff:bd:cb:67: 19:f6:b3:9e:b6:a7:28:ea:00:79:91:9a:bd:c5:58: 09:1a:e1:0f:d4:71:8a:59:41:20:99:1c:c5:ea:8c: 40:48:c1:db:6b:de:1e:48:ff:37:87:4c:00:7e:48: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:23:B3:D4:B5:3E:75:28:2A:A5:A6:1B:21:11:17:75:3B:C1:4A:B0 X509v3 Authority Key Identifier: keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bc:6d:dd:ec:dd:ae:9c:58:b5:f9:a5:d9:73:2c:d6:8f:08: 84:01:3e:ab:61:fd:97:de:6c:b2:21:f1:91:bd:cd:2d:af:57: 46:f3:e2:ae:71:a2:ea:5c:72:e6:41:09:ec:2c:83:04:70:e8: bc:fb:b5:db:18:fa:80:02:61:31:3a:6f:7e:43:ea:f6:13:aa: c2:b4:f1:49:32:6f:53:80:a3:d8:40:f4:16:ca:bf:5d:46:59: 36:9f:9d:fb:25:89:db:ec:e2:61:07:03:60:d7:1a:c5:0c:43: 6f:3a:41:7f:d6:a3:46:57:a0:d5:bc:dc:ba:f8:aa:6e:1a:08: a0:72:b4:c1:c2:7d:35:a6:a7:e3:55:35:53:1e:db:d3:95:5b: 04:92:5a:40:d1:55:22:e9:53:40:cd:7e:ba:94:24:d8:80:03: ba:63:41:41:6a:1a:5f:99:3a:46:24:4b:7a:fd:2b:83:88:d7: 53:b9:e2:38:fd:f0:6f:e6:78:5b:fc:3f:94:8e:57:a9:4a:ce: e4:b7:b5:ce:2c:23:0b:4b:ca:8b:77:d5:37:5d:0e:b7:eb:80: c8:61:8a:b3:55:ca:a2:10:26:ff:7c:ea:7e:13:29:6a:87:bf: b5:6f:30:34:0b:3e:d9:4c:3a:94:58:31:3b:40:d8:fc:1c:29: 48:e1:c8:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTYwNDExMC8GA1UEBRMoRTJGMTc3MzdCODRDMUY2Nzg2OUMwM0E0N0Y4QzQxOUZE NDIwMDE2QzAeFw0yNDA5MTUxMDE0MjNaFw0yNDA5MjIxMDE0MjNaMBgxFjAUBgNV BAMTDTY2ZTZiMzdmLWQwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcqk0yhL/b9BlupsXJIZi1bnVSfoqTULW4OpKkDLUUL6zFIRDUMuYjiRn2tJNc 9oA2NJrm391pH8467efdC/qSYRTldoXwY1HND1d5bp9z8aj9D09d6/6YTRAEt30s Al0FHxHzKnHH+cv7BK6f70x2DltC7iTPcONDUxFpZSzU0eebDPJ+oij3XQUFvqRA vme9pEQFfNO39DidXkw6Q1m1AtqfKHWfnsrLl5g2xhvNS8mOvGgkznkoObY7WGx/ pDVaTQMo7L6UONytejAD/73LZxn2s562pyjqAHmRmr3FWAka4Q/UcYpZQSCZHMXq jEBIwdtr3h5I/zeHTAB+SD/jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+yOz1LU+ dSgqpaYbIREXdTvBSrAwHwYDVR0jBBgwFoAU4vF3N7hMH2eGnAOkf4xBn9QgAWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxNjA0LzEyMEMyQzc0M0NF QjExRUY5NEUyNEY1OUM0RjlBRTAyLzR2RjNON2hNSDJlR25BT2tmNHhCbjlRZ0FX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHZGM043aE1IMmVHbkFPa2Y0eEJuOVFnQVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx NjA0LzEyMEMyQzc0M0NFQjExRUY5NEUyNEY1OUM0RjlBRTAyLzR2RjNON2hNSDJl R25BT2tmNHhCbjlRZ0FXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGq8bd3s3a6cWLX5pdlzLNaPCIQBPqth/ZfebLIh8ZG9zS2vV0bz4q5x oupccuZBCewsgwRw6Lz7tdsY+oACYTE6b35D6vYTqsK08Ukyb1OAo9hA9BbKv11G WTafnfslidvs4mEHA2DXGsUMQ286QX/Wo0ZXoNW83Lr4qm4aCKBytMHCfTWmp+NV NVMe29OVWwSSWkDRVSLpU0DNfrqUJNiAA7pjQUFqGl+ZOkYkS3r9K4OI11O54jj9 8G/meFv8P5SOV6lKzuS3tc4sIwtLyot31TddDrfrgMhhirNVyqIQJv986n4TKWqH v7VvMDQLPtlMOpRYMTtA2PwcKUjhyBY= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:37 2024 by rpki-client on console-ams.rpki-client.org