$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: QfwOvYNWmWE2Zdw5gd6sM5BVtpy3w9gm7SajQGXO8z4= Subject key identifier: 0D:83:51:59:FD:3A:29:A6:58:CA:41:73:A4:49:5C:2E:09:88:D0:ED Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: 35 Signing time: Sun 15 Sep 2024 10:01:35 +0000 Manifest this update: Sun 15 Sep 2024 10:01:35 +0000 Manifest next update: Sun 22 Sep 2024 10:01:35 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: aKSx5zwM9LLOl6F2bDi6Bri6BkMUrUhOIyPnotf/l3U=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: Iji2xdjNL9b32bfsJ+kVOrXH1mKlpeXd/SW3QeUD+pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Sep 15 10:01:35 2024 GMT Not After : Sep 22 10:01:35 2024 GMT Subject: CN=66e6b07f-3dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:57:77:fc:ab:5c:29:a6:f0:9f:c0:39:22: de:d2:e7:e1:50:4a:39:bf:7f:a9:cc:fb:52:da:61: 42:03:90:d3:24:02:f6:80:2e:28:a0:7a:6f:c7:b1: ff:80:59:b3:8b:6a:ad:c7:01:ff:f7:e4:87:44:ba: a6:b0:63:95:87:98:15:6f:ea:01:f3:46:28:0d:6f: ab:4d:74:25:93:f7:0b:dc:82:81:2b:ce:85:8f:86: bd:ef:ea:65:e8:ea:41:8d:d6:cd:a9:94:1c:ce:4c: 85:ea:a7:10:f9:d0:09:fc:f1:b7:7d:9b:19:2f:75: bb:2e:29:a5:7a:b5:59:6a:55:b6:90:29:0e:ca:00: 1b:7b:be:0d:d4:69:c7:d5:73:f3:1e:fa:78:9d:a3: 87:17:d9:53:c4:04:a7:43:ed:a7:cc:48:f1:91:f7: 15:c8:e2:05:bf:78:f4:80:0e:8d:8e:64:e2:e6:74: 22:c0:f7:83:9c:1c:ce:ff:70:ae:a6:3a:11:3b:d6: 34:57:fe:2a:90:1a:8d:87:6a:9a:1b:33:43:53:2a: e4:90:7d:50:1c:10:fd:8e:95:36:30:2a:85:c1:3c: d8:34:10:19:c0:de:70:a5:d5:fb:f3:28:43:63:55: 6f:dc:ca:58:5a:59:c2:99:f8:8d:e5:8c:8f:f3:5e: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:83:51:59:FD:3A:29:A6:58:CA:41:73:A4:49:5C:2E:09:88:D0:ED X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c2:42:32:a6:81:8e:3b:a3:aa:d1:3f:d0:64:8d:89:b4:9d: e8:1c:1d:57:ed:dd:32:57:29:ce:2e:72:48:c8:b9:8b:83:05: f4:e8:e7:14:14:d6:e8:d4:15:c4:fb:c6:de:96:9f:fb:3d:88: 61:51:af:2c:6d:05:3f:5e:db:9b:cc:ef:9e:6c:08:84:be:cc: 1f:79:a0:7c:a1:88:b4:59:54:fd:de:4e:99:d5:0a:c7:61:f0: cc:1f:c9:f8:bf:52:c5:97:6b:fd:2c:95:fe:17:e8:75:9f:54: f2:2f:3a:f1:dc:ca:56:8d:73:d0:1d:3d:d4:4e:f9:ed:6d:00: b9:08:6d:ae:1a:f8:bd:cb:da:15:fd:5c:42:d0:f7:4d:c9:b2: 04:22:e1:cd:da:0c:f2:0b:9f:22:f6:91:75:7d:c1:49:0e:7b: cb:b0:12:fc:3d:55:5d:9f:89:af:9a:39:2c:d1:81:02:17:7e: 87:2b:78:9b:20:03:37:f1:10:43:0c:c0:0d:e9:18:a2:2c:29: 0c:48:56:6a:70:5a:fb:d7:4d:53:f4:56:62:63:89:97:c1:fe: ab:b2:ef:0f:f0:a5:a0:77:31:6a:c6:cb:81:18:06:de:23:7a: cd:8b:b7:8b:70:b6:9a:bf:28:69:c8:39:06:b4:a4:72:6d:8f: d9:b0:1e:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODNEQzExMC8GA1UEBRMoMDlDMzZCQzY1REU3MkEwNDE0N0Y5RDcyMjBCREJBOEQ1 MjVEMTU2NDAeFw0yNDA5MTUxMDAxMzVaFw0yNDA5MjIxMDAxMzVaMBgxFjAUBgNV BAMTDTY2ZTZiMDdmLTNkZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXJld3/KtcKabwn8A5It7S5+FQSjm/f6nM+1LaYUIDkNMkAvaALiigem/Hsf+A WbOLaq3HAf/35IdEuqawY5WHmBVv6gHzRigNb6tNdCWT9wvcgoErzoWPhr3v6mXo 6kGN1s2plBzOTIXqpxD50An88bd9mxkvdbsuKaV6tVlqVbaQKQ7KABt7vg3UacfV c/Me+nido4cX2VPEBKdD7afMSPGR9xXI4gW/ePSADo2OZOLmdCLA94OcHM7/cK6m OhE71jRX/iqQGo2HapobM0NTKuSQfVAcEP2OlTYwKoXBPNg0EBnA3nCl1fvzKENj VW/cylhaWcKZ+I3ljI/zXiR5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDYNRWf06 KaZYykFzpElcLgmI0O0wHwYDVR0jBBgwFoAUCcNrxl3nKgQUf51yIL26jVJdFWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4M0RDL0EzOTdBM0U0MjZF RDExRUZCNEM5QkEyOEM0RjlBRTAyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2NOcnhsM25LZ1FVZjUxeUlMMjZqVkpkRldRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 M0RDL0EzOTdBM0U0MjZFRDExRUZCNEM5QkEyOEM0RjlBRTAyL0NjTnJ4bDNuS2dR VWY1MXlJTDI2alZKZEZXUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA7CQjKmgY47o6rRP9BkjYm0negcHVft3TJXKc4uckjIuYuDBfTo5xQU 1ujUFcT7xt6Wn/s9iGFRryxtBT9e25vM755sCIS+zB95oHyhiLRZVP3eTpnVCsdh 8Mwfyfi/UsWXa/0slf4X6HWfVPIvOvHcylaNc9AdPdRO+e1tALkIba4a+L3L2hX9 XELQ903JsgQi4c3aDPILnyL2kXV9wUkOe8uwEvw9VV2fia+aOSzRgQIXfocreJsg AzfxEEMMwA3pGKIsKQxIVmpwWvvXTVP0VmJjiZfB/quy7w/wpaB3MWrGy4EYBt4j es2Lt4twtpq/KGnIOQa0pHJtj9mwHuk= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:14 2024 by rpki-client on console-fra.rpki-client.org