$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: mbQLdV1Og/8F23ghFJ1Q7wge2mHx+azF6Q/H8ahhlHI= Subject key identifier: 4C:B6:8C:BF:B7:E9:2C:14:4E:C6:FD:AE:A3:A8:57:35:22:0E:D7:C2 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 23 Signing time: Sun 15 Sep 2024 10:17:01 +0000 Manifest this update: Sun 15 Sep 2024 10:17:00 +0000 Manifest next update: Sun 22 Sep 2024 10:17:00 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: YBL5Qe3IRVrtBLIByY2LkrvBZPUAuzqzTPnkiy/uXeA=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: B1MkRxAli+aCG9hY9Ne4d3HvCV9W5TyJ8qGlAB72Ayo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 6Hq0/CdaWwMxF+XrSoXKbCITfc8y24LYxJ+JIDWCQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Sep 15 10:17:00 2024 GMT Not After : Sep 22 10:17:00 2024 GMT Subject: CN=66e6b41d-8730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:fe:66:98:76:f9:cc:50:69:30:95:21:77: a9:3f:5b:58:89:26:61:8c:cd:36:4c:8b:d5:22:a2: b6:0f:3a:26:82:27:17:f8:b2:07:81:e4:22:ed:79: 45:03:98:c6:3c:75:0a:6f:a1:de:6c:0c:92:6a:8a: 58:c0:1b:4b:71:c9:32:29:46:e0:9c:8e:f0:5d:8e: 1c:4f:38:38:ed:c9:9e:2e:3a:55:6c:10:bb:dc:5f: 89:59:70:2d:14:03:d4:2f:c8:96:dd:b1:7b:8b:85: 55:98:a7:b9:ca:c3:d2:88:1f:79:2f:0e:39:e9:3d: db:94:29:7a:da:56:00:1e:29:13:ff:bf:dc:d1:5d: d2:aa:ed:b3:e9:a1:37:9e:49:2a:73:61:04:5d:bc: af:8e:00:3d:87:95:40:13:0e:55:b4:20:a4:cb:2a: 2e:88:18:8f:f1:89:64:4d:d4:18:f2:aa:68:ab:5b: cc:f5:b3:cb:11:f5:40:6f:bc:af:3b:e9:02:e4:29: 5c:e1:32:81:04:07:5a:f5:d6:9e:66:64:42:69:29: e5:8d:96:70:5f:92:92:38:ca:2b:87:9e:9d:e4:81: 41:48:2c:91:6f:40:df:67:76:db:f8:d9:a6:b9:d2: fe:eb:19:06:69:6a:59:2b:5f:36:cd:70:c8:36:5a: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B6:8C:BF:B7:E9:2C:14:4E:C6:FD:AE:A3:A8:57:35:22:0E:D7:C2 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f1:58:86:58:d6:56:85:63:5a:2f:2a:d6:03:41:1c:d6:58: 28:7a:68:da:0a:47:f7:33:af:fd:d2:c3:20:12:8c:c7:d1:0f: 06:10:81:4d:ac:15:ea:83:cc:e5:4c:06:05:c4:35:0d:9e:8d: 78:e9:55:f6:42:8b:a2:29:de:c3:8e:43:80:db:8b:97:09:a5: ca:96:f1:53:22:97:67:f2:d8:6e:58:94:4e:ed:c4:fa:91:97: 50:1f:42:5e:7b:0f:52:8a:41:45:f7:0f:52:41:46:9c:b4:3e: 94:17:fc:6b:7a:10:dc:9b:a0:46:e3:59:96:93:26:35:d5:e9: b6:d8:a6:f8:b1:13:9f:7e:77:86:96:b1:e8:11:a2:d4:d4:e5: 33:b2:00:76:72:aa:56:9e:31:ba:73:57:4b:91:c6:d1:64:18: 50:b9:a0:70:d0:4c:60:33:02:5e:0b:23:45:8f:ff:d1:aa:94: 42:47:79:18:14:49:54:bb:0e:83:d9:e7:63:8c:5d:12:e9:82: 21:59:30:33:fd:1a:74:0b:7a:a5:03:b9:d0:e7:d2:44:51:1b: c2:e6:01:7b:1f:37:bf:2f:e3:0a:d5:a4:5f:26:4f:18:d9:2c: 62:6a:35:83:4a:50:53:6c:06:6e:27:6f:95:d6:92:68:26:4c: 40:21:61:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDk1QzExMC8GA1UEBRMoRDZDODBDNUQzOEFBM0YxMEQxRUIwRTEzOUI5RTQ5NEVC RjZDNjQyMTAeFw0yNDA5MTUxMDE3MDBaFw0yNDA5MjIxMDE3MDBaMBgxFjAUBgNV BAMTDTY2ZTZiNDFkLTg3MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEEP5mmHb5zFBpMJUhd6k/W1iJJmGMzTZMi9UiorYPOiaCJxf4sgeB5CLteUUD mMY8dQpvod5sDJJqiljAG0txyTIpRuCcjvBdjhxPODjtyZ4uOlVsELvcX4lZcC0U A9QvyJbdsXuLhVWYp7nKw9KIH3kvDjnpPduUKXraVgAeKRP/v9zRXdKq7bPpoTee SSpzYQRdvK+OAD2HlUATDlW0IKTLKi6IGI/xiWRN1BjyqmirW8z1s8sR9UBvvK87 6QLkKVzhMoEEB1r11p5mZEJpKeWNlnBfkpI4yiuHnp3kgUFILJFvQN9ndtv42aa5 0v7rGQZpalkrXzbNcMg2WmwZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTLaMv7fp LBROxv2uo6hXNSIO18IwHwYDVR0jBBgwFoAU1sgMXTiqPxDR6w4Tm55JTr9sZCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0OTVDLzVCQzYzRUY0NDA2 NTExRUY4NTZDOUUyOUM0RjlBRTAyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXNnTVhUaXFQeERSNnc0VG01NUpUcjlzWkNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 OTVDLzVCQzYzRUY0NDA2NTExRUY4NTZDOUUyOUM0RjlBRTAyLzFzZ01YVGlxUHhE UjZ3NFRtNTVKVHI5c1pDRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKzxWIZY1laFY1ovKtYDQRzWWCh6aNoKR/czr/3SwyASjMfRDwYQgU2s FeqDzOVMBgXENQ2ejXjpVfZCi6Ip3sOOQ4Dbi5cJpcqW8VMil2fy2G5YlE7txPqR l1AfQl57D1KKQUX3D1JBRpy0PpQX/Gt6ENyboEbjWZaTJjXV6bbYpvixE59+d4aW segRotTU5TOyAHZyqlaeMbpzV0uRxtFkGFC5oHDQTGAzAl4LI0WP/9GqlEJHeRgU SVS7DoPZ52OMXRLpgiFZMDP9GnQLeqUDudDn0kRRG8LmAXsfN78v4wrVpF8mTxjZ LGJqNYNKUFNsBm4nb5XWkmgmTEAhYeU= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:45 2024 by rpki-client on console-fra.rpki-client.org