$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: 6l+oJQ2FeWCFO9h9dLLbVLKn0rFuW6Y3rD7U+fFuOKY= Subject key identifier: 6C:87:AB:21:C8:E6:87:D9:F1:26:5B:D7:B5:6D:AA:A1:65:83:DF:B6 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: D1 Signing time: Sun 19 May 2024 06:13:26 +0000 Manifest this update: Sun 19 May 2024 06:13:26 +0000 Manifest next update: Sun 26 May 2024 06:13:26 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: lux67MkszUlCtkeZMK9GLxyTcqQ5kfIy1eXhYrZlpsc=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: T2GxpprBCkLcK8nLanU7+iPRdUPJ3LHSQZhYNBEF7S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: May 19 06:13:26 2024 GMT Not After : May 26 06:13:26 2024 GMT Subject: CN=66499886-edf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:8d:68:8a:76:25:ba:36:cc:7a:e0:17:fd: 7a:87:08:05:1a:ff:8b:f3:e0:28:b8:87:91:9f:80: 14:a9:e2:e3:d3:e0:28:8c:7e:7a:57:02:9e:15:64: 0f:34:2b:cb:f5:d0:0c:7c:94:ab:84:87:7a:f0:17: 40:16:79:2b:83:77:76:e9:dc:1e:59:6b:c9:bb:0a: eb:cd:30:5d:9f:bf:bf:4e:f2:11:73:0f:9b:a2:36: 88:d5:46:62:38:15:ee:df:a5:d6:62:aa:c2:d7:db: 81:58:f5:4b:51:c7:7b:f4:f9:f0:3c:c4:96:6f:10: 7a:e1:c1:7c:f8:96:69:5a:1e:d2:e7:34:da:86:81: 87:55:a0:68:5a:f7:70:fc:bf:cd:bd:7c:ea:89:37: 25:30:8f:c9:0a:58:f7:71:84:d0:4b:dc:16:c8:00: 31:cd:af:95:59:c0:dc:14:47:0e:9a:56:00:9e:29: 90:7f:51:b8:d6:e9:ed:6f:47:75:26:90:8c:ed:40: 3e:eb:87:d8:18:c6:e2:ad:c4:45:02:e0:19:21:6e: 2d:0f:bf:7f:dd:17:24:ab:67:eb:ee:6c:99:9c:3b: aa:3e:3f:49:16:eb:60:0e:c8:e6:48:3e:2b:ec:e7: b3:d1:e5:71:eb:a8:1b:bf:92:ae:88:0b:93:c2:e4: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:87:AB:21:C8:E6:87:D9:F1:26:5B:D7:B5:6D:AA:A1:65:83:DF:B6 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:69:27:83:53:f6:af:62:fc:bf:c7:85:fe:d2:fe:24:bc:bc: 71:ca:b7:ab:1c:fb:08:52:ac:53:b3:7d:f7:62:db:7f:3f:e7: a9:bd:ea:f5:90:07:06:b8:15:49:e5:9e:1f:78:c0:2a:78:a8: 6b:35:a5:0f:13:8e:e3:b2:82:e2:92:7c:e6:f3:e8:b1:e0:9b: eb:ba:c6:15:4c:38:12:ae:23:0e:71:cf:1c:4e:1a:f5:93:da: 30:00:49:91:f4:f1:96:93:ce:ec:d4:eb:7a:04:cf:90:89:8b: d0:90:6e:22:c9:f5:68:09:ca:91:4d:0d:fc:33:97:85:d6:46: 32:9e:49:69:30:63:8a:1b:f3:47:d9:14:a1:0a:58:cf:57:f1: 43:4d:d8:50:7a:d4:81:7d:41:70:7d:37:7b:4e:75:d9:40:d4: 32:19:f3:46:5c:7c:0c:8f:01:11:20:69:4a:7c:e7:24:60:a7: 9a:cd:7e:89:c0:59:a6:fb:a9:5e:4b:8e:74:8e:7e:b0:4b:c1: 72:5b:e2:eb:86:68:60:63:c5:b0:ec:6c:0f:a7:98:2f:65:8f: f4:b7:49:9b:2b:e3:7a:28:0f:25:05:76:b0:b5:91:c4:2c:27: 61:ac:ff:d0:42:0c:c3:13:d2:02:5f:c0:d5:8d:98:2a:a1:c6: 23:a4:15:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjQwNTE5MDYxMzI2WhcNMjQwNTI2MDYxMzI2WjAYMRYwFAYD VQQDEw02NjQ5OTg4Ni1lZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4WNaIp2Jbo2zHrgF/16hwgFGv+L8+AouIeRn4AUqeLj0+AojH56VwKeFWQP NCvL9dAMfJSrhId68BdAFnkrg3d26dweWWvJuwrrzTBdn7+/TvIRcw+bojaI1UZi OBXu36XWYqrC19uBWPVLUcd79PnwPMSWbxB64cF8+JZpWh7S5zTahoGHVaBoWvdw /L/NvXzqiTclMI/JClj3cYTQS9wWyAAxza+VWcDcFEcOmlYAnimQf1G41untb0d1 JpCM7UA+64fYGMbircRFAuAZIW4tD79/3Rckq2fr7myZnDuqPj9JFutgDsjmSD4r 7Oez0eVx66gbv5KuiAuTwuS+EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyHqyHI 5ofZ8SZb17VtqqFlg9+2MB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2aSeDU/avYvy/x4X+0v4kvLxxyrerHPsIUqxTs333Ytt/P+epver1 kAcGuBVJ5Z4feMAqeKhrNaUPE47jsoLiknzm8+ix4JvrusYVTDgSriMOcc8cThr1 k9owAEmR9PGWk87s1Ot6BM+QiYvQkG4iyfVoCcqRTQ38M5eF1kYynklpMGOKG/NH 2RShCljPV/FDTdhQetSBfUFwfTd7TnXZQNQyGfNGXHwMjwERIGlKfOckYKeazX6J wFmm+6leS450jn6wS8FyW+LrhmhgY8Ww7GwPp5gvZY/0t0mbK+N6KA8lBXawtZHE LCdhrP/QQgzDE9ICX8DVjZgqocYjpBUm -----END CERTIFICATE-----Generated at Sun May 19 08:24:59 2024 by rpki-client on console-ams.rpki-client.org