$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json) Hash identifier: aU/l6F+umdyMd336pR6PxX9HhoDkh98cZaGy3Ls+RaU= Subject key identifier: E1:9E:51:D8:7C:1F:1A:73:27:63:F2:99:39:AD:27:D0:B7:CD:5C:6B Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft Manifest number: 06FC Signing time: Sat 18 May 2024 22:51:05 +0000 Manifest this update: Sat 18 May 2024 22:51:05 +0000 Manifest next update: Sat 25 May 2024 22:51:05 +0000 Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: WSck4+JMkb1g23eT5TSXiyb2Z9xqZs+b3c0GVHa9C4A=) 2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: lS99nYEJf47mH+uz3vQLejaGLFETexj9dK3L1OTP7SM=) 3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: +9tCipDB0aaHUVuA7yo8ZYQuS8o9q/CaWZgtKqaXci0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: May 18 22:51:05 2024 GMT Not After : May 25 22:51:05 2024 GMT Subject: CN=664930d9-e98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:be:c8:7f:cd:90:a6:60:0b:52:3e:cb:ec: f8:c4:6a:5d:97:de:0c:47:64:6b:53:b1:76:d5:37: bc:ec:db:1a:ef:5e:f3:06:ba:da:13:f8:d2:e6:b9: a1:30:54:67:dc:fd:f6:df:f9:48:aa:0f:3f:9e:38: c6:e8:21:53:86:7d:cb:55:9b:79:50:a7:5d:ed:a9: 6b:d1:f7:be:a8:2c:84:1b:23:04:ce:22:e8:70:58: 54:50:49:f4:e1:0e:e5:97:fb:4a:fe:f2:a2:68:cd: c0:b5:48:89:bf:a2:9c:78:57:8f:89:5c:4a:c4:7e: b7:01:1e:48:c2:50:8e:0a:e4:f8:c6:a3:d6:c1:ff: 0c:60:72:a4:81:7a:36:70:44:2f:40:7f:43:3b:ed: 96:99:1b:ad:45:7c:04:43:3f:54:96:b4:49:f9:3c: 76:c6:d6:38:04:fa:da:35:ef:23:d3:c8:3c:b5:da: ef:f2:7e:50:5e:34:9c:d6:7d:2e:5b:dc:4e:88:50: c8:c4:bc:fa:9f:be:fa:28:5e:14:1f:71:18:ac:07: fe:3b:0e:66:aa:37:f1:22:e6:11:d5:8b:97:65:be: eb:45:a7:b4:09:99:bf:43:30:38:e0:4a:21:a2:df: e6:5f:65:9a:52:47:1d:8c:c3:ad:e5:55:2a:ad:59: 1a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9E:51:D8:7C:1F:1A:73:27:63:F2:99:39:AD:27:D0:B7:CD:5C:6B X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:24:71:ba:49:ea:de:6d:66:ce:22:b3:15:90:d9:ea:5e:7b: 44:cb:35:65:81:ad:16:6f:78:64:7b:bb:43:4b:ae:db:e0:c6: 07:63:87:e1:03:ee:c1:0b:6a:e1:72:c0:39:8a:56:78:e0:7b: 3e:26:d8:c4:2f:63:2e:64:62:65:e8:28:5d:45:0e:ee:69:45: ed:92:dd:ea:a4:e7:ac:aa:50:21:1c:1b:40:35:ff:e9:00:84: 96:93:59:b8:74:33:fc:16:37:40:3c:5e:e5:73:a3:94:86:73: 17:db:78:5b:83:62:9a:5f:68:4e:26:81:bc:20:30:f9:f1:1f: 99:57:bb:30:71:f6:a0:48:e9:46:15:29:fa:5f:fa:98:a9:84: 3b:a5:1b:4f:e7:db:89:f6:56:c9:89:0f:68:a3:fe:b9:eb:8d: 30:c7:26:b3:84:1f:75:e4:a3:b1:0b:c5:9d:e2:39:97:ae:d0: bc:12:f0:83:e7:d1:d2:91:1a:c9:3b:8f:f6:0c:22:b9:1d:95: 42:4c:ec:1f:db:c4:50:14:d7:7e:a1:2c:7e:1f:49:90:5c:8a: 14:4f:cd:a5:08:aa:af:4d:06:fa:be:2f:49:12:f7:26:d1:0d: 8c:9f:ad:aa:51:f9:4d:20:cb:84:2f:d0:56:0a:1d:07:76:c8: 9f:99:cc:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjQwNTE4MjI1MTA1WhcNMjQwNTI1MjI1MTA1WjAYMRYwFAYD VQQDEw02NjQ5MzBkOS1lOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEe+yH/NkKZgC1I+y+z4xGpdl94MR2RrU7F21Te87Nsa717zBrraE/jS5rmh MFRn3P323/lIqg8/njjG6CFThn3LVZt5UKdd7alr0fe+qCyEGyMEziLocFhUUEn0 4Q7ll/tK/vKiaM3AtUiJv6KceFePiVxKxH63AR5IwlCOCuT4xqPWwf8MYHKkgXo2 cEQvQH9DO+2WmRutRXwEQz9UlrRJ+Tx2xtY4BPraNe8j08g8tdrv8n5QXjSc1n0u W9xOiFDIxLz6n776KF4UH3EYrAf+Ow5mqjfxIuYR1YuXZb7rRae0CZm/QzA44Eoh ot/mX2WaUkcdjMOt5VUqrVka7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGeUdh8 HxpzJ2PymTmtJ9C3zVxrMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO OU9udHB2NWNDUEVwLVJhSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9JHG6SerebWbOIrMVkNnqXntEyzVlga0Wb3hke7tDS67b4MYHY4fh A+7BC2rhcsA5ilZ44Hs+JtjEL2MuZGJl6ChdRQ7uaUXtkt3qpOesqlAhHBtANf/p AISWk1m4dDP8FjdAPF7lc6OUhnMX23hbg2KaX2hOJoG8IDD58R+ZV7swcfagSOlG FSn6X/qYqYQ7pRtP59uJ9lbJiQ9oo/65640wxyazhB915KOxC8Wd4jmXrtC8EvCD 59HSkRrJO4/2DCK5HZVCTOwf28RQFNd+oSx+H0mQXIoUT82lCKqvTQb6vi9JEvcm 0Q2Mn62qUflNIMuEL9BWCh0HdsifmczM -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org