$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: 7bh1XXU0WN3X0aD0lU33EAmOLsuh06eaP/g0L2GQFbk= Subject key identifier: 54:B0:AA:2B:7E:68:06:54:A1:59:53:56:73:02:12:67:CD:87:1F:4D Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0D55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0D4E Signing time: Wed 24 Apr 2024 18:41:25 +0000 Manifest this update: Wed 24 Apr 2024 18:41:24 +0000 Manifest next update: Wed 01 May 2024 18:41:24 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: NPO7DTXIPPqZLn0QmymY7SyXrC8nLv42/nhv6EJgrvw=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: 5buA2WeoUmdSEg8J7PUFYkUPJf1ClP5BXpGQ07CrsXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Apr 24 18:41:24 2024 GMT Not After : May 1 18:41:24 2024 GMT Subject: CN=66295255-cc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:ac:8c:74:18:33:6c:22:3b:43:0d:f5:44: 38:ff:25:a7:5c:96:e5:6c:f4:cd:a7:6a:7a:e7:e5: 71:bb:89:8f:67:2e:88:0d:35:4a:f9:14:86:9c:14: 7f:69:61:cd:d8:af:4c:f0:e6:40:b7:55:aa:6f:e3: c0:61:b8:b5:88:6e:64:9c:56:f3:6a:1d:6c:59:ad: 25:c9:41:1b:eb:cc:01:b0:5e:42:a0:40:d5:e3:44: 46:dc:cf:7c:d5:38:c6:be:d3:3e:91:c4:94:6a:63: e2:6e:3e:e6:52:27:44:8d:40:6d:12:8a:03:97:3e: 48:c1:6a:75:a6:67:3a:83:5d:a0:aa:21:c9:89:89: 0a:fe:81:48:82:d2:d4:36:0d:8f:74:7f:55:25:73: ed:97:e9:3f:24:12:e9:0d:9a:cb:db:44:0c:f7:8c: 08:64:a2:65:62:8b:c6:0e:9f:ff:1f:65:1c:ad:4a: 4d:c5:50:7b:66:d4:7e:59:b3:77:3b:70:26:b5:6b: de:ca:6c:88:a9:81:25:04:c8:6d:98:59:81:e9:1a: 9e:ce:15:5e:0c:ba:c9:8e:4b:3a:9a:fe:70:7d:c9: 87:84:90:1f:f2:22:a4:3e:66:c0:1c:b2:fc:98:a1: 81:4a:03:90:13:4e:59:24:d5:a3:f5:2a:73:6e:5d: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B0:AA:2B:7E:68:06:54:A1:59:53:56:73:02:12:67:CD:87:1F:4D X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:de:c3:3d:8e:f1:f9:c5:0b:e5:e6:b3:8c:c5:9a:6b:26:8a: 1f:18:a1:50:d5:3f:fe:07:e9:9d:cd:11:a9:cf:76:25:23:97: 58:ed:b8:a4:0f:e4:8d:9e:2b:67:31:5a:7b:bd:67:83:01:a9: 9b:fe:b1:9b:20:3a:12:4f:67:8f:a6:0a:1a:56:37:8c:59:10: 80:e7:63:30:a1:0e:8e:92:89:cc:06:2f:b0:ab:e8:96:94:87: ea:83:4c:52:38:11:9f:95:f9:2f:29:ae:93:27:fd:ee:6d:bd: 5b:7d:c6:8e:ae:24:c4:ad:34:21:4f:9c:5d:34:f8:2b:b3:f8: 11:55:62:b4:2f:d1:d0:9b:b9:63:c6:12:e1:d8:b6:9d:1d:ab: 40:c7:87:79:10:4a:68:da:32:e4:3b:07:3d:ea:48:a9:c4:c6: fa:56:0d:31:6a:28:9a:92:8b:0e:b8:23:72:07:1d:63:35:cb: 02:31:bc:9a:4b:f5:27:98:20:dd:67:92:b6:c6:b4:a4:1c:d0: e2:75:7b:f8:10:fe:90:e0:15:6a:ab:c6:ba:c7:aa:c5:d2:e9: 57:59:71:c7:a8:71:e5:70:4c:d5:14:3c:d1:34:f7:4a:5f:a8: c4:8b:92:98:50:1a:52:63:96:54:d4:3c:c4:d0:94:d0:d6:9c: 66:0b:30:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjQwNDI0MTg0MTI0WhcNMjQwNTAxMTg0MTI0WjAYMRYwFAYD VQQDEw02NjI5NTI1NS1jYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHCsjHQYM2wiO0MN9UQ4/yWnXJblbPTNp2p65+Vxu4mPZy6IDTVK+RSGnBR/ aWHN2K9M8OZAt1Wqb+PAYbi1iG5knFbzah1sWa0lyUEb68wBsF5CoEDV40RG3M98 1TjGvtM+kcSUamPibj7mUidEjUBtEooDlz5IwWp1pmc6g12gqiHJiYkK/oFIgtLU Ng2PdH9VJXPtl+k/JBLpDZrL20QM94wIZKJlYovGDp//H2UcrUpNxVB7ZtR+WbN3 O3AmtWveymyIqYElBMhtmFmB6RqezhVeDLrJjks6mv5wfcmHhJAf8iKkPmbAHLL8 mKGBSgOQE05ZJNWj9Spzbl381QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSwqit+ aAZUoVlTVnMCEmfNhx9NMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm3sM9jvH5xQvl5rOMxZprJoofGKFQ1T/+B+mdzRGpz3YlI5dY7bik D+SNnitnMVp7vWeDAamb/rGbIDoST2ePpgoaVjeMWRCA52MwoQ6OkonMBi+wq+iW lIfqg0xSOBGflfkvKa6TJ/3ubb1bfcaOriTErTQhT5xdNPgrs/gRVWK0L9HQm7lj xhLh2LadHatAx4d5EEpo2jLkOwc96kipxMb6Vg0xaiiakosOuCNyBx1jNcsCMbya S/UnmCDdZ5K2xrSkHNDidXv4EP6Q4BVqq8a6x6rF0ulXWXHHqHHlcEzVFDzRNPdK X6jEi5KYUBpSY5ZU1DzE0JTQ1pxmCzDI -----END CERTIFICATE-----Generated at Wed Apr 24 21:18:23 2024 by rpki-client on console-ams.rpki-client.org