$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: bnSJ5z8NnQnGFU+N7S1YCPgPsruNnnB9tqGY/guQzs4= Subject key identifier: 58:28:F9:45:5B:38:C6:D8:E1:6D:2D:D4:FD:CE:00:C0:C0:86:E8:41 Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: 15 Signing time: Wed 23 Oct 2024 06:39:47 +0000 Manifest this update: Wed 23 Oct 2024 06:39:47 +0000 Manifest next update: Wed 30 Oct 2024 06:39:47 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: Z7H54lbIfQ/NUz5xjs/5oyinATNSjjGGJgAgDAj6nIk=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Oct 23 06:39:47 2024 GMT Not After : Oct 30 06:39:47 2024 GMT Subject: CN=67189a33-43b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:ae:aa:2c:5c:ab:5f:a8:6b:02:b8:a2:04: fb:ad:13:f2:84:1a:34:bd:77:25:2f:8c:62:d0:b0: 9b:e1:a9:00:3d:34:6f:b5:dc:dd:0b:25:f8:ea:52: 59:dc:b7:34:25:b0:a9:1a:54:3e:67:23:17:a6:80: b7:27:ce:ce:0c:ba:4b:8e:9c:cb:3a:06:b7:d0:62: 4e:0c:94:9c:c0:11:db:07:09:60:b1:54:5b:38:1f: 1e:b2:9b:ee:aa:39:ec:1b:7a:9e:9e:f9:f5:cf:4f: ac:b4:f9:c2:4b:21:98:30:0f:6e:e1:ef:d5:e1:de: 74:83:3b:4d:14:d1:51:d8:38:9c:a4:68:76:20:db: 2e:2b:f1:07:c2:e2:6f:a2:c1:c4:b7:65:f6:b1:80: 04:cc:e2:a9:19:dc:3f:e6:80:09:9e:c1:4d:3e:e2: 3d:e7:0e:c1:a4:5c:76:8d:f2:af:f4:a0:8b:86:21: b8:63:37:b4:2f:72:fa:c9:e5:d9:96:85:d3:f2:a7: 71:6a:bb:13:bd:f7:bc:74:58:b0:cb:54:59:79:e7: cb:b9:b8:41:3f:c9:55:19:6b:06:3a:5b:32:aa:2c: 23:e3:fb:b7:16:08:85:16:ce:f3:d1:11:c9:0b:85: c3:73:bd:de:1d:b1:b6:85:78:34:6c:4d:27:61:27: 71:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:F9:45:5B:38:C6:D8:E1:6D:2D:D4:FD:CE:00:C0:C0:86:E8:41 X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:2e:ff:e6:f3:e7:8c:78:ca:43:b1:55:d3:08:c4:19:32:f7: 7e:03:a5:65:09:b5:06:74:bd:21:e9:ba:70:6d:3a:ed:44:e1: e7:ac:73:e7:06:4d:34:d8:e5:81:bf:f2:5c:17:9c:f5:eb:12: af:25:84:89:61:76:7d:ac:74:3b:03:0e:61:b8:01:8d:86:17: de:df:4b:76:90:86:47:0f:5c:b7:f9:04:ea:f3:70:f2:87:29: bb:ea:3a:ec:cb:92:1a:53:95:27:78:96:86:85:d9:19:45:46: ec:28:63:dd:d0:15:6b:e3:e9:90:48:40:db:5b:95:6a:52:42: 2b:dd:45:6f:27:2d:04:e0:99:37:12:fb:c5:0d:3c:5a:3e:5d: 4e:14:3a:aa:5d:83:89:cc:ee:26:fa:b2:a6:99:8f:92:27:e7: f5:fa:b8:0c:d5:39:ad:42:bc:10:6a:ed:ac:26:5f:8c:27:3e: be:6f:cb:b1:e8:8c:a7:b8:6c:4d:3b:c7:44:82:08:23:6c:a5: 7d:74:8e:78:3b:13:1b:46:40:0a:76:d7:50:58:80:e2:61:ad: 0a:63:6c:64:c3:ab:8b:1e:f2:6c:e6:26:2e:91:fe:80:26:1a: d8:67:cb:ea:89:df:c0:99:47:88:60:48:12:92:98:ef:3b:dc: 89:42:43:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTkyRjExMC8GA1UEBRMoNDU3REI3NjZFMUIwRDZBNERDQzdGOUFFQ0QyODdENERD M0U3MEM5RTAeFw0yNDEwMjMwNjM5NDdaFw0yNDEwMzAwNjM5NDdaMBgxFjAUBgNV BAMTDTY3MTg5YTMzLTQzYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRGa6qLFyrX6hrAriiBPutE/KEGjS9dyUvjGLQsJvhqQA9NG+13N0LJfjqUlnc tzQlsKkaVD5nIxemgLcnzs4MukuOnMs6BrfQYk4MlJzAEdsHCWCxVFs4Hx6ym+6q Oewbep6e+fXPT6y0+cJLIZgwD27h79Xh3nSDO00U0VHYOJykaHYg2y4r8QfC4m+i wcS3ZfaxgATM4qkZ3D/mgAmewU0+4j3nDsGkXHaN8q/0oIuGIbhjN7QvcvrJ5dmW hdPyp3FquxO997x0WLDLVFl558u5uEE/yVUZawY6WzKqLCPj+7cWCIUWzvPREckL hcNzvd4dsbaFeDRsTSdhJ3GPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWCj5RVs4 xtjhbS3U/c4AwMCG6EEwHwYDVR0jBBgwFoAURX23ZuGw1qTcx/muzSh9TcPnDJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTJGLzEyMDg1RDE4NzQw QjExRUY5RTlDMDMzNkM0RjlBRTAyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUlgyM1p1R3cxcVRjeF9tdXpTaDlUY1BuREo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTJGLzEyMDg1RDE4NzQwQjExRUY5RTlDMDMzNkM0RjlBRTAyL1JYMjNadUd3MXFU Y3hfbXV6U2g5VGNQbkRKNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM4u/+bz54x4ykOxVdMIxBky934DpWUJtQZ0vSHpunBtOu1E4eesc+cG TTTY5YG/8lwXnPXrEq8lhIlhdn2sdDsDDmG4AY2GF97fS3aQhkcPXLf5BOrzcPKH KbvqOuzLkhpTlSd4loaF2RlFRuwoY93QFWvj6ZBIQNtblWpSQivdRW8nLQTgmTcS +8UNPFo+XU4UOqpdg4nM7ib6sqaZj5In5/X6uAzVOa1CvBBq7awmX4wnPr5vy7Ho jKe4bE07x0SCCCNspX10jng7ExtGQAp211BYgOJhrQpjbGTDq4se8mzmJi6R/oAm Gthny+qJ38CZR4hgSBKSmO873IlCQw4= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:27 2024 by rpki-client on console-fra.rpki-client.org