$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json) Hash identifier: Iux+DteRbDVcutbXtc7AsJHVG0Uz+7EvR8EPcPYlxJY= Subject key identifier: 0F:A3:C6:3E:F4:30:74:B5:84:E1:D1:86:55:E3:3A:58:9B:2E:1B:B2 Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft Manifest number: 88 Signing time: Tue 07 May 2024 07:14:17 +0000 Manifest this update: Tue 07 May 2024 07:14:17 +0000 Manifest next update: Tue 14 May 2024 07:14:17 +0000 Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: LWsydLraSAvJrAR5VJwup1X/NhrdD16aPo9OE5CbqTM=) 2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: p2OaGBXnB53QIaUdiYcGSS4yEhTNuLi2jw8pgHfs/zU=) 3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: hqa3bLAwVOwmpF9Y6KqNaSGq/0Ts7TL9Rvw8QWvgERw=) 4: 585745526BC111EEA163E774C4F9AE02.roa (hash: SgiPpSzjVYRUuSbfrex/g+dkVgdfWShv5j9Fj2CdmAA=) 5: B7FD006A50F411EEB2008729C4F9AE02.roa (hash: uzoq++xFu38JBN6N2UCnRV7497O3ABRHnG8fvqp6Dtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 07:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: May 7 07:14:17 2024 GMT Not After : May 14 07:14:17 2024 GMT Subject: CN=6639d4c9-57d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:66:8d:05:b3:05:4b:47:74:cd:08:9d:b2: 1a:0d:6e:38:7e:cb:cd:7e:2f:c7:d7:0c:bc:e2:43: 22:4f:91:b9:ba:78:c3:14:69:06:12:c3:fe:57:2b: 10:88:01:79:cc:f9:17:70:b6:5c:49:a7:17:ad:4d: 0c:70:6c:59:bf:86:08:1c:06:b2:b1:ef:00:8f:07: 45:21:f3:95:08:1f:05:9e:cb:7d:73:a1:bc:7d:e4: 0b:8d:40:25:60:86:ae:d7:d4:14:86:0f:17:df:73: e4:9d:9a:4d:c6:aa:48:ee:51:c4:44:3b:a9:b8:c6: 07:e3:f3:f1:93:6f:3c:2a:d5:0b:9a:af:6e:3e:4e: 86:c9:4c:42:26:28:2b:2d:40:7a:a6:22:58:60:a3: 6c:04:7f:77:83:c4:8a:ce:af:1d:31:4f:5a:d2:1a: a3:91:d9:68:64:37:0d:ac:a9:d9:53:6f:99:24:4c: 0c:bf:1c:e5:01:03:01:b2:c1:2c:7c:df:c8:02:cb: c1:d8:20:d3:6c:f8:f9:e5:b6:28:28:d1:b8:fd:eb: 2a:d7:c0:59:c6:74:2f:2c:24:0e:32:38:81:f6:c4: 89:ac:e4:9e:3f:4e:50:f5:fa:27:25:6c:7d:83:c6: 36:c5:b1:e9:7f:56:51:86:f6:21:8f:f6:17:8f:7e: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A3:C6:3E:F4:30:74:B5:84:E1:D1:86:55:E3:3A:58:9B:2E:1B:B2 X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8f:8d:34:43:f0:b0:1f:b1:af:1f:3d:eb:9f:ae:ee:06:9b: b7:02:d6:07:7c:7e:50:71:ce:6c:cd:74:1b:ad:f9:be:b7:a2: d5:91:40:60:c0:74:99:b6:1e:73:6e:a0:28:ad:fa:7e:e7:ad: d9:69:92:e5:6d:8d:17:ab:c3:cc:57:f1:5b:40:bf:6c:1d:44: 0b:fe:db:d0:b2:c3:43:22:0e:e1:8b:7b:21:85:2e:27:cb:6d: 28:18:16:c1:95:86:e3:b5:1c:db:e9:e3:39:0c:98:15:19:b3: d0:3f:0c:8c:c0:00:df:d8:37:91:ed:60:9c:b2:5c:6d:f5:af: 5e:4b:53:6b:20:88:cd:1a:09:b5:dd:95:e3:7c:57:27:04:34: 52:64:28:3c:f3:52:35:51:2e:73:dc:f2:6b:fb:0f:ed:5e:47: b1:75:d0:7f:4f:62:44:db:76:66:28:1a:2f:0b:3a:03:d8:02: e0:54:df:e1:43:28:4d:49:a9:9d:8d:6e:79:18:b8:04:c3:9b: 4d:5a:24:d1:2f:06:05:92:63:4b:81:e9:a3:d6:3b:81:65:0a: 0f:92:32:3f:26:4e:7f:e6:f7:60:ad:4b:c5:22:ae:83:7c:44: 82:ba:21:79:fb:db:b4:a8:54:02:67:53:e9:5d:65:75:23:50: 0e:e7:a3:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjQwNTA3MDcxNDE3WhcNMjQwNTE0MDcxNDE3WjAYMRYwFAYD VQQDEw02NjM5ZDRjOS01N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtklmjQWzBUtHdM0InbIaDW44fsvNfi/H1wy84kMiT5G5unjDFGkGEsP+VysQ iAF5zPkXcLZcSacXrU0McGxZv4YIHAayse8AjwdFIfOVCB8Fnst9c6G8feQLjUAl YIau19QUhg8X33PknZpNxqpI7lHERDupuMYH4/Pxk288KtULmq9uPk6GyUxCJigr LUB6piJYYKNsBH93g8SKzq8dMU9a0hqjkdloZDcNrKnZU2+ZJEwMvxzlAQMBssEs fN/IAsvB2CDTbPj55bYoKNG4/esq18BZxnQvLCQOMjiB9sSJrOSeP05Q9fonJWx9 g8Y2xbHpf1ZRhvYhj/YXj35uzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+jxj70 MHS1hOHRhlXjOlibLhuyMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo T2JlMkR6bklpMG05dXpYejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApj400Q/CwH7GvHz3rn67uBpu3AtYHfH5Qcc5szXQbrfm+t6LVkUBg wHSZth5zbqAorfp+563ZaZLlbY0Xq8PMV/FbQL9sHUQL/tvQssNDIg7hi3shhS4n y20oGBbBlYbjtRzb6eM5DJgVGbPQPwyMwADf2DeR7WCcslxt9a9eS1NrIIjNGgm1 3ZXjfFcnBDRSZCg881I1US5z3PJr+w/tXkexddB/T2JE23ZmKBovCzoD2ALgVN/h QyhNSamdjW55GLgEw5tNWiTRLwYFkmNLgemj1juBZQoPkjI/Jk5/5vdgrUvFIq6D fESCuiF5+9u0qFQCZ1PpXWV1I1AO56Nm -----END CERTIFICATE-----Generated at Tue May 7 09:42:15 2024 by rpki-client on console-fra.rpki-client.org