$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: G3qKzN4VCJdQXiLjCDUNiK2Gjv/jM/wkgDzQffXxO3U= Subject key identifier: B3:E9:CB:00:B8:79:DA:96:EC:F3:F3:60:03:2E:E4:D8:B8:B0:C5:4D Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 58 Signing time: Sun 15 Sep 2024 09:42:40 +0000 Manifest this update: Sun 15 Sep 2024 09:42:39 +0000 Manifest next update: Sun 22 Sep 2024 09:42:39 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: G/aDtXwQxiWvPAWiPc4uk+C5WOSQZaplL4WaB4a2j5o=) 2: FC0C402A0C9411EFA8D0B354C4F9AE02.roa (hash: kMAJCFT1gQvcnAliudAQJjTlq5Rcm8U1HeBVpIysTGA=) 3: DCEA7D2A319611EFB9AC5611C4F9AE02.roa (hash: s3ke80Hbfm/llJ0fhDauq7mez8kf8/KCZMk0fLwjYEI=) 4: DD267C66316511EFB284A421C4F9AE02.roa (hash: fBqSW8jISb6HiF16XH44dQP540yVqiuhIc6mypavGXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Sep 15 09:42:39 2024 GMT Not After : Sep 22 09:42:39 2024 GMT Subject: CN=66e6ac0f-31b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:b4:74:0a:61:cf:ff:85:97:dc:b6:4a:6e: 90:8b:f1:e7:92:4e:b0:8e:a5:3f:46:89:fd:30:c7: b4:87:88:cc:ee:ee:70:e6:57:51:72:47:a3:aa:06: df:5b:39:77:41:5a:91:8d:1e:3b:11:14:32:8f:69: 3c:71:ca:96:2e:00:12:8a:46:a7:2c:7e:67:ee:56: 5d:ab:b6:f1:69:c4:98:f1:df:02:96:26:dd:9c:50: 75:04:c7:8d:5c:a1:33:7b:c4:6e:47:1c:e2:a7:bd: 07:12:87:3a:bb:c5:5e:61:63:99:0e:6e:fc:d4:5a: a4:b9:ec:65:a3:84:eb:ad:59:50:f1:9a:80:3f:78: 53:35:51:8f:f3:33:7b:7d:8b:da:2d:3e:39:db:37: e7:7a:32:cc:29:1a:0b:e3:b7:7f:ed:f8:5f:07:97: 37:ee:74:32:0e:2d:db:fd:e3:1b:d0:69:d2:14:79: b3:11:37:01:5a:5a:14:fa:d5:7b:98:7c:e7:c8:fb: 59:e7:2e:3e:dc:20:92:3c:c3:ff:80:37:fd:4a:d9: 9f:d7:44:3d:6f:b4:91:c9:4e:07:9d:cf:4d:ff:0a: 47:1e:c1:c3:08:88:72:35:fa:e2:59:11:b6:f0:88: c2:c7:d0:04:41:d0:14:cf:0c:3d:5d:ee:96:3e:64: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E9:CB:00:B8:79:DA:96:EC:F3:F3:60:03:2E:E4:D8:B8:B0:C5:4D X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:40:6b:9d:bf:0e:5a:83:84:d1:d4:5a:5e:0a:dd:82:0e:14: 47:cb:28:07:fa:68:3c:97:25:da:5c:a7:80:c4:b0:8b:57:a6: c1:cc:fe:6c:6d:86:b4:ac:68:89:60:c3:ea:2a:3e:98:35:65: 00:15:be:84:0d:cd:af:da:88:ca:dc:a4:41:fa:59:c7:71:8a: 7c:ba:85:41:e1:d8:5d:82:66:9f:30:d6:b9:9f:8e:d4:18:27: 0c:29:76:d6:eb:f1:75:d5:70:42:69:59:6c:5e:88:31:b3:8a: e7:3b:c8:18:60:ac:9a:6f:13:94:0b:2d:c7:4b:85:d6:2d:92: 46:c2:e2:4e:68:74:9d:ea:0a:fc:c9:d5:13:97:1f:da:6e:82: 6e:b4:b0:89:0f:dc:1d:3c:dc:f1:92:73:6c:59:82:fb:8f:58: d8:0d:c2:8a:d2:54:6d:e2:31:d0:72:09:f5:68:08:99:eb:b8: 44:11:f0:6e:20:ed:2d:18:de:24:b7:54:44:ec:ad:4d:4a:69: d9:df:41:b6:9c:f5:05:df:8d:fb:e5:fe:0f:35:83:23:09:b0: 23:24:df:51:e2:e8:81:95:5b:1f:51:69:9f:1c:25:cd:21:59: 3b:10:da:93:a3:01:87:ba:67:ca:51:64:ba:42:ba:a3:1f:54: 6a:c0:bb:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTM1MzExMC8GA1UEBRMoQUNEMDQ3RDBEODhFMjY1N0UxMkNGOTEzMDFDMTYwRjFE M0NEMkYzMzAeFw0yNDA5MTUwOTQyMzlaFw0yNDA5MjIwOTQyMzlaMBgxFjAUBgNV BAMTDTY2ZTZhYzBmLTMxYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXTrR0CmHP/4WX3LZKbpCL8eeSTrCOpT9Gif0wx7SHiMzu7nDmV1FyR6OqBt9b OXdBWpGNHjsRFDKPaTxxypYuABKKRqcsfmfuVl2rtvFpxJjx3wKWJt2cUHUEx41c oTN7xG5HHOKnvQcShzq7xV5hY5kObvzUWqS57GWjhOutWVDxmoA/eFM1UY/zM3t9 i9otPjnbN+d6MswpGgvjt3/t+F8HlzfudDIOLdv94xvQadIUebMRNwFaWhT61XuY fOfI+1nnLj7cIJI8w/+AN/1K2Z/XRD1vtJHJTgedz03/CkcewcMIiHI1+uJZEbbw iMLH0ARB0BTPDD1d7pY+ZDP/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs+nLALh5 2pbs8/NgAy7k2LiwxU0wHwYDVR0jBBgwFoAUrNBH0NiOJlfhLPkTAcFg8dPNLzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5MzUzLzA4NzVFNjQ4MDVD NjExRUY4OTYyMEEyNkM0RjlBRTAyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvck5CSDBOaU9KbGZoTFBrVEFjRmc4ZFBOTHpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 MzUzLzA4NzVFNjQ4MDVDNjExRUY4OTYyMEEyNkM0RjlBRTAyL3JOQkgwTmlPSmxm aExQa1RBY0ZnOGRQTkx6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI9Aa52/DlqDhNHUWl4K3YIOFEfLKAf6aDyXJdpcp4DEsItXpsHM/mxt hrSsaIlgw+oqPpg1ZQAVvoQNza/aiMrcpEH6Wcdxiny6hUHh2F2CZp8w1rmfjtQY Jwwpdtbr8XXVcEJpWWxeiDGziuc7yBhgrJpvE5QLLcdLhdYtkkbC4k5odJ3qCvzJ 1ROXH9pugm60sIkP3B083PGSc2xZgvuPWNgNworSVG3iMdByCfVoCJnruEQR8G4g 7S0Y3iS3VETsrU1KadnfQbac9QXfjfvl/g81gyMJsCMk31Hi6IGVWx9RaZ8cJc0h WTsQ2pOjAYe6Z8pRZLpCuqMfVGrAu64= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:14 2024 by rpki-client on console-fra.rpki-client.org