$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: e78S2dBDFArMDInrECjsUYpvXEmkEZWZ7yz9GjF2t54= Subject key identifier: C6:3B:0B:4A:E1:34:8F:FE:34:63:E4:B6:1E:0D:8A:ED:85:B2:B5:4D Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: 3A Signing time: Thu 19 Sep 2024 05:52:16 +0000 Manifest this update: Thu 19 Sep 2024 05:52:16 +0000 Manifest next update: Thu 26 Sep 2024 05:52:16 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: 6mKrjACmW+fHSJ4GayFaV80WNh8E6mc06qUhQR/YIVY=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: TmyUhAAOaU6CYroA57XlncbnofjVXGoZ5jM7LnuMB/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Validity Not Before: Sep 19 05:52:16 2024 GMT Not After : Sep 26 05:52:16 2024 GMT Subject: CN=66ebbc10-3571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:8f:42:82:ac:31:01:d0:98:4e:3f:1e:9c: de:ea:22:ce:9d:62:96:dd:0d:88:4c:3e:88:45:7f: 02:ce:7b:82:5b:b1:cd:24:be:e5:3b:2d:09:1d:5d: a3:3f:46:c1:ba:e8:47:d0:e0:4b:a0:50:c3:2b:7d: d2:1c:06:eb:69:b6:e0:fc:6e:db:30:e2:f0:df:07: 56:0a:84:86:04:c0:8e:95:8d:b1:6a:d4:14:00:b6: 8a:fc:20:ac:8c:87:19:db:d5:41:81:f1:93:c8:6d: 5a:47:a0:7c:0c:d4:33:73:d4:a4:1f:8c:de:21:b5: be:8f:50:40:f0:32:4c:a4:cd:4e:4a:f7:c7:dd:1f: 09:3d:54:43:16:0d:2f:2f:9b:7e:e7:07:0a:fe:c3: ee:e5:0d:7f:07:cc:cf:10:ac:48:4d:77:99:86:6f: f7:37:30:4b:79:37:0e:b9:1a:f6:70:3c:10:a0:9c: 81:3e:67:8b:16:f1:f2:da:10:3b:6d:4e:5e:5b:cd: 71:51:ab:5f:45:4e:82:89:c6:2d:df:e1:ad:0f:2e: f5:a1:bb:19:1f:66:a0:79:b9:a1:b0:23:2f:aa:b0: ef:34:58:71:31:91:67:d0:2f:a3:9a:e4:50:32:7d: a7:b6:24:40:35:77:27:2d:d8:89:06:f1:15:da:33: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3B:0B:4A:E1:34:8F:FE:34:63:E4:B6:1E:0D:8A:ED:85:B2:B5:4D X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:87:bc:13:76:3d:88:35:66:07:ea:c0:18:70:85:32:34:9f: d4:d2:2d:53:e3:fb:6a:15:39:d4:61:06:83:d4:70:d5:4f:bd: fd:2a:60:ad:fa:b9:41:49:2c:3d:1d:8b:4d:da:3a:31:3c:58: a2:b9:dc:a8:60:c3:08:b1:49:a9:47:f5:59:b8:2c:56:c4:75: b0:31:70:cf:28:bb:31:42:76:52:35:b3:84:71:c1:50:67:fe: 5c:99:7d:33:cf:86:4f:53:8d:9c:3e:c7:8e:55:e4:b0:28:9c: 32:9a:73:7e:37:70:ff:e1:e0:db:4a:93:10:fb:4a:e8:07:3c: e9:8c:f1:75:ce:86:bb:d1:40:c7:b2:bc:ba:1f:d8:14:30:ad: 7e:18:54:4c:00:7d:42:27:98:5c:8a:27:a5:b9:e5:a2:8f:8d: 8d:d6:05:58:33:94:96:dc:47:34:3e:63:50:14:fc:5c:64:92: cc:79:4b:37:40:4d:b8:c2:c9:59:90:d2:ba:2b:e7:b0:3d:6d: c8:a9:1a:01:17:c5:7e:85:4c:82:89:1c:04:5f:0e:4a:37:d8: 00:47:db:31:d4:f2:36:70:19:b4:10:c7:d1:6a:cb:d6:4e:68: 02:6f:93:1c:94:8d:81:7b:e1:b5:69:4e:b5:bf:f3:19:a3:54: c5:8b:5b:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODNEQzExMC8GA1UEBRMoMjI0RTY2OEY0MDU2MDFDQURDMzM5MTM4M0ZDQTk2REY5 NDY4RDk1QTAeFw0yNDA5MTkwNTUyMTZaFw0yNDA5MjYwNTUyMTZaMBgxFjAUBgNV BAMTDTY2ZWJiYzEwLTM1NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt6Y9CgqwxAdCYTj8enN7qIs6dYpbdDYhMPohFfwLOe4Jbsc0kvuU7LQkdXaM/ RsG66EfQ4EugUMMrfdIcButptuD8btsw4vDfB1YKhIYEwI6VjbFq1BQAtor8IKyM hxnb1UGB8ZPIbVpHoHwM1DNz1KQfjN4htb6PUEDwMkykzU5K98fdHwk9VEMWDS8v m37nBwr+w+7lDX8HzM8QrEhNd5mGb/c3MEt5Nw65GvZwPBCgnIE+Z4sW8fLaEDtt Tl5bzXFRq19FToKJxi3f4a0PLvWhuxkfZqB5uaGwIy+qsO80WHExkWfQL6Oa5FAy fae2JEA1dyct2IkG8RXaM6MxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxjsLSuE0 j/40Y+S2Hg2K7YWytU0wHwYDVR0jBBgwFoAUIk5mj0BWAcrcM5E4P8qW35Ro2Vow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4M0RDLzk5Qzc0ODg4MjZF RDExRUZCNEM5QkEyOEM0RjlBRTAyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJW by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWs1bWowQldBY3JjTTVFNFA4cVczNVJvMlZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 M0RDLzk5Qzc0ODg4MjZFRDExRUZCNEM5QkEyOEM0RjlBRTAyL0lrNW1qMEJXQWNy Y001RTRQOHFXMzVSbzJWby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMGHvBN2PYg1ZgfqwBhwhTI0n9TSLVPj+2oVOdRhBoPUcNVPvf0qYK36 uUFJLD0di03aOjE8WKK53KhgwwixSalH9Vm4LFbEdbAxcM8ouzFCdlI1s4RxwVBn /lyZfTPPhk9TjZw+x45V5LAonDKac343cP/h4NtKkxD7SugHPOmM8XXOhrvRQMey vLof2BQwrX4YVEwAfUInmFyKJ6W55aKPjY3WBVgzlJbcRzQ+Y1AU/Fxkksx5SzdA TbjCyVmQ0ror57A9bcipGgEXxX6FTIKJHARfDko32ABH2zHU8jZwGbQQx9Fqy9ZO aAJvkxyUjYF74bVpTrW/8xmjVMWLW1Y= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:59 2024 by rpki-client on console-ams.rpki-client.org