$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft File: 2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json) Hash identifier: WJE9zXgfykigVgcjeMGv1+Az0q4sc2YTMlqrAiZbijQ= Subject key identifier: 2E:EB:0D:79:8D:BB:21:97:96:DD:42:C8:BF:87:B6:69:5C:26:50:9C Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45 Certificate issuer: /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft Manifest number: 01D1 Signing time: Sat 01 Jun 2024 05:40:08 +0000 Manifest this update: Sat 01 Jun 2024 05:40:08 +0000 Manifest next update: Sat 08 Jun 2024 05:40:08 +0000 Files and hashes: 1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: HvLsp+Q4dWCRLKR0stsZjBswWkXhpT/rjVM1A0Bh7Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445 Validity Not Before: Jun 1 05:40:08 2024 GMT Not After : Jun 8 05:40:08 2024 GMT Subject: CN=665ab438-fa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:db:d5:83:e6:af:d1:17:9f:f5:f5:be:2c:eb: d3:3c:f4:2c:49:2c:03:dc:67:d1:dd:bf:93:4b:d5: c6:7e:cc:28:5d:29:21:7e:78:7d:75:e7:02:8b:6a: c1:28:60:d3:29:9b:8e:2b:9c:a3:9d:86:e5:0f:0a: 7d:72:07:6b:c1:c0:6d:df:f2:7d:09:be:7e:fa:61: 71:c8:94:66:74:97:76:c5:0e:40:73:76:30:99:52: 71:08:1d:be:7d:ce:00:70:d4:d8:51:c4:09:7c:2f: a4:b6:31:55:95:61:12:59:2e:b3:c9:ba:b6:66:c7: 2a:ac:fe:26:ed:f4:04:d9:86:c7:a2:31:85:70:ce: a1:c0:59:3e:b0:38:3d:ce:7a:4c:ba:0d:3d:80:c6: 6b:d7:7d:64:0c:c0:d8:9e:36:89:08:79:d7:32:42: ec:04:1e:39:7d:7f:b0:fb:0a:65:c6:82:c8:e5:60: f1:a9:94:eb:b8:51:df:d6:80:d4:cd:66:c6:49:86: 1f:d7:d1:8e:e4:b6:0a:dd:8a:01:a3:df:45:a7:3b: 7c:13:80:94:5f:ad:84:26:11:95:70:d8:9b:dd:de: 77:9b:f6:3f:02:a5:1f:7b:27:f3:09:41:39:96:7d: 41:78:c1:0c:f8:4e:65:fa:c4:1a:b6:d5:a1:18:88: 5c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EB:0D:79:8D:BB:21:97:96:DD:42:C8:BF:87:B6:69:5C:26:50:9C X509v3 Authority Key Identifier: keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:e6:86:48:31:ae:8a:38:fa:bb:63:ca:f6:f3:b3:75:9b: c9:44:aa:60:f4:f0:af:a6:c4:03:74:4b:a1:a6:23:e9:d8:3c: d7:44:2b:94:91:ee:bf:74:42:7b:1d:73:f9:21:13:2a:eb:b4: 44:a3:19:37:0d:6c:72:d7:48:13:5a:b8:c8:0e:53:00:b2:74: 22:95:29:9d:d7:3a:18:f0:7f:3f:02:d9:31:7c:f5:16:77:e9: bc:53:3a:f2:78:74:2a:ff:6a:74:33:4b:4d:c5:2a:31:1b:9b: e9:38:c6:86:bf:e3:49:f8:9c:c7:7a:10:7a:09:ab:ae:7b:36: 66:44:96:0c:5d:e0:4e:d3:c2:3a:15:69:e6:e1:9a:b6:27:31: 71:a6:a6:b0:f7:b0:e0:cc:19:2b:14:e3:3a:56:65:19:9d:5b: 4b:06:41:7b:80:8d:41:34:da:ef:7a:f2:85:77:6a:15:1c:39: 04:c7:31:b3:de:4a:fd:f2:a3:f1:ee:d0:17:19:5a:62:0d:62: ba:65:db:44:1e:be:b1:f5:00:56:e9:c8:8b:c8:b6:9f:74:0c: 21:4a:f1:70:92:ad:96:71:fd:0a:1b:dc:db:63:0a:a4:57:2f: 99:eb:cc:1e:de:4c:02:3b:9d:f6:2f:8d:d4:2c:e8:8b:1f:79: 8f:d9:87:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKERBMkMxMzJCOEVDNTA3MUFGOERCOTA0OTFCQUREQkMw RjBBN0I0NDUwHhcNMjQwNjAxMDU0MDA4WhcNMjQwNjA4MDU0MDA4WjAYMRYwFAYD VQQDEw02NjVhYjQzOC1mYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9tvVg+av0Ref9fW+LOvTPPQsSSwD3GfR3b+TS9XGfswoXSkhfnh9decCi2rB KGDTKZuOK5yjnYblDwp9cgdrwcBt3/J9Cb5++mFxyJRmdJd2xQ5Ac3YwmVJxCB2+ fc4AcNTYUcQJfC+ktjFVlWESWS6zybq2ZscqrP4m7fQE2YbHojGFcM6hwFk+sDg9 znpMug09gMZr131kDMDYnjaJCHnXMkLsBB45fX+w+wplxoLI5WDxqZTruFHf1oDU zWbGSYYf19GO5LYK3YoBo99Fpzt8E4CUX62EJhGVcNib3d53m/Y/AqUfeyfzCUE5 ln1BeMEM+E5l+sQattWhGIhcGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7rDXmN uyGXlt1CyL+HtmlcJlCcMB8GA1UdIwQYMBaAFNosEyuOxQca+NuQSRut28Dwp7RF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85NjY1OTk3RTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8yaXdUSzQ3RkJ4cjQyNUJKRzYzYndQQ250 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzJpd1RLNDdGQnhyNDI1QkpHNjNid1BDbnRFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC85NjY1OTk3RTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8yaXdUSzQ3RkJ4 cjQyNUJKRzYzYndQQ250RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGSuaGSDGuijj6u2PK9vOzdZvJRKpg9PCvpsQDdEuhpiPp2DzXRCuU ke6/dEJ7HXP5IRMq67REoxk3DWxy10gTWrjIDlMAsnQilSmd1zoY8H8/AtkxfPUW d+m8UzryeHQq/2p0M0tNxSoxG5vpOMaGv+NJ+JzHehB6CauuezZmRJYMXeBO08I6 FWnm4Zq2JzFxpqaw97DgzBkrFOM6VmUZnVtLBkF7gI1BNNrvevKFd2oVHDkExzGz 3kr98qPx7tAXGVpiDWK6ZdtEHr6x9QBW6ciLyLafdAwhSvFwkq2Wcf0KG9zbYwqk Vy+Z68we3kwCO532L43ULOiLH3mP2Yep -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:16 2024 by rpki-client on console-ams.rpki-client.org