$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json) Hash identifier: O3Djo9XrXKbf616IWgnNznc2dkJG81SN33m/vHQfnik= Subject key identifier: D3:D5:36:B8:D5:CD:5F:12:A5:5B:B7:BA:9F:27:3A:E2:8C:3E:51:2B Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft Manifest number: 0157 Signing time: Sat 01 Jun 2024 06:06:56 +0000 Manifest this update: Sat 01 Jun 2024 06:06:56 +0000 Manifest next update: Sat 08 Jun 2024 06:06:56 +0000 Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: r0jkN/glSaQmC1pK8nRVGSPSpqsRyC1FamnAHsAMox4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Validity Not Before: Jun 1 06:06:56 2024 GMT Not After : Jun 8 06:06:56 2024 GMT Subject: CN=665aba80-e037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:99:11:9d:03:b2:7b:41:d6:16:25:51:36:b2: c9:41:eb:a8:3e:17:88:57:ca:39:ed:d7:23:05:eb: 66:89:41:af:f3:b4:c6:ec:24:ba:9d:b6:58:69:e7: 70:5b:3a:8b:d9:f4:c8:b1:31:52:d8:3d:e1:c9:ef: 06:59:90:b2:88:78:3d:34:97:7f:9a:0f:47:e5:9d: 16:fe:bd:22:3f:81:56:87:38:ea:6f:c7:52:87:ca: 88:47:a4:09:18:d8:2b:9d:e5:12:2e:f9:40:35:53: ac:10:d5:68:d9:48:1c:ed:9e:83:5c:d4:88:fd:fb: 95:b2:ee:04:60:96:1f:62:3a:49:f1:1b:6b:63:13: 3a:98:1b:17:60:78:93:87:5a:4c:94:5f:51:98:1f: 5c:91:0b:64:e7:c4:8c:b5:10:4a:20:24:92:a1:09: 47:09:91:9e:31:45:64:42:90:23:ac:c8:8b:b5:2b: 5f:fc:8d:55:40:7d:18:bd:96:87:cb:93:bf:cb:c1: 96:aa:ca:fb:74:5a:bd:e5:e0:74:e2:81:b6:b6:b1: 18:9b:f6:23:b2:54:52:a5:d1:87:e4:2d:44:4c:dc: 2f:b2:2c:45:1f:0e:b2:51:e8:fc:13:94:4d:b7:f2: be:86:bd:91:8e:ac:e0:6c:ce:31:b6:d6:1b:3b:92: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D5:36:B8:D5:CD:5F:12:A5:5B:B7:BA:9F:27:3A:E2:8C:3E:51:2B X509v3 Authority Key Identifier: keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:bb:8f:0d:bc:30:08:bd:a5:96:f2:ee:03:b4:9f:77:c8:07: 9a:e3:fb:d3:98:3f:55:1c:e8:d9:ba:6a:8d:2a:b1:3b:1c:9b: df:7b:64:7d:31:2f:9f:62:4d:ec:6b:f0:a4:a9:38:7a:7a:80: b9:09:df:3c:b6:a6:87:6f:ac:3b:80:09:68:f8:ea:2e:61:77: 28:18:df:8f:92:88:01:2b:50:91:aa:e8:e9:c5:78:1c:e4:d1: 96:5b:a0:cc:36:f3:d5:cc:f7:a6:10:18:7b:52:e0:6e:d8:ee: f4:b9:01:be:5b:d6:08:dc:59:ca:9a:5c:23:ef:06:5d:d3:60: 4d:f5:5f:40:a9:13:c2:8b:5a:31:42:cc:58:c4:81:28:04:73: bb:e6:7e:53:8f:ba:d5:48:0d:60:ba:b4:33:71:e4:2a:44:4c: aa:7d:b2:44:1e:c4:de:bb:ca:24:88:7d:df:93:dc:90:bf:03: c6:f8:8b:b0:1d:02:ef:73:94:6f:19:38:ce:43:74:70:66:c1: 40:eb:98:7f:f5:43:e4:97:72:a3:55:0a:28:ca:10:48:ce:53: f0:5f:91:87:04:05:88:68:c9:ba:9b:79:29:b8:0a:60:ba:c5: 18:7f:c7:3d:c8:78:4b:3f:2e:59:3f:ba:bc:c7:cd:fc:ea:e4: 13:b3:4e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD RDU1QTk1NTgwHhcNMjQwNjAxMDYwNjU2WhcNMjQwNjA4MDYwNjU2WjAYMRYwFAYD VQQDEw02NjVhYmE4MC1lMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pkRnQOye0HWFiVRNrLJQeuoPheIV8o57dcjBetmiUGv87TG7CS6nbZYaedw WzqL2fTIsTFS2D3hye8GWZCyiHg9NJd/mg9H5Z0W/r0iP4FWhzjqb8dSh8qIR6QJ GNgrneUSLvlANVOsENVo2Ugc7Z6DXNSI/fuVsu4EYJYfYjpJ8RtrYxM6mBsXYHiT h1pMlF9RmB9ckQtk58SMtRBKICSSoQlHCZGeMUVkQpAjrMiLtStf/I1VQH0YvZaH y5O/y8GWqsr7dFq95eB04oG2trEYm/YjslRSpdGH5C1ETNwvsixFHw6yUej8E5RN t/K+hr2RjqzgbM4xttYbO5KZuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPVNrjV zV8SpVu3up8nOuKMPlErMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN a3MxVUEzdHBzRVROVmFsVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiu48NvDAIvaWW8u4DtJ93yAea4/vTmD9VHOjZumqNKrE7HJvfe2R9 MS+fYk3sa/CkqTh6eoC5Cd88tqaHb6w7gAlo+OouYXcoGN+PkogBK1CRqujpxXgc 5NGWW6DMNvPVzPemEBh7UuBu2O70uQG+W9YI3FnKmlwj7wZd02BN9V9AqRPCi1ox QsxYxIEoBHO75n5Tj7rVSA1gurQzceQqREyqfbJEHsTeu8okiH3fk9yQvwPG+Iuw HQLvc5RvGTjOQ3RwZsFA65h/9UPkl3KjVQooyhBIzlPwX5GHBAWIaMm6m3kpuApg usUYf8c9yHhLPy5ZP7q8x8386uQTs07Z -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:21 2024 by rpki-client on console-fra.rpki-client.org