$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: G1N4Ej6TonXO+Clqi2kqkCWyNK4tp4Kd3AVPm5hLSpc= Subject key identifier: 25:09:E9:41:BD:95:44:FC:2A:7B:ED:44:53:55:AC:6B:DC:8A:85:5A Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 06C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 06BC Signing time: Thu 02 May 2024 23:13:19 +0000 Manifest this update: Thu 02 May 2024 23:13:19 +0000 Manifest next update: Thu 09 May 2024 23:13:19 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: ivDTi2pdM1RANrRqfkGjhnovnt/FbZriPMxrHOYRqWE=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: /0zdYA+S0bBAOL1HYgOJxCAYJBAxy2AyyJ5tYJ2Q7VI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1728 (0x6c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: May 2 23:13:19 2024 GMT Not After : May 9 23:13:19 2024 GMT Subject: CN=66341e0f-2003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:15:a9:3e:4c:66:3f:79:3c:fe:3f:79:ee: e8:f2:b1:76:6a:75:d2:43:ef:fc:55:8b:82:ca:d0: a6:06:37:22:e7:0a:f4:6c:58:c3:8d:3d:f6:ed:b8: 36:9a:ed:42:51:91:50:76:42:41:79:d0:e1:d1:96: bb:f2:bd:5d:21:e8:fe:28:3b:82:39:2a:63:54:6a: 51:73:69:24:69:c4:c3:b0:9c:28:cd:ec:ed:10:31: 60:91:5f:db:bc:f4:05:06:03:e2:9d:ca:53:1c:d3: ab:89:d2:b7:3b:85:a6:8b:0c:7d:aa:1b:2b:f0:c9: 8a:73:89:51:ad:ef:36:15:7a:39:a4:89:7c:96:01: ba:29:73:1a:e7:8c:b6:c8:df:eb:04:07:f2:38:4b: 6e:5d:d0:e1:17:25:c2:3d:b8:28:a7:36:b2:d3:3d: c3:d4:f6:82:e5:10:e0:89:3d:84:df:57:b2:3a:1c: 94:4b:2a:78:a9:1a:93:e7:56:ac:a2:e4:d9:20:68: 17:02:62:ad:2a:30:0d:19:b2:42:62:4f:cd:b4:b2: 99:7c:a0:9c:bf:bc:fd:2a:3d:3f:1d:82:5b:d5:a2: b0:e0:1f:1f:c5:cf:b5:71:a8:25:d4:87:86:1f:7d: 5d:f8:31:a8:da:7a:ec:c6:e0:6c:fc:b4:90:cd:74: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:E9:41:BD:95:44:FC:2A:7B:ED:44:53:55:AC:6B:DC:8A:85:5A X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b1:83:a7:d8:c0:9d:48:ad:e4:bc:90:de:0f:1a:5e:1a:19: 4a:c1:e3:66:2b:8f:a0:c2:86:d1:a0:c5:79:a3:15:ea:0d:e3: 24:56:b4:04:f9:f6:1f:fd:c3:34:57:b1:b1:50:0c:f8:f4:5e: 59:32:36:17:d5:de:f9:39:53:89:e5:ec:95:fc:ff:e4:88:35: 77:03:ad:2b:92:0d:cc:4f:fa:6f:2b:73:86:65:9a:f4:9e:a3: 81:ff:ce:90:3d:3c:f4:aa:79:31:36:31:44:0c:e7:a1:8a:d2: fb:74:5d:52:09:79:09:e9:a8:ba:0c:87:17:2d:23:3b:a7:d0: 19:54:02:83:4a:46:fb:f2:d0:c9:10:ff:4d:11:de:6c:9a:48: 8d:e6:6a:72:23:a9:b7:2c:02:c5:16:a7:dc:eb:d4:26:06:97: 01:de:59:52:1f:aa:30:7e:7c:ad:ba:b2:ec:96:ef:64:0e:dd: 22:75:62:2e:73:6b:e2:2a:53:96:31:43:b8:d2:e1:64:9b:86: ec:65:f0:2f:e4:0d:0f:f9:24:7b:4e:85:0c:88:c2:f1:ff:8c: bf:64:51:84:77:37:bb:cf:61:d0:8f:6e:ff:3a:3d:77:09:77: b3:0a:24:d1:f6:93:6f:11:cc:34:5e:c2:2d:9f:9b:6e:ab:73: 7f:bd:66:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjQwNTAyMjMxMzE5WhcNMjQwNTA5MjMxMzE5WjAYMRYwFAYD VQQDEw02NjM0MWUwZi0yMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zAVqT5MZj95PP4/ee7o8rF2anXSQ+/8VYuCytCmBjci5wr0bFjDjT327bg2 mu1CUZFQdkJBedDh0Za78r1dIej+KDuCOSpjVGpRc2kkacTDsJwozeztEDFgkV/b vPQFBgPincpTHNOridK3O4Wmiwx9qhsr8MmKc4lRre82FXo5pIl8lgG6KXMa54y2 yN/rBAfyOEtuXdDhFyXCPbgopzay0z3D1PaC5RDgiT2E31eyOhyUSyp4qRqT51as ouTZIGgXAmKtKjANGbJCYk/NtLKZfKCcv7z9Kj0/HYJb1aKw4B8fxc+1cagl1IeG H31d+DGo2nrsxuBs/LSQzXQe8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUJ6UG9 lUT8KnvtRFNVrGvcioVaMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgsYOn2MCdSK3kvJDeDxpeGhlKweNmK4+gwobRoMV5oxXqDeMkVrQE +fYf/cM0V7GxUAz49F5ZMjYX1d75OVOJ5eyV/P/kiDV3A60rkg3MT/pvK3OGZZr0 nqOB/86QPTz0qnkxNjFEDOehitL7dF1SCXkJ6ai6DIcXLSM7p9AZVAKDSkb78tDJ EP9NEd5smkiN5mpyI6m3LALFFqfc69QmBpcB3llSH6owfnyturLslu9kDt0idWIu c2viKlOWMUO40uFkm4bsZfAv5A0P+SR7ToUMiMLx/4y/ZFGEdze7z2HQj27/Oj13 CXezCiTR9pNvEcw0XsItn5tuq3N/vWYf -----END CERTIFICATE-----Generated at Thu May 2 23:48:43 2024 by rpki-client on console-fra.rpki-client.org