$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: aLf4+pby6OGGDn4r+DIdwz9UHy+/SjIahavih5Kdx3w= Subject key identifier: 9F:32:E2:7B:E8:42:F8:4B:7F:BF:7D:FE:DE:FF:DE:92:60:59:EA:A1 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 06E2 Signing time: Thu 02 May 2024 22:39:46 +0000 Manifest this update: Thu 02 May 2024 22:39:46 +0000 Manifest next update: Thu 09 May 2024 22:39:46 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: uH9WmluJRV821AXWCJXOiwaV4iEHULL3ofuXGgJV/Hc=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: VKY62GL5Ck/qXDFuD6a8QDseIo6kk4jLfJkbkCLEJK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: May 2 22:39:46 2024 GMT Not After : May 9 22:39:46 2024 GMT Subject: CN=66341632-4643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:82:84:d1:0f:cf:cd:01:4f:e5:bf:7e:5f:06: 64:79:a2:bd:80:52:32:5b:ac:72:d2:9f:db:99:2b: e0:4c:d0:7f:75:62:3a:0f:76:1c:c7:65:0b:82:3f: 4d:ec:9e:9e:2f:44:80:65:f1:5c:17:94:67:34:3e: 4f:f0:06:bc:2a:c3:83:6f:00:24:ba:ca:54:c1:1c: 7a:64:a1:f7:21:c8:c5:81:84:af:3d:d6:65:f9:09: 33:1e:60:8f:ca:8a:28:73:35:da:82:0d:8c:ca:2f: 03:e0:e1:f7:1d:cb:68:fd:10:4f:a3:1c:6b:55:c2: 15:34:86:38:54:39:1e:94:b6:fa:aa:4a:27:54:a1: 02:ec:24:db:90:24:13:4d:01:7e:ae:41:c3:a4:13: f8:e0:91:85:f8:ef:05:04:99:1a:f4:05:26:a5:5a: 42:00:47:f5:dc:4e:ee:09:01:03:72:fd:02:29:2b: ac:98:15:0f:e7:dc:91:17:70:d7:e4:b0:64:7c:01: a0:eb:cc:07:f7:08:b2:fe:e8:f9:43:08:67:a8:de: 81:4c:62:02:2e:3a:0c:ce:f5:b0:71:37:bd:40:b5: ab:7a:ad:e5:fc:d7:22:12:15:95:f5:ae:91:d0:d0: 9f:dc:ec:31:52:0a:69:f2:62:3c:6c:41:a9:3a:75: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:32:E2:7B:E8:42:F8:4B:7F:BF:7D:FE:DE:FF:DE:92:60:59:EA:A1 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:79:12:bc:3e:48:1e:2c:5c:58:95:f0:5c:78:50:80:07:6d: be:64:65:86:4d:61:ed:f6:7a:2a:ed:1a:d6:70:5a:4f:4c:2d: 0a:d9:42:3f:4f:d5:cd:e4:8d:96:02:24:f4:db:7f:43:42:40: ac:cd:ac:ea:2e:63:f8:9c:8b:e8:1e:e2:c0:21:bf:48:d2:4c: 62:b5:26:c5:6d:03:f2:bd:a9:04:ef:bd:a5:bf:5c:e0:4a:a6: 7d:05:c6:9d:5f:55:6a:fc:2e:ed:e4:58:36:37:35:88:c0:47: cc:8d:18:dd:c5:b9:0b:62:24:7e:db:79:9a:32:9f:22:8d:7e: a6:91:4b:7a:f7:a8:ce:b3:d7:89:3d:b5:7d:59:1f:05:4d:71: 09:75:d8:ec:d1:74:c4:87:e2:76:a9:08:18:a1:14:83:de:d8: b6:ff:f8:b8:a4:a8:7f:19:0a:8f:fc:a7:43:7a:e5:6c:4e:80: 73:00:8a:3c:23:be:99:1d:2e:ec:6a:95:0d:12:89:cd:0e:97: ea:b9:1e:61:3f:92:2a:f7:02:39:ff:f1:3b:4d:8d:0b:a6:6e: 5b:dc:a3:a5:73:a5:85:39:30:74:e5:73:74:f5:5b:d1:8d:c2: ec:9d:d7:41:38:51:a2:5e:c5:dc:44:e6:84:31:d6:66:07:49: 41:3d:8f:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjQwNTAyMjIzOTQ2WhcNMjQwNTA5MjIzOTQ2WjAYMRYwFAYD VQQDEw02NjM0MTYzMi00NjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoKE0Q/PzQFP5b9+XwZkeaK9gFIyW6xy0p/bmSvgTNB/dWI6D3Ycx2ULgj9N 7J6eL0SAZfFcF5RnND5P8Aa8KsODbwAkuspUwRx6ZKH3IcjFgYSvPdZl+QkzHmCP yoooczXagg2Myi8D4OH3Hcto/RBPoxxrVcIVNIY4VDkelLb6qkonVKEC7CTbkCQT TQF+rkHDpBP44JGF+O8FBJka9AUmpVpCAEf13E7uCQEDcv0CKSusmBUP59yRF3DX 5LBkfAGg68wH9wiy/uj5QwhnqN6BTGICLjoMzvWwcTe9QLWreq3l/NciEhWV9a6R 0NCf3OwxUgpp8mI8bEGpOnW4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8y4nvo QvhLf799/t7/3pJgWeqhMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkeRK8PkgeLFxYlfBceFCAB22+ZGWGTWHt9noq7RrWcFpPTC0K2UI/ T9XN5I2WAiT0239DQkCszazqLmP4nIvoHuLAIb9I0kxitSbFbQPyvakE772lv1zg SqZ9BcadX1Vq/C7t5Fg2NzWIwEfMjRjdxbkLYiR+23maMp8ijX6mkUt696jOs9eJ PbV9WR8FTXEJddjs0XTEh+J2qQgYoRSD3ti2//i4pKh/GQqP/KdDeuVsToBzAIo8 I76ZHS7sapUNEonNDpfquR5hP5Iq9wI5//E7TY0Lpm5b3KOlc6WFOTB05XN09VvR jcLsnddBOFGiXsXcROaEMdZmB0lBPY9V -----END CERTIFICATE-----Generated at Thu May 2 23:19:01 2024 by rpki-client on console-ams.rpki-client.org