$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft File: EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json) Hash identifier: sYY8SVRSoFV/zdYrWvRybLGUJDFUCm+3XAqLIUFG7Lw= Subject key identifier: 99:3B:B6:9F:3F:BD:AA:39:7F:0C:35:51:5D:B9:28:A6:20:8B:D4:5B Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5 Certificate issuer: /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft Manifest number: 38 Signing time: Sun 15 Sep 2024 10:01:24 +0000 Manifest this update: Sun 15 Sep 2024 10:01:23 +0000 Manifest next update: Sun 22 Sep 2024 10:01:23 +0000 Files and hashes: 1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: 2rlRTC1D7/OiKWkCvO5yDS8MYXHy145eFP93M9aLT6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5 Validity Not Before: Sep 15 10:01:23 2024 GMT Not After : Sep 22 10:01:23 2024 GMT Subject: CN=66e6b073-aaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:5b:45:8d:d7:e4:fe:7e:2b:23:5f:16:ad: 0f:08:06:e8:db:a2:62:1e:21:67:4c:fb:0f:19:51: 38:a0:6c:38:34:f8:31:a2:1f:9e:e2:56:08:d3:5c: e4:b2:b0:d5:91:1c:6c:cc:f6:c6:3c:52:76:09:0b: e4:25:4a:4a:07:4e:14:15:d9:f2:4d:5b:a6:f0:d7: 7b:be:06:fc:91:09:52:50:fa:a4:0d:0b:83:20:97: e8:a0:b7:bd:38:00:74:d6:7d:33:d9:7a:6f:b7:2f: f8:1f:08:37:ae:bc:cd:f1:13:69:bf:5a:0f:4c:d1: 84:98:05:b3:0d:18:49:e1:86:bc:37:c4:4e:35:22: f6:f9:b1:74:37:10:6b:8c:f2:f0:a8:5d:c5:1a:43: 12:87:24:78:b1:a8:02:cd:63:c9:50:78:6d:74:88: 07:02:57:c5:0a:70:14:bd:b7:3b:06:1c:2c:59:c9: 95:2e:f3:52:5d:15:4e:a7:79:3d:0d:94:0c:36:8a: 04:02:be:c2:64:3b:e6:66:84:3e:48:4d:bc:97:4e: 0e:01:87:f8:0f:59:d5:c0:1f:69:93:2a:db:90:12: af:04:ac:4d:a2:c8:67:e3:31:46:78:3f:6a:88:4c: 19:f2:e3:b1:69:97:f5:2b:19:6b:d9:7a:0d:b5:19: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3B:B6:9F:3F:BD:AA:39:7F:0C:35:51:5D:B9:28:A6:20:8B:D4:5B X509v3 Authority Key Identifier: keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fd:90:37:fc:75:a4:65:c2:83:f2:42:4c:8a:2f:cb:14:3d: 6c:c0:81:f3:1d:3b:00:a1:3e:84:41:f3:e1:d1:f4:66:dc:8b: ca:06:71:6b:89:7b:8a:78:29:a9:65:f7:40:b7:73:69:39:ff: f2:d4:86:a0:84:ed:a3:c4:aa:29:ce:48:f3:6f:71:a6:a7:34: d7:be:98:c4:e4:df:d2:6f:81:26:0b:d1:35:23:1b:db:6f:69: 2e:f7:57:d4:55:39:62:cf:55:45:c4:f1:24:c7:5f:c5:2a:79: 72:67:23:29:e9:21:63:7b:46:45:e8:0a:cc:07:01:1e:a1:5b: 17:59:11:44:4f:8a:80:84:dc:2b:f8:b0:a8:59:a9:34:b2:1a: 95:54:30:d3:f9:b5:bc:19:ba:e4:54:b8:07:f9:35:46:90:35: de:2b:12:7e:f2:7c:ad:34:d3:ae:e5:8b:27:fa:f7:ec:ae:61: c6:39:d8:1e:77:5f:fd:b0:72:42:f6:5f:d3:50:4c:d6:55:bc: 4e:8b:a8:f2:c2:ac:89:d0:8c:8f:25:4c:18:c0:69:c1:fd:4e: 61:f5:fb:00:cb:df:bc:dc:5e:16:2c:72:77:eb:cc:5f:16:08: 40:28:57:23:92:90:ed:f0:9c:25:74:3e:0f:51:62:15:8e:53: c7:67:78:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzlBMjExMC8GA1UEBRMoMTFENEY0REFDN0ZCQThCNUMxMjIyNDMwMDUzOUJEQzYx NTQ0NURFNTAeFw0yNDA5MTUxMDAxMjNaFw0yNDA5MjIxMDAxMjNaMBgxFjAUBgNV BAMTDTY2ZTZiMDczLWFhYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/+ltFjdfk/n4rI18WrQ8IBujbomIeIWdM+w8ZUTigbDg0+DGiH57iVgjTXOSy sNWRHGzM9sY8UnYJC+QlSkoHThQV2fJNW6bw13u+BvyRCVJQ+qQNC4Mgl+igt704 AHTWfTPZem+3L/gfCDeuvM3xE2m/Wg9M0YSYBbMNGEnhhrw3xE41Ivb5sXQ3EGuM 8vCoXcUaQxKHJHixqALNY8lQeG10iAcCV8UKcBS9tzsGHCxZyZUu81JdFU6neT0N lAw2igQCvsJkO+ZmhD5ITbyXTg4Bh/gPWdXAH2mTKtuQEq8ErE2iyGfjMUZ4P2qI TBny47Fpl/UrGWvZeg21GWeDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmTu2nz+9 qjl/DDVRXbkopiCL1FswHwYDVR0jBBgwFoAUEdT02sf7qLXBIiQwBTm9xhVEXeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3OUEyL0I4QzBCMEEwMjZB MDExRUZCOUEzN0UzOUM0RjlBRTAyL0VkVDAyc2Y3cUxYQklpUXdCVG05eGhWRVhl VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWRUMDJzZjdxTFhCSWlRd0JUbTl4aFZFWGVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 OUEyL0I4QzBCMEEwMjZBMDExRUZCOUEzN0UzOUM0RjlBRTAyL0VkVDAyc2Y3cUxY QklpUXdCVG05eGhWRVhlVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC79kDf8daRlwoPyQkyKL8sUPWzAgfMdOwChPoRB8+HR9Gbci8oGcWuJ e4p4Kall90C3c2k5//LUhqCE7aPEqinOSPNvcaanNNe+mMTk39JvgSYL0TUjG9tv aS73V9RVOWLPVUXE8STHX8UqeXJnIynpIWN7RkXoCswHAR6hWxdZEURPioCE3Cv4 sKhZqTSyGpVUMNP5tbwZuuRUuAf5NUaQNd4rEn7yfK00067liyf69+yuYcY52B53 X/2wckL2X9NQTNZVvE6LqPLCrInQjI8lTBjAacH9TmH1+wDL37zcXhYscnfrzF8W CEAoVyOSkO3wnCV0Pg9RYhWOU8dneIU= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:14 2024 by rpki-client on console-fra.rpki-client.org