$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: fRz/v/N68RNSuRkh+djDY+Pc+PdXyQD+Eio6Gfr+fjc= Subject key identifier: FE:1D:39:DB:3E:55:C2:94:0F:4B:D3:E0:CF:C0:65:00:21:8E:E8:05 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: ED Signing time: Sun 19 May 2024 05:48:00 +0000 Manifest this update: Sun 19 May 2024 05:48:00 +0000 Manifest next update: Sun 26 May 2024 05:48:00 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: 109hIVJZ3A6red0m5dYjQ7+3NfdYMaUYwAhsJB9j4VY=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: mUitWyAia7OYZSrqATEphyypaSxSHUc51lFfEosaW+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: May 19 05:48:00 2024 GMT Not After : May 26 05:48:00 2024 GMT Subject: CN=66499290-272e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a7:ca:8a:d2:2f:97:ed:e6:c1:2e:5a:da:11: 89:27:57:f5:43:da:eb:be:08:70:5a:e3:63:d4:ce: 2c:d5:79:45:e0:ee:84:f2:01:3e:39:ca:c0:26:e5: 16:4d:d5:4b:1b:b5:17:17:94:91:0b:48:d0:4b:a2: b8:8b:d0:6e:ae:1b:bf:f8:1a:e2:4a:27:56:ef:d4: 8b:de:f2:0b:1d:c5:df:df:23:58:a5:ae:49:2a:55: 15:9d:f2:04:1a:d8:01:91:cb:8f:ef:b3:76:f1:87: 57:c3:f7:ae:e8:14:6e:c8:a0:c2:9f:6f:89:72:96: 7a:86:3e:7c:f8:bb:bc:25:2a:4f:13:c6:38:dd:e9: 6f:b5:f9:63:40:3a:a2:43:65:7e:33:f4:a8:8d:86: e5:16:86:30:75:43:03:4d:1a:01:84:3b:35:0e:84: 46:e6:0b:86:56:87:e0:39:a4:f8:47:3e:d1:04:40: a7:a4:5e:2c:07:af:48:fb:9c:e9:d4:d7:54:18:21: c5:34:5e:f6:cf:4a:1d:56:73:2a:81:24:91:8f:d5: 9c:7f:9f:e8:d3:f8:c3:e4:f3:d6:4f:03:7c:9c:ab: e5:21:da:a2:7c:7d:63:bf:7b:83:eb:26:13:5d:b2: ad:6e:e0:eb:87:4e:5a:9f:2b:d2:1b:11:fd:7e:df: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:39:DB:3E:55:C2:94:0F:4B:D3:E0:CF:C0:65:00:21:8E:E8:05 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a9:07:94:82:89:2f:ee:5f:3a:25:91:e2:b0:bc:22:02:1a: 39:7a:87:65:8e:f3:d3:8d:d3:e2:9f:c7:2c:89:26:c2:d1:fc: 16:9e:4a:5b:b7:f5:72:0b:f2:08:d8:79:27:8a:18:4f:10:6e: 37:96:fc:ba:ec:83:47:e1:95:de:c9:e4:29:8b:bf:02:ca:00: 7d:84:1f:40:c7:63:e6:6e:d6:e3:dd:9d:7d:7f:6a:e6:69:c2: 72:eb:66:8b:45:6c:de:fd:48:1d:b0:3f:55:ff:db:b1:0a:7d: 6a:21:45:53:cb:b0:06:2f:2c:de:2e:52:1a:9b:5b:da:6c:7b: a4:5e:18:d7:bf:59:46:34:51:c1:c7:69:d5:21:f8:c8:93:b8: 10:64:8e:33:12:3a:9a:5d:a4:be:ef:fc:33:2b:1a:2b:8d:94: ee:66:a9:fc:8c:1c:23:e0:b5:2a:94:61:3c:93:0c:cb:17:b7: 82:73:c0:ff:0f:0a:2b:89:fd:5d:9b:87:66:aa:ce:37:eb:8c: 3c:e3:65:a5:07:4c:fd:e7:74:a6:bc:f1:cb:b5:1f:f0:89:43: 86:e0:b8:05:a3:61:fd:89:84:91:d1:57:01:43:5b:9d:7d:60: 8d:ae:ce:5a:e6:20:9e:e0:a9:02:f2:24:7e:7d:ad:37:79:e1: 3c:90:96:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjQwNTE5MDU0ODAwWhcNMjQwNTI2MDU0ODAwWjAYMRYwFAYD VQQDEw02NjQ5OTI5MC0yNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA96fKitIvl+3mwS5a2hGJJ1f1Q9rrvghwWuNj1M4s1XlF4O6E8gE+OcrAJuUW TdVLG7UXF5SRC0jQS6K4i9Burhu/+BriSidW79SL3vILHcXf3yNYpa5JKlUVnfIE GtgBkcuP77N28YdXw/eu6BRuyKDCn2+JcpZ6hj58+Lu8JSpPE8Y43elvtfljQDqi Q2V+M/SojYblFoYwdUMDTRoBhDs1DoRG5guGVofgOaT4Rz7RBECnpF4sB69I+5zp 1NdUGCHFNF72z0odVnMqgSSRj9Wcf5/o0/jD5PPWTwN8nKvlIdqifH1jv3uD6yYT XbKtbuDrh05anyvSGxH9ft8LewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4dOds+ VcKUD0vT4M/AZQAhjugFMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9qQeUgokv7l86JZHisLwiAho5eodljvPTjdPin8csiSbC0fwWnkpb t/VyC/II2HknihhPEG43lvy67INH4ZXeyeQpi78CygB9hB9Ax2Pmbtbj3Z19f2rm acJy62aLRWze/UgdsD9V/9uxCn1qIUVTy7AGLyzeLlIam1vabHukXhjXv1lGNFHB x2nVIfjIk7gQZI4zEjqaXaS+7/wzKxorjZTuZqn8jBwj4LUqlGE8kwzLF7eCc8D/ Dworif1dm4dmqs4364w842WlB0z953SmvPHLtR/wiUOG4LgFo2H9iYSR0VcBQ1ud fWCNrs5a5iCe4KkC8iR+fa03eeE8kJZ0 -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org