$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft File: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json) Hash identifier: 1Gp9E+TKvEft9jbdCyu00toYNVlsxBibkLnsGHoF8g0= Subject key identifier: 84:3A:EE:CE:37:13:CE:81:CB:AE:1B:D3:EF:2A:FB:2F:F3:D1:C1:60 Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft Manifest number: 33 Signing time: Thu 19 Sep 2024 06:03:34 +0000 Manifest this update: Thu 19 Sep 2024 06:03:33 +0000 Manifest next update: Thu 26 Sep 2024 06:03:33 +0000 Files and hashes: 1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: oatXBhcxRIBjHZi7jBJeSAGXp/VoYBVyxo5cuq0pRac=) 2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: Opc7LOJ46e70z/QSejyn173p++8Jd/mWqo5v6tc2Z4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Validity Not Before: Sep 19 06:03:33 2024 GMT Not After : Sep 26 06:03:33 2024 GMT Subject: CN=66ebbeb6-27e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:8e:ae:50:31:1d:b1:a2:08:58:26:94:e8: a9:b3:09:2a:a3:6a:bc:e2:c0:4b:ae:2f:85:ae:60: 00:9d:2e:b7:9e:3e:eb:65:a3:2a:7c:5c:84:98:8e: b7:78:6f:9d:b3:1f:e2:f8:3d:d9:fb:c0:3d:ca:6f: 9d:0f:a2:25:e5:44:7a:65:ca:82:b4:0c:3d:a5:e5: 1d:a0:57:1e:ca:d0:a3:3b:49:db:3c:dc:9a:e3:e4: 22:1f:7e:db:2c:2d:1a:34:8b:57:4b:9c:5b:c2:66: 24:66:8e:90:67:16:37:50:ea:d5:a0:42:9b:65:39: 25:93:ec:48:f6:4b:ea:4a:87:6b:d1:f5:54:ec:1c: d2:21:2d:a9:80:7c:8d:6c:77:5a:e1:a2:03:e3:6c: 52:fe:52:62:16:c6:b3:ee:f1:7f:fd:b2:12:5a:08: d8:36:d2:2a:ef:6c:77:d2:7b:41:28:bf:ef:75:b9: 42:b7:ae:6e:31:b8:f5:ca:a4:78:85:4f:5d:4e:d3: 59:e1:64:ea:74:a1:01:9a:83:41:76:de:c7:95:7c: 93:12:1c:26:72:ba:40:3f:67:70:52:5d:22:ab:d7: 78:b4:66:50:65:6a:87:3d:ec:84:5b:2b:86:4d:8b: 1d:bc:43:7a:2b:d2:18:81:30:af:ba:9b:ce:76:57: d3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3A:EE:CE:37:13:CE:81:CB:AE:1B:D3:EF:2A:FB:2F:F3:D1:C1:60 X509v3 Authority Key Identifier: keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9b:1e:dd:7c:d5:fc:a8:ea:59:6e:41:c7:40:50:b3:55:3c: fe:4d:31:59:f9:fa:4f:81:47:a0:e8:7c:a4:1b:41:2b:f9:cf: 73:87:ae:4c:f0:87:32:aa:ee:b9:3b:8d:41:ac:5b:30:74:a0: 68:b7:a8:75:51:52:63:40:b9:48:1c:2c:49:b6:ff:eb:a6:0b: 9e:4f:a3:a5:9a:a6:1c:ce:ea:ec:f0:73:a4:37:df:f0:e6:2c: c6:84:0f:9d:6b:9e:0a:ae:26:55:cd:09:71:f1:09:c7:a2:36: cc:bb:a4:1a:1f:67:17:88:da:4c:dc:f5:27:dd:42:bc:d9:e8: b9:09:f7:38:ab:6d:5a:b8:0e:05:c2:b7:88:2a:b0:c6:89:80: e4:57:8a:e9:ee:0f:74:57:2f:81:7e:75:7d:34:f1:ed:0c:ac: b4:46:c0:94:3d:84:31:49:53:83:30:99:e4:d6:dd:a2:2b:db: b8:aa:03:f3:6f:ae:fe:29:80:bb:e1:7b:17:9a:b2:bc:c9:0d: 15:99:af:0b:2a:47:2d:32:01:e9:d2:3f:0b:6a:0e:5c:d6:13: ea:6b:00:23:24:08:0c:97:81:b5:52:c0:f2:85:73:bc:2f:b0: a3:f6:91:33:60:57:d6:d9:8b:58:a3:53:41:9a:a7:59:dc:65: 4b:b1:7b:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3QTExMC8GA1UEBRMoQjNFRkE3RDZBRTE5OUQxNDU4MkRENEVDQjkxNjNBM0M5 RDg0MTc1OTAeFw0yNDA5MTkwNjAzMzNaFw0yNDA5MjYwNjAzMzNaMBgxFjAUBgNV BAMTDTY2ZWJiZWI2LTI3ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiz46uUDEdsaIIWCaU6KmzCSqjarziwEuuL4WuYACdLreePutloyp8XISYjrd4 b52zH+L4Pdn7wD3Kb50PoiXlRHplyoK0DD2l5R2gVx7K0KM7Sds83Jrj5CIfftss LRo0i1dLnFvCZiRmjpBnFjdQ6tWgQptlOSWT7Ej2S+pKh2vR9VTsHNIhLamAfI1s d1rhogPjbFL+UmIWxrPu8X/9shJaCNg20irvbHfSe0Eov+91uUK3rm4xuPXKpHiF T11O01nhZOp0oQGag0F23seVfJMSHCZyukA/Z3BSXSKr13i0ZlBlaoc97IRbK4ZN ix28Q3or0hiBMK+6m852V9OvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhDruzjcT zoHLrhvT7yr7L/PRwWAwHwYDVR0jBBgwFoAUs++n1q4ZnRRYLdTsuRY6PJ2EF1kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTdBLzc0QkIyNEQyM0Y1 RDExRUY4QkY3ODYwRUM0RjlBRTAyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcy0tbjFxNFpuUlJZTGRUc3VSWTZQSjJFRjFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG MTdBLzc0QkIyNEQyM0Y1RDExRUY4QkY3ODYwRUM0RjlBRTAyL3MtLW4xcTRablJS WUxkVHN1Ulk2UEoyRUYxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAabHt181fyo6lluQcdAULNVPP5NMVn5+k+BR6DofKQbQSv5z3OHrkzw hzKq7rk7jUGsWzB0oGi3qHVRUmNAuUgcLEm2/+umC55Po6WaphzO6uzwc6Q33/Dm LMaED51rngquJlXNCXHxCceiNsy7pBofZxeI2kzc9SfdQrzZ6LkJ9zirbVq4DgXC t4gqsMaJgORXiunuD3RXL4F+dX008e0MrLRGwJQ9hDFJU4MwmeTW3aIr27iqA/Nv rv4pgLvhexeasrzJDRWZrwsqRy0yAenSPwtqDlzWE+prACMkCAyXgbVSwPKFc7wv sKP2kTNgV9bZi1ijU0Gap1ncZUuxe9g= -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:26 2024 by rpki-client on console-fra.rpki-client.org