$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft File: _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json) Hash identifier: NJqZWl5B3L2YIVrZf41Tm/t1nG7NflnY3eH5vPxil1k= Subject key identifier: DE:04:E2:78:BB:9A:3E:A3:A1:7C:7B:08:49:CE:9F:9C:B5:E2:80:D0 Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Certificate serial: 08B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft Manifest number: 08AB Signing time: Sat 18 May 2024 21:30:31 +0000 Manifest this update: Sat 18 May 2024 21:30:30 +0000 Manifest next update: Sat 25 May 2024 21:30:30 +0000 Files and hashes: 1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: 9S0Mql0mBhBMApisxdj/3kISJ47VX3GacDFgoN+pr/g=) 2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: 8e98CKDKPlUYkaS3gFpmFg+52wx/pHC0SDMOErN/wvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Validity Not Before: May 18 21:30:30 2024 GMT Not After : May 25 21:30:30 2024 GMT Subject: CN=66491df7-043b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5f:11:c5:8f:d7:f1:88:ab:ee:b5:35:c1:70: 08:1b:4c:b1:38:08:17:dc:a9:72:b3:e0:4c:e7:ed: ba:34:19:71:be:ef:62:c5:b0:3c:3a:42:30:4d:dd: 1f:9c:dd:31:71:d4:3f:27:ab:67:28:96:c9:38:59: 31:6e:56:d2:59:8b:c0:8c:8e:86:ac:00:f8:9c:c3: fa:4a:a7:25:b6:7a:2f:50:0e:f1:fc:ae:5b:c1:24: 72:fd:ff:33:0e:28:d6:a3:9b:59:37:4f:1b:4e:ba: cf:4b:ae:3f:e8:11:90:06:d8:57:07:a9:03:37:46: 91:c7:f5:a0:b7:8c:6d:8d:15:3b:ca:fd:9f:f8:2d: ef:74:75:21:3c:4b:46:6e:bf:f8:06:89:95:0e:c6: ea:54:9f:44:ff:19:85:3a:42:ea:33:73:86:e8:28: 87:a8:8c:84:f6:ae:33:9e:72:9a:14:d9:c6:ac:e1: b2:c3:e7:a8:c4:54:91:bf:47:71:17:99:e7:b5:69: e5:ef:1e:19:00:b4:e3:e4:4a:f0:eb:0f:74:4a:8c: 8d:42:84:ce:d8:aa:7c:d9:6f:da:ed:7a:9b:d6:ce: ca:2d:00:be:d6:e1:cc:e3:ae:92:25:7a:6b:5e:80: 71:79:02:4c:86:a6:c3:b0:d1:09:14:1a:03:3f:1d: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:04:E2:78:BB:9A:3E:A3:A1:7C:7B:08:49:CE:9F:9C:B5:E2:80:D0 X509v3 Authority Key Identifier: keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:91:12:b4:04:a0:22:26:80:da:11:60:6a:d9:e6:43:32:da: ba:94:72:21:5b:70:8d:1d:47:0c:3c:7c:00:e7:c9:02:50:33: d8:76:20:6f:67:e7:13:69:36:18:1e:96:39:04:c6:8c:a0:f1: 7b:aa:63:03:a9:82:6d:ad:5d:ba:34:90:da:dd:60:37:80:ff: 96:1c:64:72:39:4c:4f:e1:10:5f:6e:ca:3e:f2:33:5c:ac:e4: 60:20:e5:94:eb:76:5d:e5:e4:41:15:57:75:fa:1d:49:4e:7d: 6b:a4:b7:16:eb:aa:34:ae:76:5c:42:89:a3:db:0e:50:72:47: 95:e3:6a:f8:30:5c:18:89:4a:c5:64:ed:66:13:dd:41:6b:06: f4:c7:09:1b:06:be:c5:1a:7c:91:ef:a3:a9:62:1c:59:54:9e: b2:60:e6:8a:56:41:c3:b5:1b:ab:e1:8e:bd:bd:ed:60:a4:d6: 64:4d:76:ff:de:62:95:fb:47:60:8d:2b:88:b1:84:34:a0:75: 49:fc:5b:67:a2:5d:36:ef:bc:59:59:a1:16:a8:5d:50:74:a5: 38:61:de:f2:e6:65:ec:bb:1f:fc:7a:6d:3c:b7:08:8a:98:3e: 4c:d5:c8:dd:e1:5e:3d:49:45:32:7c:67:fc:05:83:b8:65:21: 96:5e:49:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND OTBDMUExMDkwHhcNMjQwNTE4MjEzMDMwWhcNMjQwNTI1MjEzMDMwWjAYMRYwFAYD VQQDEw02NjQ5MWRmNy0wNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7F8RxY/X8Yir7rU1wXAIG0yxOAgX3Klys+BM5+26NBlxvu9ixbA8OkIwTd0f nN0xcdQ/J6tnKJbJOFkxblbSWYvAjI6GrAD4nMP6SqcltnovUA7x/K5bwSRy/f8z DijWo5tZN08bTrrPS64/6BGQBthXB6kDN0aRx/Wgt4xtjRU7yv2f+C3vdHUhPEtG br/4BomVDsbqVJ9E/xmFOkLqM3OG6CiHqIyE9q4znnKaFNnGrOGyw+eoxFSRv0dx F5nntWnl7x4ZALTj5Erw6w90SoyNQoTO2Kp82W/a7Xqb1s7KLQC+1uHM466SJXpr XoBxeQJMhqbDsNEJFBoDPx1F3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4E4ni7 mj6joXx7CEnOn5y14oDQMB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFFRi8yRTk0ODc0RTkxREExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpH YmR2eXc1SzNVWnpKREJvUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhkRK0BKAiJoDaEWBq2eZDMtq6lHIhW3CNHUcMPHwA58kCUDPYdiBv Z+cTaTYYHpY5BMaMoPF7qmMDqYJtrV26NJDa3WA3gP+WHGRyOUxP4RBfbso+8jNc rORgIOWU63Zd5eRBFVd1+h1JTn1rpLcW66o0rnZcQomj2w5QckeV42r4MFwYiUrF ZO1mE91Bawb0xwkbBr7FGnyR76OpYhxZVJ6yYOaKVkHDtRur4Y69ve1gpNZkTXb/ 3mKV+0dgjSuIsYQ0oHVJ/Ftnol0277xZWaEWqF1QdKU4Yd7y5mXsux/8em08twiK mD5M1cjd4V49SUUyfGf8BYO4ZSGWXklo -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org