$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json) Hash identifier: AH4wCWdTmzBBOx8MJV//ncXAcjJTV6hHB6RvFkyU14k= Subject key identifier: 8D:85:A8:94:DF:9B:83:18:F4:12:1A:B3:A7:39:61:EA:09:CB:BA:00 Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft Manifest number: 81 Signing time: Wed 29 May 2024 07:53:14 +0000 Manifest this update: Wed 29 May 2024 07:53:13 +0000 Manifest next update: Wed 05 Jun 2024 07:53:13 +0000 Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: 4MvZ7NukbIrqJ/2CyrDY58XhywR1Hu+BZnd+kz2KBoA=) 2: 0404E7B2672911EE9967640AC4F9AE02.roa (hash: 5vjFNwdorZQHn2sdj7sTYCMmbYEOY9pH8kC5XApbLFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Validity Not Before: May 29 07:53:13 2024 GMT Not After : Jun 5 07:53:13 2024 GMT Subject: CN=6656dee9-e6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:e2:6a:3e:83:a4:70:cf:b1:69:18:06:33: e3:41:a0:2b:92:26:e3:79:e1:7f:39:90:d9:e4:46: 84:d3:65:81:71:44:8e:d7:70:a6:bc:1e:4f:0c:42: 85:f8:92:26:3b:b2:36:05:55:50:fa:be:f4:be:57: 93:fc:20:b6:8f:13:df:0d:98:fd:63:59:91:4d:b1: 09:b1:64:80:4e:ac:83:dc:e6:1e:21:a6:bb:e9:1a: 66:fd:df:d0:3c:3e:e2:47:61:9d:81:25:49:cf:62: e2:2f:55:c1:38:fc:b7:84:19:5b:e1:f9:18:f9:6d: b7:c3:47:d0:d6:cd:29:79:cd:de:22:5a:50:c5:6a: a0:4b:62:76:06:2d:d6:8d:6c:92:fa:f0:b3:dc:f4: d6:95:be:33:28:25:0d:15:9e:21:de:86:29:29:91: 0a:fd:2d:99:a7:90:59:b8:9b:01:41:4e:8c:a8:96: e8:d6:25:76:27:0c:1b:e3:b7:61:27:0e:d8:5c:2c: 6a:a4:3b:a2:62:85:18:51:30:e9:aa:c0:97:aa:08: f7:56:b0:a1:b8:2d:cd:e5:44:2d:11:6f:cb:20:70: 55:6c:ab:52:8f:3f:e8:79:74:56:20:15:27:0b:4f: e8:45:cb:b6:b5:f1:df:d1:0e:87:b3:00:43:c2:86: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:85:A8:94:DF:9B:83:18:F4:12:1A:B3:A7:39:61:EA:09:CB:BA:00 X509v3 Authority Key Identifier: keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8f:3d:ed:4a:35:e8:fa:2e:fe:06:73:ee:22:fc:f1:a6:b4: cd:eb:c6:39:99:e4:34:d9:e0:c8:9a:c7:99:e5:a8:6f:3f:85: 73:02:8d:fb:cb:d6:a6:34:36:bf:b4:1b:30:35:64:60:1a:8f: 5a:91:3b:61:df:b4:c4:04:0a:6c:37:a2:ec:8a:78:a6:b9:4d: 83:5b:da:f2:49:64:6f:f7:a0:f9:ba:35:62:59:ec:c0:f2:2e: c2:54:11:5f:fb:63:ca:e7:f6:0c:4c:cb:c8:c4:1f:8f:e2:d5: f1:42:e0:ea:96:c5:e8:7c:ce:2a:2b:cd:bf:e0:6d:18:f9:61: f5:50:f5:09:39:7f:bb:5d:b6:e7:c5:b3:11:eb:5b:91:ee:09: d4:6b:8b:fd:71:04:7d:e3:b2:d9:15:0b:9a:60:d3:85:7e:a3: 88:94:7a:56:9f:c8:4d:42:c9:51:3d:12:fd:df:44:56:6f:d3: 0f:dc:45:88:b5:9b:65:e4:3a:33:6f:c1:a9:69:91:98:75:f1: 05:3a:95:a1:8c:55:ed:c0:e1:80:0c:33:72:1d:a6:f0:45:57: 59:1b:69:5c:82:49:99:2c:80:c2:47:49:ad:12:d0:e2:f4:f6: c1:5e:3b:6b:ba:66:43:19:17:e8:00:8e:07:35:fd:48:82:d8: b7:b2:39:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz MjFFNTMxNzEwHhcNMjQwNTI5MDc1MzEzWhcNMjQwNjA1MDc1MzEzWjAYMRYwFAYD VQQDEw02NjU2ZGVlOS1lNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Nziaj6DpHDPsWkYBjPjQaArkibjeeF/OZDZ5EaE02WBcUSO13CmvB5PDEKF +JImO7I2BVVQ+r70vleT/CC2jxPfDZj9Y1mRTbEJsWSATqyD3OYeIaa76Rpm/d/Q PD7iR2GdgSVJz2LiL1XBOPy3hBlb4fkY+W23w0fQ1s0pec3eIlpQxWqgS2J2Bi3W jWyS+vCz3PTWlb4zKCUNFZ4h3oYpKZEK/S2Zp5BZuJsBQU6MqJbo1iV2Jwwb47dh Jw7YXCxqpDuiYoUYUTDpqsCXqgj3VrChuC3N5UQtEW/LIHBVbKtSjz/oeXRWIBUn C0/oRcu2tfHf0Q6HswBDwob6MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2FqJTf m4MY9BIas6c5YeoJy7oAMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO am1FdEhzUFZHQzB5SGxNWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEjz3tSjXo+i7+BnPuIvzxprTN68Y5meQ02eDImseZ5ahvP4VzAo37 y9amNDa/tBswNWRgGo9akTth37TEBApsN6LsinimuU2DW9rySWRv96D5ujViWezA 8i7CVBFf+2PK5/YMTMvIxB+P4tXxQuDqlsXofM4qK82/4G0Y+WH1UPUJOX+7Xbbn xbMR61uR7gnUa4v9cQR947LZFQuaYNOFfqOIlHpWn8hNQslRPRL930RWb9MP3EWI tZtl5Dozb8GpaZGYdfEFOpWhjFXtwOGADDNyHabwRVdZG2lcgkmZLIDCR0mtEtDi 9PbBXjtrumZDGRfoAI4HNf1Igti3sjkA -----END CERTIFICATE-----Generated at Wed May 29 09:16:22 2024 by rpki-client on console-fra.rpki-client.org