$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: G6J9mIgO/ydfDj96GsWAe8RyulOFJ8AjmPuHRvX9z+A= Subject key identifier: D2:42:63:B0:10:3A:D9:86:69:37:BC:0E:82:2B:28:24:C2:1B:74:6C Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: 37 Signing time: Sun 15 Sep 2024 09:59:48 +0000 Manifest this update: Sun 15 Sep 2024 09:59:48 +0000 Manifest next update: Sun 22 Sep 2024 09:59:48 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: juKI/M/rS27FUmRcpAWB9s/s8Xjr7HbeKaTfFh/B1Yg=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: xNwwVLbU+ydl+nMnNKKzooZcZgz88s1ddBpMaFQs7IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Sep 15 09:59:48 2024 GMT Not After : Sep 22 09:59:48 2024 GMT Subject: CN=66e6b014-8d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:f0:25:14:ed:59:25:51:ad:ba:c0:61:44: 6d:46:9a:ae:cf:0e:db:f5:da:13:3c:78:de:4e:34: 33:ca:b9:de:71:57:ae:9a:3f:05:65:ff:79:d2:93: e2:ce:88:2b:36:67:4b:d8:6e:42:d2:b7:03:75:4a: c5:36:f5:22:e8:78:b2:e5:c7:a4:1d:cc:bf:d1:db: 8c:02:41:d3:22:e1:f2:83:15:b6:ff:a5:ef:88:22: f5:6b:b3:00:94:1f:6f:49:47:aa:ef:e8:12:a3:eb: c2:30:1c:2a:98:e4:05:37:c1:ad:d1:1d:ca:49:64: a6:fe:24:0e:06:14:ea:ba:cf:9f:ce:3a:48:5b:23: 91:e6:68:eb:71:be:71:4a:d1:67:6e:d1:1c:50:28: 20:6f:c0:cc:88:c2:a7:96:8f:c5:96:99:87:03:9d: f9:24:7a:fe:82:4b:a8:c9:ae:80:11:ac:31:7c:fa: 80:c6:e9:9a:a3:e4:df:68:66:e9:06:c9:8d:11:ba: 94:85:ed:a1:a9:ba:b5:b5:06:ef:df:25:59:ec:e2: 56:25:3a:01:eb:74:de:a9:de:40:fb:18:3c:ac:93: 41:c5:a7:24:55:ae:22:d9:05:81:c9:19:4b:02:c0: 96:a4:e6:f1:e7:f6:43:f6:97:a4:9f:38:97:84:7b: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:42:63:B0:10:3A:D9:86:69:37:BC:0E:82:2B:28:24:C2:1B:74:6C X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fc:db:32:43:c1:42:f1:7b:19:20:3e:bb:fd:4e:ee:52:f6: e1:c5:1a:07:93:0e:ce:ce:4b:16:7f:d8:3b:3e:e2:36:6b:a7: d8:a3:15:11:33:2b:ea:6d:b3:91:d9:9e:d0:26:db:dc:84:f3: e8:e4:94:94:c3:8b:65:32:58:fa:f4:a7:00:46:7e:dc:ff:92: 00:76:7a:67:78:ab:fe:31:0a:44:41:33:78:47:85:9d:a7:71: 0d:f5:fa:7f:b0:e0:b2:0a:bf:02:1e:ee:10:fb:2c:c2:f5:42: 19:0c:b3:79:57:d2:69:2e:dc:7d:4d:1d:ac:c9:c8:73:a4:cc: e5:98:aa:5b:5f:6a:e5:65:46:0c:7c:46:80:05:73:65:60:e3: a4:63:64:51:ce:9e:85:23:8a:73:88:36:cb:f0:63:84:ec:04: 4b:9b:52:b9:d6:bc:a5:1a:0f:0a:4e:9f:fe:2a:a9:07:60:92: 63:32:18:e0:92:4b:6d:75:dc:93:c4:6c:48:6f:5c:44:ac:a2: 2d:dd:16:0a:06:a0:a1:6d:5d:7b:61:bd:c2:bd:6d:86:32:ef: fb:bb:8d:27:53:e3:01:a6:d2:20:5e:13:2f:ec:af:c1:df:a1: 90:52:a4:09:2d:8a:eb:55:a4:a2:2c:8e:27:68:92:87:b0:59: d8:0c:f3:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE1RjExMC8GA1UEBRMoMDlDN0Q5RTdGMjYzREIwQjhCODIwMUU3RDI5M0NBREVD Qjk3Q0Y4QzAeFw0yNDA5MTUwOTU5NDhaFw0yNDA5MjIwOTU5NDhaMBgxFjAUBgNV BAMTDTY2ZTZiMDE0LThkNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAHPAlFO1ZJVGtusBhRG1Gmq7PDtv12hM8eN5ONDPKud5xV66aPwVl/3nSk+LO iCs2Z0vYbkLStwN1SsU29SLoeLLlx6QdzL/R24wCQdMi4fKDFbb/pe+IIvVrswCU H29JR6rv6BKj68IwHCqY5AU3wa3RHcpJZKb+JA4GFOq6z5/OOkhbI5HmaOtxvnFK 0Wdu0RxQKCBvwMyIwqeWj8WWmYcDnfkkev6CS6jJroARrDF8+oDG6Zqj5N9oZukG yY0RupSF7aGpurW1Bu/fJVns4lYlOgHrdN6p3kD7GDysk0HFpyRVriLZBYHJGUsC wJak5vHn9kP2l6SfOJeEe4w5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0kJjsBA6 2YZpN7wOgisoJMIbdGwwHwYDVR0jBBgwFoAUCcfZ5/Jj2wuLggHn0pPK3suXz4ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTVGLzRCNTkwNkI4MjNF QzExRUZBNDU1MTgyNkM0RjlBRTAyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2NmWjVfSmoyd3VMZ2dIbjBwUEszc3VYejR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTVGLzRCNTkwNkI4MjNFQzExRUZBNDU1MTgyNkM0RjlBRTAyL0NjZlo1X0pqMnd1 TGdnSG4wcFBLM3N1WHo0dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJz82zJDwULxexkgPrv9Tu5S9uHFGgeTDs7OSxZ/2Ds+4jZrp9ijFREz K+pts5HZntAm29yE8+jklJTDi2UyWPr0pwBGftz/kgB2emd4q/4xCkRBM3hHhZ2n cQ31+n+w4LIKvwIe7hD7LML1QhkMs3lX0mku3H1NHazJyHOkzOWYqltfauVlRgx8 RoAFc2Vg46RjZFHOnoUjinOINsvwY4TsBEubUrnWvKUaDwpOn/4qqQdgkmMyGOCS S2113JPEbEhvXESsoi3dFgoGoKFtXXthvcK9bYYy7/u7jSdT4wGm0iBeEy/sr8Hf oZBSpAktiutVpKIsjidokoewWdgM88Y= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:13 2024 by rpki-client on console-fra.rpki-client.org