$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: Lfg2zPKjX9IjK9XhrMWSy3mQzU/dI8pI/dy6Ba/4Q18= Subject key identifier: 4C:E8:FA:EE:37:B8:07:31:68:1C:42:B0:48:2E:D5:94:EE:E2:9B:91 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0B52 Signing time: Mon 06 May 2024 19:49:47 +0000 Manifest this update: Mon 06 May 2024 19:49:47 +0000 Manifest next update: Mon 13 May 2024 19:49:47 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: zx1HI3in9v3zeckUz1tlfYXmoXfnqv7zc9JRZbHqCN0=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: AXlGmtPAr/+ZjGZEvsdIuhh3ValXH523UgvEJrH07C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: May 6 19:49:47 2024 GMT Not After : May 13 19:49:47 2024 GMT Subject: CN=6639345b-ab1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:2c:94:00:1f:1d:6c:f4:72:7d:34:04:13: 23:b6:6f:6a:a0:7e:c2:58:fe:26:da:0b:9a:aa:23: de:b5:44:65:99:38:8e:c1:11:2d:4e:8c:6c:7c:33: 6d:37:22:d4:21:63:11:cb:f9:91:f2:06:d6:cf:55: fe:d6:6b:e0:37:4c:1d:81:a2:27:8b:a1:11:16:92: 25:96:df:62:da:25:5c:68:ca:ef:8f:66:33:b6:2d: 11:6c:81:1d:b8:15:c2:9c:c9:b8:df:9d:3e:3c:df: c4:22:35:36:14:42:fc:09:b4:31:54:1f:51:1c:4c: f5:11:86:ad:02:81:d8:04:1c:df:b4:0c:b8:21:3f: 0c:29:a6:a0:0a:d6:73:9b:e3:ef:d2:87:80:50:5d: 1e:37:3c:eb:e9:1f:0e:e8:c4:e6:8c:c1:15:f7:ab: ce:e6:13:9b:a9:14:cb:ca:fd:cb:7a:6d:f9:4f:80: 41:32:47:a0:d0:3e:17:cd:fc:2f:e6:e8:6e:40:b7: 62:35:4e:f0:a0:f5:b5:d0:a8:c2:e3:69:78:25:3a: 50:cf:af:44:e2:07:56:9b:d6:d7:f7:d8:f9:f7:0e: f2:43:5c:39:67:f6:b9:29:b3:4b:d7:a2:10:ed:fa: a0:d1:7c:e9:bd:f3:f2:a6:d4:d1:47:df:b3:cb:88: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E8:FA:EE:37:B8:07:31:68:1C:42:B0:48:2E:D5:94:EE:E2:9B:91 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:67:e1:57:a8:d9:0d:a3:be:c0:a8:7e:99:69:eb:ea:44:6c: ff:36:2f:ac:ac:2c:56:c3:8d:dc:13:43:1e:60:bc:a6:6b:af: 14:a6:3e:f4:14:a4:83:19:95:e7:a3:ac:d6:62:8c:77:df:f6: 5d:cf:88:68:b1:51:c8:23:57:40:6a:39:bd:b2:46:a4:87:b5: 05:1b:10:63:13:6c:2d:c8:16:fc:3e:52:4c:c8:0f:ae:5b:d0: 45:a5:65:0c:66:74:e9:0a:ea:43:5b:76:6a:0c:7a:13:82:f8: d0:3f:45:79:3c:18:8c:f3:a2:6b:f1:c4:7d:32:ef:14:e0:80: 4d:ab:33:c9:53:2d:06:7f:fb:94:04:ac:98:eb:a4:f0:dd:dc: 4d:51:fd:ee:2a:bc:be:a2:0e:d8:f7:51:bc:29:60:09:64:de: ec:b0:6c:cd:35:09:ae:ed:8b:07:45:55:c6:f4:27:fb:33:6d: ca:35:5d:de:ba:2e:0a:23:56:33:70:98:23:cf:94:a0:17:7e: 6a:73:94:e9:29:e5:26:83:d1:75:1f:e4:25:d3:7b:7e:30:cb: 18:a2:62:71:02:78:6b:77:c5:88:7c:8b:07:53:87:83:80:57: d9:20:ea:39:1f:09:9f:e8:8a:71:79:49:bb:3f:56:fe:c4:39: 17:38:de:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjQwNTA2MTk0OTQ3WhcNMjQwNTEzMTk0OTQ3WjAYMRYwFAYD VQQDEw02NjM5MzQ1Yi1hYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPsslAAfHWz0cn00BBMjtm9qoH7CWP4m2guaqiPetURlmTiOwREtToxsfDNt NyLUIWMRy/mR8gbWz1X+1mvgN0wdgaIni6ERFpIllt9i2iVcaMrvj2Yzti0RbIEd uBXCnMm4350+PN/EIjU2FEL8CbQxVB9RHEz1EYatAoHYBBzftAy4IT8MKaagCtZz m+Pv0oeAUF0eNzzr6R8O6MTmjMEV96vO5hObqRTLyv3Lem35T4BBMkeg0D4Xzfwv 5uhuQLdiNU7woPW10KjC42l4JTpQz69E4gdWm9bX99j59w7yQ1w5Z/a5KbNL16IQ 7fqg0XzpvfPyptTRR9+zy4ghGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzo+u43 uAcxaBxCsEgu1ZTu4puRMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYZ+FXqNkNo77AqH6ZaevqRGz/Ni+srCxWw43cE0MeYLyma68Upj70 FKSDGZXno6zWYox33/Zdz4hosVHII1dAajm9skakh7UFGxBjE2wtyBb8PlJMyA+u W9BFpWUMZnTpCupDW3ZqDHoTgvjQP0V5PBiM86Jr8cR9Mu8U4IBNqzPJUy0Gf/uU BKyY66Tw3dxNUf3uKry+og7Y91G8KWAJZN7ssGzNNQmu7YsHRVXG9Cf7M23KNV3e ui4KI1YzcJgjz5SgF35qc5TpKeUmg9F1H+Ql03t+MMsYomJxAnhrd8WIfIsHU4eD gFfZIOo5Hwmf6IpxeUm7P1b+xDkXON4f -----END CERTIFICATE-----Generated at Mon May 6 22:41:00 2024 by rpki-client on console-ams.rpki-client.org