$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft File: MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json) Hash identifier: SsOKXfOmlKmHEevfLzFEj9ZkZtefJTfAxe6aRinZMe4= Subject key identifier: 4F:6E:2A:2C:77:D1:C8:CF:D8:AF:23:77:9D:3B:72:F8:B0:7B:25:29 Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft Manifest number: 3E Signing time: Sun 19 May 2024 08:14:46 +0000 Manifest this update: Sun 19 May 2024 08:14:45 +0000 Manifest next update: Sun 26 May 2024 08:14:45 +0000 Files and hashes: 1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: BqQnIcQX1iUtcTTEgWfc8WYyJ/Jq/syV+RQmDx8K5dw=) 2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: laqsXeG3YC/lKCDsMHu9SOxrN+lBRg4p7rBHyVUYhrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Validity Not Before: May 19 08:14:45 2024 GMT Not After : May 26 08:14:45 2024 GMT Subject: CN=6649b4f5-454d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:28:32:da:92:be:cb:51:0b:db:33:44:fa:d5: 9c:1b:ce:54:2e:6d:b5:d9:2d:91:95:ed:e9:a9:08: 43:18:5f:64:b7:46:f0:da:77:99:76:36:dc:16:74: 0b:11:b1:70:f8:e9:45:87:89:1f:46:87:2e:3e:1a: 93:70:44:45:3a:09:fa:f6:41:c2:c8:e2:4c:c2:25: 48:a6:ad:e1:b5:1e:5f:2c:06:3c:d3:56:a5:f9:71: c7:1e:a8:ae:b9:af:70:50:aa:ba:1d:45:9b:e8:ad: c1:87:53:66:44:cc:23:7d:ea:57:8b:e3:99:16:42: 2a:7e:e1:1b:34:a6:68:60:bc:e1:6d:4c:7f:c7:7f: ad:ea:de:ed:c8:b0:f8:a9:e4:7b:ca:d7:d4:4f:70: 82:6b:a3:bf:ec:eb:50:7b:47:d0:11:55:20:cb:98: 59:27:78:b5:de:11:44:a0:b6:b2:4c:15:ac:aa:a6: 94:76:a9:6f:da:02:1f:c4:8b:01:eb:e5:0e:2e:98: 06:f4:3e:d3:bb:e5:09:0e:7d:d0:b5:3c:aa:dc:df: 94:3f:7a:7d:cf:bb:ce:9b:c4:77:56:eb:df:c6:cd: 48:51:c8:18:0b:5e:a5:3d:d1:c6:07:90:21:82:40: 99:4d:18:63:0f:d6:20:89:55:4e:73:ae:2f:fa:df: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6E:2A:2C:77:D1:C8:CF:D8:AF:23:77:9D:3B:72:F8:B0:7B:25:29 X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:68:9b:b3:f2:c6:3a:0c:77:86:ff:1d:54:a1:f5:8d:70:5d: 07:3b:11:ee:df:48:78:b0:fe:57:67:0b:29:a1:db:20:87:06: f3:b7:59:a2:2b:0e:b8:cb:db:0c:ba:ed:b0:49:3f:35:01:05: e8:e4:5c:8d:05:3c:db:e0:4b:94:64:8b:14:ef:e9:e2:a6:b3: 1f:a5:b1:24:13:33:62:ef:09:57:de:a1:03:cd:97:c2:f6:6e: 40:20:89:5d:eb:3c:66:73:76:bc:36:73:25:ac:ce:ff:3e:de: 9b:d1:84:cb:19:73:82:13:6d:61:7b:d6:04:20:d6:2e:8a:ee: 0e:63:ba:17:43:88:3a:aa:f8:df:c6:7e:ba:fe:90:e3:33:60: 8f:a1:b8:19:c2:38:0d:6d:33:84:ca:13:42:2a:73:a0:b3:f3: a7:72:73:ba:d6:22:d9:16:68:55:ab:42:49:11:db:5d:6d:6a: 45:fc:d3:b3:ee:20:a9:35:f3:99:3c:58:4c:be:6d:bb:ba:cd: e4:31:64:8f:8c:c4:4e:40:a0:8b:f0:ad:c9:c6:50:f3:fa:56: 3b:ba:2d:ef:35:ff:86:75:5b:ed:5a:3b:eb:c1:98:ff:97:b1: 2e:19:58:f4:fd:16:06:79:57:8e:e2:24:d5:93:2f:31:98:36: 38:91:9e:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzA3QTExMC8GA1UEBRMoMzBGMERCODJENThGNTgzRTg0ODgzNzlCQTAwRDM1QUNC MzUyNjExMDAeFw0yNDA1MTkwODE0NDVaFw0yNDA1MjYwODE0NDVaMBgxFjAUBgNV BAMTDTY2NDliNGY1LTQ1NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgKDLakr7LUQvbM0T61ZwbzlQubbXZLZGV7empCEMYX2S3RvDad5l2NtwWdAsR sXD46UWHiR9Ghy4+GpNwREU6Cfr2QcLI4kzCJUimreG1Hl8sBjzTVqX5ccceqK65 r3BQqrodRZvorcGHU2ZEzCN96leL45kWQip+4Rs0pmhgvOFtTH/Hf63q3u3IsPip 5HvK19RPcIJro7/s61B7R9ARVSDLmFkneLXeEUSgtrJMFayqppR2qW/aAh/EiwHr 5Q4umAb0PtO75QkOfdC1PKrc35Q/en3Pu86bxHdW69/GzUhRyBgLXqU90cYHkCGC QJlNGGMP1iCJVU5zri/63y3pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT24qLHfR yM/YryN3nTty+LB7JSkwHwYDVR0jBBgwFoAUMPDbgtWPWD6EiDeboA01rLNSYRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMDdBL0ZCMTgyOTk4QkU2 NzExRUVCMzNDNkQ2RUM0RjlBRTAyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVBEYmd0V1BXRDZFaURlYm9BMDFyTE5TWVJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MDdBL0ZCMTgyOTk4QkU2NzExRUVCMzNDNkQ2RUM0RjlBRTAyL01QRGJndFdQV0Q2 RWlEZWJvQTAxckxOU1lSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINom7PyxjoMd4b/HVSh9Y1wXQc7Ee7fSHiw/ldnCymh2yCHBvO3WaIr DrjL2wy67bBJPzUBBejkXI0FPNvgS5RkixTv6eKmsx+lsSQTM2LvCVfeoQPNl8L2 bkAgiV3rPGZzdrw2cyWszv8+3pvRhMsZc4ITbWF71gQg1i6K7g5juhdDiDqq+N/G frr+kOMzYI+huBnCOA1tM4TKE0Iqc6Cz86dyc7rWItkWaFWrQkkR211takX807Pu IKk185k8WEy+bbu6zeQxZI+MxE5AoIvwrcnGUPP6Vju6Le81/4Z1W+1aO+vBmP+X sS4ZWPT9FgZ5V47iJNWTLzGYNjiRngk= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org