$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: 0ivky2mVxkIOlZ4bY9ucJk+EpXOH9vDB5xGajICj3hA= Subject key identifier: BB:D0:08:A5:0F:E6:95:65:6B:66:13:F0:67:7E:E3:4B:CB:3D:25:11 Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 0591 Signing time: Sun 19 May 2024 00:30:43 +0000 Manifest this update: Sun 19 May 2024 00:30:43 +0000 Manifest next update: Sun 26 May 2024 00:30:43 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: 0dTieum4q0MForSTi7L4q50RrHla+803qZHfo5GId1M=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: LiXw5QkDIdwB3vLGmFYHfIaKv0T0QYD0Rl/2R7/Sqas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: May 19 00:30:43 2024 GMT Not After : May 26 00:30:43 2024 GMT Subject: CN=66494833-f6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:3e:de:99:aa:7b:0c:8a:80:1b:39:0e:5f: d1:52:22:a7:e9:d4:85:6e:4d:09:6d:aa:9e:f8:6d: 58:60:35:73:f6:e2:44:40:99:eb:98:6a:fe:0c:d8: 2b:d2:06:f2:0a:6a:eb:fb:c5:ac:9e:f7:74:77:03: d6:98:93:52:b2:c6:c4:20:9e:4b:4f:aa:84:c6:64: 3a:6b:38:f4:3b:25:a2:db:60:d5:83:57:52:e6:95: 97:61:48:69:8a:ed:c4:17:8f:68:ec:39:b8:86:4b: 25:6f:bf:6c:0c:28:c0:75:19:f3:ab:af:20:d0:87: e2:1f:0e:4d:76:2a:1b:23:56:d8:63:34:1b:69:07: 21:13:bd:34:26:1a:25:60:77:64:b4:17:26:92:97: a2:9f:00:0a:1d:d5:6b:bd:30:dc:a4:c9:b8:9d:a9: 7d:19:60:00:3e:33:33:12:fb:be:01:de:d7:cd:fd: f8:8c:9b:6e:06:37:1f:d8:7b:81:b1:48:21:b5:f2: 4c:5a:20:6f:11:15:df:ed:9b:f9:be:b4:04:8c:61: 44:12:27:28:b9:db:80:97:81:b0:6d:ff:0e:92:65: a6:a7:3d:2c:ed:0f:3a:30:ce:0e:bc:da:08:19:ae: d6:38:99:fc:a6:c9:17:e4:42:3c:d9:fb:5a:80:84: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:08:A5:0F:E6:95:65:6B:66:13:F0:67:7E:E3:4B:CB:3D:25:11 X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c3:04:e0:93:86:2b:0e:1f:bb:d4:54:dd:07:6d:28:96:ce: 00:33:87:49:37:cc:48:fb:90:e0:d1:2f:89:05:74:9c:09:f5: 0c:d1:6f:5c:71:03:3a:cb:38:8d:f9:30:a6:ff:64:12:ae:6d: 1e:91:8e:74:6e:fa:c7:c0:9f:04:02:76:d3:07:30:49:7b:99: cf:45:d4:cc:02:9b:f1:4b:d6:1b:44:13:0e:2c:db:49:70:af: 0a:11:72:1b:a3:12:2f:b7:a4:46:ef:ec:47:55:dd:e9:96:8e: c8:9c:6f:f5:85:16:e1:0d:64:db:da:ee:e0:b6:8f:93:48:64: 18:46:70:8a:97:1a:a8:8f:1f:85:95:4f:2f:e0:ff:6e:8c:46: 2b:86:e8:ab:a9:ab:cb:09:b6:44:cf:5c:11:f9:48:1a:35:cb: e0:84:fc:10:a0:14:70:cf:a6:79:8f:14:ee:72:ff:8f:c4:ac: 5d:5d:df:47:50:a6:78:3e:d2:60:37:8e:5e:0a:58:07:71:e5: 62:fb:52:94:10:a1:03:98:27:9a:34:53:1b:42:2e:a0:01:a1: 2e:99:3e:84:57:3b:f6:af:15:05:91:52:68:9a:99:0f:53:e3: b2:87:3e:e2:80:fe:5b:7e:0f:e6:8f:33:91:7d:da:58:f6:12: 11:27:bd:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjQwNTE5MDAzMDQzWhcNMjQwNTI2MDAzMDQzWjAYMRYwFAYD VQQDEw02NjQ5NDgzMy1mNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYA+3pmqewyKgBs5Dl/RUiKn6dSFbk0Jbaqe+G1YYDVz9uJEQJnrmGr+DNgr 0gbyCmrr+8Wsnvd0dwPWmJNSssbEIJ5LT6qExmQ6azj0OyWi22DVg1dS5pWXYUhp iu3EF49o7Dm4hkslb79sDCjAdRnzq68g0IfiHw5NdiobI1bYYzQbaQchE700Jhol YHdktBcmkpeinwAKHdVrvTDcpMm4nal9GWAAPjMzEvu+Ad7Xzf34jJtuBjcf2HuB sUghtfJMWiBvERXf7Zv5vrQEjGFEEicouduAl4Gwbf8OkmWmpz0s7Q86MM4OvNoI Ga7WOJn8pskX5EI82ftagIS92wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvQCKUP 5pVla2YT8Gd+40vLPSURMB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1wwTgk4YrDh+71FTdB20ols4AM4dJN8xI+5Dg0S+JBXScCfUM0W9c cQM6yziN+TCm/2QSrm0ekY50bvrHwJ8EAnbTBzBJe5nPRdTMApvxS9YbRBMOLNtJ cK8KEXIboxIvt6RG7+xHVd3plo7InG/1hRbhDWTb2u7gto+TSGQYRnCKlxqojx+F lU8v4P9ujEYrhuirqavLCbZEz1wR+UgaNcvghPwQoBRwz6Z5jxTucv+PxKxdXd9H UKZ4PtJgN45eClgHceVi+1KUEKEDmCeaNFMbQi6gAaEumT6EVzv2rxUFkVJompkP U+Oyhz7igP5bfg/mjzORfdpY9hIRJ70D -----END CERTIFICATE-----Generated at Sun May 19 00:59:40 2024 by rpki-client on console-fra.rpki-client.org