$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json) Hash identifier: BG19+ynZheLKsAW4pO+6fP38yE2zB+YeDUgt+6PtxQc= Subject key identifier: DE:A6:F1:9A:A0:C4:AC:9C:41:33:C1:C7:33:08:AF:6B:F5:0D:D1:07 Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft Manifest number: 03BC Signing time: Sun 05 May 2024 02:34:52 +0000 Manifest this update: Sun 05 May 2024 02:34:52 +0000 Manifest next update: Sun 12 May 2024 02:34:52 +0000 Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: Lgu7/HILPqwdpw7rFInCs0MTu/paUc/fM2TcUZpOM04=) 2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: kArh2epf30vubdY6QxWez1yhusZT0dxZ15kysclBgsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Validity Not Before: May 5 02:34:52 2024 GMT Not After : May 12 02:34:52 2024 GMT Subject: CN=6636f04c-e03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:3d:f1:70:c5:bd:48:fc:2a:ad:0e:33:19: 05:4c:73:c9:22:82:49:fd:22:14:f8:ba:a5:09:c2: e0:a8:91:74:b1:dc:a1:f3:e6:45:53:ae:01:66:44: eb:25:c2:a2:5e:6b:aa:00:d8:88:8b:6f:50:86:7c: 3f:f6:05:10:44:25:58:ec:9a:de:9a:ce:f6:74:b7: 09:3d:06:61:4d:ed:97:65:e1:03:23:28:6f:5b:51: 19:51:d2:b3:97:fa:e7:a5:e3:50:f9:3a:30:7b:f4: 90:00:60:f7:22:a4:ef:20:8b:eb:ae:0a:46:70:ad: 18:9d:27:3f:10:3f:61:1a:b0:11:38:ed:96:64:be: 71:1f:92:b7:8e:2d:82:17:90:d5:ad:26:16:c3:f7: b0:4b:89:8b:a4:fb:a4:55:b7:26:16:32:94:62:89: f5:54:f3:55:06:b3:0e:62:87:e9:77:6f:82:fe:00: 88:a2:51:dd:39:09:7c:41:aa:ed:56:6a:e1:c3:d4: 61:df:13:77:f6:36:cd:13:f5:b6:b0:63:f3:1c:03: fc:d4:f9:da:72:38:38:af:24:9d:45:92:ed:ce:ec: f0:fa:2f:81:e0:ee:0c:c7:18:68:4b:ff:27:67:5b: 41:5c:2c:ba:0b:bb:cd:a0:67:a3:29:22:7d:19:96: 4b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A6:F1:9A:A0:C4:AC:9C:41:33:C1:C7:33:08:AF:6B:F5:0D:D1:07 X509v3 Authority Key Identifier: keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:45:0e:42:56:1d:04:2d:1f:ff:ac:a4:b3:72:10:12:99:56: 2b:b7:15:4f:bb:b8:53:82:cc:cf:8d:e2:05:89:7d:ae:f0:cc: ff:8d:9b:e7:7b:16:59:c3:2c:27:0e:c0:73:bf:75:a4:5c:94: f4:4f:a1:e1:d6:4d:5f:bf:1b:10:6f:e4:14:9b:a2:a3:1c:d3: e0:ca:f5:59:2f:8c:bd:ba:4f:c6:72:55:29:b4:39:38:57:37: b8:45:e8:ab:5e:bf:05:64:a4:9d:31:7b:bd:33:48:74:2f:df: ee:a8:36:e5:75:08:ce:de:5e:d3:6c:eb:c3:7a:ce:f5:61:ab: 7a:a1:1e:b1:c5:16:13:5c:5e:20:28:b9:0c:6d:6f:eb:92:7e: dc:a8:2b:c4:68:d7:b6:79:fb:45:80:1c:20:39:cc:5e:e9:a1: ba:6d:9b:8e:49:d6:71:e1:9d:69:c7:59:f9:1a:9c:87:e1:75: 7a:1c:ad:cf:dc:3a:a9:d4:48:1c:81:39:c9:07:99:34:3f:ba: e7:a9:08:f3:ff:62:db:fe:86:26:5c:98:43:a6:d9:d7:72:ab: d7:3d:66:74:48:db:01:19:07:c4:93:6b:93:c0:8c:34:fb:63: c3:e9:74:91:b1:b4:22:66:20:bc:36:b2:20:13:cb:20:8a:9f: 79:12:a5:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5 Rjg4QzFCMkIwHhcNMjQwNTA1MDIzNDUyWhcNMjQwNTEyMDIzNDUyWjAYMRYwFAYD VQQDEw02NjM2ZjA0Yy1lMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYg98XDFvUj8Kq0OMxkFTHPJIoJJ/SIU+LqlCcLgqJF0sdyh8+ZFU64BZkTr JcKiXmuqANiIi29Qhnw/9gUQRCVY7Jrems72dLcJPQZhTe2XZeEDIyhvW1EZUdKz l/rnpeNQ+Towe/SQAGD3IqTvIIvrrgpGcK0YnSc/ED9hGrAROO2WZL5xH5K3ji2C F5DVrSYWw/ewS4mLpPukVbcmFjKUYon1VPNVBrMOYofpd2+C/gCIolHdOQl8Qart Vmrhw9Rh3xN39jbNE/W2sGPzHAP81Pnacjg4rySdRZLtzuzw+i+B4O4MxxhoS/8n Z1tBXCy6C7vNoGejKSJ9GZZLDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6m8Zqg xKycQTPBxzMIr2v1DdEHMB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyRQ5CVh0ELR//rKSzchASmVYrtxVPu7hTgszPjeIFiX2u8Mz/jZvn exZZwywnDsBzv3WkXJT0T6Hh1k1fvxsQb+QUm6KjHNPgyvVZL4y9uk/GclUptDk4 Vze4ReirXr8FZKSdMXu9M0h0L9/uqDbldQjO3l7TbOvDes71Yat6oR6xxRYTXF4g KLkMbW/rkn7cqCvEaNe2eftFgBwgOcxe6aG6bZuOSdZx4Z1px1n5GpyH4XV6HK3P 3Dqp1EgcgTnJB5k0P7rnqQjz/2Lb/oYmXJhDptnXcqvXPWZ0SNsBGQfEk2uTwIw0 +2PD6XSRsbQiZiC8NrIgE8sgip95EqU2 -----END CERTIFICATE-----Generated at Sun May 5 03:47:46 2024 by rpki-client on console-fra.rpki-client.org