$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json) Hash identifier: 9+kQ8rGGk/QlI9yJcYcI8B2yTVzGJohT2QimM67HAGY= Subject key identifier: 51:8E:79:AF:B4:D6:6D:24:1F:2A:C0:6A:67:81:BC:3E:CF:C3:C5:6B Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft Manifest number: 01FA Signing time: Fri 03 May 2024 04:17:50 +0000 Manifest this update: Fri 03 May 2024 04:17:49 +0000 Manifest next update: Fri 10 May 2024 04:17:49 +0000 Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: XBXT2zhoLjNDWIwdMuPI4ydXpuMDzORsZSASFawvxEk=) 2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: 6/hZGliPgE0ifcXcKbdvex1k1tulDr+I2fIAgCiLmqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: May 3 04:17:49 2024 GMT Not After : May 10 04:17:49 2024 GMT Subject: CN=6634656e-dfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:6d:86:8e:17:90:17:af:6c:91:73:4a:bd: 72:3c:e8:92:b5:f3:58:db:28:56:a0:0c:8d:bf:aa: 59:75:db:56:90:c8:3a:0c:89:1b:a9:b9:28:ca:70: f3:40:00:c4:98:64:f3:7d:22:fa:06:8d:1f:fc:a6: 3d:33:07:26:9f:f6:a7:1c:db:44:39:37:24:f2:9b: 43:68:2f:1d:12:3b:c6:67:ec:04:a5:e5:30:b6:74: 77:e2:c6:bf:01:a9:ae:3e:83:a6:1d:d8:3b:a1:82: 3d:79:44:58:5f:ec:36:b0:3b:8c:7c:6e:6a:9f:37: 22:fc:c8:4b:19:19:c5:a3:2c:a7:f2:71:3f:47:7f: 8b:b7:6f:07:68:6d:08:8a:df:38:61:80:0d:4c:66: 88:ec:05:30:56:d8:b4:1f:0d:85:c2:11:70:23:02: d9:36:a4:a4:9a:3b:06:5b:48:43:2a:25:ce:ac:5f: d0:41:72:70:37:c0:02:22:da:57:78:99:d5:e7:78: 12:c8:27:04:d5:2a:cf:33:9d:31:0f:64:5d:4a:26: 9b:ea:a6:32:b5:6c:3a:78:d2:c1:be:ba:51:9f:13: 00:ad:e7:c7:33:f4:1a:21:b0:74:2c:a5:9b:53:9e: eb:68:5a:5f:ec:9b:99:d9:59:af:8b:6f:39:61:d2: 3b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8E:79:AF:B4:D6:6D:24:1F:2A:C0:6A:67:81:BC:3E:CF:C3:C5:6B X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b1:45:08:f2:99:de:a5:7c:90:8e:da:61:15:99:74:a9:1c: a1:56:4a:aa:fe:e8:6c:0f:78:a5:c4:a4:c3:72:43:df:6e:cd: cd:66:c5:13:e9:3f:2b:65:c9:f6:46:3d:3a:f5:37:02:e2:ce: 7b:a0:f8:06:80:c2:f3:e2:a9:c0:6b:3f:20:84:d5:1c:13:44: e4:a1:b0:f4:64:96:c8:96:97:12:7d:b9:f6:00:d8:3d:08:df: 81:cb:a1:e0:bc:2a:3f:2f:59:9b:c1:fc:42:14:34:d5:e7:9c: 06:e7:5c:e7:c2:9b:3e:a9:0a:f4:4e:10:76:28:ca:d0:e6:80: 11:f2:9a:98:4a:86:3f:8b:84:20:46:90:a8:1d:af:5f:b6:aa: b7:c9:c6:07:e6:a4:27:36:7e:2e:9f:88:e2:31:1a:d3:39:5e: 1e:be:de:3e:5b:e4:c9:86:25:99:20:5f:73:b2:17:44:72:5b: 52:39:3c:1e:d6:b8:1f:4c:4c:2d:21:fc:2b:32:16:7c:76:4d: 90:d1:59:e0:38:50:1e:f2:c3:7b:08:f9:21:e3:08:6e:e2:51: 21:bd:97:8c:a3:60:39:22:ab:14:5a:dc:0a:50:83:05:23:87: cd:da:58:9d:a8:68:91:8a:da:d7:94:d9:7c:61:dc:a7:20:04: 2a:02:c7:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjQwNTAzMDQxNzQ5WhcNMjQwNTEwMDQxNzQ5WjAYMRYwFAYD VQQDEw02NjM0NjU2ZS1kZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv59tho4XkBevbJFzSr1yPOiStfNY2yhWoAyNv6pZddtWkMg6DIkbqbkoynDz QADEmGTzfSL6Bo0f/KY9Mwcmn/anHNtEOTck8ptDaC8dEjvGZ+wEpeUwtnR34sa/ AamuPoOmHdg7oYI9eURYX+w2sDuMfG5qnzci/MhLGRnFoyyn8nE/R3+Lt28HaG0I it84YYANTGaI7AUwVti0Hw2FwhFwIwLZNqSkmjsGW0hDKiXOrF/QQXJwN8ACItpX eJnV53gSyCcE1SrPM50xD2RdSiab6qYytWw6eNLBvrpRnxMArefHM/QaIbB0LKWb U57raFpf7JuZ2Vmvi285YdI7LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGOea+0 1m0kHyrAameBvD7Pw8VrMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W X29oSGpTSFhQamJPdk44OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNsUUI8pnepXyQjtphFZl0qRyhVkqq/uhsD3ilxKTDckPfbs3NZsUT 6T8rZcn2Rj069TcC4s57oPgGgMLz4qnAaz8ghNUcE0TkobD0ZJbIlpcSfbn2ANg9 CN+By6HgvCo/L1mbwfxCFDTV55wG51znwps+qQr0ThB2KMrQ5oAR8pqYSoY/i4Qg RpCoHa9ftqq3ycYH5qQnNn4un4jiMRrTOV4evt4+W+TJhiWZIF9zshdEcltSOTwe 1rgfTEwtIfwrMhZ8dk2Q0VngOFAe8sN7CPkh4whu4lEhvZeMo2A5IqsUWtwKUIMF I4fN2lidqGiRitrXlNl8YdynIAQqAsd7 -----END CERTIFICATE-----Generated at Fri May 3 06:28:43 2024 by rpki-client on console-fra.rpki-client.org