$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft File: eameEjE6dnHw2VkHDVD_70tSVSU.mft (raw, json) Hash identifier: B8bfJcg37wo4vOzp5PYq6ETuuvlEAx5Ens5oqNmYf8Q= Subject key identifier: 4C:64:39:FC:41:34:20:FE:B3:B4:52:43:BC:06:F2:DE:BA:75:7F:D5 Authority key identifier: 79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25 Certificate issuer: /CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft Manifest number: 3A Signing time: Sun 15 Sep 2024 09:53:57 +0000 Manifest this update: Sun 15 Sep 2024 09:53:57 +0000 Manifest next update: Sun 22 Sep 2024 09:53:57 +0000 Files and hashes: 1: eameEjE6dnHw2VkHDVD_70tSVSU.crl (hash: oZPIyhteGzO2ChhhwJidQABzleIDmbYX7bo9a3LUdn4=) 2: 732ACDFA1C7D11EF95F4D214C4F9AE02.roa (hash: D54fzGr3XuP/sJMXmQZGHvGWo91QA4TjhHmNz0qmjV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525 Validity Not Before: Sep 15 09:53:57 2024 GMT Not After : Sep 22 09:53:57 2024 GMT Subject: CN=66e6aeb5-51fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:ac:1d:b4:a9:d1:8e:79:ac:43:33:d7:aa: 58:df:df:bc:55:c7:ca:66:83:44:08:dd:fe:dc:ef: 16:5c:74:3b:6a:5b:a0:22:33:be:3c:d7:8f:11:7a: ec:d5:e3:a2:b6:cb:db:be:8a:ea:63:7d:c6:67:05: 4a:01:bc:6a:2f:a1:dc:f6:94:4d:ce:70:20:e7:5a: 8b:9f:2f:17:21:fb:62:80:5f:ed:e4:fd:85:72:7c: fa:fd:92:67:4c:58:dc:3c:28:20:14:9f:7d:ca:9b: cf:de:fa:0c:ee:90:0d:a4:d5:a7:20:4b:29:64:a7: a9:79:ab:43:69:e9:ba:7b:20:be:ef:eb:5d:d5:07: 41:69:69:1a:15:21:e7:4c:3e:ad:46:07:cc:80:23: 35:6d:62:aa:d7:42:7d:c0:cd:33:60:5b:a0:8c:24: 93:94:12:da:76:e5:9a:97:32:93:a2:ba:a4:82:55: a6:70:99:53:05:a6:da:bd:02:11:4d:94:f6:7a:b1: 3f:39:7e:63:bb:ba:6a:05:9e:da:6c:5d:33:19:3c: af:8a:38:22:16:7b:c6:05:d4:09:c5:d5:ca:e3:29: 65:fb:01:0b:ad:75:e3:07:2c:d4:b0:52:fd:8a:f4: cb:10:94:69:ff:7e:6d:af:f9:26:11:d1:e3:aa:e8: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:64:39:FC:41:34:20:FE:B3:B4:52:43:BC:06:F2:DE:BA:75:7F:D5 X509v3 Authority Key Identifier: keyid:79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b5:1f:a4:2b:ec:c3:75:eb:ec:2c:ea:41:d6:3e:14:6e:11: be:6b:cd:ef:97:17:e6:41:38:6f:9a:ef:13:58:b2:bc:98:7f: 7c:f9:c7:a2:ec:a9:8d:a8:ad:a4:17:c0:f4:53:25:1f:4d:17: cf:3a:a3:e0:0b:26:4f:ff:86:fc:0c:63:80:73:9e:5d:71:36: aa:9c:29:2b:f5:8e:88:a5:1a:0d:30:67:0c:2f:2f:f6:e5:2f: af:a6:8c:af:eb:81:ee:96:9c:48:5e:d4:87:1c:77:ac:25:67: ca:a3:05:73:97:50:fd:2d:12:a8:7d:c0:94:18:9e:36:de:f2: c6:0e:e9:3d:35:1a:c6:7f:a0:98:b5:89:2d:44:c9:21:a5:d6: 3f:66:72:75:ad:64:03:5f:d2:ef:06:15:79:a4:c4:5a:33:24: 5a:e5:e6:a7:b3:a5:ae:b0:f8:05:33:7b:fc:b6:0b:fa:19:64: fd:8a:4e:10:58:a0:76:84:c3:21:51:ab:cf:8a:ed:5c:47:10: 81:53:fb:8e:84:ba:fd:ab:8b:27:2b:c1:10:68:3e:09:24:47: 6e:5f:10:98:8a:d9:eb:f7:b9:cb:4b:72:fa:52:76:aa:d9:57: cf:8d:05:f7:e4:6b:1d:59:f6:c1:70:1d:67:4e:37:f0:92:5f: e3:80:92:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzAxNTExMC8GA1UEBRMoNzlBOTlFMTIzMTNBNzY3MUYwRDk1OTA3MEQ1MEZGRUY0 QjUyNTUyNTAeFw0yNDA5MTUwOTUzNTdaFw0yNDA5MjIwOTUzNTdaMBgxFjAUBgNV BAMTDTY2ZTZhZWI1LTUxZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHmKwdtKnRjnmsQzPXqljf37xVx8pmg0QI3f7c7xZcdDtqW6AiM748148ReuzV 46K2y9u+iupjfcZnBUoBvGovodz2lE3OcCDnWoufLxch+2KAX+3k/YVyfPr9kmdM WNw8KCAUn33Km8/e+gzukA2k1acgSylkp6l5q0Np6bp7IL7v613VB0FpaRoVIedM Pq1GB8yAIzVtYqrXQn3AzTNgW6CMJJOUEtp25ZqXMpOiuqSCVaZwmVMFptq9AhFN lPZ6sT85fmO7umoFntpsXTMZPK+KOCIWe8YF1AnF1crjKWX7AQutdeMHLNSwUv2K 9MsQlGn/fm2v+SYR0eOq6LY7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTGQ5/EE0 IP6ztFJDvAby3rp1f9UwHwYDVR0jBBgwFoAUeameEjE6dnHw2VkHDVD/70tSVSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzMDE1LzRBMjQ4RUQ4MUM3 QzExRUZCOTk2MTEyREM0RjlBRTAyL2VhbWVFakU2ZG5IdzJWa0hEVkRfNzB0U1ZT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWFtZUVqRTZkbkh3MlZrSERWRF83MHRTVlNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz MDE1LzRBMjQ4RUQ4MUM3QzExRUZCOTk2MTEyREM0RjlBRTAyL2VhbWVFakU2ZG5I dzJWa0hEVkRfNzB0U1ZTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADq1H6Qr7MN16+ws6kHWPhRuEb5rze+XF+ZBOG+a7xNYsryYf3z5x6Ls qY2oraQXwPRTJR9NF886o+ALJk//hvwMY4Bznl1xNqqcKSv1joilGg0wZwwvL/bl L6+mjK/rge6WnEhe1Iccd6wlZ8qjBXOXUP0tEqh9wJQYnjbe8sYO6T01GsZ/oJi1 iS1EySGl1j9mcnWtZANf0u8GFXmkxFozJFrl5qezpa6w+AUze/y2C/oZZP2KThBY oHaEwyFRq8+K7VxHEIFT+46Euv2riycrwRBoPgkkR25fEJiK2ev3uctLcvpSdqrZ V8+NBffkax1Z9sFwHWdON/CSX+OAkpo= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:26 2024 by rpki-client on console-ams.rpki-client.org