$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json) Hash identifier: 4TgOIiqkchX2x4v/xRRT0TSG3aZQZI7L+SJKk68jVis= Subject key identifier: F8:F6:6F:64:15:02:7B:6E:4B:41:7E:70:05:E1:2E:CB:EE:B0:8C:4F Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0A04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft Manifest number: 09EA Signing time: Sat 18 May 2024 20:46:19 +0000 Manifest this update: Sat 18 May 2024 20:46:19 +0000 Manifest next update: Sat 25 May 2024 20:46:19 +0000 Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: bCgf8t232ek++DPmPxtY4/b7IkuUbx7tw/6UOM4yEDI=) 2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: 2+Mao+4W6tqhs+z1VZrXpzhPfHNq+WxVPSSF1uaIPrg=) 3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: CAe3mK039FSYrrA5OGKBTPBH26yWKF83NmA80D4Z+4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: May 18 20:46:19 2024 GMT Not After : May 25 20:46:19 2024 GMT Subject: CN=6649139b-8eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:be:8c:1b:37:e4:ec:11:6a:10:90:8a:ae: f6:60:42:7b:3c:cf:fb:8e:53:37:1c:37:33:a5:5a: a7:c7:4e:5c:41:f9:55:46:5f:6f:44:80:f7:2d:34: 10:c5:7c:cb:2e:3b:d5:a0:97:90:35:bc:f2:34:61: 64:63:ac:0e:66:57:f3:e1:01:6f:0c:91:f8:d8:07: 31:e4:a7:fa:6a:66:8b:9b:4f:dc:58:28:5d:11:75: 17:85:39:8b:fe:56:84:30:4a:3c:7e:86:d6:18:15: 88:09:c1:b9:43:26:fe:0d:7d:10:fc:3d:de:b3:70: 37:65:aa:00:8e:83:a1:47:91:9d:be:61:89:a2:a9: 53:64:13:1a:0d:92:64:b8:ab:dc:96:f3:3e:ef:64: 64:54:9d:dd:38:f8:b3:6b:2c:cb:98:e1:53:49:e5: 14:51:37:80:f9:3c:1a:43:72:ab:42:04:82:e2:ca: b1:91:e2:ec:c0:e2:9c:4d:ee:52:14:fc:aa:b2:94: b5:48:8b:65:86:6e:43:e0:42:71:9a:17:9e:90:49: 81:be:40:d4:f2:71:72:1a:5d:5b:f0:52:01:16:53: 9e:5e:9d:65:e3:27:fa:5e:dd:67:a9:86:e6:4f:e2: 3a:fd:a0:fa:08:8f:50:6e:9d:0b:c2:ad:d4:9b:64: bf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F6:6F:64:15:02:7B:6E:4B:41:7E:70:05:E1:2E:CB:EE:B0:8C:4F X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:42:43:05:bf:c3:2d:4f:b2:64:02:da:e0:8a:3c:f2:7f:9e: 6e:e8:dc:30:98:e9:2e:c2:bd:90:99:36:0a:1e:80:d8:9d:8c: 8e:07:4b:50:cd:0c:ff:f0:8d:ba:a2:ad:55:cb:82:b2:0a:6a: 2e:fa:ea:06:76:bf:9a:21:e9:b7:ed:f7:27:a9:2b:31:c9:91: b7:c6:5b:07:f7:81:e4:2f:14:e6:78:c9:ab:d5:02:0c:ed:07: c6:78:54:31:2b:a2:ee:86:bf:b0:a9:dc:0d:c8:26:f9:e3:e2: b3:c4:9c:94:6a:66:dc:bc:48:44:fd:a0:da:09:de:39:fb:63: 27:b1:a5:89:b5:76:bc:e0:3c:9a:71:43:8e:bc:22:15:cf:fc: e7:7f:66:64:d8:e3:63:2b:0d:3f:4d:78:5a:55:1c:5b:fd:fe: f3:04:cc:f8:20:09:08:7d:c9:3c:55:1b:fb:78:c5:d0:a5:21: 6e:6c:f2:a5:8c:9e:34:1a:ea:cc:60:41:0b:4f:95:db:c7:29: 13:86:a0:71:d8:aa:64:97:a6:75:39:3b:34:5a:70:1b:66:d0: 49:ec:a3:3b:ce:45:c1:db:a4:ee:96:80:f1:1a:8a:ae:48:03: fe:e4:c0:65:4f:20:e0:94:cf:50:f7:01:a2:b7:aa:93:27:49: 19:b3:89:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjQwNTE4MjA0NjE5WhcNMjQwNTI1MjA0NjE5WjAYMRYwFAYD VQQDEw02NjQ5MTM5Yi04ZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA++jBs35OwRahCQiq72YEJ7PM/7jlM3HDczpVqnx05cQflVRl9vRID3LTQQ xXzLLjvVoJeQNbzyNGFkY6wOZlfz4QFvDJH42Acx5Kf6amaLm0/cWChdEXUXhTmL /laEMEo8fobWGBWICcG5Qyb+DX0Q/D3es3A3ZaoAjoOhR5GdvmGJoqlTZBMaDZJk uKvclvM+72RkVJ3dOPizayzLmOFTSeUUUTeA+TwaQ3KrQgSC4sqxkeLswOKcTe5S FPyqspS1SItlhm5D4EJxmheekEmBvkDU8nFyGl1b8FIBFlOeXp1l4yf6Xt1nqYbm T+I6/aD6CI9Qbp0Lwq3Um2S/HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPj2b2QV AntuS0F+cAXhLsvusIxPMB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx YlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfQkMFv8MtT7JkAtrgijzyf55u6NwwmOkuwr2QmTYKHoDYnYyOB0tQ zQz/8I26oq1Vy4KyCmou+uoGdr+aIem37fcnqSsxyZG3xlsH94HkLxTmeMmr1QIM 7QfGeFQxK6Luhr+wqdwNyCb54+KzxJyUambcvEhE/aDaCd45+2MnsaWJtXa84Dya cUOOvCIVz/znf2Zk2ONjKw0/TXhaVRxb/f7zBMz4IAkIfck8VRv7eMXQpSFubPKl jJ40GurMYEELT5XbxykThqBx2Kpkl6Z1OTs0WnAbZtBJ7KM7zkXB26TuloDxGoqu SAP+5MBlTyDglM9Q9wGit6qTJ0kZs4ky -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org