$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json) Hash identifier: cz4RJ+Q898U8ksensJWq60pf91JDrPfH9AgrJLx0tGU= Subject key identifier: DE:09:B7:E2:57:64:7F:62:25:20:CE:26:EE:95:CA:A5:30:6B:54:A5 Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft Manifest number: 0202 Signing time: Sun 19 May 2024 04:10:12 +0000 Manifest this update: Sun 19 May 2024 04:10:12 +0000 Manifest next update: Sun 26 May 2024 04:10:12 +0000 Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: zanCwNgoWKWGdv4NySH4JnlZdvpzXnA7515Y4qaYRM0=) 2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: 6/hZGliPgE0ifcXcKbdvex1k1tulDr+I2fIAgCiLmqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: May 19 04:10:12 2024 GMT Not After : May 26 04:10:12 2024 GMT Subject: CN=66497ba4-2809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:cb:99:7c:46:5d:e9:ed:e9:57:ba:19:8a: 02:40:64:27:ff:0f:d8:4c:0f:c5:56:e3:f7:06:c8: 61:17:e0:09:9d:10:29:56:f6:fb:e7:56:58:9e:2b: 4f:bc:e6:53:20:11:1a:a3:c4:c9:cd:30:34:8b:8f: 9c:bc:b1:2e:9f:61:12:cb:7e:70:f5:9d:b4:3c:1a: 0e:54:dd:b6:58:4d:17:75:4d:24:1a:43:bc:3a:75: 9a:74:4e:e1:b0:f9:82:f2:56:af:12:1c:94:66:6f: e0:14:8f:3d:ab:00:a4:0b:45:4a:d1:44:a1:9c:e3: da:73:7c:ab:44:18:64:46:ec:bc:2c:3a:c7:8a:1a: 91:86:c8:bb:f0:76:be:b7:ea:c3:9c:a4:35:2b:f6: d5:7e:11:d2:96:11:35:9b:66:b7:ae:78:f1:37:66: 1a:3d:f7:5f:d0:82:c0:6d:60:9b:68:c0:97:1d:d6: 86:2c:07:0d:2a:e5:14:33:ff:e2:df:d9:cb:00:4c: d2:10:e4:05:63:37:50:5a:dc:91:9a:29:dc:65:ed: 8a:cf:e0:77:ac:45:9f:15:8a:c7:76:f2:58:44:64: 1c:a2:14:7b:ac:4c:20:27:df:2e:f9:3f:f8:75:50: 22:ee:8c:4e:9e:86:66:d0:95:f5:31:11:e1:ba:fc: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:09:B7:E2:57:64:7F:62:25:20:CE:26:EE:95:CA:A5:30:6B:54:A5 X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:28:52:1d:1b:f6:22:27:7a:e6:7b:d1:1b:be:67:d3:cc:e4: 85:da:40:7b:27:d2:37:6f:75:8a:e3:cd:e0:40:0e:3f:c6:e1: 5d:61:02:5f:da:22:e7:11:5d:0b:4b:d9:8d:43:81:e8:fe:db: 6d:f3:48:8b:63:af:ec:86:38:61:71:ed:f5:d4:4b:2a:5c:8e: c9:e6:cd:0e:d0:d9:6d:63:bc:61:25:d2:7f:bd:07:43:32:6b: b7:2e:bb:00:22:be:de:0d:ef:8a:62:20:e5:fe:29:21:cc:a0: 6f:ff:e4:bd:58:e5:d3:84:e3:a6:4f:58:d5:98:46:58:5e:53: 9e:63:a4:99:e2:b7:ec:36:7c:c0:09:77:f5:fb:ac:1d:1b:e1: 63:99:2a:b6:fe:1a:76:97:e8:37:fe:83:bc:67:0f:7c:11:09: 80:b8:1d:0d:79:94:29:8b:a7:4d:b8:b2:0a:b7:25:98:65:ea: 58:ff:a6:f5:6b:47:06:c9:69:61:92:a4:01:4f:38:a8:e4:35: d9:5b:7c:30:82:6f:4d:0e:01:ef:06:84:3d:cb:23:4a:85:1e: d4:b3:f2:19:5b:d5:47:61:e3:32:9d:a2:a5:a5:f9:84:7f:36: 46:22:35:da:63:2b:dd:5e:d2:45:73:d7:df:22:41:f3:7f:c1: 88:5e:f9:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjQwNTE5MDQxMDEyWhcNMjQwNTI2MDQxMDEyWjAYMRYwFAYD VQQDEw02NjQ5N2JhNC0yODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfvLmXxGXent6Ve6GYoCQGQn/w/YTA/FVuP3BshhF+AJnRApVvb751ZYnitP vOZTIBEao8TJzTA0i4+cvLEun2ESy35w9Z20PBoOVN22WE0XdU0kGkO8OnWadE7h sPmC8lavEhyUZm/gFI89qwCkC0VK0UShnOPac3yrRBhkRuy8LDrHihqRhsi78Ha+ t+rDnKQ1K/bVfhHSlhE1m2a3rnjxN2YaPfdf0ILAbWCbaMCXHdaGLAcNKuUUM//i 39nLAEzSEOQFYzdQWtyRmincZe2Kz+B3rEWfFYrHdvJYRGQcohR7rEwgJ98u+T/4 dVAi7oxOnoZm0JX1MRHhuvz9qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4Jt+JX ZH9iJSDOJu6VyqUwa1SlMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W X29oSGpTSFhQamJPdk44OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpKFIdG/YiJ3rme9EbvmfTzOSF2kB7J9I3b3WK483gQA4/xuFdYQJf 2iLnEV0LS9mNQ4Ho/ttt80iLY6/shjhhce311EsqXI7J5s0O0NltY7xhJdJ/vQdD Mmu3LrsAIr7eDe+KYiDl/ikhzKBv/+S9WOXThOOmT1jVmEZYXlOeY6SZ4rfsNnzA CXf1+6wdG+FjmSq2/hp2l+g3/oO8Zw98EQmAuB0NeZQpi6dNuLIKtyWYZepY/6b1 a0cGyWlhkqQBTzio5DXZW3wwgm9NDgHvBoQ9yyNKhR7Us/IZW9VHYeMynaKlpfmE fzZGIjXaYyvdXtJFc9ffIkHzf8GIXvnj -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org