$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json) Hash identifier: qlBZFcPAIrJ8ouy8Jhq2imKXz+WtCtQpPIPnKeKkUoE= Subject key identifier: 7D:CD:8B:0C:CC:9D:DC:CB:3A:79:A1:DE:F6:19:83:C2:E1:7B:66:75 Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft Manifest number: 03C2 Signing time: Sun 19 May 2024 02:25:53 +0000 Manifest this update: Sun 19 May 2024 02:25:53 +0000 Manifest next update: Sun 26 May 2024 02:25:53 +0000 Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: 1h56tXO5OELkkqO7FiaKkfY+XHl85iXeG5U0upvs/XI=) 2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: kArh2epf30vubdY6QxWez1yhusZT0dxZ15kysclBgsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Validity Not Before: May 19 02:25:53 2024 GMT Not After : May 26 02:25:53 2024 GMT Subject: CN=66496331-acd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:18:f9:fc:7f:08:64:ad:c1:f6:f8:f8:99: 56:8d:d3:38:99:13:bc:a2:cb:40:9f:9e:16:e5:89: 12:a2:d4:37:e3:74:f1:54:0f:83:93:d4:d4:e8:8a: 11:de:0b:9a:f3:b9:12:1f:eb:9b:6c:0b:6a:ba:c4: 7d:cc:7f:d1:b2:65:58:0a:bd:e6:c4:b5:32:70:a2: d9:85:ce:bf:ab:a6:26:cb:db:aa:71:2d:07:38:26: ab:5e:3a:30:cd:7b:de:b3:72:af:ed:ef:1f:31:ba: d8:89:de:b7:ce:1e:db:74:7c:81:3f:b5:9f:39:de: fe:a0:c6:fd:74:f4:7e:bf:9d:cf:f2:b9:4f:ae:8b: 8c:dd:3b:0a:34:fd:a6:fd:0a:31:86:0a:3b:96:ce: fc:df:5b:87:89:6c:22:20:0d:28:da:d8:b3:e2:74: f8:18:e4:28:f4:32:a6:4d:7c:7d:af:d5:85:85:b1: ec:48:b8:c5:e8:f0:d3:d1:26:64:b1:92:a1:7f:5f: 0e:91:f3:96:fd:3f:09:c1:10:6b:4b:7d:6f:cf:f8: 18:33:b6:a0:2b:9b:c3:8b:43:f0:9e:94:12:2c:ad: bc:48:7b:24:36:0a:06:d9:4d:f3:39:2a:96:ae:a4: 98:7b:ab:7c:30:ed:9c:9c:75:74:e0:4d:49:e5:ba: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CD:8B:0C:CC:9D:DC:CB:3A:79:A1:DE:F6:19:83:C2:E1:7B:66:75 X509v3 Authority Key Identifier: keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:95:2f:da:d6:29:be:53:63:80:a9:7a:24:83:9d:7e:9a:36: b7:1a:7c:2f:29:6a:55:69:37:1d:cd:91:1c:d1:93:bc:87:a9: 41:d7:1b:a3:3c:a0:59:d7:d0:f2:3b:07:b0:cb:fd:33:1e:6f: 39:ba:fb:95:76:23:0b:7f:d9:80:e9:0a:50:6d:77:64:c1:49: ba:4e:a5:d5:c8:83:1f:e2:5d:58:50:1e:4a:71:83:d5:1c:c8: 04:f2:fd:ea:7c:46:30:95:d9:10:43:dc:3e:4b:83:83:16:a6: 32:19:ff:b6:07:14:6a:75:b8:26:f1:d3:42:8d:dc:33:16:46: 8f:49:c4:81:49:52:b4:92:c9:54:f6:ec:0b:77:f5:d5:22:33: a6:d8:7b:03:79:d7:9f:1f:f1:9a:ff:03:cc:e9:f7:c2:71:f8: 16:7a:d6:f0:81:e9:62:c5:a0:de:89:e8:c9:cf:9b:ac:39:d2: 6f:e7:fc:62:f0:8e:3f:6e:50:6b:2e:1c:4b:5a:46:76:71:b4: 79:23:1d:c0:f9:3c:3b:c8:97:ef:48:e4:c3:39:7a:4d:fe:e8: 30:32:e5:66:aa:a2:50:01:c0:26:ee:c6:e8:7f:e2:3c:81:68: ed:49:6a:45:42:f4:46:fc:61:4b:c5:4c:d1:e2:28:e2:85:af: d3:17:e0:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5 Rjg4QzFCMkIwHhcNMjQwNTE5MDIyNTUzWhcNMjQwNTI2MDIyNTUzWjAYMRYwFAYD VQQDEw02NjQ5NjMzMS1hY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fcY+fx/CGStwfb4+JlWjdM4mRO8ostAn54W5YkSotQ343TxVA+Dk9TU6IoR 3gua87kSH+ubbAtqusR9zH/RsmVYCr3mxLUycKLZhc6/q6Ymy9uqcS0HOCarXjow zXves3Kv7e8fMbrYid63zh7bdHyBP7WfOd7+oMb9dPR+v53P8rlProuM3TsKNP2m /Qoxhgo7ls7831uHiWwiIA0o2tiz4nT4GOQo9DKmTXx9r9WFhbHsSLjF6PDT0SZk sZKhf18OkfOW/T8JwRBrS31vz/gYM7agK5vDi0PwnpQSLK28SHskNgoG2U3zOSqW rqSYe6t8MO2cnHV04E1J5bplLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3NiwzM ndzLOnmh3vYZg8Lhe2Z1MB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNlS/a1im+U2OAqXokg51+mja3GnwvKWpVaTcdzZEc0ZO8h6lB1xuj PKBZ19DyOwewy/0zHm85uvuVdiMLf9mA6QpQbXdkwUm6TqXVyIMf4l1YUB5KcYPV HMgE8v3qfEYwldkQQ9w+S4ODFqYyGf+2BxRqdbgm8dNCjdwzFkaPScSBSVK0kslU 9uwLd/XVIjOm2HsDedefH/Ga/wPM6ffCcfgWetbwgelixaDeiejJz5usOdJv5/xi 8I4/blBrLhxLWkZ2cbR5Ix3A+Tw7yJfvSOTDOXpN/ugwMuVmqqJQAcAm7sbof+I8 gWjtSWpFQvRG/GFLxUzR4ijiha/TF+Ds -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org