$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: +BSeqbQ4oCVpJ4sWeWDbLaTrUZvvLLCUBZ3gZpghWB4= Subject key identifier: 58:5E:E8:A5:09:53:EC:20:88:0D:01:5F:1A:B8:C8:D8:D7:5F:C4:36 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 0611 Signing time: Sat 18 May 2024 23:51:09 +0000 Manifest this update: Sat 18 May 2024 23:51:09 +0000 Manifest next update: Sat 25 May 2024 23:51:09 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: y6yZGi58KXJr3Jhl8Bjp4sOTSSsFR9W5DW4HTaKZBfA=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: hVj3Ilk8pVDIdjAHpBUPsisSqaw/aOgefgORY3UhV4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: May 18 23:51:09 2024 GMT Not After : May 25 23:51:09 2024 GMT Subject: CN=66493eed-1b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:ba:4f:f0:29:2a:42:c7:85:34:29:11:bd:e8: 2e:b0:7c:42:88:58:c9:44:00:df:c3:a7:0f:97:18: 58:11:5a:52:78:b2:8b:5e:ef:e3:53:57:25:c9:5b: fd:54:69:8e:9e:c9:3c:32:b3:64:44:a8:b0:5d:97: 8b:c2:3b:d5:63:99:1e:9f:1f:3a:e3:ca:57:e2:8d: 57:7a:73:f5:1d:a6:24:68:b4:19:47:9c:61:de:6a: 90:73:6d:d0:63:c4:0b:c8:9c:70:d0:57:2d:b7:16: 35:35:81:8e:9b:a0:ca:a8:06:6e:13:07:29:a9:b9: 1c:3a:c7:c5:ba:23:c3:9e:82:7e:25:05:5d:fe:8a: b5:46:dc:4c:e1:9c:fe:b4:9f:ba:4a:cc:89:4d:b4: ae:ff:c5:db:4a:6a:75:b3:42:23:47:1a:89:7e:81: 77:61:12:1b:68:ea:93:6b:02:b4:d2:91:7e:22:20: b4:11:60:c1:00:78:00:2f:fb:79:3e:42:c7:a9:49: 26:8a:78:a8:3c:a3:45:cc:3b:22:de:c5:42:b6:0f: fe:28:f8:19:c4:5e:cc:90:3c:b8:3d:b3:64:00:16: a5:f6:3c:44:0a:b3:14:be:ae:a3:2c:4e:a7:fc:22: ab:97:9b:32:ed:46:d5:bf:13:a3:de:a4:fa:b3:62: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5E:E8:A5:09:53:EC:20:88:0D:01:5F:1A:B8:C8:D8:D7:5F:C4:36 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:df:ed:4f:4d:58:1a:07:9d:13:08:1d:42:9d:27:a3:6d:1a: 92:bc:a3:03:93:c7:30:bb:d1:83:36:18:4c:d2:b2:7d:61:d2: 80:5c:e7:29:b3:53:c0:f4:07:f2:79:20:08:87:d9:00:3c:e9: 32:df:f8:71:22:f3:ac:25:2e:ff:94:2e:a1:21:54:f4:aa:38: 4a:b8:b7:eb:7e:4e:40:7d:b5:66:83:65:1d:60:01:4c:0d:c2: 10:c9:99:db:c6:4a:e8:d4:ad:8f:6b:04:b8:47:85:62:27:36: 99:2f:c0:b7:8e:63:f0:37:21:48:aa:25:de:65:fd:06:a7:ed: ce:ba:0c:e6:75:1d:ec:99:78:42:30:16:8a:2b:b3:b3:a7:77: 1d:9c:84:cd:f2:8f:99:ef:92:d3:a5:5b:0f:fa:c6:48:ab:0f: f3:15:a5:fb:4b:45:cd:14:81:10:df:ce:75:cf:61:f5:4b:82: 7b:72:69:0a:1a:3e:a2:20:0f:a2:07:8a:6f:bf:9f:84:cd:90: 80:13:e7:4a:b6:df:eb:65:b3:b9:b6:a8:f1:47:0e:c9:b2:06: 0f:d5:7a:2d:c2:87:d0:a2:27:c8:b8:12:05:a2:e8:02:0c:4e: d1:69:a9:7e:d4:f4:17:3d:75:3e:cc:de:95:00:bf:54:cb:05: 49:d2:00:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjQwNTE4MjM1MTA5WhcNMjQwNTI1MjM1MTA5WjAYMRYwFAYD VQQDEw02NjQ5M2VlZC0xYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/rpP8CkqQseFNCkRvegusHxCiFjJRADfw6cPlxhYEVpSeLKLXu/jU1clyVv9 VGmOnsk8MrNkRKiwXZeLwjvVY5kenx8648pX4o1XenP1HaYkaLQZR5xh3mqQc23Q Y8QLyJxw0FcttxY1NYGOm6DKqAZuEwcpqbkcOsfFuiPDnoJ+JQVd/oq1RtxM4Zz+ tJ+6SsyJTbSu/8XbSmp1s0IjRxqJfoF3YRIbaOqTawK00pF+IiC0EWDBAHgAL/t5 PkLHqUkminioPKNFzDsi3sVCtg/+KPgZxF7MkDy4PbNkABal9jxECrMUvq6jLE6n /CKrl5sy7UbVvxOj3qT6s2LSDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhe6KUJ U+wgiA0BXxq4yNjXX8Q2MB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw3+1PTVgaB50TCB1CnSejbRqSvKMDk8cwu9GDNhhM0rJ9YdKAXOcp s1PA9AfyeSAIh9kAPOky3/hxIvOsJS7/lC6hIVT0qjhKuLfrfk5AfbVmg2UdYAFM DcIQyZnbxkro1K2PawS4R4ViJzaZL8C3jmPwNyFIqiXeZf0Gp+3OugzmdR3smXhC MBaKK7Ozp3cdnITN8o+Z75LTpVsP+sZIqw/zFaX7S0XNFIEQ3851z2H1S4J7cmkK Gj6iIA+iB4pvv5+EzZCAE+dKtt/rZbO5tqjxRw7JsgYP1XotwofQoifIuBIFougC DE7Raal+1PQXPXU+zN6VAL9UywVJ0gBF -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org