$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: 7Za21j4MtSDWGFN7GP83JjmWeKAgbvm3iJfBTfp/dm0= Subject key identifier: B9:4E:FC:E4:00:F1:73:A1:74:63:1C:0C:FC:55:AD:CF:48:61:B1:28 Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 39 Signing time: Sun 15 Sep 2024 09:55:10 +0000 Manifest this update: Sun 15 Sep 2024 09:55:10 +0000 Manifest next update: Sun 22 Sep 2024 09:55:10 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: O91PVqgxioB51yiDtxOxtTgruSdpgnjMfUBNEv8MRLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Sep 15 09:55:10 2024 GMT Not After : Sep 22 09:55:10 2024 GMT Subject: CN=66e6aefe-3150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:60:39:79:63:84:52:a3:9a:07:ed:5e:93: f4:b5:9a:fe:49:3c:53:c2:71:91:aa:94:c5:cf:d9: 56:1f:38:a9:58:93:84:85:d8:c3:d0:a7:44:24:7d: ee:22:14:5c:68:da:c0:f3:c4:4a:ed:95:1e:47:26: 1e:3d:bc:a7:00:80:ca:56:68:46:8a:67:fa:44:bc: 89:51:82:a3:78:d4:d4:2d:b8:19:92:70:d8:8f:21: 5c:1c:14:31:2a:b1:2b:c2:61:6e:5e:ea:b2:62:66: 5f:04:73:88:dd:50:5b:a5:5c:c5:6a:33:26:f3:b0: 61:0d:e1:59:3b:da:85:23:4b:35:dd:2c:74:94:6f: b9:61:3e:27:f2:03:bc:1a:ad:36:00:bb:22:b4:dc: 6e:e8:d4:0d:2a:66:98:35:bf:a1:55:a9:63:26:de: 97:87:c6:9b:d6:96:1a:5e:19:bb:0c:f4:15:cd:ed: 72:69:95:f7:d2:86:d1:3e:f5:da:58:4f:eb:5f:2a: 28:17:72:70:3c:22:47:3a:0f:06:8c:28:c1:e0:aa: 56:33:8a:9d:d2:94:f4:ae:39:fb:02:3b:a4:d6:ea: 7d:ae:a9:2a:44:74:61:f3:bd:8e:5e:9e:26:b6:04: df:18:77:d7:ef:a3:9a:0f:13:47:55:7f:76:97:11: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:FC:E4:00:F1:73:A1:74:63:1C:0C:FC:55:AD:CF:48:61:B1:28 X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:2b:13:8d:b7:e8:e6:71:d6:8f:4b:58:71:8b:d2:f6:f7:8b: 67:0c:a1:41:3e:12:e7:fa:8f:d8:ba:74:4a:f1:a3:07:ab:55: e8:07:41:a9:49:cd:d2:23:0e:74:e0:9d:fc:50:3d:c7:28:e1: 92:da:1c:65:1b:97:f6:24:f9:db:2f:05:34:5e:89:a7:6c:c0: d9:bd:06:47:3c:3b:19:63:99:c7:ac:5f:28:e5:23:6f:da:17: eb:4b:d0:dc:d8:2e:83:b4:18:a8:45:8e:1e:70:38:24:10:3b: 7b:7d:bb:32:f7:b4:0e:3d:c6:e6:49:5a:79:01:f0:d9:b0:0f: 6d:54:d2:3a:2e:62:73:2b:b5:16:e6:6a:74:bf:dd:e6:50:90: a9:58:05:3f:2e:64:52:8e:43:24:ab:02:f7:9e:0f:3e:e3:b5: f0:ed:a4:f3:21:3c:9a:d5:32:c9:66:c8:c2:58:29:f5:bd:21: 28:24:e6:74:4d:2e:e0:9d:a1:dc:6a:19:92:f3:4c:06:ea:20: b9:4c:da:50:d0:a4:82:03:73:69:b9:64:bd:16:75:84:d1:2c: 27:bd:f7:c3:97:53:46:aa:49:74:e2:1d:22:6f:50:59:d8:09: f4:f5:e1:a8:43:83:db:10:bd:eb:c3:e4:bd:8e:e7:fe:22:97: e7:6b:da:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDA5MTExMC8GA1UEBRMoODQ1OUZCNzI5MEQ3NEE5QkNFMjYwRTNGQUI2MDVEN0ZE ODMyNDkzMTAeFw0yNDA5MTUwOTU1MTBaFw0yNDA5MjIwOTU1MTBaMBgxFjAUBgNV BAMTDTY2ZTZhZWZlLTMxNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF0mA5eWOEUqOaB+1ek/S1mv5JPFPCcZGqlMXP2VYfOKlYk4SF2MPQp0Qkfe4i FFxo2sDzxErtlR5HJh49vKcAgMpWaEaKZ/pEvIlRgqN41NQtuBmScNiPIVwcFDEq sSvCYW5e6rJiZl8Ec4jdUFulXMVqMybzsGEN4Vk72oUjSzXdLHSUb7lhPifyA7wa rTYAuyK03G7o1A0qZpg1v6FVqWMm3peHxpvWlhpeGbsM9BXN7XJplffShtE+9dpY T+tfKigXcnA8Ikc6DwaMKMHgqlYzip3SlPSuOfsCO6TW6n2uqSpEdGHzvY5enia2 BN8Yd9fvo5oPE0dVf3aXEXzHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuU785ADx c6F0YxwM/FWtz0hhsSgwHwYDVR0jBBgwFoAUhFn7cpDXSpvOJg4/q2Bdf9gySTEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MDkxLzY1MjFBMEYwMUQ5 RDExRUZBMTBGMkQzQUM0RjlBRTAyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNU RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEZuN2NwRFhTcHZPSmc0X3EyQmRmOWd5U1RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 MDkxLzY1MjFBMEYwMUQ5RDExRUZBMTBGMkQzQUM0RjlBRTAyL2hGbjdjcERYU3B2 T0pnNF9xMkJkZjlneVNURS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQrE4236OZx1o9LWHGL0vb3i2cMoUE+Euf6j9i6dErxowerVegHQalJ zdIjDnTgnfxQPcco4ZLaHGUbl/Yk+dsvBTReiadswNm9Bkc8OxljmcesXyjlI2/a F+tL0NzYLoO0GKhFjh5wOCQQO3t9uzL3tA49xuZJWnkB8NmwD21U0jouYnMrtRbm anS/3eZQkKlYBT8uZFKOQySrAveeDz7jtfDtpPMhPJrVMslmyMJYKfW9ISgk5nRN LuCdodxqGZLzTAbqILlM2lDQpIIDc2m5ZL0WdYTRLCe998OXU0aqSXTiHSJvUFnY CfT14ahDg9sQvevD5L2O5/4il+dr2mw= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:32 2024 by rpki-client on console-ams.rpki-client.org