$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: C5msrAivPH8TB2+gFbGfPffA50DaS+lYfeuD4YMRvC0= Subject key identifier: CC:D0:30:9C:8B:A6:52:65:C8:F6:17:F5:FA:6D:2C:FE:01:C3:6B:BE Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 22B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 228A Signing time: Fri 31 May 2024 16:20:29 +0000 Manifest this update: Fri 31 May 2024 16:20:28 +0000 Manifest next update: Fri 07 Jun 2024 16:20:28 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: PiRzK6Thyv67aVqlTXsASuD7KqvX8cYYQR0Qch+YJBY=) 2: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: rDV2Bqm6eu0V34tibuKUZctwH1/aGEeBJq9xYgfrF4M=) 3: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: ZSSj+nj4XtmDSSbhR3/ZQ9pIMEJPxXE0yFuyRf1+0mg=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: wB2xqrT+WR1TypBe1cC2uIvhjvM4FdmDgb+8xMqoHto=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: jE7AaszQtYcG7lhVkdXgcAsQzG9kznaN6CoPyvw8kr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8881 (0x22b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: May 31 16:20:28 2024 GMT Not After : Jun 7 16:20:28 2024 GMT Subject: CN=6659f8cd-b8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:a1:51:17:fe:3c:8f:b1:b7:e4:b4:9d:a2: 39:ac:e8:72:ff:07:5d:94:3c:b8:98:b9:22:2e:d0: 51:a2:7e:a7:03:40:df:ae:d7:ac:18:1a:fd:ef:4b: c9:e6:22:0c:49:34:89:8a:79:80:ba:d5:c9:7f:be: 37:c1:b2:33:ad:38:16:1e:8d:df:69:9c:81:cd:10: 62:01:0c:e6:43:65:f3:3f:c0:69:5e:fe:5a:f4:99: a0:3c:c6:b5:a0:a6:40:53:76:06:53:2f:88:84:99: 1b:f8:b1:b2:a8:ea:e9:bf:f0:d7:83:e1:d9:2c:f4: 22:77:61:2f:7f:38:94:58:c4:a3:9f:82:73:03:64: 68:66:ec:fa:45:13:20:45:9f:c3:9e:3a:c0:96:e9: 70:7e:90:b1:ec:79:0f:4b:15:c2:b6:8e:5f:70:a8: e7:0e:3f:62:d9:1e:ed:28:47:15:c7:4d:e6:42:18: c5:f7:74:8e:c2:50:53:2a:0a:b1:79:c1:c1:5f:bd: ea:4c:c9:b7:7e:d6:eb:a6:bb:7d:86:8a:73:d8:35: a0:2e:2c:a3:0b:6a:6e:86:0d:00:1a:3f:01:1a:ce: 3e:de:ac:36:74:ef:1a:72:96:02:89:5f:2e:c1:9f: d6:df:44:89:68:9a:cb:0c:17:de:e6:4a:d4:42:01: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D0:30:9C:8B:A6:52:65:C8:F6:17:F5:FA:6D:2C:FE:01:C3:6B:BE X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f2:9f:3f:a6:3b:bd:1a:fb:85:17:0a:28:2e:6f:4c:9c:57: e6:5c:2e:03:f0:6a:ca:c0:a8:40:a4:c8:6a:bc:75:cd:bf:d4: a6:4d:1f:2c:74:93:8c:5a:d5:53:f1:87:ac:3b:d0:0c:e2:70: 37:63:82:3a:40:03:45:f1:7a:29:f4:e9:1c:8b:ba:81:31:38: 88:3b:54:9d:a2:9d:14:40:57:a4:0e:0a:29:df:9b:9f:05:46: fe:f7:a8:f3:6c:1f:69:d8:46:7c:6d:12:3b:49:76:c0:0b:b5: 3c:d3:2b:aa:1b:6e:49:3b:6b:ca:cf:3b:ce:bd:a0:b0:90:8d: 53:1c:43:c2:d1:00:3b:43:32:66:f7:5f:2a:9f:bd:c2:5b:2c: 5b:0f:54:41:5d:8e:0b:9d:18:24:5e:f4:73:20:af:00:02:36: 98:37:5f:fb:39:e5:41:fd:60:e9:88:90:73:7b:65:c0:6b:29: 21:ca:fd:90:78:ed:19:46:bf:ce:4d:2e:e7:6f:4a:01:23:13: d3:f8:1a:59:14:69:df:0c:3b:6d:b7:83:1d:29:78:b2:3f:37: 60:cf:c5:c5:03:06:82:b7:da:d1:0b:6d:39:23:56:2c:56:f0: ed:8b:80:2d:5f:0c:70:a1:01:7a:53:a5:aa:21:52:8b:f0:62: d7:6d:be:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjQwNTMxMTYyMDI4WhcNMjQwNjA3MTYyMDI4WjAYMRYwFAYD VQQDEw02NjU5ZjhjZC1iOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7uhURf+PI+xt+S0naI5rOhy/wddlDy4mLkiLtBRon6nA0DfrtesGBr970vJ 5iIMSTSJinmAutXJf743wbIzrTgWHo3faZyBzRBiAQzmQ2XzP8BpXv5a9JmgPMa1 oKZAU3YGUy+IhJkb+LGyqOrpv/DXg+HZLPQid2EvfziUWMSjn4JzA2RoZuz6RRMg RZ/DnjrAlulwfpCx7HkPSxXCto5fcKjnDj9i2R7tKEcVx03mQhjF93SOwlBTKgqx ecHBX73qTMm3ftbrprt9hopz2DWgLiyjC2puhg0AGj8BGs4+3qw2dO8acpYCiV8u wZ/W30SJaJrLDBfe5krUQgFNxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzQMJyL plJlyPYX9fptLP4Bw2u+MB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf8p8/pju9GvuFFwooLm9MnFfmXC4D8GrKwKhApMhqvHXNv9SmTR8s dJOMWtVT8YesO9AM4nA3Y4I6QANF8Xop9Okci7qBMTiIO1Sdop0UQFekDgop35uf BUb+96jzbB9p2EZ8bRI7SXbAC7U80yuqG25JO2vKzzvOvaCwkI1THEPC0QA7QzJm 918qn73CWyxbD1RBXY4LnRgkXvRzIK8AAjaYN1/7OeVB/WDpiJBze2XAaykhyv2Q eO0ZRr/OTS7nb0oBIxPT+BpZFGnfDDttt4MdKXiyPzdgz8XFAwaCt9rRC205I1Ys VvDti4AtXwxwoQF6U6WqIVKL8GLXbb5Y -----END CERTIFICATE-----Generated at Fri May 31 17:44:25 2024 by rpki-client on console-fra.rpki-client.org