$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: Thao1/Fa9VzytwydMjhiE40GZXYnJPAcc3QrIIxCv5Y= Subject key identifier: E4:68:A4:10:01:9A:15:B6:D1:7F:31:02:20:21:96:21:DB:9D:D7:9A Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: 34 Signing time: Wed 23 Oct 2024 06:13:52 +0000 Manifest this update: Wed 23 Oct 2024 06:13:51 +0000 Manifest next update: Wed 30 Oct 2024 06:13:51 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: VnD2Sk3tcjMXp9/wey0Y/DQ/gUA5LookTVoHZ5ee0dA=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: /DX7dbxTLTAh+dFwT5n2PZNSYyr7e+Nh1d2b2XOmU5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Oct 23 06:13:51 2024 GMT Not After : Oct 30 06:13:51 2024 GMT Subject: CN=6718941f-0930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:4b:91:47:dc:71:2a:38:82:30:24:1d:1e: 42:aa:b1:52:d4:da:1b:33:94:33:99:14:83:c1:0e: dd:55:a2:59:36:ae:15:4b:20:69:9d:c1:b4:80:fb: 6e:4e:af:f1:a5:f4:14:70:d2:4b:fb:c8:c0:e1:d7: f6:c9:e2:14:56:99:5b:4f:ba:c2:a9:5e:d6:f0:45: 7f:e8:20:60:e2:31:e9:20:24:14:d5:3e:5d:57:e7: 13:72:da:78:2b:7e:f0:a6:a2:13:d0:89:f3:1f:f0: 64:87:fd:93:13:6e:f2:6a:c1:74:fc:5e:c3:e8:98: 2d:ad:47:14:67:3c:3a:13:cd:e2:72:75:aa:6a:08: f0:3f:66:97:70:a3:52:a5:59:65:15:5b:d4:53:a4: 1b:04:22:42:8e:db:ed:70:cc:5b:5a:2d:35:2d:f3: 9b:b0:83:5b:80:10:b2:a1:00:b2:43:b2:52:24:35: 65:50:9a:c2:df:ac:31:da:75:2f:5c:d6:9e:49:e9: c8:fb:d6:91:a1:ff:6d:01:3d:0e:07:9d:1f:9a:c3: f1:82:20:5e:e8:50:d9:54:a0:9f:5e:e1:52:73:a6: 5c:89:1a:cf:3a:fc:47:7d:47:d0:48:27:28:f0:83: cb:e7:b8:7f:34:cd:4d:c8:00:2b:85:4b:a0:6c:0e: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:68:A4:10:01:9A:15:B6:D1:7F:31:02:20:21:96:21:DB:9D:D7:9A X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:24:0d:54:6f:e4:09:00:6c:9f:93:49:ce:93:18:ce:bb:4a: 5b:20:b4:86:7f:01:f0:a3:4a:ae:39:62:db:4d:04:d4:71:bf: a2:60:7f:22:b8:61:29:79:11:fc:7c:62:1e:6e:8f:26:8a:88: 02:94:e3:92:35:86:23:02:7d:2f:99:a1:9f:8a:d6:8c:8a:9e: 6c:91:89:bc:76:2e:1e:78:ad:e3:df:ba:91:47:85:3c:e0:cb: 16:e5:ef:6a:5e:1f:4b:cc:65:45:29:8e:e5:60:dc:27:d1:f3: 55:9b:5a:e7:99:a0:6a:4a:80:b4:e2:e0:c1:74:94:33:aa:4d: 20:0a:16:39:89:36:8c:71:70:bd:c2:00:2d:44:5c:0a:f3:9f: 49:a8:42:b5:eb:fe:54:e0:4b:a6:8e:5b:8d:a8:92:89:6d:67: af:49:fa:e7:e7:75:6d:c2:35:c2:26:0e:7b:fb:50:1f:f8:e9: b1:f7:05:70:62:40:4f:23:ff:b2:a1:d5:76:46:5a:dd:67:d6: 0a:32:79:47:02:03:0d:73:e7:34:d9:04:8f:d6:fa:b6:87:a3: b6:59:6e:65:05:c4:06:1b:a0:4e:ff:e4:92:11:81:80:27:ac: da:82:ba:c2:57:8e:0d:29:90:78:12:f6:b8:bf:ea:91:34:ad: 26:f2:76:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkQyMDExMC8GA1UEBRMoQTc2QjcxMENEMjM2MEEyRTI2ODJGRDJCODA3MThBMTk4 ODM5NjYwNDAeFw0yNDEwMjMwNjEzNTFaFw0yNDEwMzAwNjEzNTFaMBgxFjAUBgNV BAMTDTY3MTg5NDFmLTA5MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7o0uRR9xxKjiCMCQdHkKqsVLU2hszlDOZFIPBDt1Volk2rhVLIGmdwbSA+25O r/Gl9BRw0kv7yMDh1/bJ4hRWmVtPusKpXtbwRX/oIGDiMekgJBTVPl1X5xNy2ngr fvCmohPQifMf8GSH/ZMTbvJqwXT8XsPomC2tRxRnPDoTzeJydapqCPA/Zpdwo1Kl WWUVW9RTpBsEIkKO2+1wzFtaLTUt85uwg1uAELKhALJDslIkNWVQmsLfrDHadS9c 1p5J6cj71pGh/20BPQ4HnR+aw/GCIF7oUNlUoJ9e4VJzplyJGs86/Ed9R9BIJyjw g8vnuH80zU3IACuFS6BsDuSzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5GikEAGa FbbRfzECICGWIdud15owHwYDVR0jBBgwFoAUp2txDNI2Ci4mgv0rgHGKGYg5ZgQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGRDIwL0E4MjUzQjlDNDMz MDExRUY5RURCQ0Q2Q0M0RjlBRTAyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpn US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcDJ0eEROSTJDaTRtZ3YwcmdIR0tHWWc1WmdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG RDIwL0E4MjUzQjlDNDMzMDExRUY5RURCQ0Q2Q0M0RjlBRTAyL3AydHhETkkyQ2k0 bWd2MHJnSEdLR1lnNVpnUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACwkDVRv5AkAbJ+TSc6TGM67SlsgtIZ/AfCjSq45YttNBNRxv6JgfyK4 YSl5Efx8Yh5ujyaKiAKU45I1hiMCfS+ZoZ+K1oyKnmyRibx2Lh54rePfupFHhTzg yxbl72peH0vMZUUpjuVg3CfR81WbWueZoGpKgLTi4MF0lDOqTSAKFjmJNoxxcL3C AC1EXArzn0moQrXr/lTgS6aOW42okoltZ69J+ufndW3CNcImDnv7UB/46bH3BXBi QE8j/7Kh1XZGWt1n1goyeUcCAw1z5zTZBI/W+raHo7ZZbmUFxAYboE7/5JIRgYAn rNqCusJXjg0pkHgS9ri/6pE0rSbydvI= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:27 2024 by rpki-client on console-fra.rpki-client.org