$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: D8WM/DX/lhY0y5atKpgEbECsx2Bc0SXz9T1lNznhn/M= Subject key identifier: 86:F4:64:05:5E:65:44:49:1D:3A:59:73:59:DF:3B:B4:EB:AC:95:E3 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 0163 Signing time: Sun 19 May 2024 04:49:58 +0000 Manifest this update: Sun 19 May 2024 04:49:58 +0000 Manifest next update: Sun 26 May 2024 04:49:58 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: YwUZdohyTpHurhN2ANwPnZcn7gDuIZsCqH7qcJyVO+0=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: M3T7YxDp3PgO3w0LzCsSvdkq+omaAe3UAtVrwbaswoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: May 19 04:49:58 2024 GMT Not After : May 26 04:49:58 2024 GMT Subject: CN=664984f6-55ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:19:c4:65:05:4b:64:14:e1:30:25:fd:8d: 12:da:2e:a4:77:75:8d:00:18:89:8a:63:a3:27:1a: fd:2c:98:99:6e:83:df:85:51:d1:41:b2:86:a2:04: 92:e6:39:2d:ec:cf:72:3a:66:ec:2e:74:f2:0d:3c: 56:79:0f:ea:15:d8:18:71:a0:5c:b1:94:32:3b:2d: 7e:9a:ae:b0:2e:26:24:80:29:99:77:e5:72:bc:f1: b4:4d:94:7d:2e:1a:42:7f:a9:80:2b:e0:55:c4:2f: a5:48:13:47:c7:f6:51:9a:57:95:31:e3:45:dd:5e: e6:51:a7:64:6e:b2:5d:80:44:e4:6b:f9:9e:9c:03: 57:57:70:a5:4b:1d:6a:b9:b9:26:39:ed:78:50:ea: 2c:22:02:6e:76:77:b6:0e:a2:fb:df:12:12:7a:c5: 44:ba:ae:a8:23:af:22:36:bb:6f:7a:5b:a7:89:ee: b2:7b:b1:c4:89:81:6e:6a:cc:7b:56:28:26:23:bb: cd:af:7d:0b:30:35:f8:63:8d:8d:53:10:65:8b:86: b9:92:06:a3:bd:af:99:18:a9:25:07:fe:e8:01:42: ea:48:3f:28:57:3f:2c:7d:0b:1e:31:28:8f:57:f1: ee:68:9f:44:63:44:bd:f7:e7:6d:b1:82:c8:84:0e: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F4:64:05:5E:65:44:49:1D:3A:59:73:59:DF:3B:B4:EB:AC:95:E3 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bd:70:f8:62:c7:43:cf:a4:47:8b:32:72:ff:ea:dd:6a:10: 14:a9:ea:6f:12:ce:ad:96:a8:13:93:de:bb:df:3f:ba:79:75: ad:83:3d:d2:d5:9c:19:8a:48:54:54:9a:81:09:8a:26:8e:1f: bf:ef:85:48:fc:f1:b0:3a:e6:07:da:a4:25:aa:31:3c:57:d1: e3:a2:84:78:3d:f2:f0:eb:29:70:d9:b3:72:35:3a:e4:fe:d9: ee:55:9b:4c:83:04:e4:e3:ea:bf:7b:64:92:97:6b:a5:a1:45: a7:29:ea:83:ab:e3:07:c3:bc:96:83:d0:12:76:78:41:c9:41: e6:aa:c3:c9:64:a3:62:1c:53:7c:55:79:da:3b:4b:fa:f4:c8: ae:3b:43:9d:9b:3b:ac:8c:d9:88:8b:59:94:58:c2:16:17:bb: 86:1a:6e:ab:ce:9d:7e:94:13:60:dc:62:56:73:ab:bb:0c:36: ce:b1:bb:48:fd:37:54:56:60:3b:65:fb:5f:1d:96:a9:76:8e: 3f:ba:33:7d:25:80:2b:28:9b:b0:4d:fb:16:6d:64:18:cc:2d: 53:71:f4:16:12:b0:b0:90:a6:ff:2f:47:f6:bc:15:22:dc:09: 6f:2e:98:75:3c:32:e8:24:9b:09:fd:6d:86:e3:90:cc:e9:60: 0b:73:fd:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjQwNTE5MDQ0OTU4WhcNMjQwNTI2MDQ0OTU4WjAYMRYwFAYD VQQDEw02NjQ5ODRmNi01NWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFIZxGUFS2QU4TAl/Y0S2i6kd3WNABiJimOjJxr9LJiZboPfhVHRQbKGogSS 5jkt7M9yOmbsLnTyDTxWeQ/qFdgYcaBcsZQyOy1+mq6wLiYkgCmZd+VyvPG0TZR9 LhpCf6mAK+BVxC+lSBNHx/ZRmleVMeNF3V7mUadkbrJdgETka/menANXV3ClSx1q ubkmOe14UOosIgJudne2DqL73xISesVEuq6oI68iNrtvelunie6ye7HEiYFuasx7 VigmI7vNr30LMDX4Y42NUxBli4a5kgajva+ZGKklB/7oAULqSD8oVz8sfQseMSiP V/HuaJ9EY0S99+dtsYLIhA6eiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb0ZAVe ZURJHTpZc1nfO7TrrJXjMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAavXD4YsdDz6RHizJy/+rdahAUqepvEs6tlqgTk9673z+6eXWtgz3S 1ZwZikhUVJqBCYomjh+/74VI/PGwOuYH2qQlqjE8V9HjooR4PfLw6ylw2bNyNTrk /tnuVZtMgwTk4+q/e2SSl2uloUWnKeqDq+MHw7yWg9ASdnhByUHmqsPJZKNiHFN8 VXnaO0v69MiuO0OdmzusjNmIi1mUWMIWF7uGGm6rzp1+lBNg3GJWc6u7DDbOsbtI /TdUVmA7ZftfHZapdo4/ujN9JYArKJuwTfsWbWQYzC1TcfQWErCwkKb/L0f2vBUi 3AlvLph1PDLoJJsJ/W2G45DM6WALc/2P -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org