$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json) Hash identifier: ySH219C+D3SqwQJCBiZ0KPt7bcd6jsJ0gtWjwrSVhgw= Subject key identifier: BB:67:87:70:87:64:B9:52:72:DD:DC:A2:99:0D:B7:11:3B:DB:5F:70 Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 0FF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft Manifest number: 0FE8 Signing time: Sat 18 May 2024 18:02:10 +0000 Manifest this update: Sat 18 May 2024 18:02:09 +0000 Manifest next update: Sat 25 May 2024 18:02:09 +0000 Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: 6dprBipnYZT00QWtov0YXkazoOMOntGao9OkVtJIKqA=) 2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: TX2hYfP29RX4mcIF+OM8Ynn7C2G46AbxOagvnNGTLGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4086 (0xff6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Validity Not Before: May 18 18:02:09 2024 GMT Not After : May 25 18:02:09 2024 GMT Subject: CN=6648ed22-bb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:79:03:15:0d:71:bd:27:f9:2a:a2:e1:17: b7:e3:a5:25:6a:f8:97:43:00:c1:fb:cf:7f:0b:b4: de:e8:97:92:77:27:f5:93:56:88:42:6c:63:6f:57: 34:d8:dd:46:b6:ed:b6:91:1c:09:ab:7b:91:d9:fd: f9:d5:f8:b3:2a:5c:07:cd:e3:b5:fd:99:e9:fd:e1: a4:1a:17:15:97:fc:d7:fb:e3:77:3f:61:b3:4c:b0: 82:b0:d0:4c:7e:6b:67:49:e5:b6:cb:0f:d3:62:fa: da:cc:a6:83:c5:f0:98:e0:2c:8c:d9:5a:9c:b1:a5: 69:4e:88:78:62:f3:71:5c:96:8a:fe:8e:06:67:e6: 88:8d:c9:36:09:62:48:26:5e:6b:fa:a5:89:4b:7a: 12:1b:d0:70:9c:51:04:b3:e7:09:c2:c3:80:1f:b2: 1a:3f:33:a8:21:64:fc:42:19:9c:d5:3a:a5:b1:b7: 38:de:54:a1:cf:d5:51:97:9f:ef:b1:ce:8e:16:83: 51:d9:34:5b:b8:15:79:17:16:90:0c:28:3a:e7:e3: be:d5:0a:fd:3c:b7:6a:3d:7f:f6:b4:41:88:76:31: 38:82:a5:4e:ef:4d:87:1c:da:01:0f:7c:e9:bf:1b: e8:ee:30:f8:d6:3d:96:d8:12:f4:5e:7c:a3:ff:23: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:67:87:70:87:64:B9:52:72:DD:DC:A2:99:0D:B7:11:3B:DB:5F:70 X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:09:29:b9:f4:c6:5b:93:ea:1a:b1:a2:58:46:34:60:9c:27: 2e:63:e3:18:0c:b8:92:6c:6f:30:1e:8d:02:8c:95:f3:1f:49: 5f:6e:5b:13:c2:ec:23:c4:6d:48:6a:21:b4:e8:24:92:4b:27: 60:64:59:c8:5d:d2:75:24:8e:09:16:c2:3a:46:fd:fc:70:4b: e2:e3:a0:d3:44:9e:45:77:17:d7:b2:a9:fc:34:f2:40:77:ec: f7:25:ac:ee:bf:6d:3c:65:77:de:b6:2e:ce:bd:3d:d2:cd:b8: ce:de:64:98:23:87:d7:ef:5f:5d:19:c3:da:97:ce:66:85:65: 3d:a9:56:da:60:ad:22:a6:75:4e:b2:33:98:75:39:57:bd:1e: 38:ee:db:81:b4:d3:0f:60:f2:e8:7e:e2:6d:b9:a3:52:06:87: 4b:9d:69:15:e8:3d:4a:1e:dd:92:1b:f6:af:15:57:92:c5:f6: 4e:15:f5:3a:ac:ad:e3:b7:c1:62:e6:90:4b:8a:af:7e:69:d1: b7:d6:7d:15:99:2c:45:4c:8d:cd:e0:81:3d:1b:6b:86:52:d0: f6:a0:7e:d4:d0:d2:c8:70:ad:98:90:4e:31:19:f5:13:d8:e7: 51:22:0d:28:47:98:6f:98:26:43:37:b2:89:e0:9a:7a:7e:65: 37:2a:46:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjQwNTE4MTgwMjA5WhcNMjQwNTI1MTgwMjA5WjAYMRYwFAYD VQQDEw02NjQ4ZWQyMi1iYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnx5AxUNcb0n+Sqi4Re346UlaviXQwDB+89/C7Te6JeSdyf1k1aIQmxjb1c0 2N1Gtu22kRwJq3uR2f351fizKlwHzeO1/Znp/eGkGhcVl/zX++N3P2GzTLCCsNBM fmtnSeW2yw/TYvrazKaDxfCY4CyM2VqcsaVpToh4YvNxXJaK/o4GZ+aIjck2CWJI Jl5r+qWJS3oSG9BwnFEEs+cJwsOAH7IaPzOoIWT8Qhmc1Tqlsbc43lShz9VRl5/v sc6OFoNR2TRbuBV5FxaQDCg65+O+1Qr9PLdqPX/2tEGIdjE4gqVO702HHNoBD3zp vxvo7jD41j2W2BL0Xnyj/yMfswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtnh3CH ZLlSct3copkNtxE7219wMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkEyOC9BNDdEMjAyODI4NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldf Z25rcXB3VzcySmxSbkxHY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArCSm59MZbk+oasaJYRjRgnCcuY+MYDLiSbG8wHo0CjJXzH0lfblsT wuwjxG1IaiG06CSSSydgZFnIXdJ1JI4JFsI6Rv38cEvi46DTRJ5FdxfXsqn8NPJA d+z3Jazuv208ZXfeti7OvT3SzbjO3mSYI4fX719dGcPal85mhWU9qVbaYK0ipnVO sjOYdTlXvR447tuBtNMPYPLofuJtuaNSBodLnWkV6D1KHt2SG/avFVeSxfZOFfU6 rK3jt8Fi5pBLiq9+adG31n0VmSxFTI3N4IE9G2uGUtD2oH7U0NLIcK2YkE4xGfUT 2OdRIg0oR5hvmCZDN7KJ4Jp6fmU3KkYD -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org