$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: xrdA8v39ODzTiwqMErOnr2EpK/TDj4wI2hUSJewF9gk= Subject key identifier: 26:29:42:B0:F4:C6:3C:DF:D1:3F:25:91:C3:3D:96:D0:EF:DA:77:62 Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0B8F Signing time: Sat 18 May 2024 19:17:58 +0000 Manifest this update: Sat 18 May 2024 19:17:58 +0000 Manifest next update: Sat 25 May 2024 19:17:58 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: FoyuF9n+84mBjL+pBO9/oUpFH4CBXTlqhXX9Isc4JdU=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: olNlCN64bLbPObiQcnjy8ZCy31CgqZyVDz4boAZyKow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: May 18 19:17:58 2024 GMT Not After : May 25 19:17:58 2024 GMT Subject: CN=6648fee6-3c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a2:2f:ac:d2:02:83:25:ec:36:89:d5:b4:b7: 3f:96:a9:a3:bd:a3:27:7e:de:b2:a8:1a:02:0d:88: 1c:46:05:2c:b0:ce:5c:44:a7:8d:66:1a:33:fa:30: c3:86:f7:1f:6d:a4:e3:15:1c:7d:b8:8e:ee:62:22: 5c:35:13:49:c2:6c:28:18:b4:b8:bd:c3:a7:78:34: 41:96:53:7c:e0:3d:e2:c1:6d:2a:5a:98:d9:c3:fc: dc:e8:f0:7a:61:96:b6:82:41:e3:10:b1:3a:3b:49: a8:dc:99:e6:00:89:2f:a4:f6:6b:d3:bf:4b:9c:65: 22:69:31:87:02:53:e7:d6:5c:e6:e7:24:1c:56:b4: 74:18:11:f6:32:3c:95:b1:4e:6a:da:93:2a:77:6d: f2:97:b9:33:c7:c7:57:0e:80:f1:97:26:64:6e:79: a0:4f:31:75:d7:89:43:6e:a7:4e:6e:6d:e8:19:4e: 75:1a:43:0c:0c:bd:28:22:67:93:b9:a8:e1:61:36: fb:36:bb:2c:5b:29:e1:3b:6e:13:b7:57:95:75:89: e9:a1:2a:f7:78:ec:b0:07:c3:09:80:3f:c2:09:94: 53:b3:d9:77:12:15:39:75:de:1d:b5:47:72:23:e3: a6:df:b7:42:63:88:25:04:10:17:15:ef:d3:e8:e6: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:29:42:B0:F4:C6:3C:DF:D1:3F:25:91:C3:3D:96:D0:EF:DA:77:62 X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4e:e1:93:fe:bb:0d:06:6c:10:39:f3:37:1e:03:fb:6b:25: 24:6e:c4:48:8b:19:3c:8a:47:11:a3:fd:50:4a:67:60:25:33: 39:f1:20:d1:ee:d3:82:62:0e:3a:3d:af:02:05:dd:26:33:23: d3:d9:98:31:eb:c0:86:69:59:26:38:f2:d7:50:ea:88:eb:c3: 2a:ab:00:a9:c2:88:41:af:65:03:f1:74:73:e2:d2:93:e5:33: b3:77:9d:9e:c2:6a:62:ec:73:c1:6b:c7:2c:57:fb:b5:bd:83: 7c:eb:c1:aa:12:02:53:3b:ca:e9:d7:19:75:77:1e:39:3a:d1: 0b:25:ed:9d:c6:4b:1c:c0:52:bd:b4:ee:b3:0b:eb:fb:6b:ae: 30:12:c3:12:9c:c7:a8:bb:c6:10:7a:b4:40:71:e2:54:fc:6a: 81:67:c1:db:2c:ca:7c:f8:c7:e4:c7:8f:11:57:aa:06:cd:32: bb:26:23:f1:3d:1e:fc:5b:f9:f5:51:a7:98:fe:62:6b:96:8d: 11:48:eb:f5:19:3c:c0:44:3a:0d:69:9b:bb:b4:65:0d:37:ff: 8e:3c:01:3c:4d:84:04:b9:b9:13:56:96:6d:5e:46:de:f6:23: ba:79:bb:c4:e5:3b:a5:7f:39:bb:d9:69:71:07:39:8a:d2:22: c4:7e:a3:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjQwNTE4MTkxNzU4WhcNMjQwNTI1MTkxNzU4WjAYMRYwFAYD VQQDEw02NjQ4ZmVlNi0zYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qIvrNICgyXsNonVtLc/lqmjvaMnft6yqBoCDYgcRgUssM5cRKeNZhoz+jDD hvcfbaTjFRx9uI7uYiJcNRNJwmwoGLS4vcOneDRBllN84D3iwW0qWpjZw/zc6PB6 YZa2gkHjELE6O0mo3JnmAIkvpPZr079LnGUiaTGHAlPn1lzm5yQcVrR0GBH2MjyV sU5q2pMqd23yl7kzx8dXDoDxlyZkbnmgTzF114lDbqdObm3oGU51GkMMDL0oImeT uajhYTb7NrssWynhO24Tt1eVdYnpoSr3eOywB8MJgD/CCZRTs9l3EhU5dd4dtUdy I+Om37dCY4glBBAXFe/T6OZlFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYpQrD0 xjzf0T8lkcM9ltDv2ndiMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrTuGT/rsNBmwQOfM3HgP7ayUkbsRIixk8ikcRo/1QSmdgJTM58SDR 7tOCYg46Pa8CBd0mMyPT2Zgx68CGaVkmOPLXUOqI68MqqwCpwohBr2UD8XRz4tKT 5TOzd52ewmpi7HPBa8csV/u1vYN868GqEgJTO8rp1xl1dx45OtELJe2dxkscwFK9 tO6zC+v7a64wEsMSnMeou8YQerRAceJU/GqBZ8HbLMp8+Mfkx48RV6oGzTK7JiPx PR78W/n1UaeY/mJrlo0RSOv1GTzARDoNaZu7tGUNN/+OPAE8TYQEubkTVpZtXkbe 9iO6ebvE5Tulfzm72WlxBzmK0iLEfqMf -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org