$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: hduf4FGpnXwr/bUldO5mjEQXzqyG49TAJNrToR3bFys= Subject key identifier: CD:66:1E:B3:FA:95:50:94:82:86:9F:31:D0:87:38:1B:0E:4B:B6:10 Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0DCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0DC6 Signing time: Thu 02 May 2024 18:34:19 +0000 Manifest this update: Thu 02 May 2024 18:34:18 +0000 Manifest next update: Thu 09 May 2024 18:34:18 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: 7hWkTPWCkAmeFxfba0HF5cLM02Oz8tAjCZvCHGv2vu8=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: 48DCLc6mg6WSIyeoC5Exi/5J1UePCqZDV+VpYq9lOVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3534 (0xdce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: May 2 18:34:18 2024 GMT Not After : May 9 18:34:18 2024 GMT Subject: CN=6633dcaa-e83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:61:e6:32:31:eb:a4:60:b7:c9:19:ed:12: 3f:ec:39:93:ae:e5:ef:fc:51:23:c7:4b:fe:43:ea: fa:47:d9:b9:f2:1e:ff:f9:9c:c8:61:75:cc:cb:39: 5c:2b:40:07:8c:f8:d8:13:6e:04:ed:37:97:9d:37: b6:7b:d7:a9:dc:58:0f:c3:96:e5:01:a2:24:0c:7a: 35:12:0a:08:1a:0d:ca:b7:75:89:52:2b:e9:90:54: e1:48:d6:19:01:34:96:2b:59:13:cd:da:d9:03:5a: 8c:7d:d1:44:fe:1e:3e:f9:84:69:58:b3:a4:0f:f5: d3:ef:e3:c4:bb:52:d0:66:b7:6a:04:a2:23:64:5d: 5a:3f:86:2e:c1:6c:4f:e7:a0:5d:bd:44:51:bb:df: ff:88:7b:01:69:50:4a:b0:b9:f9:05:a7:4d:62:86: 5d:5c:95:3d:37:70:3b:a2:f8:d9:61:aa:12:63:47: 34:e5:9b:d7:d7:53:61:ab:c6:5f:c2:3e:87:71:1d: 8b:a4:c6:90:a7:c7:f4:4d:80:ae:f4:57:95:90:80: 4c:15:f0:4b:28:94:31:9d:18:73:9f:e6:23:3d:72: b3:ef:a4:6b:c4:91:df:2c:17:e9:7f:f2:c2:22:e2: f6:b2:14:e9:ef:5d:10:8e:f6:aa:09:33:76:36:b8: 46:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:66:1E:B3:FA:95:50:94:82:86:9F:31:D0:87:38:1B:0E:4B:B6:10 X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9f:6e:82:8b:84:44:34:bc:d4:87:a4:34:b5:52:7c:90:02: 0f:ba:e5:bb:99:2d:80:d0:93:4f:d3:44:89:0c:5a:4c:55:86: 67:82:9c:bb:5e:de:97:4b:a2:57:92:ce:ca:b0:ae:a8:0a:91: fe:c6:6a:7c:19:bc:95:32:14:d3:eb:8d:dd:3c:07:cf:eb:1b: c0:2f:26:00:ba:36:9d:ae:40:fc:e7:0e:60:04:3d:cb:ca:dd: fd:d9:63:3d:97:4c:8e:92:98:56:dd:b9:20:de:b1:59:a3:8a: 69:40:cb:4e:78:53:8e:7c:56:e8:d8:15:30:55:c0:1c:d9:31: e6:87:3b:26:95:b3:33:21:af:c7:d3:61:6a:b0:1a:32:54:63: a7:e2:b5:7e:64:6f:25:a7:62:c0:de:78:a1:ec:28:92:09:0a: 99:7c:ba:d7:9b:6c:8e:40:32:79:5f:3b:33:39:03:e4:94:09: b9:3b:05:3f:31:1a:0a:44:d9:6d:a2:c2:28:6e:f1:cb:69:de: fc:2f:ac:0f:8a:e7:aa:9e:36:4d:4b:4c:6f:37:40:9e:eb:ad: b4:09:5b:8d:0e:ed:54:a9:48:c2:cb:60:74:19:c8:26:03:59: 1e:4b:78:20:96:e1:f1:f7:97:99:43:ce:45:8f:f7:0f:2f:79: 1e:3d:53:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjQwNTAyMTgzNDE4WhcNMjQwNTA5MTgzNDE4WjAYMRYwFAYD VQQDEw02NjMzZGNhYS1lODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyD9h5jIx66Rgt8kZ7RI/7DmTruXv/FEjx0v+Q+r6R9m58h7/+ZzIYXXMyzlc K0AHjPjYE24E7TeXnTe2e9ep3FgPw5blAaIkDHo1EgoIGg3Kt3WJUivpkFThSNYZ ATSWK1kTzdrZA1qMfdFE/h4++YRpWLOkD/XT7+PEu1LQZrdqBKIjZF1aP4YuwWxP 56BdvURRu9//iHsBaVBKsLn5BadNYoZdXJU9N3A7ovjZYaoSY0c05ZvX11Nhq8Zf wj6HcR2LpMaQp8f0TYCu9FeVkIBMFfBLKJQxnRhzn+YjPXKz76RrxJHfLBfpf/LC IuL2shTp710QjvaqCTN2NrhG+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1mHrP6 lVCUgoafMdCHOBsOS7YQMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNn26Ci4RENLzUh6Q0tVJ8kAIPuuW7mS2A0JNP00SJDFpMVYZngpy7 Xt6XS6JXks7KsK6oCpH+xmp8GbyVMhTT643dPAfP6xvALyYAujadrkD85w5gBD3L yt392WM9l0yOkphW3bkg3rFZo4ppQMtOeFOOfFbo2BUwVcAc2THmhzsmlbMzIa/H 02FqsBoyVGOn4rV+ZG8lp2LA3nih7CiSCQqZfLrXm2yOQDJ5XzszOQPklAm5OwU/ MRoKRNltosIobvHLad78L6wPiueqnjZNS0xvN0Ce6620CVuNDu1UqUjCy2B0Gcgm A1keS3ggluHx95eZQ85Fj/cPL3kePVNn -----END CERTIFICATE-----Generated at Thu May 2 20:50:23 2024 by rpki-client on console-fra.rpki-client.org