$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json) Hash identifier: LQwMjTEJQcbVpnj0DTQu1+XHVZFIKnp8Jg85+HjPkq8= Subject key identifier: 6B:19:D3:2B:EE:5C:DC:0A:E0:5F:F6:71:66:61:9B:A9:42:75:31:DA Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft Manifest number: 23 Signing time: Sun 15 Sep 2024 10:16:15 +0000 Manifest this update: Sun 15 Sep 2024 10:16:14 +0000 Manifest next update: Sun 22 Sep 2024 10:16:14 +0000 Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: czP7V3/yX1eCMoKNM0f1fGkgQav1atKZPd6hqaGJVZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Validity Not Before: Sep 15 10:16:14 2024 GMT Not After : Sep 22 10:16:14 2024 GMT Subject: CN=66e6b3ee-135b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:5b:07:10:df:8f:d1:1a:99:fb:d9:94:51: d9:d4:b8:22:ff:e2:f3:b3:8a:e7:ba:f6:23:bf:64: 77:fa:02:3a:a5:3c:25:6c:2a:14:19:17:62:20:b7: d7:b6:da:7a:16:99:20:3c:0c:8c:c1:bd:c6:56:e6: 00:e5:3f:1d:b3:98:86:fe:3f:b9:99:3c:9d:21:15: 56:ae:b8:42:fd:14:bd:da:ce:89:2d:ee:48:50:10: 34:73:63:e6:f4:e9:57:fc:e9:c9:fe:24:dd:b6:7d: d9:b1:1d:f4:82:81:3a:40:75:bc:65:6f:67:f9:33: 28:4a:03:ea:75:5f:28:e1:a3:96:6a:cf:8c:35:49: d8:93:da:26:47:5a:19:ec:63:66:e5:51:fd:a3:cf: 34:bc:7c:c8:ca:69:a6:68:f6:21:76:7f:5e:34:b2: d5:18:8f:98:2d:d1:3d:05:1e:d5:b7:d7:dc:07:98: 59:05:d4:3c:2a:a9:ff:18:73:d6:32:c3:57:32:c5: 14:cc:b2:69:f6:a9:a7:ba:c1:48:58:ee:9d:05:79: e0:42:7d:48:38:cf:a2:d9:1d:4f:03:77:06:be:12: 30:d2:28:19:2a:ba:74:c7:5c:dd:f5:27:86:ac:73: 0b:d8:04:43:00:ff:80:0d:a7:d4:9c:79:a1:0e:07: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:D3:2B:EE:5C:DC:0A:E0:5F:F6:71:66:61:9B:A9:42:75:31:DA X509v3 Authority Key Identifier: keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1d:b7:6c:0b:76:96:f1:ec:8c:7a:60:ff:c4:8d:70:3e:13: f5:82:75:83:69:cb:98:f0:87:4d:2b:ec:fc:ec:7e:7e:37:84: ef:ce:8e:f0:a1:57:31:c2:80:6a:a2:ef:47:ee:65:3f:c0:c6: 8c:ce:01:7d:b6:26:31:4d:a1:13:41:f9:97:d0:aa:89:27:5f: 52:69:e7:35:d4:f5:93:fe:a5:16:53:3f:2d:a3:37:61:53:eb: dd:56:4f:aa:4c:ca:cb:ee:93:78:c5:3c:a5:30:46:28:54:01: 4f:09:14:b0:7f:06:2b:f8:06:3a:f3:49:aa:43:08:73:f1:9f: 81:94:f9:fb:21:83:8a:da:3b:15:85:de:de:b6:12:f3:82:9d: f8:c1:76:5b:14:6e:0b:ea:62:e6:77:1e:85:fd:b9:35:bb:3b: 62:04:ca:1d:69:0d:f7:32:9c:6c:ea:98:38:25:c6:7e:63:56: 66:83:a5:2d:92:bf:25:36:57:67:ee:21:85:bf:2a:46:ad:a7: f8:60:de:92:ec:e8:a8:23:d6:59:66:a0:40:9d:93:21:d3:f4: 04:85:99:31:07:bd:a2:66:18:a8:0a:a4:ce:b2:8d:96:cf:29: e2:d4:a5:c2:f6:58:02:4e:35:c4:19:5c:2f:3f:b7:43:77:45: d9:a9:85:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3QTExMC8GA1UEBRMoRUMwOUVBNUM2M0NDRjY0NEQyQjI2RkJBQ0Q1RjJENUNB NTVGMTVBNDAeFw0yNDA5MTUxMDE2MTRaFw0yNDA5MjIxMDE2MTRaMBgxFjAUBgNV BAMTDTY2ZTZiM2VlLTEzNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVXVsHEN+P0RqZ+9mUUdnUuCL/4vOziue69iO/ZHf6AjqlPCVsKhQZF2Igt9e2 2noWmSA8DIzBvcZW5gDlPx2zmIb+P7mZPJ0hFVauuEL9FL3azokt7khQEDRzY+b0 6Vf86cn+JN22fdmxHfSCgTpAdbxlb2f5MyhKA+p1Xyjho5Zqz4w1SdiT2iZHWhns Y2blUf2jzzS8fMjKaaZo9iF2f140stUYj5gt0T0FHtW319wHmFkF1Dwqqf8Yc9Yy w1cyxRTMsmn2qae6wUhY7p0FeeBCfUg4z6LZHU8Ddwa+EjDSKBkqunTHXN31J4as cwvYBEMA/4ANp9SceaEOB491AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaxnTK+5c 3ArgX/ZxZmGbqUJ1MdowHwYDVR0jBBgwFoAU7AnqXGPM9kTSsm+6zV8tXKVfFaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTdBLzdDQzJFRkMwM0Y1 RDExRUY4QkY3ODYwRUM0RjlBRTAyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0FucVhHUE05a1RTc20tNnpWOHRYS1ZmRmFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG MTdBLzdDQzJFRkMwM0Y1RDExRUY4QkY3ODYwRUM0RjlBRTAyLzdBbnFYR1BNOWtU U3NtLTZ6Vjh0WEtWZkZhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0dt2wLdpbx7Ix6YP/EjXA+E/WCdYNpy5jwh00r7Pzsfn43hO/OjvCh VzHCgGqi70fuZT/AxozOAX22JjFNoRNB+ZfQqoknX1Jp5zXU9ZP+pRZTPy2jN2FT 691WT6pMysvuk3jFPKUwRihUAU8JFLB/Biv4BjrzSapDCHPxn4GU+fshg4raOxWF 3t62EvOCnfjBdlsUbgvqYuZ3HoX9uTW7O2IEyh1pDfcynGzqmDglxn5jVmaDpS2S vyU2V2fuIYW/Kkatp/hg3pLs6Kgj1llmoECdkyHT9ASFmTEHvaJmGKgKpM6yjZbP KeLUpcL2WAJONcQZXC8/t0N3RdmphXU= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:45 2024 by rpki-client on console-fra.rpki-client.org