$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: kQokW7mvfHJNRMicRlNiYUpnc+X8lJCOYBG0fb9YTxE= Subject key identifier: 43:3B:0A:AA:07:17:6F:C0:92:B1:DA:7C:6D:B7:C6:22:62:6E:4E:B8 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 23 Signing time: Wed 23 Oct 2024 06:31:09 +0000 Manifest this update: Wed 23 Oct 2024 06:31:08 +0000 Manifest next update: Wed 30 Oct 2024 06:31:08 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: HGzdEtSDZmTpGkwk2G4391BM+HbG5EgoQc46hV0GdbU=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Oct 23 06:31:08 2024 GMT Not After : Oct 30 06:31:08 2024 GMT Subject: CN=6718982c-0393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:07:85:57:ab:e8:45:cd:c5:11:57:83:cd: 5a:32:a4:26:9b:3b:d0:d8:54:f0:53:ea:d6:98:ce: f1:34:d4:8a:e6:88:a4:f0:79:13:d5:e6:8d:9f:b1: e6:0b:34:20:e0:7b:24:66:4b:7e:b6:e0:b8:0a:5c: dc:69:b3:c4:14:9d:40:41:3d:0e:f3:c3:bf:77:b6: 5c:b5:17:07:77:ac:46:bd:30:36:6a:38:21:90:fa: bf:fd:58:db:76:7a:5b:ec:ea:8c:35:47:c7:1d:f2: ce:e2:74:12:fd:c5:dd:7c:fc:c1:d7:d0:14:9f:18: c9:c3:2e:fc:96:46:ad:35:7c:0b:2a:9d:af:d7:97: f8:e8:80:8c:61:12:bc:c4:2a:59:d4:14:65:53:fe: ed:a9:90:32:fb:16:42:d5:02:89:98:9b:2d:f2:aa: eb:23:58:00:f6:0b:67:9c:54:2b:40:f2:5f:aa:2d: 85:12:9d:71:37:18:ca:16:3f:53:e7:5e:71:0b:57: 7c:43:08:51:cb:30:c7:23:91:60:77:51:dd:29:4d: c2:19:76:c2:83:92:4f:39:2e:ab:9a:0c:fa:61:a6: 93:f0:a4:a7:a2:7b:1c:a0:85:9c:b3:f7:fd:d3:f0: 6b:19:48:9c:d5:84:ff:b4:33:a9:82:7e:ab:37:94: ba:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3B:0A:AA:07:17:6F:C0:92:B1:DA:7C:6D:B7:C6:22:62:6E:4E:B8 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:45:a1:76:69:f8:0e:bd:1f:bd:8f:38:32:00:0c:c2:6e:8a: c9:4d:1f:44:5f:e9:e4:b6:34:39:17:1e:1d:89:15:92:8c:49: 34:38:2f:97:d2:c0:04:c1:29:26:35:f3:4f:14:c8:e8:20:45: 82:35:dd:75:d0:ab:6f:83:2e:3d:89:2a:4a:48:b2:59:80:f5: d6:68:b1:0f:08:07:b0:22:f0:8a:8c:a1:b1:ed:48:3b:74:1e: f3:95:68:e2:c9:27:fb:f1:1f:0e:10:09:39:88:17:bd:39:24: 2f:73:6e:36:9b:9f:ba:1c:13:7c:8e:7d:46:81:bf:1a:37:b9: 05:aa:70:d7:e5:cf:0e:26:fb:1b:78:56:b0:c6:3e:f7:a9:88: fd:a7:1c:70:99:31:40:7a:cc:49:4f:87:46:68:a5:ff:a4:00: 29:54:58:28:50:6b:e4:86:76:a6:19:a3:16:fc:a3:20:3b:6b: f7:c5:fc:a2:72:8f:4c:07:7a:f0:11:63:3e:41:fd:76:89:ff: 5b:71:7f:90:e9:f1:7b:ee:c2:d1:d1:b6:45:8c:37:93:ae:94: 06:81:c4:25:83:bc:8f:0e:30:a1:af:3d:aa:4c:8b:f9:3f:95: 0f:f3:29:8f:af:ae:01:92:eb:1f:aa:c3:4f:45:46:db:a1:c6: 1a:56:96:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkI5QTExMC8GA1UEBRMoRjlDNDQ0Q0ZDRjNCNkEzNzU0NzFFM0I1NDg3NEZDMkI0 OUIyQzcyNjAeFw0yNDEwMjMwNjMxMDhaFw0yNDEwMzAwNjMxMDhaMBgxFjAUBgNV BAMTDTY3MTg5ODJjLTAzOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp8geFV6voRc3FEVeDzVoypCabO9DYVPBT6taYzvE01IrmiKTweRPV5o2fseYL NCDgeyRmS3624LgKXNxps8QUnUBBPQ7zw793tly1Fwd3rEa9MDZqOCGQ+r/9WNt2 elvs6ow1R8cd8s7idBL9xd18/MHX0BSfGMnDLvyWRq01fAsqna/Xl/jogIxhErzE KlnUFGVT/u2pkDL7FkLVAomYmy3yqusjWAD2C2ecVCtA8l+qLYUSnXE3GMoWP1Pn XnELV3xDCFHLMMcjkWB3Ud0pTcIZdsKDkk85LquaDPphppPwpKeiexyghZyz9/3T 8GsZSJzVhP+0M6mCfqs3lLqFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQzsKqgcX b8CSsdp8bbfGImJuTrgwHwYDVR0jBBgwFoAU+cREz887ajdUceO1SHT8K0myxyYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QjlBLzExNjAxMjhFNjE1 MDExRUZBRTdBOEM3M0M0RjlBRTAyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWNSRXo4ODdhamRVY2VPMVNIVDhLMG15eHlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QjlBLzExNjAxMjhFNjE1MDExRUZBRTdBOEM3M0M0RjlBRTAyLy1jUkV6ODg3YWpk VWNlTzFTSFQ4SzBteXh5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJFoXZp+A69H72PODIADMJuislNH0Rf6eS2NDkXHh2JFZKMSTQ4L5fS wATBKSY1808UyOggRYI13XXQq2+DLj2JKkpIslmA9dZosQ8IB7Ai8IqMobHtSDt0 HvOVaOLJJ/vxHw4QCTmIF705JC9zbjabn7ocE3yOfUaBvxo3uQWqcNflzw4m+xt4 VrDGPvepiP2nHHCZMUB6zElPh0Zopf+kAClUWChQa+SGdqYZoxb8oyA7a/fF/KJy j0wHevARYz5B/XaJ/1txf5Dp8XvuwtHRtkWMN5OulAaBxCWDvI8OMKGvPapMi/k/ lQ/zKY+vrgGS6x+qw09FRtuhxhpWlsE= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org