$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: ePmpzfgMbc6ekPl4R8KfkTJ4ZLZuv7io17MRzwe2yM0= Subject key identifier: B6:02:BC:99:7F:10:F7:74:B4:0D:BD:F5:E3:E9:E7:2B:AB:5E:F9:9D Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: D3 Signing time: Thu 25 Apr 2024 06:00:13 +0000 Manifest this update: Thu 25 Apr 2024 06:00:13 +0000 Manifest next update: Thu 02 May 2024 06:00:13 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: 5LXI7x4lQtAKjX3jeKm1w8F1tXHRxDqaYOxE+H7ZIY8=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: Uk3rBIxJV45EOBy2eFPekpy4A8sQVxEwLHcYZPjeIaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Apr 25 06:00:13 2024 GMT Not After : May 2 06:00:13 2024 GMT Subject: CN=6629f16d-a0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:36:b1:75:fe:62:21:93:cc:37:b3:d1:ac: ef:1e:b8:c9:f4:d4:e1:10:bc:30:01:ab:3a:a3:74: 8c:53:4d:dd:4f:f7:b1:1c:39:84:7a:52:2c:7f:cb: b9:e2:94:3c:86:5b:cd:23:27:9e:0d:55:13:ed:95: 10:4e:91:c8:01:20:77:5f:63:42:4a:a4:d3:23:20: 9c:59:74:42:41:cf:27:31:9e:de:1a:be:e0:37:ab: bd:da:58:d1:0f:2d:e8:bd:c2:3c:3c:61:86:77:77: f7:17:77:21:ae:71:e6:71:12:8c:19:36:e1:ff:c4: 0b:88:f0:3b:39:00:94:ad:b9:5a:8d:2a:fa:9a:85: 5e:d2:86:5b:fb:73:16:02:af:67:c1:93:dd:2e:3c: 0f:4a:71:34:8a:0c:b9:36:c2:1e:dc:c1:a5:82:26: 0e:be:bf:a9:74:6b:97:bf:f9:fb:49:4d:70:fd:7b: e2:6e:f2:e4:20:e1:b2:ca:82:44:ba:cf:6d:a0:ed: 09:ac:27:70:86:ca:ea:8e:5f:73:7a:af:9c:58:25: 3e:f8:a3:e1:02:e5:2d:40:45:4b:a5:d9:b9:53:11: 3c:1f:05:cf:df:e9:ed:50:b5:9c:2b:cf:0f:7e:cb: 06:ed:e4:37:8f:1a:6f:1a:5e:71:f2:7c:44:c9:0e: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:02:BC:99:7F:10:F7:74:B4:0D:BD:F5:E3:E9:E7:2B:AB:5E:F9:9D X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ec:cc:61:c9:4c:ed:cb:54:91:84:5d:57:26:0b:98:7f:86: e6:61:60:51:37:9d:ec:16:98:90:07:4b:0a:29:6b:53:05:de: e9:0e:44:c3:59:9b:2f:d1:c4:76:65:c2:1c:ab:57:9a:14:a4: 31:15:0a:b0:ac:bd:f0:ce:37:30:82:8b:e4:93:ef:52:5f:00: 06:3c:51:61:ac:cb:c6:0c:fb:71:80:4f:24:a4:40:fa:23:bd: 40:66:fa:d3:d4:09:ed:5a:b6:e3:9f:11:df:c6:60:82:42:2f: 71:85:6a:e8:9e:1e:8a:62:26:28:a4:84:7a:56:79:7e:0a:be: 31:a6:f9:24:5d:f6:c3:35:ab:b9:7c:09:ad:19:58:ce:9e:a8: cf:72:6e:29:20:d8:cc:36:99:6a:e3:68:d5:88:47:09:e8:90: 63:3b:22:62:ce:70:4b:b6:c4:fa:ab:84:e4:d7:f6:e4:1e:72: d2:30:e5:e8:af:c8:34:56:d8:f1:2f:f6:23:9e:99:f4:2c:ac: b3:fb:4a:df:dc:d0:6c:5c:9f:89:5d:e4:13:d7:ba:b3:df:09: 4e:db:c6:04:19:0f:a3:8d:48:0d:3a:47:81:c3:7b:90:5c:92: 25:ca:64:aa:6e:fd:7d:47:75:4a:c1:d3:cc:92:fe:d6:5b:9f: 9c:57:77:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjQwNDI1MDYwMDEzWhcNMjQwNTAyMDYwMDEzWjAYMRYwFAYD VQQDEw02NjI5ZjE2ZC1hMGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E02sXX+YiGTzDez0azvHrjJ9NThELwwAas6o3SMU03dT/exHDmEelIsf8u5 4pQ8hlvNIyeeDVUT7ZUQTpHIASB3X2NCSqTTIyCcWXRCQc8nMZ7eGr7gN6u92ljR Dy3ovcI8PGGGd3f3F3chrnHmcRKMGTbh/8QLiPA7OQCUrblajSr6moVe0oZb+3MW Aq9nwZPdLjwPSnE0igy5NsIe3MGlgiYOvr+pdGuXv/n7SU1w/XvibvLkIOGyyoJE us9toO0JrCdwhsrqjl9zeq+cWCU++KPhAuUtQEVLpdm5UxE8HwXP3+ntULWcK88P fssG7eQ3jxpvGl5x8nxEyQ5ZAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYCvJl/ EPd0tA299ePp5yurXvmdMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo7MxhyUzty1SRhF1XJguYf4bmYWBRN53sFpiQB0sKKWtTBd7pDkTD WZsv0cR2ZcIcq1eaFKQxFQqwrL3wzjcwgovkk+9SXwAGPFFhrMvGDPtxgE8kpED6 I71AZvrT1AntWrbjnxHfxmCCQi9xhWronh6KYiYopIR6Vnl+Cr4xpvkkXfbDNau5 fAmtGVjOnqjPcm4pINjMNplq42jViEcJ6JBjOyJiznBLtsT6q4Tk1/bkHnLSMOXo r8g0VtjxL/Yjnpn0LKyz+0rf3NBsXJ+JXeQT17qz3wlO28YEGQ+jjUgNOkeBw3uQ XJIlymSqbv19R3VKwdPMkv7WW5+cV3dG -----END CERTIFICATE-----Generated at Thu Apr 25 06:38:25 2024 by rpki-client on console-fra.rpki-client.org