$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: o0gv2et2SNoFRKp30cpC2geexOosMuQ9Hca99Q6UcTQ= Subject key identifier: 49:7B:5C:9C:D7:A7:2A:C0:B8:FC:0F:FC:BD:92:C7:AC:CF:5E:FE:A7 Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: 25 Signing time: Sun 15 Sep 2024 10:14:43 +0000 Manifest this update: Sun 15 Sep 2024 10:14:42 +0000 Manifest next update: Sun 22 Sep 2024 10:14:42 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: Rxd8MtdlJXvj32VjSK5vo7glegmm01ZW4IDIaZ5kaks=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: R10zRvOpCOn3DC2tMPa1Rak+VNLq06OAGr7UweeKXtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Sep 15 10:14:42 2024 GMT Not After : Sep 22 10:14:42 2024 GMT Subject: CN=66e6b392-c566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:8d:ef:79:1b:0d:9c:cc:19:aa:41:5d:81: 61:2d:8d:dc:57:8e:85:f4:43:58:73:92:b8:f6:63: ec:49:2e:0d:52:8e:1c:bc:74:5b:51:8b:9b:bf:44: fc:8b:e4:ba:50:19:6e:a7:a3:09:99:54:9d:d5:c7: 1d:63:69:23:e0:5d:65:e8:af:62:81:b7:4e:f7:c0: 8c:b0:d9:c5:a6:1e:d8:6b:e3:f4:75:62:d6:b4:3a: 06:a5:a5:f5:b4:d3:d1:5e:cb:86:04:50:76:3f:cf: 9f:00:d4:d1:a0:fd:f4:47:e8:87:c0:be:f1:2d:6a: b1:c3:24:9f:37:00:06:ab:1d:ba:2c:d8:a5:70:67: 6d:b8:c5:b6:05:d0:ae:f0:2d:d9:17:24:50:14:a0: d7:26:b9:ad:d6:04:4e:a2:d7:75:ce:d6:51:13:28: 11:0f:c5:c0:23:ab:df:78:a5:2e:0b:50:70:b6:22: 57:92:cc:2c:77:f0:df:d1:18:b3:83:bc:5b:2a:ac: 9c:48:e1:5f:16:60:ed:c6:36:2f:d9:e6:f1:9a:a4: b9:e0:d9:cf:6a:2c:49:6c:9b:c8:50:8d:17:4e:ba: b3:bc:73:51:32:14:c5:40:37:be:39:76:94:1e:0f: aa:c1:41:6a:b0:b7:1e:44:ca:ff:28:dc:58:52:5a: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7B:5C:9C:D7:A7:2A:C0:B8:FC:0F:FC:BD:92:C7:AC:CF:5E:FE:A7 X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:66:ff:2b:83:07:dc:92:fb:71:a2:6e:79:0c:1c:bc:42:3b: 5f:77:a7:37:0c:2b:70:03:cb:ad:3d:11:86:44:33:e4:f4:8e: ef:64:99:ec:ec:81:bc:55:13:03:59:9f:35:1b:e7:f4:3e:17: 93:19:7e:39:a0:a3:7d:0f:50:61:ea:e8:56:7b:96:4f:2a:06: 97:d7:df:a0:d9:35:a7:9d:44:11:5a:d2:89:cc:bd:3f:09:64: a6:9e:e2:e6:c6:04:10:7b:83:10:53:b5:3d:19:49:1a:6a:26: 61:fd:e4:1a:a6:f8:79:61:6c:53:34:ad:0e:52:61:db:c3:03: d3:34:8e:c6:0e:c9:d7:90:78:6f:0d:f5:58:d7:52:3b:95:c4: 0a:3a:02:04:ec:34:d1:65:d6:f1:c5:51:54:9e:f3:79:bf:6f: cd:a0:fd:c4:a2:81:23:43:44:8a:5b:34:19:d2:41:57:7c:71: c4:d0:ad:47:f8:3c:1b:8e:b3:ac:e6:09:51:be:eb:82:80:e0: c0:57:f7:4b:93:a3:f8:5f:cd:3b:23:7f:09:ef:48:3b:a6:a0: ee:ca:07:a0:1a:1d:7f:73:d7:f6:63:5a:f7:11:b9:ae:b3:74: a6:2a:8e:ef:c9:c3:13:29:aa:c6:26:6f:e4:17:b2:d5:3d:62: 5e:20:49:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Mzc5RjExMC8GA1UEBRMoODJCNEQyNzFERTIxMkUwNjMzNUMwQjQ1RTY2NTE3QjUw OEI4MzUxNjAeFw0yNDA5MTUxMDE0NDJaFw0yNDA5MjIxMDE0NDJaMBgxFjAUBgNV BAMTDTY2ZTZiMzkyLWM1NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWWY3veRsNnMwZqkFdgWEtjdxXjoX0Q1hzkrj2Y+xJLg1Sjhy8dFtRi5u/RPyL 5LpQGW6nowmZVJ3Vxx1jaSPgXWXor2KBt073wIyw2cWmHthr4/R1Yta0OgalpfW0 09Fey4YEUHY/z58A1NGg/fRH6IfAvvEtarHDJJ83AAarHbos2KVwZ224xbYF0K7w LdkXJFAUoNcmua3WBE6i13XO1lETKBEPxcAjq994pS4LUHC2IleSzCx38N/RGLOD vFsqrJxI4V8WYO3GNi/Z5vGapLng2c9qLElsm8hQjRdOurO8c1EyFMVAN745dpQe D6rBQWqwtx5Eyv8o3FhSWlMbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSXtcnNen KsC4/A/8vZLHrM9e/qcwHwYDVR0jBBgwFoAUgrTScd4hLgYzXAtF5mUXtQi4NRYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNzlGLzZGOTlENEYwM0NG OTExRUZBMEEwNkY4NkM0RjlBRTAyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5S WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3JUU2NkNGhMZ1l6WEF0RjVtVVh0UWk0TlJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NzlGLzZGOTlENEYwM0NGOTExRUZBMEEwNkY4NkM0RjlBRTAyL2dyVFNjZDRoTGdZ elhBdEY1bVVYdFFpNE5SWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIFm/yuDB9yS+3GibnkMHLxCO193pzcMK3ADy609EYZEM+T0ju9kmezs gbxVEwNZnzUb5/Q+F5MZfjmgo30PUGHq6FZ7lk8qBpfX36DZNaedRBFa0onMvT8J ZKae4ubGBBB7gxBTtT0ZSRpqJmH95Bqm+HlhbFM0rQ5SYdvDA9M0jsYOydeQeG8N 9VjXUjuVxAo6AgTsNNFl1vHFUVSe83m/b82g/cSigSNDRIpbNBnSQVd8ccTQrUf4 PBuOs6zmCVG+64KA4MBX90uTo/hfzTsjfwnvSDumoO7KB6AaHX9z1/ZjWvcRua6z dKYqju/JwxMpqsYmb+QXstU9Yl4gSY4= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:45 2024 by rpki-client on console-fra.rpki-client.org