$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: vS061622+DOtnULxQv3uuC7eaH0OZaVtjlamgN6J5YM= Subject key identifier: 48:16:E1:15:F2:0C:9F:0C:FE:63:2F:F9:A0:A9:BE:8F:AE:70:B5:5C Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: E8 Signing time: Tue 07 May 2024 06:09:00 +0000 Manifest this update: Tue 07 May 2024 06:08:59 +0000 Manifest next update: Tue 14 May 2024 06:08:59 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: xS4xJMtpDs4fc8hs22fQaFwjCYHMDhIj7NFpQFERim8=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: mUitWyAia7OYZSrqATEphyypaSxSHUc51lFfEosaW+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: May 7 06:08:59 2024 GMT Not After : May 14 06:08:59 2024 GMT Subject: CN=6639c57b-fa82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:f7:39:cf:b5:f3:8b:b8:16:18:93:bf:dd: 90:c5:5f:0c:e6:bb:9f:ea:f3:1a:12:f3:01:c7:f4: 6b:8c:84:9a:b9:e6:71:b6:d9:6d:e4:f1:a9:e1:ba: c8:29:7b:4b:84:9f:f3:e6:77:df:05:65:a4:b0:1a: e8:a1:f9:d9:a4:ef:9f:b9:ee:57:70:e6:f8:bd:b4: 75:7c:ec:e9:3c:36:77:fc:c3:6d:e0:0c:01:8c:50: 00:d5:f7:b0:74:45:27:56:6b:29:c3:1d:c6:bf:ce: e6:4b:8b:69:ea:11:9d:58:4c:9d:e0:c6:34:8a:1d: 32:e4:ac:8c:10:bd:00:91:13:fc:fa:b2:e7:3f:41: 68:7e:c6:5b:75:04:65:28:96:b9:8a:6f:24:58:e4: 81:03:f3:6a:a7:2f:da:bb:5d:51:2e:23:77:42:68: 0f:1b:da:ef:ce:b9:8a:f5:83:73:ef:f2:bf:04:51: e0:4d:8d:57:e2:7b:c5:03:bc:b5:f0:69:c0:98:99: 2e:f1:de:20:28:a8:d5:51:89:d5:89:e6:1b:d3:39: df:08:d4:ad:23:28:b1:56:e1:60:e0:23:d0:59:f5: 5e:93:96:71:b6:88:70:ce:9d:c4:b9:5b:4a:1b:34: 1c:cc:71:b1:7a:30:c2:8c:3b:cd:87:c7:07:e3:66: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:16:E1:15:F2:0C:9F:0C:FE:63:2F:F9:A0:A9:BE:8F:AE:70:B5:5C X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:2a:bf:cf:20:09:68:39:f4:20:a9:11:d1:bc:0c:68:0b:91: e9:5d:f0:f4:8b:78:0c:e5:96:48:b9:7b:9a:47:7d:bc:86:73: 26:1d:73:8a:c0:df:bf:1e:7a:c8:d7:9c:f1:c7:73:fb:61:48: 59:43:f3:5b:d8:01:31:bc:84:fd:18:ee:52:01:dd:38:46:d9: de:a1:fe:32:92:ee:48:af:2d:8b:6d:91:51:81:63:1a:68:18: 1d:b0:7b:9c:b0:c4:0a:f9:1e:43:f9:23:00:92:43:5f:76:a6: 85:36:16:6e:64:06:81:25:de:60:f9:70:c8:06:21:f3:58:56: b1:31:88:ce:aa:dc:95:bc:64:c3:9e:a2:93:5d:f7:c1:f3:a8: 88:af:1d:93:44:d3:46:a1:07:63:18:15:71:3d:88:2c:69:a7: e0:ed:9e:2d:b4:db:01:01:ee:05:7c:c3:91:3f:86:fc:f3:47: be:ab:c0:0d:b6:c0:dc:c5:ad:73:58:ad:a2:c7:e0:e1:44:b3: 94:39:88:f8:99:0a:53:62:13:a9:0c:96:56:e9:d0:1e:79:a7: 8c:bf:cb:bc:48:9a:10:e0:ac:02:57:80:ca:ec:0e:15:7b:c5: 60:40:27:9f:44:03:1c:e2:2e:b3:ad:73:09:e5:b9:a7:5a:59: b3:34:94:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjQwNTA3MDYwODU5WhcNMjQwNTE0MDYwODU5WjAYMRYwFAYD VQQDEw02NjM5YzU3Yi1mYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXD3Oc+184u4FhiTv92QxV8M5ruf6vMaEvMBx/RrjISaueZxttlt5PGp4brI KXtLhJ/z5nffBWWksBroofnZpO+fue5XcOb4vbR1fOzpPDZ3/MNt4AwBjFAA1few dEUnVmspwx3Gv87mS4tp6hGdWEyd4MY0ih0y5KyMEL0AkRP8+rLnP0FofsZbdQRl KJa5im8kWOSBA/Nqpy/au11RLiN3QmgPG9rvzrmK9YNz7/K/BFHgTY1X4nvFA7y1 8GnAmJku8d4gKKjVUYnVieYb0znfCNStIyixVuFg4CPQWfVek5Zxtohwzp3EuVtK GzQczHGxejDCjDvNh8cH42anVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgW4RXy DJ8M/mMv+aCpvo+ucLVcMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYKr/PIAloOfQgqRHRvAxoC5HpXfD0i3gM5ZZIuXuaR328hnMmHXOK wN+/HnrI15zxx3P7YUhZQ/Nb2AExvIT9GO5SAd04Rtneof4yku5Iry2LbZFRgWMa aBgdsHucsMQK+R5D+SMAkkNfdqaFNhZuZAaBJd5g+XDIBiHzWFaxMYjOqtyVvGTD nqKTXffB86iIrx2TRNNGoQdjGBVxPYgsaafg7Z4ttNsBAe4FfMORP4b880e+q8AN tsDcxa1zWK2ix+DhRLOUOYj4mQpTYhOpDJZW6dAeeaeMv8u8SJoQ4KwCV4DK7A4V e8VgQCefRAMc4i6zrXMJ5bmnWlmzNJS4 -----END CERTIFICATE-----Generated at Tue May 7 07:13:01 2024 by rpki-client on console-ams.rpki-client.org