$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json) Hash identifier: wgm7pKopPtytGvZ+z8PWN5Ra93mi/scS7t4OjjVqnZg= Subject key identifier: 50:A8:31:30:B9:62:74:B4:41:29:DA:23:4B:92:07:4D:1B:35:57:BC Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0B99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft Manifest number: 0B94 Signing time: Tue 30 Apr 2024 19:30:46 +0000 Manifest this update: Tue 30 Apr 2024 19:30:45 +0000 Manifest next update: Tue 07 May 2024 19:30:45 +0000 Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: /8pi2SeHOJL88MgtcubJC0c4QhPHHYzIQINy5/DR0Kg=) 2: 7665CD0AFF7011E99CDC306AC4F9AE02.roa (hash: dM9jHQwt1HX4WQJ8N+BuYBJKKLyzpY5xcV+r1/6T9kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2969 (0xb99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Apr 30 19:30:45 2024 GMT Not After : May 7 19:30:45 2024 GMT Subject: CN=663146e5-3e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:82:0e:fe:32:91:d5:31:74:39:28:88:47: b1:07:27:6b:21:cc:f1:dc:0d:c5:8e:4c:0f:3b:ba: 46:5c:18:2e:6e:8a:42:b2:aa:6b:3d:44:6d:9b:3b: d0:b0:10:7b:c0:35:7d:d0:1f:e9:88:b8:55:9d:21: 9c:03:f3:ac:6b:0e:24:6b:2c:ea:ac:d2:8b:fd:ee: 6c:0d:51:16:58:2f:30:dc:42:36:90:ff:8e:d5:e8: 3b:e8:8a:b2:2d:66:31:bc:f6:38:f4:90:a8:52:ea: 6c:47:19:a7:f2:87:39:88:a4:a7:b5:d1:b3:fa:5e: 33:21:96:7e:77:07:8f:68:d9:ba:be:3c:eb:14:15: 99:84:02:c7:19:25:e1:a7:58:92:c7:c4:0a:4f:49: 10:bc:59:56:69:6f:60:f7:ea:37:2a:69:94:fb:87: 93:ce:82:cc:24:27:d7:57:51:b2:4c:6c:77:60:9b: 76:06:ee:61:e9:85:41:89:8f:80:57:e4:43:66:fb: 42:fe:32:25:47:dd:44:05:fa:90:e8:94:1d:5e:00: 42:de:88:06:fc:44:5c:79:aa:23:c9:95:87:ee:d2: 0d:76:b1:e7:91:0c:4c:61:d5:88:8a:f0:f4:da:a3: 95:4e:10:85:90:f4:d6:d0:6f:98:58:ff:0d:fa:94: b5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A8:31:30:B9:62:74:B4:41:29:DA:23:4B:92:07:4D:1B:35:57:BC X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:be:54:48:e5:c6:de:9d:9f:d3:d5:cb:9f:75:06:18:33:92: 5d:99:12:39:d3:b4:67:a4:4f:32:4e:d0:32:46:3e:e1:36:76: bc:af:83:ab:ed:fe:cc:4f:4c:b7:e4:1f:cd:e4:49:d0:89:7e: 05:4e:39:85:20:e3:2a:95:ea:0a:bb:38:97:57:c2:ed:69:56: 89:91:8b:01:5a:2f:c2:93:68:da:2d:ea:de:fa:54:b7:0a:5d: 7a:b3:95:04:80:34:16:20:85:e9:31:db:e7:e0:81:40:e2:46: 50:10:3c:38:00:e5:d9:bd:4a:67:b6:b6:04:eb:76:00:0b:88: 01:ea:d2:c1:6f:95:18:86:78:52:6f:b7:4c:37:6d:11:47:13: 9e:9d:38:1c:da:45:d9:55:be:60:0e:e7:b2:cc:a6:14:0e:a0: ab:89:16:6a:7d:b0:5f:2d:ec:5e:c5:b2:4a:a3:ca:9a:12:58: d0:31:06:66:96:34:0d:1a:84:0e:01:52:21:a2:c2:55:ab:8f: 65:b1:1d:ea:4b:49:8c:cb:95:a1:e1:4d:ae:bf:3d:72:03:60: 6b:37:cb:85:f1:eb:bc:f2:cc:70:63:b1:8b:db:b3:22:ff:34: fe:ef:65:fb:27:01:14:02:a5:a5:88:6d:ac:dd:c4:05:3b:31: af:07:d1:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjQwNDMwMTkzMDQ1WhcNMjQwNTA3MTkzMDQ1WjAYMRYwFAYD VQQDEw02NjMxNDZlNS0zZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0weCDv4ykdUxdDkoiEexBydrIczx3A3FjkwPO7pGXBgubopCsqprPURtmzvQ sBB7wDV90B/piLhVnSGcA/Osaw4kayzqrNKL/e5sDVEWWC8w3EI2kP+O1eg76Iqy LWYxvPY49JCoUupsRxmn8oc5iKSntdGz+l4zIZZ+dwePaNm6vjzrFBWZhALHGSXh p1iSx8QKT0kQvFlWaW9g9+o3KmmU+4eTzoLMJCfXV1GyTGx3YJt2Bu5h6YVBiY+A V+RDZvtC/jIlR91EBfqQ6JQdXgBC3ogG/ERceaojyZWH7tINdrHnkQxMYdWIivD0 2qOVThCFkPTW0G+YWP8N+pS17QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCoMTC5 YnS0QSnaI0uSB00bNVe8MB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU2Ni83MDYzOUVGQ0ZGNkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JS N1B0b1I2R3dkREs5aDdHZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxvlRI5cbenZ/T1cufdQYYM5JdmRI507RnpE8yTtAyRj7hNna8r4Or 7f7MT0y35B/N5EnQiX4FTjmFIOMqleoKuziXV8LtaVaJkYsBWi/Ck2jaLere+lS3 Cl16s5UEgDQWIIXpMdvn4IFA4kZQEDw4AOXZvUpntrYE63YAC4gB6tLBb5UYhnhS b7dMN20RRxOenTgc2kXZVb5gDueyzKYUDqCriRZqfbBfLexexbJKo8qaEljQMQZm ljQNGoQOAVIhosJVq49lsR3qS0mMy5Wh4U2uvz1yA2BrN8uF8eu88sxwY7GL27Mi /zT+72X7JwEUAqWliG2s3cQFOzGvB9EK -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:52 2024 by rpki-client on console-ams.rpki-client.org