$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: mvStEfjPK+axMK9TaudxHy3jhj9+xsbAuWOzK/l4+P8= Subject key identifier: 1B:B7:D4:F9:34:4F:BB:D1:AF:1A:A7:23:64:B2:E4:B9:B3:4A:F6:B6 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 020E Signing time: Sun 19 May 2024 04:07:18 +0000 Manifest this update: Sun 19 May 2024 04:07:17 +0000 Manifest next update: Sun 26 May 2024 04:07:17 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: 2ojcDCsLR82XGOP5SYJYkQq/4GNfhVu7b1UAyjmso2A=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: nnSO9venyDAAa+6GPmHgyrg3uKMxgPIF3inlZFGwpdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: May 19 04:07:17 2024 GMT Not After : May 26 04:07:17 2024 GMT Subject: CN=66497af6-08e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:96:1a:8b:95:c5:99:f9:64:d7:25:63:03: af:aa:df:21:9b:ea:1b:61:25:72:a6:8e:8f:ae:20: 6f:3d:47:b3:50:ec:0f:70:30:e2:80:ca:5a:e0:b8: 98:77:d7:c7:a1:ca:08:23:d7:86:c3:8a:bb:d9:0e: 2c:4c:d9:86:9c:6f:25:b7:a3:a0:d8:06:13:a7:91: 86:00:09:0f:26:43:9c:93:7d:33:46:01:f5:fd:43: 24:f4:fd:c3:f1:f9:06:0d:8b:0b:3c:29:74:aa:40: b5:15:1b:47:e3:3d:dd:c7:2d:23:5f:88:4f:a3:93: 33:31:e3:bb:96:6f:70:6e:de:3b:ad:d7:8f:ab:92: c6:c4:ae:ff:1c:06:c0:2e:be:89:90:43:fc:cc:de: 19:ba:7f:ab:d7:45:26:c5:3a:9f:4c:93:85:4e:27: 9b:bc:d3:e9:d8:52:74:59:50:d8:c1:84:50:fe:71: 10:84:98:67:e0:3c:d5:5d:7d:1a:6c:f5:bc:0d:f2: 4f:d7:61:8c:04:88:5c:8e:a3:a1:62:e4:9a:85:47: ae:88:ce:6e:c1:fa:9c:f3:f8:f4:74:39:e0:a8:a2: 0b:0d:25:5b:30:2d:75:84:12:2b:45:f6:0a:c6:7c: 4a:57:3c:4f:fa:63:7d:99:24:1b:82:14:d6:cb:e5: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B7:D4:F9:34:4F:BB:D1:AF:1A:A7:23:64:B2:E4:B9:B3:4A:F6:B6 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:39:3c:a0:6e:32:6c:c9:81:f7:36:29:ac:cf:ec:03:98:90: 47:50:8f:5a:8b:a7:5f:c1:fc:15:db:aa:43:d6:35:e4:fd:3f: 20:57:ad:eb:2f:95:c9:cd:fb:91:1f:25:3f:16:24:bc:3a:64: 57:2a:a0:7f:ba:cb:23:05:88:bc:bc:86:94:b7:62:33:d6:d9: 84:e9:70:53:1f:02:9d:47:04:92:26:7f:e8:79:87:48:0a:c5: b3:14:4e:d6:bf:ec:99:b1:b5:7a:d9:15:b4:49:7f:67:c8:ad: d4:07:e8:9c:3b:66:99:f9:cb:5a:f7:37:3a:a3:2c:fe:04:1d: 34:56:cc:9c:b6:3e:e3:12:d5:6f:e5:14:2b:82:d0:97:80:44: 61:72:be:14:ac:12:9a:81:4b:bb:e5:18:e9:28:42:6b:02:ba: bf:ab:1e:79:a7:a6:48:49:75:15:e4:3a:11:03:64:39:f2:e8: 59:b6:12:8d:84:31:14:07:4a:99:27:92:d1:32:75:c0:89:8e: 86:0d:79:6f:9f:a2:aa:c7:85:79:4b:5d:30:45:6a:6f:e1:f5: fd:16:0b:a1:4d:c1:9d:cb:6a:9f:30:b7:f2:73:dd:30:0a:e9: 31:de:0f:8d:a2:80:8e:f6:a0:13:87:b5:1c:33:ac:6b:70:bf: 22:0d:d5:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjQwNTE5MDQwNzE3WhcNMjQwNTI2MDQwNzE3WjAYMRYwFAYD VQQDEw02NjQ5N2FmNi0wOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2+WGouVxZn5ZNclYwOvqt8hm+obYSVypo6PriBvPUezUOwPcDDigMpa4LiY d9fHocoII9eGw4q72Q4sTNmGnG8lt6Og2AYTp5GGAAkPJkOck30zRgH1/UMk9P3D 8fkGDYsLPCl0qkC1FRtH4z3dxy0jX4hPo5MzMeO7lm9wbt47rdePq5LGxK7/HAbA Lr6JkEP8zN4Zun+r10UmxTqfTJOFTiebvNPp2FJ0WVDYwYRQ/nEQhJhn4DzVXX0a bPW8DfJP12GMBIhcjqOhYuSahUeuiM5uwfqc8/j0dDngqKILDSVbMC11hBIrRfYK xnxKVzxP+mN9mSQbghTWy+V5LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBu31Pk0 T7vRrxqnI2Sy5LmzSva2MB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIOTygbjJsyYH3Nimsz+wDmJBHUI9ai6dfwfwV26pD1jXk/T8gV63r L5XJzfuRHyU/FiS8OmRXKqB/ussjBYi8vIaUt2Iz1tmE6XBTHwKdRwSSJn/oeYdI CsWzFE7Wv+yZsbV62RW0SX9nyK3UB+icO2aZ+cta9zc6oyz+BB00Vsyctj7jEtVv 5RQrgtCXgERhcr4UrBKagUu75RjpKEJrArq/qx55p6ZISXUV5DoRA2Q58uhZthKN hDEUB0qZJ5LRMnXAiY6GDXlvn6Kqx4V5S10wRWpv4fX9FguhTcGdy2qfMLfyc90w Cukx3g+NooCO9qATh7UcM6xrcL8iDdVo -----END CERTIFICATE-----Generated at Sun May 19 04:56:56 2024 by rpki-client on console-fra.rpki-client.org