$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: RnlSC/lKKKMgOiqPPV/CiCrMB4jMLkeuhNS+fE4Jpy8= Subject key identifier: 78:34:09:2E:BC:AE:94:31:50:7E:2B:F8:0A:19:9E:79:A7:10:F1:1C Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: E2 Signing time: Wed 29 May 2024 06:34:28 +0000 Manifest this update: Wed 29 May 2024 06:34:28 +0000 Manifest next update: Wed 05 Jun 2024 06:34:28 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: MHkkMUNo5uEj9prlTXVCjnMU68h0k3WzfqiknTucIQY=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: QgXD2g83uAfsRZ3zlwkeEmrEVbeOZyYkGqvp3sd6rZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: May 29 06:34:28 2024 GMT Not After : Jun 5 06:34:28 2024 GMT Subject: CN=6656cc74-94ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8d:64:18:77:8c:2e:c7:dc:dd:70:45:f7:7b: 49:6e:3d:22:f9:b6:a1:70:0d:c4:ee:90:42:c8:18: 4c:a4:81:dc:43:b3:1d:a5:d8:0d:3c:04:39:f2:52: 67:f3:a0:4a:56:e4:b2:e9:a7:67:64:11:ed:ff:04: 09:8a:75:b8:88:96:6c:64:d3:e2:8d:4b:07:cd:92: bb:e9:a2:8d:8a:63:bf:3f:c5:ce:c8:4b:22:ef:d0: 92:48:c3:66:7b:d9:a2:73:b5:50:36:ea:ce:8d:5c: 4f:3c:87:db:e5:e1:70:c0:53:5c:cf:af:13:8c:27: c6:d2:fa:5d:d7:d9:53:01:4b:9e:35:2a:ae:5e:fe: fb:eb:95:d7:41:7d:7b:6f:ad:c6:bb:1c:ec:ea:ae: d6:a0:56:f9:ed:8d:f4:d9:6f:24:8f:bc:54:c1:07: 36:87:ac:85:13:fb:25:f3:54:a5:b9:e9:3f:5c:ad: e8:18:ed:25:80:89:69:26:15:a8:9a:ca:07:09:b6: 82:94:df:70:a6:fc:16:79:b6:f6:a3:4b:f4:82:0c: 25:4a:01:71:ac:84:1f:af:a1:18:b0:18:cb:b2:36: 49:80:2b:88:09:ba:8c:61:3c:73:b9:f5:4b:db:0d: fe:f3:20:59:fd:ed:be:1d:71:42:e2:c6:ad:29:c2: fd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:34:09:2E:BC:AE:94:31:50:7E:2B:F8:0A:19:9E:79:A7:10:F1:1C X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:24:b9:63:36:cf:98:b6:23:7d:17:21:dd:4c:24:49:ee:ff: ea:41:72:34:e6:85:90:00:d1:0c:2b:3a:fd:13:a4:b7:03:68: ef:3c:b0:4e:2c:86:90:05:31:e7:a5:06:e9:54:74:cb:15:97: 2f:6d:3b:ba:28:ad:73:7e:49:be:a4:06:5d:45:29:56:10:26: a3:f1:ec:e1:39:8b:45:df:49:3d:25:96:cd:31:1e:eb:d1:ec: 9b:dd:09:10:64:3d:64:ee:fb:fd:0f:98:a7:0d:f4:dc:20:1c: c1:0b:58:e4:b9:06:b0:8d:c1:0f:d9:03:9e:c2:32:b5:23:da: a3:22:ab:d8:2e:11:e2:5d:44:f2:d9:93:e8:5a:00:1e:ff:2e: 12:ba:91:6f:17:a7:ab:12:ad:17:a1:e5:5a:ec:b0:f8:9d:1e: c9:63:fa:f3:16:6d:eb:5c:6f:ce:85:1e:92:b5:2e:93:b1:2f: 46:ce:4c:60:2e:04:e3:da:d9:ce:90:cc:ee:23:4c:95:62:b9: d7:9a:6f:41:29:aa:22:a5:9f:ba:b3:16:56:7a:e6:91:da:1a: 05:27:e8:2c:73:0d:c0:b6:db:a3:6b:0c:b0:7c:91:e6:b1:39: 44:a0:a0:de:d9:b7:45:05:ec:02:c1:8a:8d:be:d4:c5:41:54: ca:58:ae:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjQwNTI5MDYzNDI4WhcNMjQwNjA1MDYzNDI4WjAYMRYwFAYD VQQDEw02NjU2Y2M3NC05NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Y1kGHeMLsfc3XBF93tJbj0i+bahcA3E7pBCyBhMpIHcQ7MdpdgNPAQ58lJn 86BKVuSy6adnZBHt/wQJinW4iJZsZNPijUsHzZK76aKNimO/P8XOyEsi79CSSMNm e9mic7VQNurOjVxPPIfb5eFwwFNcz68TjCfG0vpd19lTAUueNSquXv7765XXQX17 b63Guxzs6q7WoFb57Y302W8kj7xUwQc2h6yFE/sl81Sluek/XK3oGO0lgIlpJhWo msoHCbaClN9wpvwWebb2o0v0ggwlSgFxrIQfr6EYsBjLsjZJgCuICbqMYTxzufVL 2w3+8yBZ/e2+HXFC4satKcL9+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg0CS68 rpQxUH4r+AoZnnmnEPEcMB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXJLljNs+YtiN9FyHdTCRJ7v/qQXI05oWQANEMKzr9E6S3A2jvPLBO LIaQBTHnpQbpVHTLFZcvbTu6KK1zfkm+pAZdRSlWECaj8ezhOYtF30k9JZbNMR7r 0eyb3QkQZD1k7vv9D5inDfTcIBzBC1jkuQawjcEP2QOewjK1I9qjIqvYLhHiXUTy 2ZPoWgAe/y4SupFvF6erEq0XoeVa7LD4nR7JY/rzFm3rXG/OhR6StS6TsS9Gzkxg LgTj2tnOkMzuI0yVYrnXmm9BKaoipZ+6sxZWeuaR2hoFJ+gscw3AttujawywfJHm sTlEoKDe2bdFBewCwYqNvtTFQVTKWK7E -----END CERTIFICATE-----Generated at Wed May 29 09:16:23 2024 by rpki-client on console-fra.rpki-client.org