$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft File: MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json) Hash identifier: jsAexzH5QtlM3o6hA7kjWOhJI6nF7kqYRL4XnCfmGOo= Subject key identifier: 5A:6D:93:58:AF:DF:51:BA:34:0B:EC:C1:0A:65:BD:69:DF:3B:6E:D9 Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 18B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft Manifest number: 1890 Signing time: Sat 18 May 2024 16:54:24 +0000 Manifest this update: Sat 18 May 2024 16:54:23 +0000 Manifest next update: Sat 25 May 2024 16:54:23 +0000 Files and hashes: 1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: 75YaE6dFMDrAoo4uC3l5v5e1Qi033N7kpg3HzCrDNCQ=) 2: 052C0E4A32EF11EEB331174FC4F9AE02.roa (hash: xQJ1FsmKe2taeglEoFv8AtFbMdOJhcTrbXmruwfG54U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6321 (0x18b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: May 18 16:54:23 2024 GMT Not After : May 25 16:54:23 2024 GMT Subject: CN=6648dd3f-6dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f4:07:9a:50:20:2e:60:fa:e5:7a:d8:41:cc: 1c:49:12:1b:36:1b:fb:54:a5:8a:d6:a1:94:18:b3: 20:a7:1d:c8:7f:b9:2a:de:c3:d5:0a:49:f4:b6:37: 6f:52:9f:43:6b:fc:4f:b0:17:eb:d9:c4:b5:a6:34: 50:fd:be:33:bd:ca:a3:dd:71:86:e4:d1:2e:5a:04: e2:61:7b:a4:0b:e9:ad:ac:dd:f2:68:4a:c3:f1:8a: f1:79:63:80:9d:39:1b:a4:d4:68:70:c7:f1:7e:0b: 65:a3:03:a4:0d:e9:b5:03:84:c2:89:32:14:f3:ba: d3:3a:0b:15:ae:9d:0a:82:a4:8e:e5:01:09:20:af: 95:5d:e5:0f:03:ee:fa:3d:24:e9:9e:e9:5b:e9:59: d0:ea:50:dd:10:1e:0d:07:ef:23:50:a9:6b:69:14: 73:00:bf:b3:c1:ac:eb:01:96:ac:13:75:44:cc:bf: b6:17:bf:f6:53:4e:35:8a:f7:e4:56:f1:c6:2f:36: cf:a8:25:8c:46:cf:b3:22:91:fe:09:32:6c:f5:1a: bc:4d:7e:f5:b4:2c:bf:8b:27:62:15:e9:d8:e2:fa: 9c:16:75:d0:86:35:60:9f:19:54:67:34:fc:fb:f2: d3:b0:4c:fe:d5:74:4a:1f:ed:1b:72:b6:12:ec:1b: 01:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6D:93:58:AF:DF:51:BA:34:0B:EC:C1:0A:65:BD:69:DF:3B:6E:D9 X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fa:a1:bf:44:c7:6b:0a:ab:11:74:e3:a4:62:9c:38:79:c0: d9:e3:bc:dc:bc:bc:ce:88:71:70:c8:56:28:8a:04:c6:eb:b1: fa:1f:eb:40:a1:27:83:1a:53:25:24:e6:9f:31:7c:35:5c:69: f1:94:27:7a:da:31:1d:8f:bd:84:d2:00:fb:86:d3:ad:03:12: 61:ef:4b:b2:e9:24:e6:68:83:e0:29:9d:8b:75:1b:e6:8f:ed: 49:c7:c8:04:6a:86:14:af:ba:26:ea:d9:01:4f:2f:9e:ab:d0: a3:f1:3b:f6:d6:a2:89:be:5f:fe:cb:c1:88:37:9d:88:ac:de: f6:ba:ad:86:d5:10:7f:87:63:92:20:67:89:b6:52:58:b1:98: da:c4:3d:f9:a3:f9:f9:9a:0e:8c:65:df:0b:23:69:f1:30:04: c8:87:35:b0:a4:11:3e:11:53:34:6f:cf:54:40:e2:5a:01:39: 1c:e9:c1:76:70:2f:cd:1d:1f:ad:10:e0:ef:a8:2d:b6:f1:12: ab:8c:24:e3:e1:ce:e5:a2:f3:26:40:20:94:1f:1e:65:0b:dc: 93:fe:a0:5f:17:7e:53:6a:1b:78:c1:b2:9e:af:86:e3:28:b6: 74:fa:b4:b0:30:64:85:8c:c2:c4:2b:76:4e:2b:0f:ef:84:b6: 73:2d:ea:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjQwNTE4MTY1NDIzWhcNMjQwNTI1MTY1NDIzWjAYMRYwFAYD VQQDEw02NjQ4ZGQzZi02ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/QHmlAgLmD65XrYQcwcSRIbNhv7VKWK1qGUGLMgpx3If7kq3sPVCkn0tjdv Up9Da/xPsBfr2cS1pjRQ/b4zvcqj3XGG5NEuWgTiYXukC+mtrN3yaErD8YrxeWOA nTkbpNRocMfxfgtlowOkDem1A4TCiTIU87rTOgsVrp0KgqSO5QEJIK+VXeUPA+76 PSTpnulb6VnQ6lDdEB4NB+8jUKlraRRzAL+zwazrAZasE3VEzL+2F7/2U041ivfk VvHGLzbPqCWMRs+zIpH+CTJs9Rq8TX71tCy/iydiFenY4vqcFnXQhjVgnxlUZzT8 +/LTsEz+1XRKH+0bcrYS7BsBswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFptk1iv 31G6NAvswQplvWnfO27ZMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX VlJJazJBancxVlVLQkhPME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz+qG/RMdrCqsRdOOkYpw4ecDZ47zcvLzOiHFwyFYoigTG67H6H+tA oSeDGlMlJOafMXw1XGnxlCd62jEdj72E0gD7htOtAxJh70uy6STmaIPgKZ2LdRvm j+1Jx8gEaoYUr7om6tkBTy+eq9Cj8Tv21qKJvl/+y8GIN52IrN72uq2G1RB/h2OS IGeJtlJYsZjaxD35o/n5mg6MZd8LI2nxMATIhzWwpBE+EVM0b89UQOJaATkc6cF2 cC/NHR+tEODvqC228RKrjCTj4c7lovMmQCCUHx5lC9yT/qBfF35Taht4wbKer4bj KLZ0+rSwMGSFjMLEK3ZOKw/vhLZzLepw -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org