$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft File: 2v_xEa69_HI1ltxVl1dsYqgD3XU.mft (raw, json) Hash identifier: h2c6v2p+jM/TpSoNY00oLhLa6zwdZcsraQK/3tlu7xw= Subject key identifier: C0:83:2F:0B:89:A9:99:B1:8B:52:D2:12:74:EC:57:C3:E2:84:18:63 Authority key identifier: DA:FF:F1:11:AE:BD:FC:72:35:96:DC:55:97:57:6C:62:A8:03:DD:75 Certificate issuer: /CN=A91B3C87/serialNumber=DAFFF111AEBDFC723596DC5597576C62A803DD75 Certificate serial: 0EF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v_xEa69_HI1ltxVl1dsYqgD3XU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft Manifest number: 156D Signing time: Thu 30 May 2024 18:36:26 +0000 Manifest this update: Thu 30 May 2024 18:36:25 +0000 Manifest next update: Thu 06 Jun 2024 18:36:25 +0000 Files and hashes: 1: 2v_xEa69_HI1ltxVl1dsYqgD3XU.crl (hash: t8Gog6C2lm3W1skMRd+wo85iDsdYuzyhzB9opFtemnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.crl rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v_xEa69_HI1ltxVl1dsYqgD3XU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 18:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3830 (0xef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3C87/serialNumber=DAFFF111AEBDFC723596DC5597576C62A803DD75 Validity Not Before: May 30 18:36:25 2024 GMT Not After : Jun 6 18:36:25 2024 GMT Subject: CN=6658c72a-2590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:5f:94:41:17:a0:38:49:9b:af:f0:d1:06: ac:04:df:bf:b9:7e:94:5a:8c:58:a1:75:d7:59:42: 51:0f:c9:5a:25:62:98:cc:45:3e:f4:49:18:f9:f7: 9e:9e:7e:62:20:01:1e:fa:ca:8a:c6:da:28:0f:84: 87:3d:5a:64:78:89:9b:2e:be:74:bd:cf:a1:bb:4e: 87:83:d9:c7:88:5f:bc:3b:e3:08:9e:6a:84:79:e4: 45:c3:3b:7a:77:3c:8d:90:8c:44:65:d3:f3:44:de: 0e:b5:52:01:c5:e1:db:a5:63:29:d7:2b:a6:eb:a3: ea:5b:63:1a:87:d6:e9:87:27:da:bf:e3:90:46:b4: 72:bc:9b:29:eb:b3:d1:0a:60:d5:4c:7b:bd:e6:8f: e6:36:ec:49:60:b7:ff:2d:05:eb:97:7f:a5:35:de: 74:94:5c:56:bf:8d:3c:98:c3:0e:59:0c:9f:d4:ed: c0:a6:99:19:88:99:ab:90:cb:63:50:f7:98:d8:e7: 97:01:59:c1:5b:05:a0:48:20:90:7d:09:9e:b9:8b: 5c:c3:07:e1:25:b2:56:73:49:3b:5b:4a:b7:97:fb: 54:f8:30:d2:7b:95:0f:09:95:69:5f:c1:d7:03:b7: e2:47:78:39:6b:46:66:93:07:24:ac:be:a7:ec:b6: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:2F:0B:89:A9:99:B1:8B:52:D2:12:74:EC:57:C3:E2:84:18:63 X509v3 Authority Key Identifier: keyid:DA:FF:F1:11:AE:BD:FC:72:35:96:DC:55:97:57:6C:62:A8:03:DD:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v_xEa69_HI1ltxVl1dsYqgD3XU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:49:f9:c4:6e:61:56:d9:78:79:3f:ec:67:b7:96:1d:ff:9f: