$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: tIdmckLD5ojBGZCCoF7tl2JPbMH0I0y5bw88UWEVml8= Subject key identifier: 7F:90:2E:3A:5A:F1:15:2C:FD:C0:9B:2B:15:73:1F:52:A7:A3:FA:F5 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: 37 Signing time: Sun 15 Sep 2024 09:57:25 +0000 Manifest this update: Sun 15 Sep 2024 09:57:24 +0000 Manifest next update: Sun 22 Sep 2024 09:57:24 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: sNW9E4trRv9FRC/F9I5OAdTTiMrYyo3szIJGk0OhHps=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: aCxLNGUfAZ6CNYlr7962E8YpM0oFXazWi/2qqzUqx5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Sep 15 09:57:24 2024 GMT Not After : Sep 22 09:57:24 2024 GMT Subject: CN=66e6af84-0479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:15:8f:38:3e:7a:a7:18:93:12:b3:84:54: ab:b1:15:12:19:a6:86:66:98:47:0c:d5:4b:d1:ee: 85:20:d7:c6:36:42:da:0d:d7:70:62:d6:f8:e1:c2: 07:9f:6c:43:4b:c5:81:a8:5d:b1:3c:4d:3a:bb:8d: d7:43:c4:8b:0d:6f:0e:ff:f8:92:eb:05:6c:51:d5: e2:84:64:4a:59:ff:27:e2:a3:e3:42:7c:57:aa:c5: 9a:81:a8:4a:0a:dc:24:df:8e:dc:b8:fc:44:6f:c7: 7c:a2:a5:81:2e:80:6f:d6:7f:26:45:3a:ca:a2:f8: 7c:c6:b9:30:09:f5:50:c7:01:e1:2f:3e:b2:6a:a6: 4e:cd:54:7a:ca:a6:19:67:a4:78:ee:20:c0:43:5e: 9e:50:44:8f:42:6f:13:ae:19:f6:82:83:c2:d4:6a: b0:af:b9:6e:df:3b:ca:40:c5:9d:e7:84:81:bb:0e: c1:27:b8:86:b0:96:63:90:ea:ac:71:64:98:70:64: 0d:45:c1:c9:ad:1a:69:a6:6e:a5:1d:a2:6f:95:13: 33:54:d9:77:d8:35:9d:97:dd:0e:ca:0f:f8:39:62: f0:62:83:f4:66:97:7b:4f:4f:cd:cc:14:5d:de:5f: 6a:d7:cc:32:b3:2d:11:d9:67:fb:db:aa:13:68:d9: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:90:2E:3A:5A:F1:15:2C:FD:C0:9B:2B:15:73:1F:52:A7:A3:FA:F5 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:22:bf:fc:d2:e3:df:02:9d:58:6e:d1:0c:58:06:11:f1:1a: e2:03:d7:6e:7b:0f:aa:84:47:11:27:07:83:09:6a:ad:66:d6: 03:f2:27:29:1b:2c:41:6f:c9:9b:a2:6c:08:5a:9b:57:2c:de: ee:a0:e5:40:9b:e0:6d:e4:21:0d:ec:ab:1f:07:db:d5:96:96: 18:87:01:5e:16:54:14:eb:02:e9:54:9d:6b:ba:02:5e:1d:99: ae:27:40:5c:fc:79:a5:a8:8c:20:ec:0a:e5:dd:46:68:fa:43: 03:1a:bf:72:b4:80:7f:06:86:1f:1a:9a:be:cd:49:db:98:38: 98:e8:76:25:58:cf:d6:42:0d:83:dc:d0:4b:21:b7:aa:45:84: d0:72:91:ac:15:af:e8:dc:62:d5:20:b5:7c:2d:f6:4f:a9:af: f2:5e:eb:fb:6f:9e:56:a6:24:13:c2:23:50:1c:22:e9:79:d1: 99:38:5f:b9:1e:09:9e:9a:41:f1:79:07:a4:52:6c:ed:16:b7: a6:04:b3:9a:bc:c0:4d:73:78:8a:03:5f:19:37:c3:31:37:da: 50:1f:c7:4b:af:80:d1:86:1e:13:78:37:1b:e4:1b:8f:68:a2: f5:00:f4:52:a7:f6:ee:4f:29:a0:74:4c:ec:e5:f5:d3:af:cf: 07:72:5a:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTdBOTExMC8GA1UEBRMoRjdGMDYzNjkzOTlEOTkzNUY1RkI1OUZENTg1NzE1NDFB NTgxQ0M2MzAeFw0yNDA5MTUwOTU3MjRaFw0yNDA5MjIwOTU3MjRaMBgxFjAUBgNV BAMTDTY2ZTZhZjg0LTA0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4mhWPOD56pxiTErOEVKuxFRIZpoZmmEcM1UvR7oUg18Y2QtoN13Bi1vjhwgef bENLxYGoXbE8TTq7jddDxIsNbw7/+JLrBWxR1eKEZEpZ/yfio+NCfFeqxZqBqEoK 3CTfjty4/ERvx3yipYEugG/WfyZFOsqi+HzGuTAJ9VDHAeEvPrJqpk7NVHrKphln pHjuIMBDXp5QRI9CbxOuGfaCg8LUarCvuW7fO8pAxZ3nhIG7DsEnuIawlmOQ6qxx ZJhwZA1FwcmtGmmmbqUdom+VEzNU2XfYNZ2X3Q7KD/g5YvBig/Rml3tPT83MFF3e X2rXzDKzLRHZZ/vbqhNo2UaDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf5AuOlrx FSz9wJsrFXMfUqej+vUwHwYDVR0jBBgwFoAU9/BjaTmdmTX1+1n9WFcVQaWBzGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1N0E5Lzg2MjQ2MzQ4MUZG MzExRUZBM0ZCMkM4MUM0RjlBRTAyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOV9CamFUbWRtVFgxLTFuOVdGY1ZRYVdCekdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 N0E5Lzg2MjQ2MzQ4MUZGMzExRUZBM0ZCMkM4MUM0RjlBRTAyLzlfQmphVG1kbVRY MS0xbjlXRmNWUWFXQnpHTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAUiv/zS498CnVhu0QxYBhHxGuID1257D6qERxEnB4MJaq1m1gPyJykb LEFvyZuibAham1cs3u6g5UCb4G3kIQ3sqx8H29WWlhiHAV4WVBTrAulUnWu6Al4d ma4nQFz8eaWojCDsCuXdRmj6QwMav3K0gH8Ghh8amr7NSduYOJjodiVYz9ZCDYPc 0Esht6pFhNBykawVr+jcYtUgtXwt9k+pr/Je6/tvnlamJBPCI1AcIul50Zk4X7ke CZ6aQfF5B6RSbO0Wt6YEs5q8wE1zeIoDXxk3wzE32lAfx0uvgNGGHhN4NxvkG49o ovUA9FKn9u5PKaB0TOzl9dOvzwdyWgQ= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:31 2024 by rpki-client on console-ams.rpki-client.org