$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json) Hash identifier: wy7sbSrGrhQWeBYn+nwCLwzT8G9xQccgPbCKJimwWdw= Subject key identifier: 35:53:AB:17:EA:44:97:74:36:85:09:3A:A4:4E:27:45:2C:89:AB:97 Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft Manifest number: 3B Signing time: Sun 15 Sep 2024 09:55:24 +0000 Manifest this update: Sun 15 Sep 2024 09:55:23 +0000 Manifest next update: Sun 22 Sep 2024 09:55:23 +0000 Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: ptap54I1kF2Firzm5h4sz9zHZLZFFH6SguNZ35v9Abw=) 2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: YYQgusC6hV6lCIy0+UZyBQsfZksmuMBdbmE+AEbFmxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Validity Not Before: Sep 15 09:55:23 2024 GMT Not After : Sep 22 09:55:23 2024 GMT Subject: CN=66e6af0b-f292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:eb:9c:b7:7a:a3:fc:0e:d3:7c:cd:50:b3: 72:29:fd:91:c3:4d:09:57:7e:75:30:16:35:ef:64: 1b:38:b5:3c:13:fd:0a:4d:a8:9f:2a:13:4e:9a:01: bc:cb:d2:6e:6e:11:5c:3f:7f:15:57:00:c3:96:82: 3f:7f:e5:ef:c0:0a:02:53:a4:dd:c1:5e:16:81:bc: bd:df:0b:2e:9c:77:95:79:b9:eb:b5:49:98:ce:da: ab:4f:e7:62:e7:3e:5f:e2:c5:8d:ff:22:0d:5a:75: 75:7f:d8:26:f8:f9:c0:b9:cb:c1:05:09:af:26:f6: 51:b6:c8:d5:a6:68:37:fc:f8:d7:8d:db:b7:89:b4: 81:ad:c0:bc:a6:7f:10:f7:24:35:af:49:77:95:ec: c1:66:3e:40:54:18:14:a0:c1:1d:5a:34:4e:22:56: 97:c9:7a:32:f3:52:59:0d:5a:13:49:12:d5:a4:9e: 7c:72:a2:3a:86:9c:97:ed:05:a8:15:82:69:52:cb: 8d:c8:c9:5e:c5:85:39:db:67:81:e7:50:29:45:01: b9:37:7c:54:b8:0a:9e:69:da:4d:aa:17:7b:3e:d2: 5f:7c:be:36:b1:84:f2:8d:57:95:1c:32:5f:8f:ef: 12:0d:c4:08:fc:68:7a:2f:4a:e0:a3:c7:6c:a5:72: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:AB:17:EA:44:97:74:36:85:09:3A:A4:4E:27:45:2C:89:AB:97 X509v3 Authority Key Identifier: keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:76:c5:11:f1:e2:b9:62:df:77:7b:4c:3b:87:ad:84:0a:16: bf:2f:22:95:19:9e:50:d9:11:de:41:a4:6a:53:27:05:81:74: 26:71:91:3e:90:62:72:5c:66:c7:76:98:3f:19:94:f4:92:4d: 4f:86:b6:87:47:ba:50:de:0f:3c:71:0c:3b:db:3e:9c:57:8e: b2:ef:83:41:6c:5d:14:eb:4d:45:fc:85:9f:76:5b:73:82:30: f1:d3:4d:af:1f:dd:d6:54:b7:01:d9:f0:75:0e:06:be:1d:92: 3a:d2:27:6a:a7:b8:f7:43:97:76:cf:37:b3:7f:dd:5c:8b:01: 90:ad:47:5f:3b:27:25:3c:e8:35:56:9e:11:cb:54:15:80:d8: 72:6b:24:00:c0:8b:fe:2e:eb:10:e4:68:32:ce:9d:0d:67:2f: f2:7d:3d:8c:8a:66:c3:df:81:0f:d0:02:34:24:d3:5f:b1:6d: f3:e5:a6:53:ea:23:e8:d4:3e:91:ef:26:c8:dd:ab:35:08:cb: 3f:d7:7a:6a:6c:80:11:7a:09:40:f3:c0:d0:dc:3f:89:04:25: 1b:55:7c:85:d8:07:42:a1:cc:37:85:c8:a6:74:e1:23:2f:0b: aa:ce:9f:9a:04:e9:e2:b3:a5:cc:98:3a:c0:99:4e:c7:eb:61: 0e:15:c6:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUFEMzExMC8GA1UEBRMoMzc0NUZCOUY3RUEyQzFFMjUyRDI5QkVGRDg2QTYxNTc3 NjBEODhDMDAeFw0yNDA5MTUwOTU1MjNaFw0yNDA5MjIwOTU1MjNaMBgxFjAUBgNV BAMTDTY2ZTZhZjBiLWYyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClq+uct3qj/A7TfM1Qs3Ip/ZHDTQlXfnUwFjXvZBs4tTwT/QpNqJ8qE06aAbzL 0m5uEVw/fxVXAMOWgj9/5e/ACgJTpN3BXhaBvL3fCy6cd5V5ueu1SZjO2qtP52Ln Pl/ixY3/Ig1adXV/2Cb4+cC5y8EFCa8m9lG2yNWmaDf8+NeN27eJtIGtwLymfxD3 JDWvSXeV7MFmPkBUGBSgwR1aNE4iVpfJejLzUlkNWhNJEtWknnxyojqGnJftBagV gmlSy43IyV7FhTnbZ4HnUClFAbk3fFS4Cp5p2k2qF3s+0l98vjaxhPKNV5UcMl+P 7xINxAj8aHovSuCjx2ylcqChAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNVOrF+pE l3Q2hQk6pE4nRSyJq5cwHwYDVR0jBBgwFoAUN0X7n36iweJS0pvv2GphV3YNiMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQUQzL0Q2MjMxQTMyMUUy RDExRUY4M0Q5NTIyOUM0RjlBRTAyL04wWDduMzZpd2VKUzBwdnYyR3BoVjNZTmlN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjBYN24zNml3ZUpTMHB2djJHcGhWM1lOaU1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QUQzL0Q2MjMxQTMyMUUyRDExRUY4M0Q5NTIyOUM0RjlBRTAyL04wWDduMzZpd2VK UzBwdnYyR3BoVjNZTmlNQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALN2xRHx4rli33d7TDuHrYQKFr8vIpUZnlDZEd5BpGpTJwWBdCZxkT6Q YnJcZsd2mD8ZlPSSTU+GtodHulDeDzxxDDvbPpxXjrLvg0FsXRTrTUX8hZ92W3OC MPHTTa8f3dZUtwHZ8HUOBr4dkjrSJ2qnuPdDl3bPN7N/3VyLAZCtR187JyU86DVW nhHLVBWA2HJrJADAi/4u6xDkaDLOnQ1nL/J9PYyKZsPfgQ/QAjQk01+xbfPlplPq I+jUPpHvJsjdqzUIyz/XempsgBF6CUDzwNDcP4kEJRtVfIXYB0KhzDeFyKZ04SMv C6rOn5oE6eKzpcyYOsCZTsfrYQ4Vxig= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:13 2024 by rpki-client on console-fra.rpki-client.org