$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: jgzxty8mvTjz+eQDL6ZmlJoZdo6/IjDb5711QO3Pbkw= Subject key identifier: 35:DF:7E:49:40:83:9D:FA:E8:D0:64:D9:C0:75:91:FC:04:02:D3:FB Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: 14 Signing time: Thu 19 Sep 2024 06:17:01 +0000 Manifest this update: Thu 19 Sep 2024 06:17:00 +0000 Manifest next update: Thu 26 Sep 2024 06:17:00 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: FUbKh24d8GqaI+kSjrlKniSAjubSI5p9Z78zZlTgmqo=) 2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: fLihF8OPXYOV6Q+4GvvDUq4V32BKkeG6RAvNAd2mXSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Validity Not Before: Sep 19 06:17:00 2024 GMT Not After : Sep 26 06:17:00 2024 GMT Subject: CN=66ebc1dd-6191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:27:a5:80:87:63:f5:01:91:fb:9f:d4:4f:62: 50:e8:eb:1b:66:4a:13:a7:94:f7:41:d0:4a:df:dc: 16:66:97:cd:cd:f4:14:5e:60:41:f3:7d:40:4d:af: de:71:74:09:b7:2e:f1:65:a0:55:73:07:45:56:71: b7:12:1e:ee:3d:cc:98:cf:fc:b9:a2:34:51:05:90: b9:cc:be:65:9c:b8:f7:52:bf:2d:37:03:03:4a:01: 4b:ed:99:11:78:5d:56:c0:3d:cc:c8:13:e6:10:8f: 50:db:83:7e:f3:2d:a4:7b:75:38:df:ff:65:e0:4f: 3e:a3:b9:b6:c5:c8:39:02:d1:3e:02:7c:e6:96:1f: 79:f1:fb:e3:9e:fd:50:01:ee:2c:83:f1:7d:28:aa: ec:43:52:00:fc:33:90:0c:44:0b:89:42:20:4c:ea: 4b:82:c6:28:98:ba:75:ca:1b:42:ed:9a:51:5a:90: dc:5c:3e:f3:55:3f:49:87:76:3a:de:a7:63:59:d2: bf:56:16:5e:f1:b5:f4:bc:8d:b4:d1:0d:35:4c:b3: 24:97:d0:a3:a4:5b:be:3f:ae:8e:50:94:b0:ce:14: cd:18:ce:55:30:30:57:6d:90:4f:6d:0d:9a:1c:26: 40:79:ad:c3:7e:97:23:de:4b:14:eb:0d:7b:ea:b1: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DF:7E:49:40:83:9D:FA:E8:D0:64:D9:C0:75:91:FC:04:02:D3:FB X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:93:4f:eb:bd:a8:13:75:05:91:76:b8:49:91:ca:17:5b:ee: 1b:18:8a:a3:9a:04:3a:bf:f6:15:e4:e1:72:77:98:69:b6:dc: 05:f2:4f:17:b5:b0:92:4f:76:c4:b4:74:2d:10:72:aa:23:a8: 6b:c5:a0:f1:59:49:54:66:f6:b7:bb:6d:33:dd:5c:0c:23:85: 37:fb:0f:7a:e4:8c:00:55:18:85:db:ae:6f:b3:3c:20:62:78: 66:78:22:fd:28:c8:77:c7:d6:32:03:28:ed:af:3b:78:60:68: e9:3e:65:dc:9d:da:84:09:1c:e3:46:ae:21:4f:68:6e:01:cc: d2:de:73:23:a2:79:9b:0c:5e:b7:f8:4f:11:21:64:d3:bf:6a: e5:83:37:66:19:77:1a:a0:24:c6:c7:68:88:51:6a:ef:dc:cd: b3:ac:86:45:57:c9:0d:f4:60:0d:33:cc:ec:61:e7:4c:42:e1: 57:07:f0:4e:af:0c:82:93:e6:83:53:bb:ef:b5:d0:c9:6b:7d: 26:a6:76:4b:f3:7c:a2:cf:cc:ec:b6:d3:33:7f:f4:0b:62:57: af:f4:8c:a3:16:bb:38:0c:fe:d3:aa:95:eb:41:99:90:2c:1c: b4:54:8f:14:e5:7a:23:a0:96:c5:22:a9:47:79:12:2f:0b:cd: 7d:1c:67:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc4NjExMC8GA1UEBRMoQjI1NTJCMzhCOEM1Q0IwOTM1Qzk0MEZBNjA5ODBFQTZG NTEwQ0Y4NjAeFw0yNDA5MTkwNjE3MDBaFw0yNDA5MjYwNjE3MDBaMBgxFjAUBgNV BAMTDTY2ZWJjMWRkLTYxOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcJ6WAh2P1AZH7n9RPYlDo6xtmShOnlPdB0Erf3BZml83N9BReYEHzfUBNr95x dAm3LvFloFVzB0VWcbcSHu49zJjP/LmiNFEFkLnMvmWcuPdSvy03AwNKAUvtmRF4 XVbAPczIE+YQj1Dbg37zLaR7dTjf/2XgTz6jubbFyDkC0T4CfOaWH3nx++Oe/VAB 7iyD8X0oquxDUgD8M5AMRAuJQiBM6kuCxiiYunXKG0LtmlFakNxcPvNVP0mHdjre p2NZ0r9WFl7xtfS8jbTRDTVMsySX0KOkW74/ro5QlLDOFM0YzlUwMFdtkE9tDZoc JkB5rcN+lyPeSxTrDXvqsZMLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNd9+SUCD nfro0GTZwHWR/AQC0/swHwYDVR0jBBgwFoAUslUrOLjFywk1yUD6YJgOpvUQz4Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1Nzg2L0U1NzcxMzgwNUFF MTExRUZCQjVDNTcyREM0RjlBRTAyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2xVck9MakZ5d2sxeVVENllKZ09wdlVRejRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 Nzg2L0U1NzcxMzgwNUFFMTExRUZCQjVDNTcyREM0RjlBRTAyL3NsVXJPTGpGeXdr MXlVRDZZSmdPcHZVUXo0WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACTT+u9qBN1BZF2uEmRyhdb7hsYiqOaBDq/9hXk4XJ3mGm23AXyTxe1 sJJPdsS0dC0QcqojqGvFoPFZSVRm9re7bTPdXAwjhTf7D3rkjABVGIXbrm+zPCBi eGZ4Iv0oyHfH1jIDKO2vO3hgaOk+Zdyd2oQJHONGriFPaG4BzNLecyOieZsMXrf4 TxEhZNO/auWDN2YZdxqgJMbHaIhRau/czbOshkVXyQ30YA0zzOxh50xC4VcH8E6v DIKT5oNTu++10MlrfSamdkvzfKLPzOy20zN/9AtiV6/0jKMWuzgM/tOqletBmZAs HLRUjxTleiOglsUiqUd5Ei8LzX0cZyw= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:58 2024 by rpki-client on console-ams.rpki-client.org