$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: S6A32P0CjzQ/u2H550/4kulgQpNdbSBbFNt4NHyV/A8= Subject key identifier: 36:4D:CF:5E:A3:CB:C4:0A:8F:E2:12:19:B8:16:AC:DF:A3:4A:8D:2A Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 0380 Signing time: Sat 01 Jun 2024 04:10:40 +0000 Manifest this update: Sat 01 Jun 2024 04:10:40 +0000 Manifest next update: Sat 08 Jun 2024 04:10:40 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: o3OzMBgfa75o4ppvIxyv40nXMhoPLcyXK+4F+/gTMfg=) 2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: NlMZe5gqmVPJHi7tBl3pc3oKWd3PWEvyri4lhroQCrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Jun 1 04:10:40 2024 GMT Not After : Jun 8 04:10:40 2024 GMT Subject: CN=665a9f40-7b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:cc:dd:fd:e1:e0:07:08:2a:30:3c:13:e6: 5b:b5:20:44:86:0f:ac:13:ed:80:fd:7f:2d:f1:45: e5:ed:15:2c:e1:f2:e8:b2:45:8e:69:08:d1:54:78: ee:76:18:f1:07:27:bd:61:2d:26:bc:57:8f:99:91: af:89:68:2c:38:27:d5:18:c6:43:ff:d5:1c:7c:dd: a0:07:80:05:d4:44:14:08:31:b7:80:91:00:0e:b1: 32:59:6f:0f:4e:57:ee:58:7c:7f:e6:b4:d8:52:ac: d5:72:8e:71:1c:06:58:d6:69:4b:af:c7:39:9b:25: 64:80:54:ed:5c:99:fa:1c:ef:07:55:07:0e:44:ba: 31:91:33:58:ae:3c:2e:f9:11:fe:64:cc:90:81:89: 31:54:73:74:fc:15:67:82:a9:21:b3:d8:32:45:c2: 23:05:b0:c5:28:5b:5d:4c:b1:08:13:d7:e5:a8:a3: 1c:0d:a4:05:44:04:5d:9c:cc:6a:4c:5c:79:67:24: 6d:63:1e:8e:89:f1:de:c5:19:be:3b:a5:5b:03:6f: 8b:c0:27:07:54:ab:b3:df:7e:e7:50:e6:30:f2:2a: 76:0e:d7:b6:82:2d:d2:8f:7a:63:b0:1a:75:5b:fe: 6b:5e:d4:71:22:01:a9:0a:e8:4d:09:9e:0d:cb:04: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4D:CF:5E:A3:CB:C4:0A:8F:E2:12:19:B8:16:AC:DF:A3:4A:8D:2A X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:12:0f:6d:bb:9f:b2:5a:f5:29:90:dd:f7:b1:8d:b6:31:63: f2:48:3c:59:4f:11:8a:6a:c2:62:40:fe:f2:02:91:c9:e2:44: 4b:93:85:78:be:8b:24:74:f2:12:14:e8:d3:6c:ba:dd:fa:d1: ef:e9:8a:fa:d6:52:3f:d7:78:88:5c:b4:eb:b6:3d:9d:ee:cd: 89:13:ce:73:a7:7f:22:55:53:16:9e:00:c5:75:cd:22:72:7a: 80:d4:98:1a:16:5e:7c:cd:c7:8d:00:46:ad:da:b7:cb:f0:46: b8:8d:26:e6:32:f6:58:f5:08:14:a8:dc:a8:91:89:bb:b5:5c: f6:60:24:63:9d:ee:da:61:05:dd:67:06:1c:e3:3f:9f:cc:5a: f4:f2:9e:c3:ed:25:3c:8f:f9:91:8d:8b:f4:47:b9:df:57:c0: 51:ed:a8:88:d3:48:44:f9:04:88:1d:5b:77:03:4c:26:ad:77: e8:e2:6a:c4:ea:17:7a:84:34:d6:2f:9c:40:6f:79:1c:22:ef: f7:05:2c:82:cb:1a:88:11:b3:5c:76:09:da:c8:24:78:b0:ee: 68:eb:b3:c2:af:67:25:6c:5c:0b:cd:a9:62:ec:c1:64:68:53: 8a:84:eb:2c:1d:00:ab:95:20:b8:41:ad:bc:cd:0d:1b:aa:fd: 66:6d:d5:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjQwNjAxMDQxMDQwWhcNMjQwNjA4MDQxMDQwWjAYMRYwFAYD VQQDEw02NjVhOWY0MC03YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUfM3f3h4AcIKjA8E+ZbtSBEhg+sE+2A/X8t8UXl7RUs4fLoskWOaQjRVHju dhjxBye9YS0mvFePmZGviWgsOCfVGMZD/9UcfN2gB4AF1EQUCDG3gJEADrEyWW8P TlfuWHx/5rTYUqzVco5xHAZY1mlLr8c5myVkgFTtXJn6HO8HVQcORLoxkTNYrjwu +RH+ZMyQgYkxVHN0/BVngqkhs9gyRcIjBbDFKFtdTLEIE9flqKMcDaQFRARdnMxq TFx5ZyRtYx6OifHexRm+O6VbA2+LwCcHVKuz337nUOYw8ip2Dte2gi3Sj3pjsBp1 W/5rXtRxIgGpCuhNCZ4NywTrRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZNz16j y8QKj+ISGbgWrN+jSo0qMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqEg9tu5+yWvUpkN33sY22MWPySDxZTxGKasJiQP7yApHJ4kRLk4V4 voskdPISFOjTbLrd+tHv6Yr61lI/13iIXLTrtj2d7s2JE85zp38iVVMWngDFdc0i cnqA1JgaFl58zceNAEat2rfL8Ea4jSbmMvZY9QgUqNyokYm7tVz2YCRjne7aYQXd ZwYc4z+fzFr08p7D7SU8j/mRjYv0R7nfV8BR7aiI00hE+QSIHVt3A0wmrXfo4mrE 6hd6hDTWL5xAb3kcIu/3BSyCyxqIEbNcdgnayCR4sO5o67PCr2clbFwLzali7MFk aFOKhOssHQCrlSC4Qa28zQ0bqv1mbdVZ -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:04 2024 by rpki-client on console-fra.rpki-client.org