$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json) Hash identifier: 4wU1KcbXtK76yXzaygja/2SFBHQ6kTfBj397cQ/Acnc= Subject key identifier: 44:C6:5A:2C:6B:03:65:D7:C3:D8:99:8E:D9:6D:D6:25:B8:7D:87:07 Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft Manifest number: 061D Signing time: Sat 01 Jun 2024 00:39:38 +0000 Manifest this update: Sat 01 Jun 2024 00:39:37 +0000 Manifest next update: Sat 08 Jun 2024 00:39:37 +0000 Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: RI6TA9m2A3gAqIVXCnCLA9uKdZOHR5Zhr6OCiAhsFcU=) 2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: T5q+eImeXNp91yECBvJenA539SIQtdXjJLj9KEHZwJA=) 3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: Xg3MEPCbPkaEDSePRNK0YQVKPDagtg02uBwUqJ223/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Validity Not Before: Jun 1 00:39:37 2024 GMT Not After : Jun 8 00:39:37 2024 GMT Subject: CN=665a6dc9-b73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:fb:29:57:32:22:d2:99:8c:ea:c0:32:d5: f2:2c:0f:7a:26:bb:6d:41:ac:dd:5c:a8:6f:b6:f4: 7e:ba:d2:50:67:98:3e:68:1d:18:e7:bd:6e:9d:2a: 43:ac:de:b7:df:2b:fb:1f:a4:c8:56:ff:6f:f2:b1: 45:df:3a:26:5d:7b:fa:df:d1:a8:57:ef:96:9f:1d: cc:86:d8:e7:f8:ff:7f:53:89:ef:db:f1:e3:ee:de: c7:7f:df:85:3d:d0:77:a5:c3:72:ea:35:9a:9b:6c: de:94:8e:65:ec:6d:3b:c3:6f:69:ca:66:58:0c:55: 00:49:6d:53:1d:c6:3d:e1:ca:1e:1f:3e:ad:27:a7: 33:1e:cd:c3:a6:58:4f:da:09:2c:ad:42:05:21:b6: c2:84:4f:1c:23:68:66:d8:49:aa:98:94:c8:b9:e2: 69:60:2c:c1:c9:05:bf:d4:56:40:6a:0a:5b:48:7e: 72:81:9a:94:b8:d9:e8:cc:c4:03:ba:f0:f8:7d:bd: 9f:f2:fc:43:b5:8c:32:e0:f7:cb:ba:3b:21:bc:66: 24:92:19:a7:05:83:cf:a4:91:79:11:61:d9:e5:a5: 04:d2:b6:a3:f7:b7:d7:6c:43:bc:c5:c5:a6:d5:d0: dd:22:8d:6d:77:c2:36:45:86:1b:9c:0b:e8:ce:75: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C6:5A:2C:6B:03:65:D7:C3:D8:99:8E:D9:6D:D6:25:B8:7D:87:07 X509v3 Authority Key Identifier: keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:32:cf:26:5c:cd:4a:12:fa:86:2d:74:0c:0b:32:22:a4:36: 8b:63:3a:78:7d:60:3a:5d:5b:f7:f2:ad:0d:ba:1e:bd:e4:74: 0a:2e:4e:c7:ca:9d:40:50:72:c9:c6:6f:a7:b6:9e:31:f9:69: 29:1e:e4:20:22:9f:de:93:47:d9:2e:a6:c9:0a:b6:00:75:a9: 28:14:df:28:48:c5:18:b1:2f:15:13:8c:5e:a8:e0:19:f8:01: 14:ac:c1:08:5d:ed:73:3b:1f:c9:32:25:15:c0:f0:86:1c:7c: 03:eb:53:bc:73:ab:7f:7a:e3:60:57:44:ae:59:eb:19:68:79: e7:9c:a7:91:b1:cc:aa:ac:40:c1:7c:81:e3:e8:ff:4b:fc:e1: 72:45:93:94:32:82:3a:e1:8a:63:bf:75:de:34:05:73:56:fc: c1:9c:53:ed:32:62:93:db:d7:57:72:bb:d2:24:d4:33:c3:e7: cc:fd:94:dd:14:31:ee:3d:58:bc:47:ce:6f:5e:6a:16:1c:60: 39:af:80:98:7e:75:59:97:66:7e:78:e1:ad:3e:93:90:b2:5e: 5e:ff:65:e9:6c:80:4a:68:0a:3e:ad:d0:9d:d9:5a:03:51:ea: 1e:1a:02:94:d4:dd:88:32:ff:b8:ac:5e:6c:b9:64:5f:36:78: cc:f2:e5:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1QzcxMTAvBgNVBAUTKDlBMTQ4MzZBMjE4NkQxOTcyMjE0ODYyMjQ4MzU1REFC OEJCOTczNjYwHhcNMjQwNjAxMDAzOTM3WhcNMjQwNjA4MDAzOTM3WjAYMRYwFAYD VQQDEw02NjVhNmRjOS1iNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOb7KVcyItKZjOrAMtXyLA96JrttQazdXKhvtvR+utJQZ5g+aB0Y571unSpD rN633yv7H6TIVv9v8rFF3zomXXv639GoV++Wnx3Mhtjn+P9/U4nv2/Hj7t7Hf9+F PdB3pcNy6jWam2zelI5l7G07w29pymZYDFUASW1THcY94coeHz6tJ6czHs3DplhP 2gksrUIFIbbChE8cI2hm2EmqmJTIueJpYCzByQW/1FZAagpbSH5ygZqUuNnozMQD uvD4fb2f8vxDtYwy4PfLujshvGYkkhmnBYPPpJF5EWHZ5aUE0raj97fXbEO8xcWm 1dDdIo1td8I2RYYbnAvoznWvYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETGWixr A2XXw9iZjtlt1iW4fYcHMB8GA1UdIwQYMBaAFJoUg2ohhtGXIhSGIkg1XauLuXNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVDNy8yNDM5ODIzMDU0 ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBaY2lGSVlpU0RWZHE0dTVj MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21oU0RhaUdHMFpjaUZJWWlTRFZkcTR1NWMyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVDNy8yNDM5ODIzMDU0ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBa Y2lGSVlpU0RWZHE0dTVjMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGMs8mXM1KEvqGLXQMCzIipDaLYzp4fWA6XVv38q0Nuh695HQKLk7H yp1AUHLJxm+ntp4x+WkpHuQgIp/ek0fZLqbJCrYAdakoFN8oSMUYsS8VE4xeqOAZ +AEUrMEIXe1zOx/JMiUVwPCGHHwD61O8c6t/euNgV0SuWesZaHnnnKeRscyqrEDB fIHj6P9L/OFyRZOUMoI64Ypjv3XeNAVzVvzBnFPtMmKT29dXcrvSJNQzw+fM/ZTd FDHuPVi8R85vXmoWHGA5r4CYfnVZl2Z+eOGtPpOQsl5e/2XpbIBKaAo+rdCd2VoD UeoeGgKU1N2IMv+4rF5suWRfNnjM8uUy -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:43 2024 by rpki-client on console-fra.rpki-client.org