$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json) Hash identifier: PnutmhJqazr7T10P9E+CiPNzrZYgvOzwh7I7ljx2784= Subject key identifier: 3A:66:7C:02:F6:79:31:0A:E6:28:DB:1C:D7:96:9D:61:B7:9B:EE:10 Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft Manifest number: 0B9D Signing time: Sat 18 May 2024 19:12:14 +0000 Manifest this update: Sat 18 May 2024 19:12:14 +0000 Manifest next update: Sat 25 May 2024 19:12:14 +0000 Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: ZgRe6XuyDJvkJpYgUZEvgWQifb8Z5HfElgLveHudrQE=) 2: 7665CD0AFF7011E99CDC306AC4F9AE02.roa (hash: dM9jHQwt1HX4WQJ8N+BuYBJKKLyzpY5xcV+r1/6T9kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: May 18 19:12:14 2024 GMT Not After : May 25 19:12:14 2024 GMT Subject: CN=6648fd8e-3f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:71:1c:b0:48:ec:ea:41:99:d4:33:f3:12: 51:f7:4d:d7:49:15:1a:ea:78:84:e1:82:d5:fc:6a: 4d:10:18:1e:14:f2:a8:b9:44:ad:e2:c1:57:84:ae: b9:c7:44:90:2a:a5:01:17:e7:30:f9:20:90:6f:ad: 0f:10:5b:1e:70:ba:da:f0:fb:34:2c:86:4e:f7:5e: 97:bc:2a:b7:a4:b8:b1:d5:97:90:36:b8:ef:39:87: e4:fb:68:71:69:85:35:22:49:c6:77:2c:a1:c9:d4: 71:49:ea:e1:4b:88:97:17:3e:5f:c9:0d:9f:3c:8f: 87:c1:88:40:29:cd:03:31:22:35:2a:f8:d6:e5:c6: 82:47:7a:cf:80:b1:cb:12:9d:c9:dd:2b:f1:49:43: 95:3e:90:ba:94:03:b7:86:e0:d7:e5:e3:1c:58:65: bd:8e:ee:74:19:fa:3f:11:8c:18:48:50:a9:5d:33: 0b:87:e5:3a:47:4e:10:6e:7c:a2:5a:45:22:d7:bd: 3a:04:0e:1f:83:6c:4e:f3:e2:ab:52:8f:b3:11:e2: 5d:36:1c:33:f4:b2:53:05:ef:73:1a:46:86:31:e1: 20:20:68:1c:26:7e:8f:fd:75:1e:df:71:e9:5a:79: 6d:65:7c:5a:06:1d:b1:db:df:4b:1d:38:a6:89:d0: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:66:7C:02:F6:79:31:0A:E6:28:DB:1C:D7:96:9D:61:B7:9B:EE:10 X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:61:a7:e4:43:d8:1e:0f:13:1e:c6:29:09:be:63:24:95: 55:c0:44:21:65:0b:a9:3a:60:f3:cf:7d:8f:c8:d9:de:e6:9c: d1:3a:82:48:76:1b:1c:2a:3b:ae:55:ac:b3:a3:23:b1:50:4a: 34:dd:fc:68:b3:2a:71:91:93:84:79:c1:e2:d3:dc:56:6b:56: 6d:48:15:5d:50:13:1c:8a:a3:02:1e:76:5d:9c:e3:45:2f:31: 26:ac:27:f3:6a:5f:28:03:6f:f0:fa:a0:fc:56:f7:ae:47:c9: 9b:77:5d:c5:ef:c2:d3:a9:7e:4f:d0:bf:dd:49:5f:de:23:7b: 72:2b:f0:98:9f:6d:d2:33:61:85:90:81:51:3c:0f:89:a7:7c: e4:93:71:ec:e4:b5:f7:fd:c2:f4:15:a2:27:9e:c9:33:8e:10: d9:21:c6:d3:09:00:60:ea:28:eb:d0:a4:1e:73:2e:7c:15:0b: 52:f3:67:a2:3f:c0:a8:b5:b1:1d:da:8c:12:89:08:c7:00:19: 05:d9:13:03:dd:9a:37:c7:ef:ff:c5:ee:7b:4b:f9:53:43:00: 26:6e:48:a4:6b:4a:22:d5:3a:dd:be:e3:98:6b:fc:bb:62:f3: 93:a9:70:cc:b8:f9:bd:e9:ca:bd:45:99:f4:55:7c:58:5d:f2: 0b:88:0b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjQwNTE4MTkxMjE0WhcNMjQwNTI1MTkxMjE0WjAYMRYwFAYD VQQDEw02NjQ4ZmQ4ZS0zZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2ZxHLBI7OpBmdQz8xJR903XSRUa6niE4YLV/GpNEBgeFPKouUSt4sFXhK65 x0SQKqUBF+cw+SCQb60PEFsecLra8Ps0LIZO916XvCq3pLix1ZeQNrjvOYfk+2hx aYU1IknGdyyhydRxSerhS4iXFz5fyQ2fPI+HwYhAKc0DMSI1KvjW5caCR3rPgLHL Ep3J3SvxSUOVPpC6lAO3huDX5eMcWGW9ju50Gfo/EYwYSFCpXTMLh+U6R04Qbnyi WkUi1706BA4fg2xO8+KrUo+zEeJdNhwz9LJTBe9zGkaGMeEgIGgcJn6P/XUe33Hp WnltZXxaBh2x299LHTimidBxEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpmfAL2 eTEK5ijbHNeWnWG3m+4QMB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU2Ni83MDYzOUVGQ0ZGNkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JS N1B0b1I2R3dkREs5aDdHZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyZ2Gn5EPYHg8THsYpCb5jJJVVwEQhZQupOmDzz32PyNne5pzROoJI dhscKjuuVayzoyOxUEo03fxosypxkZOEecHi09xWa1ZtSBVdUBMciqMCHnZdnONF LzEmrCfzal8oA2/w+qD8VveuR8mbd13F78LTqX5P0L/dSV/eI3tyK/CYn23SM2GF kIFRPA+Jp3zkk3Hs5LX3/cL0FaInnskzjhDZIcbTCQBg6ijr0KQecy58FQtS82ei P8CotbEd2owSiQjHABkF2RMD3Zo3x+//xe57S/lTQwAmbkika0oi1TrdvuOYa/y7 YvOTqXDMuPm96cq9RZn0VXxYXfILiAtg -----END CERTIFICATE-----Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org