$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json) Hash identifier: h5kZ6UxfoS6aZLKLDcsn7E40njhqLDtYQwqv0hDuWGg= Subject key identifier: 7A:72:E3:A5:83:27:4C:C1:DA:3E:BE:33:C0:C9:3E:E7:54:3A:70:52 Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft Manifest number: 0779 Signing time: Sat 18 May 2024 22:14:12 +0000 Manifest this update: Sat 18 May 2024 22:14:12 +0000 Manifest next update: Sat 25 May 2024 22:14:12 +0000 Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: DaXhYYKAI6UrE1rXMyUpIM2UG+GWq0nDUbldVGBbFFY=) 2: E0A68C80CD7011EAA2547645C4F9AE02.roa (hash: 3E/3EoiVzQaio1L59JzhTViVOPaVRO4AbjM/EjmRSUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Validity Not Before: May 18 22:14:12 2024 GMT Not After : May 25 22:14:12 2024 GMT Subject: CN=66492834-6ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:7f:99:9c:f4:03:0e:95:f5:ae:65:39:6c: d7:cc:e7:e7:bb:65:02:29:df:6e:e9:44:20:e5:29: 31:20:2c:3b:bc:5d:41:28:85:54:23:14:84:d0:dc: a0:bd:29:80:c8:1d:93:4c:8e:77:59:14:00:dd:2a: c3:8c:1f:74:da:3e:ef:bf:2e:f9:1a:61:a1:26:47: e7:3b:fe:50:d9:42:8a:e2:96:f7:8e:03:5f:e3:7a: 16:99:11:e8:89:93:04:d1:8a:49:ae:cb:0f:be:5c: 2b:46:f0:22:17:c1:8d:02:38:4a:7e:97:d9:9a:5f: 32:28:3b:0e:12:fc:fd:7a:d9:da:d9:d4:d2:c3:d3: ee:22:b9:92:67:51:5a:a3:c3:90:79:b3:94:91:4a: 4f:5e:03:5d:00:16:ae:7b:0a:2e:7f:1b:c5:f5:7a: c6:e7:cf:de:a4:7d:02:28:37:67:3c:d6:dd:bf:94: 18:1a:2b:8e:52:50:8f:f0:e5:8a:4b:9e:e2:0e:72: 0a:ba:a8:c3:c1:8a:fd:ee:0b:4b:c7:1c:0b:a5:f4: 80:50:ed:f3:19:be:e2:7f:0e:56:94:82:37:16:38: cb:41:48:1e:dd:78:75:01:35:78:c2:e1:ef:97:d8: 44:40:89:22:91:a3:cb:f5:3d:8a:ed:3d:4c:b0:08: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:72:E3:A5:83:27:4C:C1:DA:3E:BE:33:C0:C9:3E:E7:54:3A:70:52 X509v3 Authority Key Identifier: keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:31:43:7e:89:ca:0c:3a:94:62:f1:34:55:06:79:47:a9:c5: b8:43:5b:df:42:17:3e:42:24:b7:19:2e:1c:be:b3:3f:4b:ec: 21:5f:8b:9c:5f:ad:92:65:77:d7:bb:3d:01:94:89:a0:4f:92: 36:a1:4c:56:a6:08:b8:23:80:f7:61:9e:91:8f:70:fc:f3:db: c6:4d:78:20:4c:1a:56:31:a9:d6:db:80:42:fe:b2:f5:16:0e: af:40:3d:99:06:26:2e:a8:9a:c9:7a:24:b8:d9:5a:33:c5:bb: d5:cb:09:e6:56:d6:84:db:cd:29:2a:23:e0:0c:65:d5:85:8c: b3:c9:67:cf:c9:6c:d0:6d:76:37:13:ca:b7:bd:a2:93:d1:3f: 0b:89:d1:08:e4:63:2f:b8:52:c3:3e:59:ed:e8:99:c3:b7:66: b7:38:82:b0:67:d5:66:e3:03:1e:67:e5:89:9a:f1:f9:f1:47: 33:22:71:e6:f6:76:41:e2:f4:ca:92:8a:53:91:f9:79:8f:77: 8b:dc:f4:b9:f3:ce:72:95:f9:7b:70:0c:e4:a2:b4:1b:4a:10: 17:bf:fa:f8:1d:12:e6:39:57:f0:2d:44:a1:63:d2:27:d5:60: c0:f2:ea:f5:ab:75:a2:25:ce:cf:fd:b2:10:66:1d:b9:17:3d: 58:5a:60:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDRTIxMTAvBgNVBAUTKERBRkRFMEJDNkUwQUQzQTg5NUJDNzU2RDZDMzFBMUU2 MUI2RDM4M0IwHhcNMjQwNTE4MjIxNDEyWhcNMjQwNTI1MjIxNDEyWjAYMRYwFAYD VQQDEw02NjQ5MjgzNC02ZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1h/mZz0Aw6V9a5lOWzXzOfnu2UCKd9u6UQg5SkxICw7vF1BKIVUIxSE0Nyg vSmAyB2TTI53WRQA3SrDjB902j7vvy75GmGhJkfnO/5Q2UKK4pb3jgNf43oWmRHo iZME0YpJrssPvlwrRvAiF8GNAjhKfpfZml8yKDsOEvz9etna2dTSw9PuIrmSZ1Fa o8OQebOUkUpPXgNdABauewoufxvF9XrG58/epH0CKDdnPNbdv5QYGiuOUlCP8OWK S57iDnIKuqjDwYr97gtLxxwLpfSAUO3zGb7ifw5WlII3FjjLQUge3Xh1ATV4wuHv l9hEQIkikaPL9T2K7T1MsAjfFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpy46WD J0zB2j6+M8DJPudUOnBSMB8GA1UdIwQYMBaAFNr94LxuCtOolbx1bWwxoeYbbTg7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNFMi82MTgwQzBBMkNE NkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2aVZ2SFZ0YkRHaDVodHRP RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2M2d2RzRLMDZpVnZIVnRiREdoNWh0dE9Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNFMi82MTgwQzBBMkNENkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2 aVZ2SFZ0YkRHaDVodHRPRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPMUN+icoMOpRi8TRVBnlHqcW4Q1vfQhc+QiS3GS4cvrM/S+whX4uc X62SZXfXuz0BlImgT5I2oUxWpgi4I4D3YZ6Rj3D889vGTXggTBpWManW24BC/rL1 Fg6vQD2ZBiYuqJrJeiS42VozxbvVywnmVtaE280pKiPgDGXVhYyzyWfPyWzQbXY3 E8q3vaKT0T8LidEI5GMvuFLDPlnt6JnDt2a3OIKwZ9Vm4wMeZ+WJmvH58UczInHm 9nZB4vTKkopTkfl5j3eL3PS5885ylfl7cAzkorQbShAXv/r4HRLmOVfwLUShY9In 1WDA8ur1q3WiJc7P/bIQZh25Fz1YWmAT -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org