$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft File: u2XjT0_eqStZoyVHozggimCJHgk.mft (raw, json) Hash identifier: vmVP1hpd5EZrTgfZ60M66HVAxV7JHtYoJcJXBGfNnZI= Subject key identifier: 5B:CC:33:A5:BC:E8:FD:CB:63:32:D9:31:BC:38:9C:0E:9E:7F:00:DB Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0AFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft Manifest number: 0AF2 Signing time: Sat 04 May 2024 20:10:57 +0000 Manifest this update: Sat 04 May 2024 20:10:56 +0000 Manifest next update: Sat 11 May 2024 20:10:56 +0000 Files and hashes: 1: u2XjT0_eqStZoyVHozggimCJHgk.crl (hash: vR89WnFAOEpjIFvFyNPW86E9ozTUrlth/+OEg9ym3oo=) 2: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (hash: w3YKqghHb1h7kbYmw/tNdN2OCnl/DQNVargpyltOq60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2810 (0xafa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: May 4 20:10:56 2024 GMT Not After : May 11 20:10:56 2024 GMT Subject: CN=66369650-e480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:82:cf:93:a4:80:4d:ed:ff:e7:c6:44:e1: 07:4c:1b:b0:85:73:d2:f3:66:07:04:18:e3:79:fc: 2d:6c:2c:7b:a0:80:30:c1:63:97:93:dd:62:8f:35: 73:80:87:c3:b3:5d:a5:62:e3:d0:f3:6c:10:62:d0: 80:26:93:a8:51:5a:71:3f:1e:a7:66:98:04:34:a2: 7d:ed:76:fb:51:77:79:5e:59:e9:0e:5c:69:21:2a: 03:ce:8c:75:0f:f6:79:dc:58:6c:ed:33:63:02:5e: 36:85:c9:b6:f0:fd:5a:41:fb:94:5c:20:19:52:37: 2b:37:3f:55:43:3e:80:d3:9e:0a:d7:c2:0d:14:29: 2b:3d:4d:95:ee:43:c3:7a:fd:9c:4d:82:4f:8c:94: 6c:aa:1c:85:e7:05:eb:af:97:a7:87:9e:10:0d:79: bc:dc:1a:34:57:2e:1b:7e:57:2d:30:1e:e6:0e:2b: 61:40:90:5e:3e:57:92:5c:c7:82:5f:48:81:6d:fe: ba:8a:8b:68:2e:25:c6:51:46:81:60:3e:8d:e2:b3: 72:81:44:6d:37:1e:9c:0c:72:47:26:94:c8:00:83: 6c:cb:10:15:83:2f:c1:93:94:a6:66:02:d1:94:77: 20:00:8a:cc:f7:f6:0f:1a:9a:6c:cd:4a:d7:13:ee: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CC:33:A5:BC:E8:FD:CB:63:32:D9:31:BC:38:9C:0E:9E:7F:00:DB X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b6:e0:ab:63:b1:46:ad:00:c4:a2:13:2e:e8:14:63:6e:28: 41:28:80:79:35:88:62:79:e0:a2:29:d6:6f:d7:ca:da:7a:15: 91:79:fe:e5:b4:09:ca:ac:1b:04:15:8e:b9:9a:85:e7:53:d4: d4:3d:ff:ae:92:af:c8:c9:de:ea:5c:78:3f:ba:ea:63:14:f4: 73:13:cc:43:a4:47:b5:ae:88:72:8f:48:4e:1a:9d:b5:12:6b: 09:8e:7b:34:97:f2:ae:23:40:6d:7c:dc:0a:c9:e0:30:81:15: dc:27:28:c5:17:06:0c:3f:ac:ba:db:2e:16:8d:3c:3d:ed:ef: b7:a4:68:b6:8e:12:33:cf:44:32:83:2c:94:b3:52:cc:16:a8: b5:21:8e:e8:ab:bd:20:18:18:e6:f8:aa:13:7b:f0:91:7d:46: f8:e7:14:33:e9:57:54:7d:26:75:c5:38:01:0d:71:b8:96:08: 0e:fb:42:3b:f6:03:11:45:4c:ca:2c:8a:bc:c5:6d:79:a1:7a: 23:c7:40:ed:86:9c:d9:bd:5f:23:26:50:59:6c:b0:61:8b:5e: 7b:9c:f7:db:f3:8e:a6:a2:8e:3b:ee:3c:af:82:53:30:6d:dc: 9f:03:30:e9:c7:db:34:54:6c:cf:8a:1b:65:0a:57:b8:5a:5d: 3b:29:84:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjQwNTA0MjAxMDU2WhcNMjQwNTExMjAxMDU2WjAYMRYwFAYD VQQDEw02NjM2OTY1MC1lNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6eCz5OkgE3t/+fGROEHTBuwhXPS82YHBBjjefwtbCx7oIAwwWOXk91ijzVz gIfDs12lYuPQ82wQYtCAJpOoUVpxPx6nZpgENKJ97Xb7UXd5XlnpDlxpISoDzox1 D/Z53Fhs7TNjAl42hcm28P1aQfuUXCAZUjcrNz9VQz6A054K18INFCkrPU2V7kPD ev2cTYJPjJRsqhyF5wXrr5enh54QDXm83Bo0Vy4bflctMB7mDithQJBePleSXMeC X0iBbf66iotoLiXGUUaBYD6N4rNygURtNx6cDHJHJpTIAINsyxAVgy/Bk5SmZgLR lHcgAIrM9/YPGppszUrXE+7inQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvMM6W8 6P3LYzLZMbw4nA6efwDbMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjIyNC82RTlCQTQxQTIwNTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFT dFpveVZIb3pnZ2ltQ0pIZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBltuCrY7FGrQDEohMu6BRjbihBKIB5NYhieeCiKdZv18raehWRef7l tAnKrBsEFY65moXnU9TUPf+ukq/Iyd7qXHg/uupjFPRzE8xDpEe1rohyj0hOGp21 EmsJjns0l/KuI0BtfNwKyeAwgRXcJyjFFwYMP6y62y4WjTw97e+3pGi2jhIzz0Qy gyyUs1LMFqi1IY7oq70gGBjm+KoTe/CRfUb45xQz6VdUfSZ1xTgBDXG4lggO+0I7 9gMRRUzKLIq8xW15oXojx0DthpzZvV8jJlBZbLBhi157nPfb846moo477jyvglMw bdyfAzDpx9s0VGzPihtlCle4Wl07KYSc -----END CERTIFICATE-----Generated at Sat May 4 21:19:29 2024 by rpki-client on console-ams.rpki-client.org