$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: BqN6jiMm6KfN2sIEuCWzmJuLfknczRxZv2n936W0tSQ= Subject key identifier: 1A:84:E4:15:F2:9D:DD:CA:74:52:03:79:31:4D:0D:55:6A:CD:BB:DE Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: 21 Signing time: Wed 23 Oct 2024 06:31:04 +0000 Manifest this update: Wed 23 Oct 2024 06:31:03 +0000 Manifest next update: Wed 30 Oct 2024 06:31:03 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: RvjssiBDuzoVPNrD172KWxsXVaK9O7V5GYDbH4neFlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Oct 23 06:31:03 2024 GMT Not After : Oct 30 06:31:03 2024 GMT Subject: CN=67189827-3514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:0b:cf:bd:e3:ff:47:55:34:bb:19:2d:6c: 69:21:23:f4:e1:9a:52:3f:55:e7:19:7d:76:74:ee: a1:9a:60:b6:f0:10:e0:e8:3f:e5:71:e5:cc:b1:67: fb:c4:2d:f6:b7:06:ec:cc:30:25:74:b4:eb:a7:5c: 35:0e:a5:bf:56:4e:46:63:28:38:1e:af:36:95:4b: 64:24:d9:01:15:91:c4:05:30:e3:10:25:7e:de:c5: 47:b8:85:0a:5d:2f:d9:1c:51:d6:ec:a5:85:16:2b: 75:54:69:75:8f:f7:9a:87:ba:69:04:7c:55:2c:40: 48:40:68:ca:6f:f2:66:54:1a:53:c5:d3:c1:9a:db: 84:f4:08:97:cd:65:42:ef:bf:2e:68:2f:d8:47:d2: c6:fd:58:bd:64:48:3c:7c:c7:26:2e:3f:ff:07:66: 79:11:09:39:eb:72:eb:a2:7f:d8:0a:0e:1f:b3:ef: 89:d4:06:53:82:7d:6d:7c:d2:4b:d2:9d:e6:9f:f2: aa:0d:a0:e3:e2:4e:5a:fd:71:cf:ea:d8:e8:84:7e: e8:7f:d3:c5:1b:af:7f:b5:f7:69:01:f6:2c:92:bd: 14:46:62:d6:cf:83:b3:85:f1:be:d7:d1:db:78:3b: 7f:c6:f6:42:23:82:4e:44:68:d2:ee:d6:ee:3b:5c: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:84:E4:15:F2:9D:DD:CA:74:52:03:79:31:4D:0D:55:6A:CD:BB:DE X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c0:67:64:ea:1e:62:ac:91:b1:82:7b:ca:a2:0a:19:d5:fc: 85:80:d3:9e:83:f2:8c:22:2e:4e:80:3a:1b:e8:ce:2b:30:9a: 60:36:12:a4:9a:ed:20:60:d3:e0:46:26:26:4c:f6:51:eb:fd: e3:2a:09:5e:ca:05:cd:99:d7:f4:b1:9b:68:ae:4d:58:14:76: 10:dd:c5:e4:91:05:f5:13:63:0c:29:0a:ec:38:02:b7:cb:17: 88:f1:63:96:a6:aa:81:11:d0:5f:06:de:0b:c6:2e:fd:bc:38: cc:72:78:60:7f:71:85:a4:1c:78:fe:dc:5a:86:64:60:ab:19: 75:b5:6f:f1:09:34:fe:4c:12:bd:4f:52:ee:b9:84:58:6b:bb: b4:8d:e1:e0:62:a9:0d:ec:e5:1e:b4:31:cb:50:4b:3a:12:2e: 7a:8e:57:58:2b:56:23:b7:ab:f9:f6:a9:36:17:92:96:d7:30: 45:1e:fe:86:e0:be:6e:7a:97:e0:de:d5:d3:45:47:fe:0c:a5: 40:cb:c7:0e:3c:98:c3:26:67:ac:93:d0:bb:9f:b5:b7:9d:a5: ff:ca:43:7e:b5:97:e0:4b:72:0b:74:05:97:8c:6d:b6:b2:23: ee:5a:75:0d:92:0d:71:a5:5d:a8:f0:65:7c:44:48:5c:05:9c: e4:75:4c:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkI5QTExMC8GA1UEBRMoMzI3QjhFODNENTRCQTY5RDdDMzVDNkEzNDQ0N0QxQjFC MDExRDk2NjAeFw0yNDEwMjMwNjMxMDNaFw0yNDEwMzAwNjMxMDNaMBgxFjAUBgNV BAMTDTY3MTg5ODI3LTM1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5DgvPveP/R1U0uxktbGkhI/ThmlI/VecZfXZ07qGaYLbwEODoP+Vx5cyxZ/vE Lfa3BuzMMCV0tOunXDUOpb9WTkZjKDgerzaVS2Qk2QEVkcQFMOMQJX7exUe4hQpd L9kcUdbspYUWK3VUaXWP95qHumkEfFUsQEhAaMpv8mZUGlPF08Ga24T0CJfNZULv vy5oL9hH0sb9WL1kSDx8xyYuP/8HZnkRCTnrcuuif9gKDh+z74nUBlOCfW180kvS neaf8qoNoOPiTlr9cc/q2OiEfuh/08Ubr3+192kB9iySvRRGYtbPg7OF8b7X0dt4 O3/G9kIjgk5EaNLu1u47XN/7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGoTkFfKd 3cp0UgN5MU0NVWrNu94wHwYDVR0jBBgwFoAUMnuOg9VLpp18NcajREfRsbAR2WYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QjlBLzFBMTA2Q0QwNjE1 MDExRUZBRTdBOEM3M0M0RjlBRTAyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJX WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTW51T2c5VkxwcDE4TmNhalJFZlJzYkFSMldZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QjlBLzFBMTA2Q0QwNjE1MDExRUZBRTdBOEM3M0M0RjlBRTAyL01udU9nOVZMcHAx OE5jYWpSRWZSc2JBUjJXWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACbAZ2TqHmKskbGCe8qiChnV/IWA056D8owiLk6AOhvoziswmmA2EqSa 7SBg0+BGJiZM9lHr/eMqCV7KBc2Z1/Sxm2iuTVgUdhDdxeSRBfUTYwwpCuw4ArfL F4jxY5amqoER0F8G3gvGLv28OMxyeGB/cYWkHHj+3FqGZGCrGXW1b/EJNP5MEr1P Uu65hFhru7SN4eBiqQ3s5R60MctQSzoSLnqOV1grViO3q/n2qTYXkpbXMEUe/obg vm56l+De1dNFR/4MpUDLxw48mMMmZ6yT0Luftbedpf/KQ361l+BLcgt0BZeMbbay I+5adQ2SDXGlXajwZXxESFwFnOR1TFU= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:26 2024 by rpki-client on console-fra.rpki-client.org