$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json) Hash identifier: KqfSXhMyRGmRIwdMACl/1AH0JpeoflTS7duuDlLwVrk= Subject key identifier: E7:AE:87:13:80:8D:D5:B3:BF:C8:E6:4B:3E:17:3B:61:50:DC:55:3F Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft Manifest number: 0213 Signing time: Sun 05 May 2024 04:18:25 +0000 Manifest this update: Sun 05 May 2024 04:18:25 +0000 Manifest next update: Sun 12 May 2024 04:18:25 +0000 Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: g2nEeOaCH9KSTQwn8j6zO9zuokwPBIv/c5VEdMzTjPs=) 2: 4F505AA0070B11ED930D5F18C4F9AE02.roa (hash: uznldHTlxZglNS1Obt5L7o+FE66BnBQMEM7HyJiB/Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Validity Not Before: May 5 04:18:25 2024 GMT Not After : May 12 04:18:25 2024 GMT Subject: CN=66370891-c279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:87:e3:37:e6:3e:d0:45:99:9f:5f:31:bf: a8:63:3d:96:cd:70:f8:ba:d2:52:f6:d4:39:e0:3e: fc:7e:d2:e4:0f:00:9c:96:20:44:f4:d0:a2:b1:31: 1c:1c:37:48:2d:77:89:19:71:32:c6:cf:f0:a6:53: 51:c6:84:b4:0e:75:6c:5c:57:77:27:44:13:9b:16: 6d:66:46:2f:8b:fc:63:0c:98:4f:3d:93:61:c1:52: 3a:1a:88:de:48:77:67:ed:fa:da:c8:a1:14:14:de: 42:43:7e:cd:84:69:c0:4b:71:95:f4:80:9d:20:60: 50:19:90:db:16:e8:10:e5:dc:6e:46:55:73:95:24: c8:47:ad:84:15:30:20:90:ca:50:96:77:f2:9d:84: 1b:fc:b0:eb:4a:4c:41:47:18:7d:12:2b:c2:b6:a6: 02:be:36:33:0f:4c:e1:13:0a:a3:10:fa:97:0c:af: 25:98:91:01:17:b9:13:88:b2:97:e3:9a:20:0c:2c: fe:b4:98:5a:9c:e1:d3:c1:fc:6d:30:32:df:70:a9: 92:37:df:c4:43:6b:53:5e:2d:ab:4c:da:0f:83:f3: 5d:5a:23:a4:0a:12:d8:65:db:b3:e5:9e:2c:56:c1: 80:a4:4c:1e:ce:88:ed:bf:e8:d3:9c:d6:e1:90:a2: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AE:87:13:80:8D:D5:B3:BF:C8:E6:4B:3E:17:3B:61:50:DC:55:3F X509v3 Authority Key Identifier: keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:20:cf:11:58:dc:00:79:57:b1:37:47:e3:47:40:a7:b0:c8: 40:71:e6:59:73:48:47:4d:d4:cf:24:96:cc:33:84:68:d4:6a: ef:d1:ef:19:7f:c1:82:fd:57:cb:50:31:1f:8a:71:3a:01:35: c1:86:b8:bf:e1:28:bb:ab:ec:c9:16:45:a9:eb:d2:b6:a9:73: 88:6b:50:93:3c:5c:58:d3:6b:90:bb:a6:2c:4e:55:8c:19:47: 4c:0e:71:fe:bc:79:4b:9b:a8:3b:5c:72:b9:ef:54:52:e4:b1: be:89:4b:84:e4:8c:d8:fe:79:b4:42:6e:86:3e:da:6d:f3:9a: 3b:85:92:02:82:cf:85:b6:f3:e1:0a:a1:67:78:e3:bc:96:1b: 91:6c:ff:94:86:ec:3c:f5:2f:fd:0e:e2:96:af:7d:48:41:cf: 7a:90:ab:5b:2e:6a:de:4f:0f:54:0b:d1:bd:eb:c4:ef:0d:b8: 5c:f8:a8:92:a8:42:30:2a:8b:82:f8:86:6e:73:ec:96:29:28: a3:e9:6b:c5:a2:e8:88:f4:af:a2:aa:f7:3f:f0:98:ed:c2:e4: 86:da:71:77:84:75:cf:bb:15:28:5e:96:8d:94:49:d5:f7:f9: 27:dd:4e:a2:0c:3b:a6:e9:d1:d3:cd:5c:08:64:12:c2:72:85: 49:78:5e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw QzhEMkE0MzkwHhcNMjQwNTA1MDQxODI1WhcNMjQwNTEyMDQxODI1WjAYMRYwFAYD VQQDEw02NjM3MDg5MS1jMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx86H4zfmPtBFmZ9fMb+oYz2WzXD4utJS9tQ54D78ftLkDwCcliBE9NCisTEc HDdILXeJGXEyxs/wplNRxoS0DnVsXFd3J0QTmxZtZkYvi/xjDJhPPZNhwVI6Goje SHdn7frayKEUFN5CQ37NhGnAS3GV9ICdIGBQGZDbFugQ5dxuRlVzlSTIR62EFTAg kMpQlnfynYQb/LDrSkxBRxh9EivCtqYCvjYzD0zhEwqjEPqXDK8lmJEBF7kTiLKX 45ogDCz+tJhanOHTwfxtMDLfcKmSN9/EQ2tTXi2rTNoPg/NdWiOkChLYZduz5Z4s VsGApEwezojtv+jTnNbhkKIg7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeuhxOA jdWzv8jmSz4XO2FQ3FU/MB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1 WjU3REJCSXJ3elVNalNwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9IM8RWNwAeVexN0fjR0CnsMhAceZZc0hHTdTPJJbMM4Ro1Grv0e8Z f8GC/VfLUDEfinE6ATXBhri/4Si7q+zJFkWp69K2qXOIa1CTPFxY02uQu6YsTlWM GUdMDnH+vHlLm6g7XHK571RS5LG+iUuE5IzY/nm0Qm6GPtpt85o7hZICgs+FtvPh CqFneOO8lhuRbP+Uhuw89S/9DuKWr31IQc96kKtbLmreTw9UC9G968TvDbhc+KiS qEIwKouC+IZuc+yWKSij6WvFouiI9K+iqvc/8JjtwuSG2nF3hHXPuxUoXpaNlEnV 9/kn3U6iDDum6dHTzVwIZBLCcoVJeF5X -----END CERTIFICATE-----Generated at Sun May 5 05:30:48 2024 by rpki-client on console-ams.rpki-client.org