$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: FKOAHqF3Q80PzalFX/I5pPmSLTd55IvX5grabLpd2oo= Subject key identifier: DF:D1:BD:0E:67:24:1F:34:33:5A:4C:91:95:79:4E:9A:FE:58:28:09 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 0208 Signing time: Tue 07 May 2024 04:08:45 +0000 Manifest this update: Tue 07 May 2024 04:08:45 +0000 Manifest next update: Tue 14 May 2024 04:08:45 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: qMuEMs0Gxpq25XrWhYg95e2fMxx85E/ysSAW3gVHKWQ=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: nnSO9venyDAAa+6GPmHgyrg3uKMxgPIF3inlZFGwpdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: May 7 04:08:45 2024 GMT Not After : May 14 04:08:45 2024 GMT Subject: CN=6639a94d-8b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:3b:69:c2:66:2f:f8:96:65:b5:c8:52:43: b5:42:22:30:87:e8:2f:ed:d2:e5:de:a0:35:90:09: 19:28:09:b8:a5:ba:09:c5:69:8f:88:38:e9:8e:75: 5a:73:7f:92:47:b9:b4:17:b6:1f:00:64:f6:33:8b: 22:f8:63:87:56:6e:3d:c8:72:4d:20:89:5e:d8:5c: 65:68:ae:81:e2:4b:6e:16:e7:8f:cf:dd:d6:00:5a: 7d:23:c5:c2:e0:0e:76:f3:47:43:c2:61:79:32:19: f1:33:f1:d4:71:1f:a6:da:c1:3e:70:f8:30:f8:ab: 8f:6b:89:9e:d7:9a:df:bc:82:58:4b:54:4f:6b:58: 51:78:14:d0:e4:f1:2f:d7:c4:ea:43:a6:6e:5a:f4: 39:83:ee:0e:4b:81:78:74:dd:f6:c3:df:32:a2:10: 79:3b:0f:60:6e:c5:d1:b7:dd:ad:5f:f8:86:ea:fe: 27:be:0f:a5:bf:2d:73:74:bf:a2:23:37:a2:04:1e: 67:44:78:2f:fe:25:75:88:70:99:55:48:cd:bb:e6: 94:4a:09:c0:49:30:77:28:0e:19:a6:d0:0a:c1:33: cc:9f:7a:5e:c6:f8:3d:ae:1a:0c:a1:5b:e9:1e:69: 24:df:25:9f:93:b4:ec:17:03:48:e3:4d:87:2e:98: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D1:BD:0E:67:24:1F:34:33:5A:4C:91:95:79:4E:9A:FE:58:28:09 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5f:df:87:8a:3e:e3:4d:41:9b:a1:d5:24:37:9e:2b:88:ee: 3e:78:fd:68:ca:7e:b5:c4:df:25:5a:c5:b7:10:bc:fc:62:ab: ef:5a:64:13:0d:71:b9:a9:03:92:bd:fd:5e:07:0d:6e:b9:f9: f2:1a:10:e5:4e:15:63:ae:f6:ab:8f:4a:21:8f:f8:69:00:8c: 5e:44:53:15:88:c4:05:27:8f:e6:b4:96:5e:a9:7a:41:ef:55: c9:34:53:b9:17:0c:db:eb:b0:77:21:2b:90:c1:27:48:2e:49: 9a:ec:c2:9e:ec:0d:7f:3b:e3:dc:3b:ca:74:4e:c4:ce:16:51: c7:03:7b:31:9d:b9:7b:35:8f:6e:dc:54:63:10:ea:34:df:92: 80:8c:32:43:cf:4d:eb:8d:6b:c1:5a:48:f8:39:59:e4:b0:c0: e7:a4:59:f7:45:39:6e:1b:d5:c5:70:3e:2d:f1:b0:ca:d9:46: 45:52:ef:a2:fb:54:1c:5d:74:26:c4:2e:66:92:30:24:4f:6a: 40:88:ba:fc:fc:05:fa:e2:f5:52:c0:5a:be:45:bd:49:51:c3: 2e:83:b1:7a:52:70:da:ed:f9:31:89:3a:ed:06:e8:56:92:c0: 00:7a:2b:28:11:65:64:84:51:06:93:92:0a:d4:88:97:bf:03: 46:a1:e2:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjQwNTA3MDQwODQ1WhcNMjQwNTE0MDQwODQ1WjAYMRYwFAYD VQQDEw02NjM5YTk0ZC04YjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRo7acJmL/iWZbXIUkO1QiIwh+gv7dLl3qA1kAkZKAm4pboJxWmPiDjpjnVa c3+SR7m0F7YfAGT2M4si+GOHVm49yHJNIIle2FxlaK6B4ktuFuePz93WAFp9I8XC 4A5280dDwmF5MhnxM/HUcR+m2sE+cPgw+KuPa4me15rfvIJYS1RPa1hReBTQ5PEv 18TqQ6ZuWvQ5g+4OS4F4dN32w98yohB5Ow9gbsXRt92tX/iG6v4nvg+lvy1zdL+i IzeiBB5nRHgv/iV1iHCZVUjNu+aUSgnASTB3KA4ZptAKwTPMn3pexvg9rhoMoVvp Hmkk3yWfk7TsFwNI402HLpi9wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/RvQ5n JB80M1pMkZV5Tpr+WCgJMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZX9+Hij7jTUGbodUkN54riO4+eP1oyn61xN8lWsW3ELz8YqvvWmQT DXG5qQOSvf1eBw1uufnyGhDlThVjrvarj0ohj/hpAIxeRFMViMQFJ4/mtJZeqXpB 71XJNFO5Fwzb67B3ISuQwSdILkma7MKe7A1/O+PcO8p0TsTOFlHHA3sxnbl7NY9u 3FRjEOo035KAjDJDz03rjWvBWkj4OVnksMDnpFn3RTluG9XFcD4t8bDK2UZFUu+i +1QcXXQmxC5mkjAkT2pAiLr8/AX64vVSwFq+Rb1JUcMug7F6UnDa7fkxiTrtBuhW ksAAeisoEWVkhFEGk5IK1IiXvwNGoeKQ -----END CERTIFICATE-----Generated at Tue May 7 05:40:31 2024 by rpki-client on console-fra.rpki-client.org