$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: dvJ7sUNlCjOr3wC6xgxz/qdiPpmqqcSjKD6xggP8oT0= Subject key identifier: BE:88:2C:B7:52:F1:3B:B0:99:81:42:C6:A5:C0:A8:30:8F:06:B8:36 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0D49 Signing time: Fri 31 May 2024 19:11:17 +0000 Manifest this update: Fri 31 May 2024 19:11:16 +0000 Manifest next update: Fri 07 Jun 2024 19:11:16 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: ntm/OgY+h2ZSApgjIXWeL2RY/E9ZTszYRCL0bqhFSLY=) 2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: 4eivdy7iUHPnbbf0QqEnZ5O6EBrtqP+PskH9srTKeZs=) 3: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: EmJg+3RnTIJYZYL5yzZw8Z1H2W+A9s+Ez9dbRRBv1tQ=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: 1JwBKAEIAweLmlt0L9r0MPn0DTxnRYYgSdL2gpwkSss=) 5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: 6QmdcypA/OQtUQ8J98l61FzY6ILdAvykkNOFA5mx94I=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: QNSC7VK1kFgqyy8v3E/yLmmMxrwcMLxmyVsk/HA5YiI=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: tbuo5XmVwKJlY6wNAj+sEi0Y8m8muC9NuM2llp4KX5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: May 31 19:11:16 2024 GMT Not After : Jun 7 19:11:16 2024 GMT Subject: CN=665a20d5-15b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:29:62:24:46:cf:99:01:f9:be:d1:2d:cc: 9b:72:6a:1f:65:2e:63:98:e1:07:3e:d4:54:52:2d: ce:10:66:0f:aa:48:fd:ae:be:98:d5:07:b3:4f:c8: 18:2f:ae:4a:38:17:51:9b:4f:70:ef:c2:93:8b:09: 1f:2e:d4:2d:ee:71:f4:5a:f3:87:4a:d0:3c:95:e2: c8:97:16:88:c8:e0:23:1a:f4:df:32:8f:69:4a:a1: 12:51:16:4e:ff:f8:6c:15:cc:ed:52:67:ca:98:6d: d3:90:db:0c:60:19:8c:28:92:90:0f:88:4d:3d:8f: 71:d0:fd:42:ff:17:59:49:6d:54:e4:80:3e:6d:84: aa:8c:84:89:b7:2a:df:87:77:d7:ff:f1:8a:ab:eb: cd:80:dc:5f:5c:0e:90:dd:a9:1c:c3:46:34:31:b1: 55:be:48:28:9b:9f:16:65:47:5b:9b:d7:67:5b:f5: f9:f5:e8:f6:27:8f:99:a9:0a:b8:e4:3d:4d:6b:03: 68:6d:27:ac:5d:60:e6:7c:ce:00:db:dc:3a:87:8b: 30:c5:f8:bc:67:0a:4f:ba:62:86:f5:41:c6:30:71: ff:90:de:ba:9e:41:aa:26:2d:d7:78:d8:84:83:8e: 12:7c:44:0b:cb:c6:22:81:32:ca:eb:c5:31:ac:f8: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:2C:B7:52:F1:3B:B0:99:81:42:C6:A5:C0:A8:30:8F:06:B8:36 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:64:1e:a0:bb:e4:49:be:82:31:51:54:6e:2c:47:7e:ac:ae: 54:4e:4d:02:04:6c:e7:ce:b2:8a:b7:87:ba:b1:b8:b5:87:62: 97:56:f1:56:3f:3f:13:c4:7e:06:e1:b1:6e:f3:86:03:87:7e: fe:f4:5d:dc:71:f8:8d:e9:26:3a:d5:50:e5:0f:b2:fd:c0:66: 2f:a8:cc:00:3c:cf:fd:4e:04:0c:4d:4e:5a:38:58:27:47:42: 6c:53:cf:94:6e:60:47:a7:e9:72:eb:e8:07:e6:15:dc:15:15: 01:b1:92:40:6d:b0:4e:17:82:4b:e4:0d:a1:fc:8e:6f:c3:20: 27:56:96:4d:ba:b3:ba:53:8a:cc:d7:b1:5e:bf:72:f0:30:76: 74:bf:38:56:74:f9:47:c8:ff:22:75:1f:9d:e2:bd:1b:00:4e: ac:73:fb:fb:85:a7:21:0a:25:92:6d:ae:50:2a:e6:10:0f:f5: 8c:43:e8:a3:71:38:03:20:ed:85:5b:50:2e:8e:08:5e:26:d0: 20:86:71:2e:9c:cc:3a:cb:b2:91:41:5c:87:ee:37:8d:ce:4b: 71:e2:81:28:4f:49:0b:7f:77:e6:6f:c9:83:71:90:48:5e:22: ef:c9:e8:ea:a2:5f:0e:b5:51:c4:20:36:38:19:4f:bd:53:4b: fc:19:07:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjQwNTMxMTkxMTE2WhcNMjQwNjA3MTkxMTE2WjAYMRYwFAYD VQQDEw02NjVhMjBkNS0xNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TcpYiRGz5kB+b7RLcybcmofZS5jmOEHPtRUUi3OEGYPqkj9rr6Y1QezT8gY L65KOBdRm09w78KTiwkfLtQt7nH0WvOHStA8leLIlxaIyOAjGvTfMo9pSqESURZO //hsFcztUmfKmG3TkNsMYBmMKJKQD4hNPY9x0P1C/xdZSW1U5IA+bYSqjISJtyrf h3fX//GKq+vNgNxfXA6Q3akcw0Y0MbFVvkgom58WZUdbm9dnW/X59ej2J4+ZqQq4 5D1NawNobSesXWDmfM4A29w6h4swxfi8ZwpPumKG9UHGMHH/kN66nkGqJi3XeNiE g44SfEQLy8YigTLK68UxrPhtcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6ILLdS 8TuwmYFCxqXAqDCPBrg2MB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvZB6gu+RJvoIxUVRuLEd+rK5UTk0CBGznzrKKt4e6sbi1h2KXVvFW Pz8TxH4G4bFu84YDh37+9F3ccfiN6SY61VDlD7L9wGYvqMwAPM/9TgQMTU5aOFgn R0JsU8+UbmBHp+ly6+gH5hXcFRUBsZJAbbBOF4JL5A2h/I5vwyAnVpZNurO6U4rM 17Fev3LwMHZ0vzhWdPlHyP8idR+d4r0bAE6sc/v7hachCiWSba5QKuYQD/WMQ+ij cTgDIO2FW1AujgheJtAghnEunMw6y7KRQVyH7jeNzktx4oEoT0kLf3fmb8mDcZBI XiLvyejqol8OtVHEIDY4GU+9U0v8GQf0 -----END CERTIFICATE-----Generated at Fri May 31 19:47:46 2024 by rpki-client on console-fra.rpki-client.org