$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json) Hash identifier: 46gTy5b/p/bSmNQ3Ah7C56klQXzrk7R1TA4exdiCfq4= Subject key identifier: 2D:CF:91:99:11:A7:EC:4F:F0:CA:CB:71:12:DF:0F:AB:C1:89:DF:36 Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft Manifest number: 017D Signing time: Sun 19 May 2024 04:45:27 +0000 Manifest this update: Sun 19 May 2024 04:45:26 +0000 Manifest next update: Sun 26 May 2024 04:45:26 +0000 Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: 5w0jDlmAtyLuQ7bAo6zXLl7Re6iIynp7CqwjS9KLvHM=) 2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: PobFppQ9Shhj4JZZQT+n/6MGUZit80hQSAvZEp9yBts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Validity Not Before: May 19 04:45:26 2024 GMT Not After : May 26 04:45:26 2024 GMT Subject: CN=664983e7-b7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:42:34:c5:20:b1:30:59:b3:88:c2:f1:97: 1b:84:b5:74:5a:f4:25:5c:fe:41:b7:a5:af:17:5b: fc:62:d1:34:f7:74:6d:b5:17:97:64:56:a6:04:94: 5d:5d:c6:ff:d1:d0:fd:ff:d7:e6:07:7e:1a:39:10: 18:9b:d9:00:48:33:ec:24:b7:4c:a6:b4:cd:cb:3d: 61:7c:23:53:76:ff:0f:ea:b7:de:45:29:fb:67:e8: 9d:1b:8c:82:03:7d:95:d0:a8:78:86:26:0b:83:ff: be:70:b6:97:25:3f:0e:79:34:56:37:a8:03:b4:34: b1:60:dd:77:44:5e:c7:23:55:9b:4e:c5:d4:4f:96: f1:dc:ff:f8:9c:e7:36:91:25:69:64:b7:d1:59:3f: a5:d7:5b:26:6a:98:b4:a2:5b:d6:bc:db:22:8c:81: 2d:b0:8e:1a:99:81:6b:f6:d0:d1:85:20:57:ae:7d: 4e:62:44:f9:26:34:9a:75:82:a0:99:3f:10:39:d1: 1e:0f:31:34:c7:93:c2:20:52:54:c7:60:f8:0a:c5: 51:3c:e9:36:98:ae:52:84:77:00:68:e1:38:c7:0a: c7:97:e4:c4:f1:ce:d4:ec:43:d8:f5:8e:e0:21:db: f5:45:e0:7d:9f:a4:0f:99:52:5c:24:d5:91:54:42: 7c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CF:91:99:11:A7:EC:4F:F0:CA:CB:71:12:DF:0F:AB:C1:89:DF:36 X509v3 Authority Key Identifier: keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:43:5d:23:37:c1:c4:6e:6f:ed:24:d6:43:a5:2a:da:dc:25: 48:e1:5b:8d:85:99:7b:85:ea:12:36:0d:ba:ce:dd:50:c4:81: e3:a7:8c:42:20:7f:3e:bf:3c:9f:23:ed:6e:e1:bd:3a:3c:15: 60:7e:d4:2e:ec:f6:b6:b9:71:57:bd:03:2a:42:70:af:ae:f8: d1:86:78:66:14:6d:f8:b0:56:b2:aa:30:ba:6e:7b:89:38:81: a5:77:d3:fa:0a:ba:2d:37:08:7f:92:0f:99:8e:93:2a:d4:d5: 71:bb:42:38:62:aa:c3:fb:7e:81:6d:a9:a5:85:74:e1:81:79: d3:ed:97:df:39:f0:cc:6b:1c:32:1f:c3:4a:8e:c8:51:9f:96: b2:47:81:af:8a:81:d5:13:53:40:fd:37:57:ff:41:4d:6d:36: a1:ac:57:fa:16:b3:51:ae:82:d7:20:6d:f6:4a:d1:af:cc:bf: 13:8b:9e:6d:b7:2d:82:31:22:7a:ed:97:7d:ea:15:81:5a:f6: 5a:fb:08:65:7e:48:51:bc:4c:f8:f5:2b:06:57:1c:9b:80:9a: 62:a3:69:b8:97:63:95:49:9d:f7:af:8f:72:b2:c7:e4:4e:05: 15:f8:bd:de:10:97:ed:9c:96:fa:d5:90:0d:c0:2c:ee:1c:a0: c4:f9:3f:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QTYxMTAvBgNVBAUTKERBNDc1NDAxNDEyMUQzMjY4N0Q5N0QzOTJEOTA2MDQ5 QTgxNEZDQzMwHhcNMjQwNTE5MDQ0NTI2WhcNMjQwNTI2MDQ0NTI2WjAYMRYwFAYD VQQDEw02NjQ5ODNlNy1iN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvedCNMUgsTBZs4jC8ZcbhLV0WvQlXP5Bt6WvF1v8YtE093RttReXZFamBJRd Xcb/0dD9/9fmB34aORAYm9kASDPsJLdMprTNyz1hfCNTdv8P6rfeRSn7Z+idG4yC A32V0Kh4hiYLg/++cLaXJT8OeTRWN6gDtDSxYN13RF7HI1WbTsXUT5bx3P/4nOc2 kSVpZLfRWT+l11smapi0olvWvNsijIEtsI4amYFr9tDRhSBXrn1OYkT5JjSadYKg mT8QOdEeDzE0x5PCIFJUx2D4CsVRPOk2mK5ShHcAaOE4xwrHl+TE8c7U7EPY9Y7g Idv1ReB9n6QPmVJcJNWRVEJ8nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3PkZkR p+xP8MrLcRLfD6vBid82MB8GA1UdIwQYMBaAFNpHVAFBIdMmh9l9OS2QYEmoFPzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdBNi9DOEE3OTlEMjI0 NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5YUgyWDA1TFpCZ1NhZ1Vf TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrZFVBVUVoMHlhSDJYMDVMWkJnU2FnVV9NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdBNi9DOEE3OTlEMjI0NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5 YUgyWDA1TFpCZ1NhZ1VfTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Q10jN8HEbm/tJNZDpSra3CVI4VuNhZl7heoSNg26zt1QxIHjp4xC IH8+vzyfI+1u4b06PBVgftQu7Pa2uXFXvQMqQnCvrvjRhnhmFG34sFayqjC6bnuJ OIGld9P6CrotNwh/kg+ZjpMq1NVxu0I4YqrD+36BbamlhXThgXnT7ZffOfDMaxwy H8NKjshRn5ayR4GvioHVE1NA/TdX/0FNbTahrFf6FrNRroLXIG32StGvzL8Ti55t ty2CMSJ67Zd96hWBWvZa+whlfkhRvEz49SsGVxybgJpio2m4l2OVSZ33r49yssfk TgUV+L3eEJftnJb61ZANwCzuHKDE+T/Y -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org