$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft File: 2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json) Hash identifier: kIeQZwcxjsUEDw10pmI2em1jBbf9WCv5nqI2kbBQc7k= Subject key identifier: 94:FA:41:F0:BE:C5:B3:61:E7:20:D5:E4:D8:D6:0E:E5:79:32:27:23 Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D Certificate issuer: /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Certificate serial: 33CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft Manifest number: 33C9 Signing time: Sat 18 May 2024 15:07:51 +0000 Manifest this update: Sat 18 May 2024 15:07:50 +0000 Manifest next update: Sat 25 May 2024 15:07:50 +0000 Files and hashes: 1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: YycYahOAYx4C49WDbnrYHrijel/r5iSvobj36hjPENU=) 2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: QZJWJH8ffRS/84lld/jGevk5cgpEhPMCEoE6pSD5XIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13262 (0x33ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Validity Not Before: May 18 15:07:50 2024 GMT Not After : May 25 15:07:50 2024 GMT Subject: CN=6648c447-59a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:8c:0a:5a:65:31:d1:f0:10:2c:00:83:47: 3f:e7:ef:be:c8:22:6c:68:bf:46:4a:11:4e:80:e1: 76:1c:9b:ae:6c:74:eb:80:8e:fb:29:08:7a:90:16: ea:41:4d:ac:51:bd:4f:70:d3:f5:33:e6:78:4c:7d: f5:4b:67:66:40:15:89:cd:85:b9:14:b9:76:8b:33: ef:70:da:af:82:4b:bc:58:5e:43:e4:c8:8f:16:db: 63:d4:bf:17:ec:f8:b7:d4:00:d3:ba:62:bc:53:d7: 18:a3:38:e1:69:39:62:67:cf:c0:08:ee:aa:73:5b: 1e:b3:93:b3:48:a0:5d:a9:8b:d2:9b:3a:7c:bb:8e: 14:ab:e1:7d:0a:06:b2:ce:c7:63:e0:36:86:40:ac: 74:5f:7e:69:d6:1d:d2:17:51:b7:d2:2e:9a:3b:53: 5b:1c:98:8a:62:4f:6e:ec:7c:d0:64:67:c9:c0:95: db:99:bc:01:37:9c:00:81:6c:17:91:cf:6f:86:2d: eb:e6:df:7d:15:6a:7c:47:31:3e:eb:94:74:19:89: 7b:61:20:57:2c:35:ab:6b:99:b1:a0:0f:e0:b8:50: 7a:5d:34:64:7d:df:75:c1:c5:43:dd:d0:fb:e8:1a: 91:2a:69:6a:f6:01:f1:c7:8d:a8:c6:2a:7a:cb:fd: d9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FA:41:F0:BE:C5:B3:61:E7:20:D5:E4:D8:D6:0E:E5:79:32:27:23 X509v3 Authority Key Identifier: keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:53:ee:e3:6b:e1:56:31:86:da:ce:09:a7:fc:31:2b:19:32: cb:26:e8:fc:63:3d:a5:7b:16:38:f7:dc:8c:29:23:04:a3:e5: 7b:b8:07:5e:2b:d8:60:83:63:1e:2d:b2:f4:e2:23:b5:aa:27: d4:5e:73:b7:3e:dd:a8:69:c1:01:c8:51:28:a1:f7:34:1d:98: 37:95:c4:4e:0b:d8:c4:c6:f4:b9:37:df:d7:11:c2:b5:05:0a: 71:d3:d3:42:07:be:20:70:39:da:13:18:04:4e:e3:62:d1:96: 83:95:7a:21:2a:97:ef:1c:a4:4e:b3:df:77:09:0e:74:7a:89: 96:1a:c9:e4:43:97:b4:81:92:5c:c2:29:ae:c2:06:04:c9:4d: 45:ca:02:72:df:94:d0:6a:5a:2b:5d:55:a8:ad:65:77:ba:42: 3e:58:43:5b:12:97:da:b0:82:b9:27:b0:89:2c:a0:89:ab:32: 7e:fc:6e:58:b9:ae:73:52:3d:e3:c4:1e:25:4e:90:81:ea:51: 2c:32:2e:25:35:0f:1d:2d:7f:56:ee:22:5a:79:f7:85:03:b1: 29:4f:8b:69:9c:4e:78:aa:2c:68:c8:e7:6f:40:dc:ea:eb:e3: 76:98:ff:0f:39:1e:49:d0:d6:d8:85:cc:eb:f4:6a:a1:53:cf: 06:38:2c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDQjIxMTAvBgNVBAUTKEQ5RTlGOUY3M0VFNEY1QjFDREYxNzYyQzJERjM4MzI5 NTBBMzZCN0QwHhcNMjQwNTE4MTUwNzUwWhcNMjQwNTI1MTUwNzUwWjAYMRYwFAYD VQQDEw02NjQ4YzQ0Ny01OWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpKMClplMdHwECwAg0c/5+++yCJsaL9GShFOgOF2HJuubHTrgI77KQh6kBbq QU2sUb1PcNP1M+Z4TH31S2dmQBWJzYW5FLl2izPvcNqvgku8WF5D5MiPFttj1L8X 7Pi31ADTumK8U9cYozjhaTliZ8/ACO6qc1ses5OzSKBdqYvSmzp8u44Uq+F9Cgay zsdj4DaGQKx0X35p1h3SF1G30i6aO1NbHJiKYk9u7HzQZGfJwJXbmbwBN5wAgWwX kc9vhi3r5t99FWp8RzE+65R0GYl7YSBXLDWra5mxoA/guFB6XTRkfd91wcVD3dD7 6BqRKmlq9gHxx42oxip6y/3ZrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT6QfC+ xbNh5yDV5NjWDuV5MicjMB8GA1UdIwQYMBaAFNnp+fc+5PWxzfF2LC3zgylQo2t9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNCMi8zN0Q1QTNERTFE OUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azliSE44WFlzTGZPREtWQ2ph MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJlbjU5ejdrOWJITjhYWXNMZk9ES1ZDamEzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNCMi8zN0Q1QTNERTFEOUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azli SE44WFlzTGZPREtWQ2phMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1U+7ja+FWMYbazgmn/DErGTLLJuj8Yz2lexY499yMKSMEo+V7uAde K9hgg2MeLbL04iO1qifUXnO3Pt2oacEByFEoofc0HZg3lcROC9jExvS5N9/XEcK1 BQpx09NCB74gcDnaExgETuNi0ZaDlXohKpfvHKROs993CQ50eomWGsnkQ5e0gZJc wimuwgYEyU1FygJy35TQalorXVWorWV3ukI+WENbEpfasIK5J7CJLKCJqzJ+/G5Y ua5zUj3jxB4lTpCB6lEsMi4lNQ8dLX9W7iJaefeFA7EpT4tpnE54qixoyOdvQNzq 6+N2mP8POR5J0NbYhczr9GqhU88GOCzi -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org