$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json) Hash identifier: m+3FSafl91IZ/ZoZgl830LwjA8CzkxTuW527+0hDurQ= Subject key identifier: 6C:95:BC:A1:02:C1:58:B0:F5:AA:8E:68:95:B2:EA:D2:34:FC:0B:0A Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft Manifest number: 29 Signing time: Thu 19 Sep 2024 06:02:58 +0000 Manifest this update: Thu 19 Sep 2024 06:02:58 +0000 Manifest next update: Thu 26 Sep 2024 06:02:58 +0000 Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: HNvdm8X1OvdOplojBrTkysS9HOBlE7iRCf0eyYIsvpQ=) 2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: tpxknLltESXlXvrC8XRzEEbUw6cbAqdQTGW1X5phwoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Validity Not Before: Sep 19 06:02:58 2024 GMT Not After : Sep 26 06:02:58 2024 GMT Subject: CN=66ebbe92-209f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:40:f6:ee:da:27:cd:5b:43:bc:1e:b9:dc: f9:3c:9b:51:2f:bb:d0:e3:3a:ec:ce:54:45:06:50: 1a:a0:82:2f:4e:28:67:8c:75:16:eb:de:d2:b6:07: 9d:3f:da:80:79:20:a0:e8:c1:19:20:58:ad:bc:25: 91:a3:dd:57:89:4e:26:4a:3b:0a:bb:61:a7:06:9d: 34:37:7f:f9:44:65:1a:a0:8f:9c:8e:5e:4b:15:da: b5:c0:aa:fd:db:61:36:f2:1c:38:b1:9d:58:5c:df: 22:b3:b7:50:41:1e:17:b6:d5:a0:d8:7f:7f:2b:24: 68:15:13:79:d0:0c:c3:89:42:bd:fd:0b:5c:7f:8d: c8:bb:68:fe:57:d0:98:db:2b:32:38:99:f7:7d:da: bb:4a:05:46:dd:cd:0e:df:e8:0d:47:09:ec:16:e6: f8:23:fa:08:c2:56:33:22:0e:c6:91:17:9e:25:3b: 6c:da:29:dd:84:32:ee:1a:d9:75:b9:6a:05:c2:ac: db:4c:f3:a6:df:00:70:25:67:ea:5d:b6:f5:c7:af: 23:1e:96:26:db:cb:6d:dc:41:21:4d:33:5f:e6:22: 8f:3d:63:a1:69:84:c7:df:58:23:05:0c:e4:dd:97: 0a:90:b7:3a:47:e9:7a:c1:ca:08:1c:5b:61:4f:32: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:95:BC:A1:02:C1:58:B0:F5:AA:8E:68:95:B2:EA:D2:34:FC:0B:0A X509v3 Authority Key Identifier: keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1a:d3:05:ce:e4:91:ee:d4:8f:ab:e4:5f:e7:db:a6:03:0d: da:18:12:0c:a7:ab:a2:2a:9c:41:0b:a5:e9:65:2d:6a:5f:a2: 75:b6:c7:32:87:b0:72:be:11:78:98:43:d4:12:d3:10:60:01: d0:34:16:3a:a1:95:a2:21:2d:94:25:d6:b2:49:31:81:ed:b7: 99:aa:46:2c:b2:71:70:ff:8d:60:cd:f4:bc:43:d5:51:48:c4: da:39:fa:a9:86:03:23:04:61:ef:09:98:0a:ec:74:4b:c2:d6: ca:b1:48:ec:ac:5c:e5:dd:a1:90:eb:eb:2d:33:b6:36:2f:e6: 95:02:4e:13:62:dc:14:cd:08:d2:63:e3:0d:36:b9:87:52:68: 89:56:4f:13:0c:a5:94:55:71:50:c0:74:0c:fe:94:5d:19:bb: 31:77:fd:8c:b0:b9:53:7f:97:96:b3:e6:69:62:a8:46:3e:cb: 8c:d3:85:df:4b:31:d3:8a:0f:63:0b:f1:c1:10:6f:2f:69:b7: 7e:b9:dd:86:a5:e9:11:04:f1:e0:87:73:67:80:05:5c:25:a5: 86:d8:99:2b:cd:fb:76:fc:de:92:ad:bf:85:7c:42:15:4d:38: 3c:90:b8:e7:9e:3c:2c:42:4d:cb:7a:1a:1d:1e:b1:62:09:74: 8f:1e:0d:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUUwQTExMC8GA1UEBRMoNUYxRUU4MkJGNzA5QTI2Q0MwMDA5OTVCNDc0ODFFNTRG NkYzODA2RTAeFw0yNDA5MTkwNjAyNThaFw0yNDA5MjYwNjAyNThaMBgxFjAUBgNV BAMTDTY2ZWJiZTkyLTIwOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUgUD27tonzVtDvB653Pk8m1Evu9DjOuzOVEUGUBqggi9OKGeMdRbr3tK2B50/ 2oB5IKDowRkgWK28JZGj3VeJTiZKOwq7YacGnTQ3f/lEZRqgj5yOXksV2rXAqv3b YTbyHDixnVhc3yKzt1BBHhe21aDYf38rJGgVE3nQDMOJQr39C1x/jci7aP5X0Jjb KzI4mfd92rtKBUbdzQ7f6A1HCewW5vgj+gjCVjMiDsaRF54lO2zaKd2EMu4a2XW5 agXCrNtM86bfAHAlZ+pdtvXHryMelibby23cQSFNM1/mIo89Y6FphMffWCMFDOTd lwqQtzpH6XrByggcW2FPMootAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbJW8oQLB WLD1qo5olbLq0jT8CwowHwYDVR0jBBgwFoAUXx7oK/cJomzAAJlbR0geVPbzgG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5RTBBLzAzQjA1MkQ0M0U2 OTExRUZBMkNFNjc2QUM0RjlBRTAyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHg3b0tfY0pvbXpBQUpsYlIwZ2VWUGJ6Z0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 RTBBLzAzQjA1MkQ0M0U2OTExRUZBMkNFNjc2QUM0RjlBRTAyL1h4N29LX2NKb216 QUFKbGJSMGdlVlBiemdHNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAoa0wXO5JHu1I+r5F/n26YDDdoYEgynq6IqnEELpellLWpfonW2xzKH sHK+EXiYQ9QS0xBgAdA0FjqhlaIhLZQl1rJJMYHtt5mqRiyycXD/jWDN9LxD1VFI xNo5+qmGAyMEYe8JmArsdEvC1sqxSOysXOXdoZDr6y0ztjYv5pUCThNi3BTNCNJj 4w02uYdSaIlWTxMMpZRVcVDAdAz+lF0ZuzF3/YywuVN/l5az5mliqEY+y4zThd9L MdOKD2ML8cEQby9pt3653Yal6REE8eCHc2eABVwlpYbYmSvN+3b83pKtv4V8QhVN ODyQuOeePCxCTct6Gh0esWIJdI8eDUk= -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:27 2024 by rpki-client on console-fra.rpki-client.org