$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: 0WXR4ufpPwA2NVODYwdNkihVFMNjOGHipKtG3PifMGk= Subject key identifier: 58:29:52:18:D6:C8:D3:65:13:EE:50:49:13:8E:40:15:AD:95:CD:DE Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0BBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0BA9 Signing time: Sat 04 May 2024 19:24:44 +0000 Manifest this update: Sat 04 May 2024 19:24:43 +0000 Manifest next update: Sat 11 May 2024 19:24:43 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: foxURXzAF5Q4ZvNHsMtWNMGbF+vQAUa5rFD4Z8ajFqE=) 2: 4BA5EC4293D911EE86212B1DC4F9AE02.roa (hash: LN8pESJfKWiK9i2ORSuCclenOa+mxcW/ZR7U6hJ0hpw=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: dK4wMXuqZ/VEBpfJlL9LtzexBuDzAG0QNs11K5xMSLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: May 4 19:24:43 2024 GMT Not After : May 11 19:24:43 2024 GMT Subject: CN=66368b7c-b840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:82:db:e3:a3:29:a8:4f:4c:d3:89:73:49: c6:0d:ff:35:a5:67:d3:e0:94:e1:e2:62:ca:67:83: c1:92:dc:a3:b9:69:e9:18:d3:cd:a1:c3:6d:62:7e: 77:e4:a4:b6:15:b4:19:db:61:05:89:ae:ba:0e:60: 16:47:8e:b7:32:bb:39:29:1a:74:9d:91:38:cd:30: b1:bb:3b:62:9d:99:64:a2:72:6d:26:19:7a:a9:e0: 99:f2:03:d4:37:d1:eb:96:88:d5:f3:d2:bc:b0:42: 8a:43:17:f1:db:9d:49:51:b5:86:3d:5b:f2:34:f6: be:7a:6f:76:5b:20:c4:9a:67:05:a0:ca:d4:42:47: de:66:5d:60:d9:3e:85:53:3d:e5:71:74:14:36:f1: 1e:9c:e8:0f:d7:51:cb:49:ef:c4:14:27:26:8f:d4: 87:6f:eb:40:73:f6:ec:3f:f9:a6:8c:94:3c:c6:85: 6e:46:7a:01:2a:cf:2c:9c:f7:cf:a8:1c:02:9e:db: d7:8b:ed:21:84:42:a4:b3:ee:49:cb:b0:1a:22:cc: 83:7d:3f:0b:79:17:d6:b1:ae:00:68:56:a3:19:34: bd:6a:f4:1a:78:fc:a9:7b:8e:4a:73:dc:2c:f2:ca: 7e:be:d1:73:c3:9b:06:8f:a7:63:9f:6b:db:7d:4c: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:29:52:18:D6:C8:D3:65:13:EE:50:49:13:8E:40:15:AD:95:CD:DE X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:dd:88:e9:df:94:d1:cb:4b:26:38:94:01:3c:5a:92:7e:e0: 4d:54:ca:93:28:38:2d:b5:cd:29:21:9c:c7:f6:56:2d:9c:4a: e9:df:cd:65:3a:91:19:b3:ac:aa:1c:df:52:bb:f6:b3:73:e4: e1:ca:c8:70:d1:11:a3:07:d3:75:13:54:1a:72:41:4a:03:a0: 8f:29:5d:2e:0c:bf:6e:87:4e:58:2d:c6:34:d3:05:b5:c1:16: c3:11:f5:aa:4e:03:13:11:46:af:c4:f8:81:bc:db:c8:5e:01: 00:93:57:46:62:29:29:f4:2b:30:03:c1:07:39:ef:e9:1c:48: e0:73:25:0e:0a:77:e8:c7:90:04:95:94:d9:2d:19:9a:73:d9: b0:11:c9:5c:d2:2e:c2:cf:46:f8:cd:3d:c2:24:4b:b9:27:fe: 2a:8b:a5:3b:6f:95:90:58:9b:0d:f0:82:45:c8:ae:c2:45:05: 8c:52:ba:a2:d5:24:e5:80:ab:d5:48:a2:1f:3f:76:66:ea:79: fa:1a:95:ec:ac:8a:0a:85:f3:eb:5d:69:96:d1:50:22:12:77: 69:52:04:98:f8:20:91:0a:49:b6:33:55:8c:e8:bd:f4:22:4b: fe:7c:4a:0c:46:b1:2f:c0:ba:21:b5:6a:06:d0:89:9c:02:b0: 3f:16:d0:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjQwNTA0MTkyNDQzWhcNMjQwNTExMTkyNDQzWjAYMRYwFAYD VQQDEw02NjM2OGI3Yy1iODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPmC2+OjKahPTNOJc0nGDf81pWfT4JTh4mLKZ4PBktyjuWnpGNPNocNtYn53 5KS2FbQZ22EFia66DmAWR463Mrs5KRp0nZE4zTCxuztinZlkonJtJhl6qeCZ8gPU N9HrlojV89K8sEKKQxfx251JUbWGPVvyNPa+em92WyDEmmcFoMrUQkfeZl1g2T6F Uz3lcXQUNvEenOgP11HLSe/EFCcmj9SHb+tAc/bsP/mmjJQ8xoVuRnoBKs8snPfP qBwCntvXi+0hhEKks+5Jy7AaIsyDfT8LeRfWsa4AaFajGTS9avQaePype45Kc9ws 8sp+vtFzw5sGj6djn2vbfUxM0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgpUhjW yNNlE+5QSROOQBWtlc3eMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA93Yjp35TRy0smOJQBPFqSfuBNVMqTKDgttc0pIZzH9lYtnErp381l OpEZs6yqHN9Su/azc+Thyshw0RGjB9N1E1QackFKA6CPKV0uDL9uh05YLcY00wW1 wRbDEfWqTgMTEUavxPiBvNvIXgEAk1dGYikp9CswA8EHOe/pHEjgcyUOCnfox5AE lZTZLRmac9mwEclc0i7Cz0b4zT3CJEu5J/4qi6U7b5WQWJsN8IJFyK7CRQWMUrqi 1STlgKvVSKIfP3Zm6nn6GpXsrIoKhfPrXWmW0VAiEndpUgSY+CCRCkm2M1WM6L30 Ikv+fEoMRrEvwLohtWoG0ImcArA/FtDx -----END CERTIFICATE-----Generated at Sat May 4 20:37:13 2024 by rpki-client on console-fra.rpki-client.org