$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: FFocF20Mn4Rq459iTDjllukJ55hVyX3M7pYTcXU1vT4= Subject key identifier: 00:AD:FD:62:98:99:1B:19:8D:86:98:AE:B2:07:5D:2B:81:66:83:CB Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: E6 Signing time: Sun 05 May 2024 06:02:26 +0000 Manifest this update: Sun 05 May 2024 06:02:25 +0000 Manifest next update: Sun 12 May 2024 06:02:25 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: CI358y4FwVPcJDIpRLIPPUeE1Qgy0c9+lJaOXHmWVIw=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: GAnumIiRmCLh007aW5B9KGyssfw0NgLo3NksPvf73Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: May 5 06:02:25 2024 GMT Not After : May 12 06:02:25 2024 GMT Subject: CN=663720f2-3f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7c:f7:eb:2e:a8:af:54:48:c6:a9:ba:9b:d0: ed:1a:80:d3:ef:18:38:dc:45:0a:67:8b:77:d3:9c: 3d:58:51:3f:56:66:55:a5:43:ad:ff:f9:e3:b8:89: 01:cc:50:a5:82:4e:aa:a6:e7:35:db:a8:b6:67:d6: a4:fe:fa:8d:b8:c9:17:9f:e8:7a:e8:bd:9d:90:9b: 24:08:a4:f6:cd:14:5a:cb:cf:4e:db:c4:d2:71:20: 92:79:f9:2f:47:0d:39:1b:a4:5f:5c:18:bd:8e:3c: 83:ef:6a:3f:f9:f5:a1:e3:9f:a4:7a:ea:44:45:a4: 09:e0:bb:47:1c:3d:49:ee:5a:dc:10:a4:9b:4b:b6: 3b:3d:b3:6b:6a:51:3a:41:00:a0:8d:a9:c5:ba:81: ac:86:4d:5c:d7:49:5b:66:62:4b:18:5d:ca:46:6a: e6:84:ac:ee:c9:4e:df:01:1f:ed:7d:b4:e0:f3:c2: 3c:ad:9f:65:7d:d2:d7:15:40:ce:58:2e:1a:16:2a: 20:c5:c6:e8:e2:93:31:92:6c:ff:70:af:b7:30:ab: 35:2e:d8:1d:e1:1c:1e:02:4b:25:59:6f:b8:a6:0a: 74:17:af:77:1b:a1:55:8e:60:b8:b2:10:b7:09:75: f4:b4:64:fc:cd:6e:3e:69:c9:df:8a:71:50:6b:1a: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AD:FD:62:98:99:1B:19:8D:86:98:AE:B2:07:5D:2B:81:66:83:CB X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:01:8e:28:be:34:f5:ff:58:f2:6e:b6:fe:71:23:ca:5d:41: 5f:ae:15:7f:06:f8:37:5e:82:b9:27:fa:bb:44:b7:28:dd:32: b3:f5:38:44:d1:b0:1b:c0:45:4a:ae:b4:60:94:6e:6f:19:2b: 13:e5:44:2a:0c:a2:72:72:0a:84:6e:23:ac:86:8b:5e:03:aa: e0:14:03:06:28:13:39:17:e8:77:d1:02:50:89:8b:18:b5:9e: b8:3d:9e:8c:f7:8c:d7:bc:74:2b:12:d6:8b:69:e9:ff:33:78: 43:77:12:24:36:b8:ac:dc:ec:2c:61:77:d4:c0:81:ff:99:95: c2:24:7d:0d:bd:95:62:0b:90:ef:cf:9f:72:83:d5:4a:9a:cf: 7a:69:96:1f:88:40:4f:eb:0c:66:07:d6:87:53:8e:d8:1b:f9: 3a:2c:ed:14:a0:ac:e5:17:de:53:fb:a1:2e:e4:7f:8f:a7:2a: a4:07:1d:c9:e4:33:9d:45:22:87:d6:f6:2c:0d:7a:b9:02:89: d6:7a:5c:b9:69:60:0a:4b:63:5e:03:91:87:77:5b:13:d9:b9: e0:dd:23:c5:17:f2:bf:8a:4b:a2:e5:f0:99:74:26:75:73:15: c2:b0:30:50:0d:c2:c3:13:31:e1:a4:ff:29:97:ae:d2:b2:d2: 00:c0:e9:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjQwNTA1MDYwMjI1WhcNMjQwNTEyMDYwMjI1WjAYMRYwFAYD VQQDEw02NjM3MjBmMi0zZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53z36y6or1RIxqm6m9DtGoDT7xg43EUKZ4t305w9WFE/VmZVpUOt//njuIkB zFClgk6qpuc126i2Z9ak/vqNuMkXn+h66L2dkJskCKT2zRRay89O28TScSCSefkv Rw05G6RfXBi9jjyD72o/+fWh45+keupERaQJ4LtHHD1J7lrcEKSbS7Y7PbNralE6 QQCgjanFuoGshk1c10lbZmJLGF3KRmrmhKzuyU7fAR/tfbTg88I8rZ9lfdLXFUDO WC4aFiogxcbo4pMxkmz/cK+3MKs1Ltgd4RweAkslWW+4pgp0F693G6FVjmC4shC3 CXX0tGT8zW4+acnfinFQaxo8NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACt/WKY mRsZjYaYrrIHXSuBZoPLMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMAY4ovjT1/1jybrb+cSPKXUFfrhV/Bvg3XoK5J/q7RLco3TKz9ThE 0bAbwEVKrrRglG5vGSsT5UQqDKJycgqEbiOshoteA6rgFAMGKBM5F+h30QJQiYsY tZ64PZ6M94zXvHQrEtaLaen/M3hDdxIkNris3OwsYXfUwIH/mZXCJH0NvZViC5Dv z59yg9VKms96aZYfiEBP6wxmB9aHU47YG/k6LO0UoKzlF95T+6Eu5H+PpyqkBx3J 5DOdRSKH1vYsDXq5AonWely5aWAKS2NeA5GHd1sT2bng3SPFF/K/ikui5fCZdCZ1 cxXCsDBQDcLDEzHhpP8pl67SstIAwOla -----END CERTIFICATE-----Generated at Sun May 5 08:21:11 2024 by rpki-client on console-ams.rpki-client.org