$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: NCS4WrMtN10EVqPP3m20TXLATzjy6iuxUgYLmx3os9Q= Subject key identifier: 1E:39:F6:AE:25:95:26:DD:8A:69:33:08:88:7B:FB:B7:16:8F:F1:C3 Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 058B Signing time: Sun 05 May 2024 00:41:36 +0000 Manifest this update: Sun 05 May 2024 00:41:36 +0000 Manifest next update: Sun 12 May 2024 00:41:36 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: aFAB6osaPp1tVATINJj7/+x/hgWZr7hQ6Kn2VV0Ik1s=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: LiXw5QkDIdwB3vLGmFYHfIaKv0T0QYD0Rl/2R7/Sqas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: May 5 00:41:36 2024 GMT Not After : May 12 00:41:36 2024 GMT Subject: CN=6636d5c0-4315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:f4:fe:df:97:21:23:a7:5d:13:70:fd:da: 2a:7b:32:13:d4:99:b9:16:23:aa:53:1f:b8:85:19: 5e:88:68:3d:85:7d:c8:cc:eb:7b:ea:f6:85:87:6e: 53:e2:96:98:5c:4c:44:6e:2a:35:9e:3d:d5:d6:02: 48:3b:a9:e9:ec:6c:ac:ea:01:49:42:72:58:b5:36: ae:e9:f4:13:69:39:cb:ee:29:e0:61:33:c0:40:d0: 18:20:a2:3b:80:ca:eb:fc:9f:51:56:83:73:5d:03: 3b:f1:41:ab:ff:cd:89:40:7e:49:46:9f:d4:ee:da: 0e:b0:21:fd:c4:06:e6:e3:7c:47:25:12:2f:39:c6: 58:40:e2:da:5f:08:89:35:2a:73:c5:a6:82:57:4e: 89:09:fd:0c:f6:ce:b0:f1:53:3a:b9:31:d9:9a:a1: a5:0a:d8:88:8e:69:1e:96:28:ed:e2:3c:35:ec:3a: b6:bf:4d:78:5f:e6:21:7c:03:f7:da:85:e8:9f:72: 1f:99:50:d7:54:db:56:3d:b7:b7:52:1b:2e:a4:89: 0e:2b:81:bb:64:d2:70:39:50:31:80:12:21:b6:35: 59:dc:49:8a:36:a1:b1:20:58:75:7c:54:9e:30:5d: 74:ce:b7:08:42:f2:df:00:d1:11:b3:d0:16:8c:11: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:39:F6:AE:25:95:26:DD:8A:69:33:08:88:7B:FB:B7:16:8F:F1:C3 X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:03:4b:02:e1:53:7a:ca:25:44:94:c8:4f:4b:21:61:e3:65: fa:9f:15:e7:54:d5:d0:50:c0:f7:5f:68:e8:68:67:d8:90:a2: 4f:4c:b1:08:4c:e8:4c:78:c2:fd:32:fe:58:c9:52:89:23:12: 8d:f1:e3:bf:88:af:bc:97:fa:cd:3b:0e:6d:2b:b2:83:b8:09: 94:ec:39:c2:3f:05:6c:86:37:18:88:0d:9e:6d:1f:57:f2:d7: e4:9b:fc:ba:94:46:f3:80:be:5f:bd:7f:f0:bb:48:c6:d9:e6: 4d:37:6e:8a:4e:b2:f1:56:d9:ee:d9:a3:c2:aa:7d:b8:d9:fd: 38:4f:59:e5:29:52:68:24:d3:84:a7:88:36:90:2e:a2:d3:3c: e9:e1:e3:ca:b2:c6:a4:03:68:9b:a3:79:ac:51:9e:fb:1a:8d: eb:72:f0:89:a6:a3:0c:54:93:1b:2b:5c:c3:1a:02:98:d3:fe: 3f:87:f2:82:40:1c:00:e9:d9:08:2c:79:e7:60:1a:0c:37:2e: ab:8b:b0:2f:3d:a7:e3:70:6a:6a:10:fa:f1:bd:49:fe:8b:24: 1d:49:6a:98:93:c5:61:63:b2:b3:a3:e6:0b:80:64:75:cb:21: 7d:da:45:fc:0c:00:9e:18:90:9d:f7:8e:e8:3c:6e:d8:69:95: 35:9e:8f:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjQwNTA1MDA0MTM2WhcNMjQwNTEyMDA0MTM2WjAYMRYwFAYD VQQDEw02NjM2ZDVjMC00MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI70/t+XISOnXRNw/doqezIT1Jm5FiOqUx+4hRleiGg9hX3IzOt76vaFh25T 4paYXExEbio1nj3V1gJIO6np7Gys6gFJQnJYtTau6fQTaTnL7ingYTPAQNAYIKI7 gMrr/J9RVoNzXQM78UGr/82JQH5JRp/U7toOsCH9xAbm43xHJRIvOcZYQOLaXwiJ NSpzxaaCV06JCf0M9s6w8VM6uTHZmqGlCtiIjmkelijt4jw17Dq2v014X+YhfAP3 2oXon3IfmVDXVNtWPbe3UhsupIkOK4G7ZNJwOVAxgBIhtjVZ3EmKNqGxIFh1fFSe MF10zrcIQvLfANERs9AWjBGb7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB459q4l lSbdimkzCIh7+7cWj/HDMB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfA0sC4VN6yiVElMhPSyFh42X6nxXnVNXQUMD3X2joaGfYkKJPTLEI TOhMeML9Mv5YyVKJIxKN8eO/iK+8l/rNOw5tK7KDuAmU7DnCPwVshjcYiA2ebR9X 8tfkm/y6lEbzgL5fvX/wu0jG2eZNN26KTrLxVtnu2aPCqn242f04T1nlKVJoJNOE p4g2kC6i0zzp4ePKssakA2ibo3msUZ77Go3rcvCJpqMMVJMbK1zDGgKY0/4/h/KC QBwA6dkILHnnYBoMNy6ri7AvPafjcGpqEPrxvUn+iyQdSWqYk8VhY7Kzo+YLgGR1 yyF92kX8DACeGJCd947oPG7YaZU1no9l -----END CERTIFICATE-----Generated at Sun May 5 01:13:17 2024 by rpki-client on console-ams.rpki-client.org