$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft File: 2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json) Hash identifier: wylj2e+vtDdu8Ehk2xzLQfI1izna8xEEpCInJAH5wic= Subject key identifier: D9:C4:ED:59:2D:22:34:3B:6D:47:1D:0F:B5:F5:6A:2E:67:3A:1F:F3 Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03 Certificate issuer: /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03 Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft Manifest number: 0533 Signing time: Sun 05 May 2024 01:09:25 +0000 Manifest this update: Sun 05 May 2024 01:09:24 +0000 Manifest next update: Sun 12 May 2024 01:09:24 +0000 Files and hashes: 1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: pt6l0x13e581/qmW4H0NdHpAlxwuvLtrwvg3IvxPUFo=) 2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: Ne3CcwgOXN/mdehtqmtNbBIn0UEd64uENfNzu9II+34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03 Validity Not Before: May 5 01:09:24 2024 GMT Not After : May 12 01:09:24 2024 GMT Subject: CN=6636dc45-f43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:e0:b7:29:5f:41:5c:f4:a1:cb:2c:17:3c: 60:4d:06:ca:80:b8:1b:e6:fa:1d:2b:0c:c7:34:80: 2e:dc:c9:eb:25:5b:7c:6d:e7:44:74:85:1d:88:15: ed:2b:e3:39:15:11:01:d8:e4:1b:62:a4:9b:38:a1: 70:9f:fd:21:36:35:92:a8:6f:c6:e5:0a:21:27:2b: 91:4b:9b:77:51:5f:6c:77:d6:10:9e:63:19:85:a8: 12:bd:d3:ce:be:c4:43:06:bd:70:be:41:66:6d:03: 66:99:6f:12:2b:a1:a4:38:62:dc:0d:bc:84:85:2f: d8:87:86:67:17:70:ed:dd:2f:cc:e7:ea:02:3e:02: 23:d4:26:7f:95:df:7f:d9:7b:13:03:76:72:00:1b: 03:77:60:68:8a:19:ac:9b:ec:c2:73:ab:5d:24:c3: fe:b3:91:4e:0d:b8:96:be:81:6d:09:ff:bd:9f:d8: 3b:e1:d2:e8:50:bd:d0:a4:e4:be:58:dc:6e:16:d5: 4d:46:0e:2f:67:bc:b5:0c:75:b4:c0:24:7f:b9:3c: 2e:49:5e:91:62:17:38:8e:41:91:2d:2d:3f:2d:ee: 55:d9:31:53:67:bb:04:5c:d5:95:6d:0c:55:b3:14: b8:07:5e:24:da:b0:df:bb:5d:4d:b0:65:b2:3c:3a: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C4:ED:59:2D:22:34:3B:6D:47:1D:0F:B5:F5:6A:2E:67:3A:1F:F3 X509v3 Authority Key Identifier: keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cb:89:79:59:bb:91:b2:2f:18:05:1d:36:ff:00:6c:49:8f: 88:fe:34:ea:ca:b1:69:57:3c:e4:23:ec:aa:1c:16:2c:bd:03: ce:2a:88:2e:5e:06:06:58:86:fb:7c:55:66:fe:4a:53:80:33: 20:3c:44:98:21:9a:5f:40:c9:71:08:f2:3c:80:3e:39:f0:6c: 41:86:7f:7b:d4:e3:1b:43:73:2e:5c:cd:e3:c7:98:67:85:f9: 95:63:4d:08:7d:69:a2:81:12:74:b6:11:c2:52:29:3b:6d:91: 04:3c:70:a2:4c:b8:fb:6d:fb:a2:ab:da:70:7d:ac:41:33:3f: 48:76:67:2e:dc:71:a6:64:d2:1d:f7:27:95:b6:cd:a5:69:fa: 48:35:a0:fa:12:f1:c7:88:c6:f2:0d:de:ae:92:80:64:9a:7a: 87:a5:99:2e:b5:cf:ba:e2:7d:a6:f1:8e:bf:6f:17:69:6a:ab: 80:fa:e0:b9:8c:64:70:b6:9e:04:2b:a8:4e:77:60:db:56:a6: c0:af:80:d6:ce:25:b4:aa:4c:5a:03:06:2a:3b:bd:2b:32:c7: b3:0c:d4:cf:56:75:25:50:07:0f:72:18:6d:23:9e:59:e2:c7: a8:18:2a:83:01:24:59:d7:05:c4:6e:e1:a1:6a:ce:c4:76:a1: 65:58:67:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERTIxMTAvBgNVBAUTKEQ4MjVBODk3MzM1ODk3QzA3RTc2OTM4MzhBNkJGMjAy NzY1ODBGMDMwHhcNMjQwNTA1MDEwOTI0WhcNMjQwNTEyMDEwOTI0WjAYMRYwFAYD VQQDEw02NjM2ZGM0NS1mNDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzHgtylfQVz0ocssFzxgTQbKgLgb5vodKwzHNIAu3MnrJVt8bedEdIUdiBXt K+M5FREB2OQbYqSbOKFwn/0hNjWSqG/G5QohJyuRS5t3UV9sd9YQnmMZhagSvdPO vsRDBr1wvkFmbQNmmW8SK6GkOGLcDbyEhS/Yh4ZnF3Dt3S/M5+oCPgIj1CZ/ld9/ 2XsTA3ZyABsDd2Boihmsm+zCc6tdJMP+s5FODbiWvoFtCf+9n9g74dLoUL3QpOS+ WNxuFtVNRg4vZ7y1DHW0wCR/uTwuSV6RYhc4jkGRLS0/Le5V2TFTZ7sEXNWVbQxV sxS4B14k2rDfu11NsGWyPDqLgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnE7Vkt IjQ7bUcdD7X1ai5nOh/zMB8GA1UdIwQYMBaAFNglqJczWJfAfnaTg4pr8gJ2WA8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURFMi9BM0E1MjEwNkFF RDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4Qi1kcE9EaW12eUFuWllE d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDV29sek5ZbDhCLWRwT0RpbXZ5QW5aWUR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURFMi9BM0E1MjEwNkFFRDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4 Qi1kcE9EaW12eUFuWllEd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3y4l5WbuRsi8YBR02/wBsSY+I/jTqyrFpVzzkI+yqHBYsvQPOKogu XgYGWIb7fFVm/kpTgDMgPESYIZpfQMlxCPI8gD458GxBhn971OMbQ3MuXM3jx5hn hfmVY00IfWmigRJ0thHCUik7bZEEPHCiTLj7bfuiq9pwfaxBMz9Idmcu3HGmZNId 9yeVts2lafpINaD6EvHHiMbyDd6ukoBkmnqHpZkutc+64n2m8Y6/bxdpaquA+uC5 jGRwtp4EK6hOd2DbVqbAr4DWziW0qkxaAwYqO70rMsezDNTPVnUlUAcPchhtI55Z 4seoGCqDASRZ1wXEbuGhas7EdqFlWGcb -----END CERTIFICATE-----Generated at Sun May 5 02:33:37 2024 by rpki-client on console-fra.rpki-client.org