$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft File: MxjodUE2Qh4kSmxB3aXezBDaj4E.mft (raw, json) Hash identifier: z7bt8H6vyine1U55FLxMISepbSrRhzIOe67cMsxnSKY= Subject key identifier: 5F:9A:58:6F:AA:C3:44:59:1C:7A:47:69:DB:1F:E2:B5:D6:EE:5B:E5 Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 Certificate issuer: /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft Manifest number: 74 Signing time: Sat 01 Jun 2024 08:48:10 +0000 Manifest this update: Sat 01 Jun 2024 08:48:10 +0000 Manifest next update: Sat 08 Jun 2024 08:48:10 +0000 Files and hashes: 1: MxjodUE2Qh4kSmxB3aXezBDaj4E.crl (hash: yf1nOLmXw2MsMeQXK54OCfJjjnyPE25d8WsGxf8CzRQ=) 2: 2201EFC86E5211EEB027A974C4F9AE02.roa (hash: lMkK8nXb5Yl5F9jOOdoaz3bU2vYTfy2+o+XXNd5XlBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Validity Not Before: Jun 1 08:48:10 2024 GMT Not After : Jun 8 08:48:10 2024 GMT Subject: CN=665ae04a-a0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b5:24:48:7d:77:23:d1:08:a9:01:33:08:32: 0c:66:93:d4:8b:7c:45:d9:ae:b1:20:91:9a:d7:34: 71:6b:74:7c:6b:26:04:d4:29:43:5b:09:67:e1:af: 6b:ab:ca:41:69:5d:97:d8:28:f8:d1:77:3b:4f:73: ed:c2:00:96:a2:dd:e3:42:d1:9a:ee:53:27:45:16: 80:e5:57:a2:9c:9f:a7:6b:f0:be:ae:0b:91:4f:60: ba:76:4b:e5:ac:4a:b5:ee:24:00:88:4b:e7:ab:f0: f3:cf:ba:80:74:ee:72:29:79:ab:62:2e:0b:e3:c7: 9e:49:7a:0e:25:14:df:0d:33:68:84:e9:72:f6:d0: 50:6a:fa:ba:df:71:8c:6d:c6:0b:c5:cd:f0:c2:e1: 48:79:2c:e1:b3:e3:d9:6a:54:11:1c:6a:2d:e0:e2: 73:81:8f:7f:fe:29:4d:31:19:07:b1:a9:65:d0:32: 96:24:03:8d:e7:96:7e:86:73:06:50:89:53:96:c2: 6a:63:52:44:46:cd:4c:19:15:1e:6d:da:27:44:62: 60:72:dd:c0:58:f8:b4:d4:13:98:45:86:2e:88:dc: 12:2c:a6:42:c2:bb:40:d8:7f:ab:17:24:b4:32:87: e7:2b:be:3e:da:fe:63:b2:51:12:7f:ec:cc:a4:7a: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:58:6F:AA:C3:44:59:1C:7A:47:69:DB:1F:E2:B5:D6:EE:5B:E5 X509v3 Authority Key Identifier: keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:fb:52:62:59:01:09:39:1f:ec:6c:0b:c8:71:c6:af:95:5f: f3:e6:73:e2:58:dd:a7:bc:85:63:50:21:bf:ac:27:27:a9:f6: 70:dd:7d:55:31:74:18:a4:fc:cc:f8:da:d2:06:7d:d1:79:dc: 2a:e2:8b:59:4f:35:23:ec:c1:d1:5b:fa:44:73:d5:7d:a7:c7: 92:a4:f4:b3:7b:b7:96:bf:54:2d:63:b7:29:d7:69:8c:73:e6: 4c:d7:2d:02:a9:a9:d1:b2:ef:a0:5f:f5:0f:db:76:af:4b:36: b6:c8:49:65:7c:9a:8b:fa:73:87:5f:59:48:78:bc:cd:bc:8e: c8:3a:b8:69:f3:4b:c5:b5:5a:dc:f0:e8:f0:29:95:a4:3b:a8: 75:a8:e2:83:43:63:89:32:e1:ae:61:82:7b:4e:9f:59:70:51: 7e:35:66:9b:10:73:46:3e:31:27:98:4c:82:ac:43:12:07:2c: d1:96:f8:ab:55:dd:06:7a:e3:70:51:19:74:3b:5c:e5:fe:0c: 25:68:b3:71:81:8f:ca:6d:7d:4b:47:79:d5:04:c8:08:0c:7c: 36:e9:2e:71:c9:b9:c4:7e:7a:b9:8e:a9:fc:f9:b1:4a:7b:80: a0:31:77:90:f6:9a:a4:03:bd:fc:57:e5:86:8b:bd:dc:73:b5: 11:1d:1a:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTBDODExMC8GA1UEBRMoMzMxOEU4NzU0MTM2NDIxRTI0NEE2QzQxRERBNURFQ0Mx MERBOEY4MTAeFw0yNDA2MDEwODQ4MTBaFw0yNDA2MDgwODQ4MTBaMBgxFjAUBgNV BAMTDTY2NWFlMDRhLWEwY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDctSRIfXcj0QipATMIMgxmk9SLfEXZrrEgkZrXNHFrdHxrJgTUKUNbCWfhr2ur ykFpXZfYKPjRdztPc+3CAJai3eNC0ZruUydFFoDlV6Kcn6dr8L6uC5FPYLp2S+Ws SrXuJACIS+er8PPPuoB07nIpeatiLgvjx55Jeg4lFN8NM2iE6XL20FBq+rrfcYxt xgvFzfDC4Uh5LOGz49lqVBEcai3g4nOBj3/+KU0xGQexqWXQMpYkA43nln6GcwZQ iVOWwmpjUkRGzUwZFR5t2idEYmBy3cBY+LTUE5hFhi6I3BIspkLCu0DYf6sXJLQy h+crvj7a/mOyURJ/7MykegshAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX5pYb6rD RFkcekdp2x/itdbuW+UwHwYDVR0jBBgwFoAUMxjodUE2Qh4kSmxB3aXezBDaj4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5MEM4L0NDMjMzOERDNkU1 MTExRUVBNDdFMkI3NEM0RjlBRTAyL014am9kVUUyUWg0a1NteEIzYVhlekJEYWo0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTXhqb2RVRTJRaDRrU214QjNhWGV6QkRhajRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 MEM4L0NDMjMzOERDNkU1MTExRUVBNDdFMkI3NEM0RjlBRTAyL014am9kVUUyUWg0 a1NteEIzYVhlekJEYWo0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGX7UmJZAQk5H+xsC8hxxq+VX/Pmc+JY3ae8hWNQIb+sJyep9nDdfVUx dBik/Mz42tIGfdF53Crii1lPNSPswdFb+kRz1X2nx5Kk9LN7t5a/VC1jtynXaYxz 5kzXLQKpqdGy76Bf9Q/bdq9LNrbISWV8mov6c4dfWUh4vM28jsg6uGnzS8W1Wtzw 6PAplaQ7qHWo4oNDY4ky4a5hgntOn1lwUX41ZpsQc0Y+MSeYTIKsQxIHLNGW+KtV 3QZ643BRGXQ7XOX+DCVos3GBj8ptfUtHedUEyAgMfDbpLnHJucR+ermOqfz5sUp7 gKAxd5D2mqQDvfxX5YaLvdxztREdGgc= -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:12 2024 by rpki-client on console-ams.rpki-client.org