$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json) Hash identifier: lwa8avYH0S5Vn1KYhWDMlv1JUPkl6XXbiOJ/ZbDmhXg= Subject key identifier: 05:23:24:45:4B:60:7E:F9:EB:DF:21:4E:33:96:53:CA:16:B5:9C:C6 Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft Manifest number: 39 Signing time: Sun 19 May 2024 08:18:15 +0000 Manifest this update: Sun 19 May 2024 08:18:15 +0000 Manifest next update: Sun 26 May 2024 08:18:15 +0000 Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: 8ontzey8pvJ2nD6RYUcdps7PXQ3RU4yamZeymy6sCKg=) 2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: g3Rp9bNDQ9dW3bx4n0B6sKyw1hJKpt4SQCTG4hBG/Mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Validity Not Before: May 19 08:18:15 2024 GMT Not After : May 26 08:18:15 2024 GMT Subject: CN=6649b5c7-aca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:d4:78:af:72:eb:b8:ac:75:96:cb:9e:3f: 63:02:37:58:f8:ea:23:82:c6:0d:da:ce:bc:c2:3a: 1e:68:9e:41:da:7c:7c:67:d7:21:f2:a7:c5:f0:7e: 46:48:dc:93:dc:95:07:ab:ba:05:fb:90:9e:65:ae: 23:7e:4b:48:b8:01:af:8b:86:00:7a:6e:77:33:08: 31:b0:45:7d:b9:62:92:69:6c:e2:29:01:92:f8:00: 13:de:e0:a3:e3:8c:9a:35:db:0e:d5:7a:ca:26:d1: 0c:fa:ef:b9:24:f2:9a:fc:9a:9c:28:2a:fc:fd:7f: 13:ef:2f:33:ca:33:65:f0:54:40:89:b5:ba:82:74: 6f:7b:38:71:60:38:25:0b:26:c8:d0:ce:48:ce:00: c6:f5:8f:3e:fb:b8:ae:80:00:42:8a:a1:e8:b3:dd: cf:0a:85:99:e6:d9:dd:ba:05:73:fa:d5:0d:9d:1e: f7:64:e2:ae:16:c4:a8:b7:9b:10:b5:06:b3:20:d3: e6:4e:89:94:db:f7:83:82:52:4e:51:ca:27:79:ad: 03:56:b6:4c:fb:1c:6d:69:52:a7:6c:b0:9a:c7:d3: 5d:e0:cb:6b:cb:a4:a9:33:c2:c3:03:c8:1c:c5:21: f3:71:2e:bb:fd:cd:94:a6:24:41:25:06:eb:2f:4e: 37:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:23:24:45:4B:60:7E:F9:EB:DF:21:4E:33:96:53:CA:16:B5:9C:C6 X509v3 Authority Key Identifier: keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f8:e8:88:58:86:03:f1:cd:5e:20:57:ea:02:c9:cd:3a:44: f7:44:01:d4:7f:ba:4c:ee:23:17:34:bb:94:fa:ec:4a:d6:10: 63:6a:4e:e0:19:0b:82:0e:7b:c7:16:55:84:01:bd:1c:22:77: 92:5a:44:1b:a9:bb:98:96:21:23:41:27:17:4d:67:95:9b:bf: 43:5e:d9:3a:db:f4:f9:30:b2:f7:e5:e9:08:9e:3a:8a:83:f6: 70:f0:4d:ad:aa:91:27:60:91:07:d9:ad:01:42:67:41:b3:88: 10:0f:75:51:9a:4f:e8:56:ec:37:08:77:cc:f4:57:29:79:3a: b5:51:dd:bd:5b:26:e9:63:eb:71:c5:fb:91:a9:2e:8a:5a:72: 6c:86:b9:a4:24:83:c0:b2:48:d2:65:8a:5d:b0:76:54:34:c5: 79:1c:c6:d1:06:94:28:b0:30:9c:7f:6a:e6:4e:fb:cb:4d:98: 07:a1:05:02:4e:68:4c:03:e8:93:91:c4:7d:36:a8:35:f9:c0: 01:23:dc:44:73:82:12:3a:79:9b:2d:47:23:2b:8a:ee:eb:a6: 69:40:69:b8:4b:9a:cf:96:59:cb:9f:63:f8:ae:f9:c6:95:6a: 07:44:dc:fd:e6:2e:bb:3a:dc:43:68:ec:70:a1:e4:8a:6a:f1: c4:88:d9:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlBMjExMC8GA1UEBRMoRDhGQzc5NUI2M0NDNDI1NzNGRDVEQjQ0RjBBODM4NkM4 RDY0M0I4NDAeFw0yNDA1MTkwODE4MTVaFw0yNDA1MjYwODE4MTVaMBgxFjAUBgNV BAMTDTY2NDliNWM3LWFjYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1idR4r3LruKx1lsueP2MCN1j46iOCxg3azrzCOh5onkHafHxn1yHyp8XwfkZI 3JPclQerugX7kJ5lriN+S0i4Aa+LhgB6bnczCDGwRX25YpJpbOIpAZL4ABPe4KPj jJo12w7Vesom0Qz677kk8pr8mpwoKvz9fxPvLzPKM2XwVECJtbqCdG97OHFgOCUL JsjQzkjOAMb1jz77uK6AAEKKoeiz3c8KhZnm2d26BXP61Q2dHvdk4q4WxKi3mxC1 BrMg0+ZOiZTb94OCUk5Ryid5rQNWtkz7HG1pUqdssJrH013gy2vLpKkzwsMDyBzF IfNxLrv9zZSmJEElBusvTjftAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBSMkRUtg fvnr3yFOM5ZTyha1nMYwHwYDVR0jBBgwFoAU2Px5W2PMQlc/1dtE8Kg4bI1kO4Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OUEyL0IzOTZGM0MwQzU0 MTExRUVBQkMyQzM4NUM0RjlBRTAyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlB4NVcyUE1RbGNfMWR0RThLZzRiSTFrTzRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OUEyL0IzOTZGM0MwQzU0MTExRUVBQkMyQzM4NUM0RjlBRTAyLzJQeDVXMlBNUWxj XzFkdEU4S2c0Ykkxa080US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/46IhYhgPxzV4gV+oCyc06RPdEAdR/ukzuIxc0u5T67ErWEGNqTuAZ C4IOe8cWVYQBvRwid5JaRBupu5iWISNBJxdNZ5Wbv0Ne2Trb9Pkwsvfl6QieOoqD 9nDwTa2qkSdgkQfZrQFCZ0GziBAPdVGaT+hW7DcId8z0Vyl5OrVR3b1bJulj63HF +5GpLopacmyGuaQkg8CySNJlil2wdlQ0xXkcxtEGlCiwMJx/auZO+8tNmAehBQJO aEwD6JORxH02qDX5wAEj3ERzghI6eZstRyMriu7rpmlAabhLms+WWcufY/iu+caV agdE3P3mLrs63ENo7HCh5Ipq8cSI2U4= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org