$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: rS57/xzoTZ1CTXLhlEtjQZd1fF2YxeXl5ghpXpNgmug= Subject key identifier: FF:54:76:FA:9B:65:7A:A7:0C:1A:92:E8:CA:1E:19:CC:D5:6A:FB:E4 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 086B Signing time: Sat 18 May 2024 21:37:25 +0000 Manifest this update: Sat 18 May 2024 21:37:24 +0000 Manifest next update: Sat 25 May 2024 21:37:24 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: EHn7aE6L/heTZOwPXWZCvD4a2GlVpmw8b6L1BP/G0Bo=) 2: 3BA8735E9F4611EAB20AAA63C4F9AE02.roa (hash: FB6+lzfURa8UzLsSkPLLUxc6KbwXp3GLtyAebsACLXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: May 18 21:37:24 2024 GMT Not After : May 25 21:37:24 2024 GMT Subject: CN=66491f94-2d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:5d:58:7c:56:89:9e:21:ff:87:f3:e9:19: 06:03:8b:d5:1c:4f:32:c9:4e:f6:b7:76:61:e7:9d: e8:94:d7:15:98:e6:f3:de:d6:18:22:1a:f8:e2:b3: 2f:52:fe:b4:5d:0c:37:bc:08:3c:19:4a:08:e7:ed: 6e:d3:59:8c:f1:40:2b:1f:3b:ea:24:0e:1c:be:e0: 1f:2e:b1:e0:64:ba:c2:0e:a6:e1:19:d4:71:9a:76: f8:13:30:a6:ad:0c:40:ba:1c:28:32:69:d6:57:2b: 85:d7:a1:ad:62:67:6a:a8:e6:68:38:90:9e:e3:80: c4:e9:f5:ae:ed:64:f7:e9:d6:10:ef:03:3b:32:ec: 8a:2c:c6:42:68:a0:44:18:bc:3e:b9:f4:12:2a:97: f1:ee:d6:76:c6:5e:43:52:6c:6d:db:f8:96:24:98: e7:bc:83:f2:32:83:c2:cb:25:d1:80:e6:b7:e6:c4: d5:61:78:e0:67:14:a7:ea:8c:d7:51:5d:75:e0:df: 37:d3:c9:f1:e7:f4:fe:fd:0c:64:df:d5:1b:8e:91: ea:bd:20:0d:ec:ac:d2:07:4e:f9:39:d9:4b:b8:86: 40:bd:e5:95:47:b0:a3:e6:7e:cc:47:42:2d:ff:f1: 24:62:7b:65:65:76:58:1c:d1:a9:55:3b:a1:ac:8b: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:54:76:FA:9B:65:7A:A7:0C:1A:92:E8:CA:1E:19:CC:D5:6A:FB:E4 X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f3:76:95:3c:9b:f9:3e:53:c3:30:49:a7:56:ef:b5:24:db: 38:c2:1c:be:74:c9:1b:76:5a:42:fa:4d:33:3e:41:23:55:b8: 5f:a4:a0:d6:cb:bf:86:f2:3f:df:77:35:7a:a5:e5:2d:fd:e0: 94:72:17:db:96:25:e9:25:b1:af:8d:06:7d:bf:f2:1b:75:04: 97:e0:ce:0d:fc:1d:4b:8d:bc:bf:cf:23:df:14:ff:a4:d4:79: a0:b6:55:c9:ea:56:13:cd:eb:bc:ee:14:d3:06:b7:73:fa:68: f6:bd:68:56:85:8f:b2:cc:51:ab:98:ce:6f:81:68:51:ac:4f: 7c:c8:5a:12:9a:e2:d2:bc:69:22:97:d8:91:c9:6a:c6:27:bb: b0:2a:d1:b4:b2:ce:7f:69:1b:a3:4d:2b:ce:ce:c3:ae:80:93: ff:7d:3d:d8:6d:9b:59:3a:37:64:4a:10:6c:d3:3d:df:0d:62: 49:5c:ad:c8:54:00:f8:37:57:23:95:35:12:d9:e6:2c:9e:d6: b4:7c:5d:e4:3a:d1:a3:ac:d3:07:82:96:bb:a9:6e:53:c0:c0: 1c:c3:fc:92:5f:8a:2d:92:51:c2:4b:ba:16:4c:40:4f:e0:97: 08:62:89:47:a6:5e:63:5d:06:26:94:0b:bb:be:60:02:c7:19: 07:c6:f4:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjQwNTE4MjEzNzI0WhcNMjQwNTI1MjEzNzI0WjAYMRYwFAYD VQQDEw02NjQ5MWY5NC0yZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBtdWHxWiZ4h/4fz6RkGA4vVHE8yyU72t3Zh553olNcVmObz3tYYIhr44rMv Uv60XQw3vAg8GUoI5+1u01mM8UArHzvqJA4cvuAfLrHgZLrCDqbhGdRxmnb4EzCm rQxAuhwoMmnWVyuF16GtYmdqqOZoOJCe44DE6fWu7WT36dYQ7wM7MuyKLMZCaKBE GLw+ufQSKpfx7tZ2xl5DUmxt2/iWJJjnvIPyMoPCyyXRgOa35sTVYXjgZxSn6ozX UV114N8308nx5/T+/Qxk39UbjpHqvSAN7KzSB075OdlLuIZAveWVR7Cj5n7MR0It //EkYntlZXZYHNGpVTuhrItaNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9Udvqb ZXqnDBqS6MoeGczVavvkMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp83aVPJv5PlPDMEmnVu+1JNs4why+dMkbdlpC+k0zPkEjVbhfpKDW y7+G8j/fdzV6peUt/eCUchfbliXpJbGvjQZ9v/IbdQSX4M4N/B1Ljby/zyPfFP+k 1HmgtlXJ6lYTzeu87hTTBrdz+mj2vWhWhY+yzFGrmM5vgWhRrE98yFoSmuLSvGki l9iRyWrGJ7uwKtG0ss5/aRujTSvOzsOugJP/fT3YbZtZOjdkShBs0z3fDWJJXK3I VAD4N1cjlTUS2eYsnta0fF3kOtGjrNMHgpa7qW5TwMAcw/ySX4otklHCS7oWTEBP 4JcIYolHpl5jXQYmlAu7vmACxxkHxvSy -----END CERTIFICATE-----Generated at Sun May 19 00:16:15 2024 by rpki-client on console-fra.rpki-client.org