$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json) Hash identifier: cwLuZRhOv0bqRuCp0PnL+Gg+mJ5tNVWDKo6MBBg7bjg= Subject key identifier: 09:EA:3E:12:F0:91:B5:CC:FB:08:7F:36:02:EF:5F:B1:61:6A:85:A5 Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft Manifest number: 8D Signing time: Sun 19 May 2024 07:10:05 +0000 Manifest this update: Sun 19 May 2024 07:10:05 +0000 Manifest next update: Sun 26 May 2024 07:10:05 +0000 Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: cBOAbQ2bBvkPLF4clTEK589+bz9arTAUZKVgXjbnv7U=) 2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: p2OaGBXnB53QIaUdiYcGSS4yEhTNuLi2jw8pgHfs/zU=) 3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: hqa3bLAwVOwmpF9Y6KqNaSGq/0Ts7TL9Rvw8QWvgERw=) 4: 585745526BC111EEA163E774C4F9AE02.roa (hash: SgiPpSzjVYRUuSbfrex/g+dkVgdfWShv5j9Fj2CdmAA=) 5: B7FD006A50F411EEB2008729C4F9AE02.roa (hash: uzoq++xFu38JBN6N2UCnRV7497O3ABRHnG8fvqp6Dtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: May 19 07:10:05 2024 GMT Not After : May 26 07:10:05 2024 GMT Subject: CN=6649a5cd-bf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:33:a9:60:a3:7d:7b:45:df:e5:23:e5:4d: b1:8f:a3:fc:43:c6:0f:8c:c6:52:c1:38:64:35:e9: 28:80:6f:32:03:32:7d:fe:8f:22:13:a6:0f:b8:2b: 9c:64:ee:6b:35:cd:67:eb:32:a9:23:af:db:82:68: b4:4a:f3:60:e2:06:d9:bb:d1:a0:34:73:8b:92:85: 04:7d:b9:c0:b9:71:2f:00:29:fe:2b:f9:d0:e7:2d: 91:9e:43:44:a0:44:96:06:bc:60:9f:1c:7b:b3:d5: 4c:ce:4f:59:23:6b:cb:07:0f:ec:2f:aa:00:73:5e: 2f:c3:73:d5:72:6f:93:14:5b:7c:d7:3b:59:70:a5: ce:a4:e7:6b:0a:67:52:80:80:d7:bc:32:f6:db:3e: f1:dc:0e:2c:ce:87:ee:45:c0:7f:4e:3d:bb:c1:3e: b3:a6:85:a6:49:66:31:7d:82:28:25:dd:27:6b:6c: c5:26:d7:a1:3e:5f:14:58:2f:35:cd:93:7d:0c:3d: 45:44:a0:5d:ad:21:14:64:5e:6c:a1:ad:c1:74:48: 03:a7:bb:ed:c6:25:5c:61:e8:a3:13:21:fb:12:54: 37:bc:e6:32:f0:a6:6b:03:46:c6:36:bc:97:cf:34: 7e:25:89:ca:0c:b3:df:95:67:cb:f8:bb:61:a9:fa: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EA:3E:12:F0:91:B5:CC:FB:08:7F:36:02:EF:5F:B1:61:6A:85:A5 X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:98:dc:57:ad:b5:0c:38:5b:1b:8d:4a:b2:44:2e:1c:c6:97: 53:11:90:2a:6e:00:63:00:1a:67:6b:52:30:02:22:f5:c6:c0: 24:aa:e4:5b:86:79:95:22:88:cb:9c:cb:47:5f:1c:f5:4e:45: 8b:13:fa:15:8b:6f:3d:de:89:3a:99:58:b4:25:a9:bc:58:20: 80:c0:f5:b0:95:3b:31:fb:27:8b:e5:4b:f6:61:e7:1c:61:75: dd:f3:f0:a7:db:9b:08:23:5c:17:75:39:49:d7:21:d3:45:7e: 2b:e9:4b:e3:e8:66:66:99:59:e6:dc:49:c1:47:ee:cc:c7:48: 8e:af:16:0d:32:bb:61:77:fb:91:ac:e2:f0:c7:7e:08:ae:e9: b5:e9:cc:b6:3f:a7:11:5e:4d:f8:68:27:71:58:68:5c:9a:41: ac:72:90:1b:91:31:49:14:1e:f6:d0:a9:2d:f3:a4:47:69:af: fd:79:cc:14:9b:e9:4d:2a:eb:29:cc:d9:bf:10:d2:e8:58:db: 0d:e4:15:26:be:ea:76:87:0a:62:c6:78:ed:73:07:de:bb:18: 75:1f:fd:a8:4f:ba:e5:99:a6:4d:85:73:8a:9d:06:f8:b9:23: b7:0e:a4:22:9d:72:0e:fa:da:68:a8:3f:b4:b8:59:8c:28:d9: 74:b1:b8:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjQwNTE5MDcxMDA1WhcNMjQwNTI2MDcxMDA1WjAYMRYwFAYD VQQDEw02NjQ5YTVjZC1iZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujozqWCjfXtF3+Uj5U2xj6P8Q8YPjMZSwThkNekogG8yAzJ9/o8iE6YPuCuc ZO5rNc1n6zKpI6/bgmi0SvNg4gbZu9GgNHOLkoUEfbnAuXEvACn+K/nQ5y2RnkNE oESWBrxgnxx7s9VMzk9ZI2vLBw/sL6oAc14vw3PVcm+TFFt81ztZcKXOpOdrCmdS gIDXvDL22z7x3A4szofuRcB/Tj27wT6zpoWmSWYxfYIoJd0na2zFJtehPl8UWC81 zZN9DD1FRKBdrSEUZF5soa3BdEgDp7vtxiVcYeijEyH7ElQ3vOYy8KZrA0bGNryX zzR+JYnKDLPflWfL+Lthqfp2yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnqPhLw kbXM+wh/NgLvX7FhaoWlMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo T2JlMkR6bklpMG05dXpYejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtmNxXrbUMOFsbjUqyRC4cxpdTEZAqbgBjABpna1IwAiL1xsAkquRb hnmVIojLnMtHXxz1TkWLE/oVi2893ok6mVi0Jam8WCCAwPWwlTsx+yeL5Uv2Yecc YXXd8/Cn25sII1wXdTlJ1yHTRX4r6Uvj6GZmmVnm3EnBR+7Mx0iOrxYNMrthd/uR rOLwx34Irum16cy2P6cRXk34aCdxWGhcmkGscpAbkTFJFB720Kkt86RHaa/9ecwU m+lNKuspzNm/ENLoWNsN5BUmvup2hwpixnjtcwfeuxh1H/2oT7rlmaZNhXOKnQb4 uSO3DqQinXIO+tpoqD+0uFmMKNl0sbho -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org