a1:75:17:1a:a1:90:df:73:01:5f:0e:08:4e:25:50:92:5f:65: 64:3a:57:2c:c6:45:ec:95:32:d0:81:1e:17:d9:1d:09:d1:9b: 3d:6b:87:60:11:e9:b9:e2:b9:35:e7:5d:a7:17:23:e7:d1:4f: ef:ca:a0:5f:ec:57:bd:45:dd:34:a0:e9:a2:a7:10:af:c4:80: 71:5d:f2:de:c8:27:b9:9b:f2:46:5d:4b:0d:6b:58:61:4b:7c: 86:22:ea:f5:ba:98:52:e0:3a:48:3f:f5:f4:b6:e1:6f:cc:37: 51:7b:dd:75:69:88:cc:fd:b6:cc:47:09:a9:33:40:2c:db:b5: e6:e5:c9:39:5f:7b:16:78:2f:41:a9:e7:81:e9:a1:74:38:ab: e7:ca:c1:99:04:00:76:d7:32:75:b2:69:8f:a4:c0:5b:6b:a4: e1:3a:79:cd:5c:f6:c8:01:c1:df:9b:5e:e8:b0:a9:4c:e6:d5: be:88:c9:72:8e:d3:06:c2:b1:af:c4:df:ab:34:b7:e5:5a:b8: 94:dd:1c:21:c0:18:10:e4:ce:f1:59:68:d2:4b:74:14:dc:e7: b2:0f:33:f2:37:7e:1c:aa:94:7a:e4:77:a0:8f:79:7e:2d:3b: 0f:9b:c3:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDODcxMTAvBgNVBAUTKERBRkZGMTExQUVCREZDNzIzNTk2REM1NTk3NTc2QzYy QTgwM0RENzUwHhcNMjQwNTMwMTgzNjI1WhcNMjQwNjA2MTgzNjI1WjAYMRYwFAYD VQQDEw02NjU4YzcyYS0yNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6RflEEXoDhJm6/w0QasBN+/uX6UWoxYoXXXWUJRD8laJWKYzEU+9EkY+fee nn5iIAEe+sqKxtooD4SHPVpkeImbLr50vc+hu06Hg9nHiF+8O+MInmqEeeRFwzt6 dzyNkIxEZdPzRN4OtVIBxeHbpWMp1yum66PqW2Mah9bphyfav+OQRrRyvJsp67PR CmDVTHu95o/mNuxJYLf/LQXrl3+lNd50lFxWv408mMMOWQyf1O3AppkZiJmrkMtj UPeY2OeXAVnBWwWgSCCQfQmeuYtcwwfhJbJWc0k7W0q3l/tU+DDSe5UPCZVpX8HX A7fiR3g5a0ZmkwckrL6n7LYr7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCDLwuJ qZmxi1LSEnTsV8PihBhjMB8GA1UdIwQYMBaAFNr/8RGuvfxyNZbcVZdXbGKoA911 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0M4Ny84QjdDN0U3NjU3 NTIxMUU5ODA4RUNGMUJDNEY5QUUwMi8ydl94RWE2OV9ISTFsdHhWbDFkc1lxZ0Qz WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2X3hFYTY5X0hJMWx0eFZsMWRzWXFnRDNYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0M4Ny84QjdDN0U3NjU3NTIxMUU5ODA4RUNGMUJDNEY5QUUwMi8ydl94RWE2OV9I STFsdHhWbDFkc1lxZ0QzWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOSfnEbmFW2Xh5P+xnt5Yd/5+hdRcaoZDfcwFfDghOJVCSX2VkOlcs xkXslTLQgR4X2R0J0Zs9a4dgEem54rk1512nFyPn0U/vyqBf7Fe9Rd00oOmipxCv xIBxXfLeyCe5m/JGXUsNa1hhS3yGIur1uphS4DpIP/X0tuFvzDdRe911aYjM/bbM RwmpM0As27Xm5ck5X3sWeC9BqeeB6aF0OKvnysGZBAB21zJ1smmPpMBba6ThOnnN XPbIAcHfm17osKlM5tW+iMlyjtMGwrGvxN+rNLflWriU3RwhwBgQ5M7xWWjSS3QU 3OeyDzPyN34cqpR65Hegj3l+LTsPm8Ot -----END CERTIFICATE-----Generated at Thu May 30 21:49:41 2024 by rpki-client on console-ams.rpki-client.org