$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json) Hash identifier: voZslb/pUt+dklYqoSX7JTSI/CRHmyUpiXYU2ydpEPo= Subject key identifier: 6E:31:ED:2D:8D:B5:E2:EE:22:63:95:3A:9B:B7:67:32:1F:DC:0E:13 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 10D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft Manifest number: 10AF Signing time: Thu 30 May 2024 18:16:32 +0000 Manifest this update: Thu 30 May 2024 18:16:31 +0000 Manifest next update: Thu 06 Jun 2024 18:16:31 +0000 Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: YOXqZahaWxEqET9Ek4MviJeyDJJhWVny3+bNeuZT3Hw=) 2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: CelzmOchlP2Dz3iFKVdh7oENQi8hit0fX11PwKxvru4=) 3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: BtkGCdDYa1UeECa/JLpiLAVswG9vDvHkod9kZZ4Xe5w=) 4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: 9WdFqtI9mHI9yP7sgXDgPH+DJwytsWCRJ900WsAL5kI=) 5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: AKz9fqerHC9EKDI8dZROHn4hncGG5UoQFRAUeWGmd80=) 6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: ND7Ul8zLTvaUmbHgAkdXQ/wYsLwTRZjkhJ0AhZiHFg8=) 7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: PM9MENNJQLy4z4KAPPNmoHLptrO+aWSv1G5pEl9FRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4309 (0x10d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: May 30 18:16:31 2024 GMT Not After : Jun 6 18:16:31 2024 GMT Subject: CN=6658c280-ecdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:17:43:61:01:7c:e3:19:2c:4b:99:f2:56:0b: af:13:17:15:07:ce:d4:ed:d2:52:fd:0a:f2:38:c3: 1e:12:26:1d:c5:35:08:6d:5b:2d:4c:54:ce:6a:15: 5b:c9:a3:b9:14:52:3f:96:29:f6:3a:7c:a3:8c:3b: 0c:73:60:f2:6a:31:f0:2b:6f:90:9e:0d:b8:b4:d6: db:25:a0:34:56:fe:ca:05:ef:33:57:2e:81:ac:35: 39:87:2c:f2:27:8b:03:ff:55:53:20:70:bb:7d:85: 1e:ed:34:bd:9d:43:55:8c:88:84:21:ba:88:7c:23: b4:04:09:9c:16:06:70:81:99:2b:68:8a:57:49:fc: f7:6b:9f:f0:18:b1:47:79:b1:1a:4e:8d:f1:3b:fd: 9f:ab:2d:05:b7:17:66:51:60:70:06:8c:5c:73:f5: 5e:5e:0b:e8:02:02:46:4a:c6:f3:94:97:5b:c6:17: ac:38:a7:c9:f9:36:f8:23:5b:60:26:dd:47:59:05: 13:55:d4:a9:53:3a:32:11:28:e4:19:6f:38:fd:12: 9c:7b:51:05:12:fd:a4:e7:1d:0f:e5:c6:e5:a4:c2: 9f:97:f0:8c:48:38:e7:98:40:46:60:e4:0f:d1:8d: 98:75:ec:7b:73:1f:21:7a:c9:5b:5e:93:e4:c0:d4: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:ED:2D:8D:B5:E2:EE:22:63:95:3A:9B:B7:67:32:1F:DC:0E:13 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:66:39:e4:5c:af:5e:f2:d2:91:9e:1a:46:da:38:c2:f8:9a: cf:a5:3c:79:f5:d8:c2:7a:dd:f4:96:60:3e:66:94:c8:79:51: e9:8b:fe:ea:ed:e4:88:6c:2b:a2:f7:b6:2f:a4:b7:af:c8:7f: bc:ca:df:8e:dc:78:6b:c9:c2:3b:93:8a:3f:f1:28:6a:14:87: 1f:bd:a8:47:3c:37:09:dc:f0:48:44:87:4d:97:c4:ce:eb:c3: 13:19:25:14:72:5d:3c:46:ba:ab:72:52:34:86:13:b9:01:7a: 61:c6:df:c0:a8:3c:48:45:86:39:88:30:d4:90:1f:66:1a:86: 83:a5:6e:90:18:f3:13:71:52:f6:ca:bb:c6:22:76:24:ee:12: 20:24:e4:a5:76:72:73:e8:ba:8b:f1:15:15:c2:ff:e0:2c:34: ac:87:05:28:df:51:02:6a:28:d6:b0:b5:b1:4a:9c:e1:ad:36: 78:1c:69:75:31:98:83:70:cc:79:f7:25:69:02:80:df:58:09: 9f:3c:c9:df:7d:71:b8:44:27:82:22:e5:36:e9:c9:fe:c0:78: f1:09:75:d4:50:44:e7:75:f9:1f:b8:b2:cb:ad:b7:83:32:6d: 67:88:b9:8c:0f:ad:07:36:c5:2d:33:e8:57:ff:bd:6f:59:92: 85:aa:a6:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjQwNTMwMTgxNjMxWhcNMjQwNjA2MTgxNjMxWjAYMRYwFAYD VQQDEw02NjU4YzI4MC1lY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hdDYQF84xksS5nyVguvExcVB87U7dJS/QryOMMeEiYdxTUIbVstTFTOahVb yaO5FFI/lin2OnyjjDsMc2DyajHwK2+Qng24tNbbJaA0Vv7KBe8zVy6BrDU5hyzy J4sD/1VTIHC7fYUe7TS9nUNVjIiEIbqIfCO0BAmcFgZwgZkraIpXSfz3a5/wGLFH ebEaTo3xO/2fqy0FtxdmUWBwBoxcc/VeXgvoAgJGSsbzlJdbxhesOKfJ+Tb4I1tg Jt1HWQUTVdSpUzoyESjkGW84/RKce1EFEv2k5x0P5cblpMKfl/CMSDjnmEBGYOQP 0Y2Ydex7cx8heslbXpPkwNQXuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4x7S2N teLuImOVOpu3ZzIf3A4TMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArZjnkXK9e8tKRnhpG2jjC+JrPpTx59djCet30lmA+ZpTIeVHpi/7q 7eSIbCui97YvpLevyH+8yt+O3HhrycI7k4o/8ShqFIcfvahHPDcJ3PBIRIdNl8TO 68MTGSUUcl08RrqrclI0hhO5AXphxt/AqDxIRYY5iDDUkB9mGoaDpW6QGPMTcVL2 yrvGInYk7hIgJOSldnJz6LqL8RUVwv/gLDSshwUo31ECaijWsLWxSpzhrTZ4HGl1 MZiDcMx59yVpAoDfWAmfPMnffXG4RCeCIuU26cn+wHjxCXXUUETndfkfuLLLrbeD Mm1niLmMD60HNsUtM+hX/71vWZKFqqax -----END CERTIFICATE-----Generated at Thu May 30 21:49:25 2024 by rpki-client on console-ams.rpki-client.org