$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft File: 2gQijT7rRR_A8iM2aXFwV_irNmk.mft (raw, json) Hash identifier: k4x0hrvA4c/+mSPFhmllb1H9QKzFVei3VpAm5IcK260= Subject key identifier: 80:77:CF:A3:4F:38:5B:78:A2:91:77:A6:40:56:66:C5:72:E3:49:27 Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69 Certificate issuer: /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft Manifest number: 07B1 Signing time: Sat 18 May 2024 22:06:07 +0000 Manifest this update: Sat 18 May 2024 22:06:07 +0000 Manifest next update: Sat 25 May 2024 22:06:07 +0000 Files and hashes: 1: 2gQijT7rRR_A8iM2aXFwV_irNmk.crl (hash: KzbhtIzjdpiL+bWnKBL25inmtjZuCsuAgvFZbOLO/J8=) 2: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (hash: R8uUp+Akp6EI02D/xAGsApdI2bBCBb+LykpModvOEkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669 Validity Not Before: May 18 22:06:07 2024 GMT Not After : May 25 22:06:07 2024 GMT Subject: CN=6649264f-b693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:ac:77:dc:e5:c8:8c:e6:82:6f:fd:9a:7d: b8:e2:05:9c:cd:2f:c6:0a:f0:dd:d6:38:d2:ae:fc: cf:c9:7c:8b:4f:f3:d7:1d:98:3f:bd:40:b0:8b:03: 6b:9c:96:c8:3c:cc:d6:bc:7e:f2:48:bb:aa:ca:43: 5c:46:11:e0:8c:f8:0d:8d:ea:f9:b7:38:7a:2f:6b: 99:7a:42:7a:bf:ce:27:7f:9c:81:5e:bf:39:72:cd: 47:1a:ee:dd:3e:ad:5f:57:0b:88:43:c6:ff:fd:cb: 04:97:0a:e8:d2:4a:2a:1e:1e:81:7c:d1:cd:57:4c: 58:4b:c5:04:73:b9:57:ac:78:4e:15:2b:07:3f:2f: ae:b7:a9:11:7e:b0:95:23:ba:6d:7b:65:a0:d0:46: 73:03:07:51:f3:c4:93:2d:32:db:dd:d9:e9:72:57: b9:55:1b:01:b8:66:95:f7:a2:80:c8:71:f3:76:d7: 6f:fe:26:0f:9c:69:d1:c3:05:3c:a9:63:93:8c:88: 5d:5d:6f:72:c2:42:57:03:30:d6:3d:ed:b3:91:76: a7:5e:94:f9:8c:0c:88:ed:93:3c:2f:1f:8e:d9:ca: cc:ce:fe:77:9b:5d:40:38:ce:2d:47:a4:5a:de:74: 08:a6:e1:67:ae:b1:01:1c:09:76:dc:85:c2:7d:62: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:77:CF:A3:4F:38:5B:78:A2:91:77:A6:40:56:66:C5:72:E3:49:27 X509v3 Authority Key Identifier: keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4c:36:b6:cb:8c:5d:3b:76:4f:17:d8:b9:4d:77:76:43:1d: 17:dc:38:d3:30:d1:97:ac:ec:62:e0:f6:3c:73:e4:ae:a0:af: c5:69:55:f9:39:00:ef:d2:31:ab:52:04:b4:7d:8c:bb:9f:39: f9:a5:d9:62:18:22:6b:cd:40:f9:e3:ae:49:18:d0:a6:e1:e8: 0e:9d:d2:83:5a:07:6c:fd:d5:89:18:03:6b:58:71:54:08:6c: 03:0e:cc:3e:02:23:41:d7:19:5e:c9:ac:6d:8e:2e:30:0a:4f: 3c:b6:f1:e9:fb:c5:1b:ee:d9:33:01:cf:b4:9b:85:d9:9f:0f: fa:5e:13:d8:40:42:ca:fb:62:5d:cd:17:d6:d4:aa:fc:b1:bd: 30:ca:c5:64:ee:4d:8c:7c:72:b8:4a:e9:1b:21:4a:9d:ab:da: 2b:bd:2c:66:7c:e3:64:2a:0e:35:25:c0:c9:46:0c:0a:2d:d1: 2d:15:62:95:f1:82:24:0c:54:da:f1:73:e7:82:02:6a:21:d2: b3:d9:c0:77:06:13:29:d8:72:49:0b:97:3f:43:2c:00:98:bb: 13:8d:db:5b:89:7e:0f:02:d5:f0:13:78:11:18:3c:0a:b7:1e: 05:7e:78:60:93:0a:0a:de:fa:dc:49:a4:d7:4b:a1:2a:1e:4b: 7c:f1:e1:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNjUxMTAvBgNVBAUTKERBMDQyMjhEM0VFQjQ1MUZDMEYyMjMzNjY5NzE3MDU3 RjhBQjM2NjkwHhcNMjQwNTE4MjIwNjA3WhcNMjQwNTI1MjIwNjA3WjAYMRYwFAYD VQQDEw02NjQ5MjY0Zi1iNjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1O2sd9zlyIzmgm/9mn244gWczS/GCvDd1jjSrvzPyXyLT/PXHZg/vUCwiwNr nJbIPMzWvH7ySLuqykNcRhHgjPgNjer5tzh6L2uZekJ6v84nf5yBXr85cs1HGu7d Pq1fVwuIQ8b//csElwro0koqHh6BfNHNV0xYS8UEc7lXrHhOFSsHPy+ut6kRfrCV I7pte2Wg0EZzAwdR88STLTLb3dnpcle5VRsBuGaV96KAyHHzdtdv/iYPnGnRwwU8 qWOTjIhdXW9ywkJXAzDWPe2zkXanXpT5jAyI7ZM8Lx+O2crMzv53m11AOM4tR6Ra 3nQIpuFnrrEBHAl23IXCfWKtoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB3z6NP OFt4opF3pkBWZsVy40knMB8GA1UdIwQYMBaAFNoEIo0+60UfwPIjNmlxcFf4qzZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE2NS82QTNFQjhCNkMy QjExMUVBOTIwQkI5NEFDNEY5QUUwMi8yZ1FpalQ3clJSX0E4aU0yYVhGd1ZfaXJO bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnUWlqVDdyUlJfQThpTTJhWEZ3Vl9pck5tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE2NS82QTNFQjhCNkMyQjExMUVBOTIwQkI5NEFDNEY5QUUwMi8yZ1FpalQ3clJS X0E4aU0yYVhGd1ZfaXJObWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXTDa2y4xdO3ZPF9i5TXd2Qx0X3DjTMNGXrOxi4PY8c+SuoK/FaVX5 OQDv0jGrUgS0fYy7nzn5pdliGCJrzUD5465JGNCm4egOndKDWgds/dWJGANrWHFU CGwDDsw+AiNB1xleyaxtji4wCk88tvHp+8Ub7tkzAc+0m4XZnw/6XhPYQELK+2Jd zRfW1Kr8sb0wysVk7k2MfHK4SukbIUqdq9orvSxmfONkKg41JcDJRgwKLdEtFWKV 8YIkDFTa8XPnggJqIdKz2cB3BhMp2HJJC5c/QywAmLsTjdtbiX4PAtXwE3gRGDwK tx4FfnhgkwoK3vrcSaTXS6EqHkt88eFd -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org