$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: ZxJrfH6/2yI/gw19lvTPDjly4+NES0UFG26HtVdP3XQ= Subject key identifier: D9:DA:63:FA:E9:59:D7:84:AE:97:D9:DC:36:50:BD:D0:84:97:2E:25 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 0609 Signing time: Wed 01 May 2024 00:12:39 +0000 Manifest this update: Wed 01 May 2024 00:12:39 +0000 Manifest next update: Wed 08 May 2024 00:12:39 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: tjd5zvWWnHDBmsq3uvqPwAm02lW4n20aKUOQw/z3yUs=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: hVj3Ilk8pVDIdjAHpBUPsisSqaw/aOgefgORY3UhV4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: May 1 00:12:39 2024 GMT Not After : May 8 00:12:39 2024 GMT Subject: CN=663188f7-6894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:be:c0:cf:b4:b9:a0:2f:32:d1:55:b9:ee: 4d:e4:f6:f4:90:73:2e:15:ed:56:bb:ac:4d:9c:5a: 6a:a8:a2:9c:63:31:19:8c:58:c4:36:fa:35:6e:ee: 34:b2:83:3d:ec:0a:68:c6:f8:eb:d4:46:6b:89:ea: 12:b0:11:b0:05:38:9a:5f:b5:d1:28:22:3d:9d:a1: 3d:3b:2b:19:b1:1e:d0:b1:9a:6f:66:60:1d:6b:00: 6a:f8:14:b8:b7:6d:ed:f9:7c:92:f6:02:f5:2d:8a: fb:c3:42:39:e5:51:dd:8c:b8:50:4d:49:b3:78:3f: 9b:8c:ba:1f:f3:65:3e:b0:1c:e2:1b:e2:85:85:92: 46:a6:2c:97:37:67:12:dd:a2:6c:9b:3f:67:3d:1a: 30:51:35:30:9e:d7:f3:75:20:f2:74:c9:70:3f:1e: fd:e4:5d:41:d0:9d:f6:39:ad:f8:39:86:b1:92:80: 72:ec:af:0f:98:b7:20:18:b1:af:73:86:3e:a7:4a: 72:4f:7f:0a:86:9f:0c:c9:b8:88:1c:36:b6:27:95: 87:89:9d:0d:56:53:2a:61:26:8b:dc:74:d6:be:fe: 0f:48:f9:ff:4b:1c:f9:17:29:9d:83:17:4e:56:81: 04:79:a7:c7:58:52:bf:e5:0e:e5:d9:58:ac:32:6c: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DA:63:FA:E9:59:D7:84:AE:97:D9:DC:36:50:BD:D0:84:97:2E:25 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:66:0f:f7:67:f7:b3:07:e6:1b:59:f1:10:93:ff:03:ce:01: 14:09:33:50:07:fb:ac:cb:09:90:43:f6:5f:11:6d:d1:4c:6c: 82:ac:4a:2d:df:47:8e:ad:3e:fe:ad:47:0c:15:4e:49:a1:7e: 2b:d6:e6:30:40:91:9a:47:5b:85:56:6f:23:c8:ff:93:7b:c0: ca:20:db:e9:6b:00:3e:5b:da:4f:03:eb:97:0a:98:43:62:ed: 1e:5f:8c:78:7a:e8:6e:8b:84:7b:8a:02:02:b7:21:b7:df:56: 66:fa:97:17:61:f6:6c:e4:29:08:c9:b3:85:f1:2a:19:91:77: 0c:d6:d8:56:22:45:c4:dd:c2:42:e0:34:d1:6e:11:52:69:51: f4:37:de:8d:f4:33:6b:43:99:df:1e:9a:4c:b6:b6:6f:5a:4f: be:12:8b:9a:c2:56:f9:36:c4:ce:e8:cb:32:00:72:f2:83:24: 59:d2:09:6f:bf:d2:7c:2d:c7:c6:00:7a:ba:c5:ef:ec:35:bd: 24:b6:d8:96:be:a9:5e:67:6d:75:f3:82:b7:35:37:83:02:4a: 0a:7f:6e:8e:14:c7:5f:1a:41:4f:c7:61:4e:91:41:62:cc:6e: 8e:e4:c4:ac:07:4b:91:d0:da:2d:e3:59:1e:f1:7e:49:65:ab: 1f:ee:2d:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjQwNTAxMDAxMjM5WhcNMjQwNTA4MDAxMjM5WjAYMRYwFAYD VQQDEw02NjMxODhmNy02ODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xS+wM+0uaAvMtFVue5N5Pb0kHMuFe1Wu6xNnFpqqKKcYzEZjFjENvo1bu40 soM97Apoxvjr1EZrieoSsBGwBTiaX7XRKCI9naE9OysZsR7QsZpvZmAdawBq+BS4 t23t+XyS9gL1LYr7w0I55VHdjLhQTUmzeD+bjLof82U+sBziG+KFhZJGpiyXN2cS 3aJsmz9nPRowUTUwntfzdSDydMlwPx795F1B0J32Oa34OYaxkoBy7K8PmLcgGLGv c4Y+p0pyT38Khp8MybiIHDa2J5WHiZ0NVlMqYSaL3HTWvv4PSPn/Sxz5FymdgxdO VoEEeafHWFK/5Q7l2VisMmzD4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnaY/rp WdeErpfZ3DZQvdCEly4lMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcZg/3Z/ezB+YbWfEQk/8DzgEUCTNQB/usywmQQ/ZfEW3RTGyCrEot 30eOrT7+rUcMFU5JoX4r1uYwQJGaR1uFVm8jyP+Te8DKINvpawA+W9pPA+uXCphD Yu0eX4x4euhui4R7igICtyG331Zm+pcXYfZs5CkIybOF8SoZkXcM1thWIkXE3cJC 4DTRbhFSaVH0N96N9DNrQ5nfHppMtrZvWk++Eouawlb5NsTO6MsyAHLygyRZ0glv v9J8LcfGAHq6xe/sNb0kttiWvqleZ21184K3NTeDAkoKf26OFMdfGkFPx2FOkUFi zG6O5MSsB0uR0Not41ke8X5JZasf7i0x -----END CERTIFICATE-----Generated at Wed May 1 01:04:06 2024 by rpki-client on console-fra.rpki-client.org