$ rpki-client -vvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft File: muAi3ZD6yvK8XHN26KhM5QUeiWo.mft (raw, json) Hash identifier: yxmXyRa8sXAkn4IXL9YZhw9XxP0m0G+OpIeI/fuLcKE= Subject key identifier: 43:05:A1:A2:62:89:18:62:3C:A5:B1:18:45:12:4C:5D:ED:5A:04:05 Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A Certificate issuer: /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft Manifest number: 0620 Signing time: Sat 18 May 2024 23:46:40 +0000 Manifest this update: Sat 18 May 2024 23:46:40 +0000 Manifest next update: Sat 25 May 2024 23:46:40 +0000 Files and hashes: 1: muAi3ZD6yvK8XHN26KhM5QUeiWo.crl (hash: ji0wvtshNzEMCZBDDdfltU2GroVZMZ4H8EYYJCQozCo=) 2: C17E4DE2503E11EBB72F4C61C4F9AE02.roa (hash: 1V76BNFXFgS71VyAOD6L3jOI19ixiwlX9hTVN7MA9kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A Validity Not Before: May 18 23:46:40 2024 GMT Not After : May 25 23:46:40 2024 GMT Subject: CN=66493de0-552e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:21:16:95:ab:ea:e8:dd:40:e3:b2:11:57:8d: 61:57:2e:60:c3:80:2c:24:25:d2:73:f7:3c:78:ef: 3a:6f:0f:a6:f7:f7:6e:49:4e:6d:2e:2a:5a:d5:63: 24:2c:ea:2b:cd:b5:4f:be:ff:a4:c5:bd:86:78:e4: a3:4b:df:58:4d:0e:4d:a0:65:39:45:67:87:6a:f1: 2d:02:20:58:7d:d9:b7:6e:61:ac:c7:70:3f:c3:6f: 3c:be:4b:7d:2f:6e:0e:27:7e:cd:be:50:b4:3d:c4: 6f:e1:0b:db:51:a7:05:52:f0:50:88:6a:c1:48:61: 5f:97:02:67:ab:0c:3f:d4:a0:45:dd:ae:6b:13:85: d0:e2:f6:99:72:c1:24:4a:62:0c:80:9f:ba:ac:56: cd:2b:85:f5:77:b9:9c:30:1f:ab:89:31:1d:1f:79: dd:1e:c0:66:dc:41:11:c7:40:85:f8:0d:2e:c6:3a: f3:07:a9:2c:bb:e1:ff:50:d1:90:a9:3f:da:76:44: 81:59:3a:5f:19:27:db:51:ed:d4:74:f1:41:6c:17: 77:cc:7e:c4:6b:c1:aa:9f:23:6c:e6:be:b1:6c:3a: 28:1c:2e:e4:15:c1:a8:74:49:9e:a2:60:81:68:49: 23:34:b1:fd:87:37:3e:3a:65:ec:34:63:89:f3:1f: dc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:05:A1:A2:62:89:18:62:3C:A5:B1:18:45:12:4C:5D:ED:5A:04:05 X509v3 Authority Key Identifier: keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:87:6b:9f:47:1b:06:a8:08:fc:c4:e9:06:6a:32:d5:60:ea: af:a9:16:98:70:b5:7e:84:bc:fd:a0:f2:a9:74:d2:e7:5e:a3: c4:ca:76:ef:1a:71:94:67:ad:44:54:df:7a:8d:40:72:6c:1a: 2e:c9:88:ed:d1:a3:29:c8:7e:9d:64:f0:6a:c2:6b:32:8e:6a: 3b:d4:b6:eb:fc:d7:98:bb:ac:6c:2a:51:d7:14:2f:d0:2b:26: c4:27:1a:69:1c:67:75:b5:f5:d0:9d:8d:a6:5a:eb:85:f2:b3: 48:21:59:76:2d:eb:a0:41:18:df:4a:0b:c3:f7:81:60:1a:df: 3e:de:d7:b7:41:96:80:93:e7:62:65:86:3f:ed:33:01:a9:8b: 4a:0c:82:88:a9:66:82:1d:4b:9b:08:cf:2e:a7:e4:a8:ce:2b: 1e:a2:4d:d5:e3:c1:fb:a5:8d:0c:4c:18:c7:4b:07:1c:32:21: bf:e4:72:63:14:ba:fe:7d:c5:69:c5:cc:cc:34:6d:87:74:64: 19:0d:6e:1b:7c:71:f8:fc:9d:30:7b:03:af:a1:01:d9:3d:4a: 57:68:58:30:ff:9e:cb:b1:40:7a:7e:da:04:0e:7a:9e:e0:4a: 0d:07:c3:fb:d2:7d:97:8e:c8:99:f9:89:d0:58:97:a4:fd:10: 67:d2:a6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI3MUMxMTAvBgNVBAUTKDlBRTAyMkREOTBGQUNBRjJCQzVDNzM3NkU4QTg0Q0U1 MDUxRTg5NkEwHhcNMjQwNTE4MjM0NjQwWhcNMjQwNTI1MjM0NjQwWjAYMRYwFAYD VQQDEw02NjQ5M2RlMC01NTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlyEWlavq6N1A47IRV41hVy5gw4AsJCXSc/c8eO86bw+m9/duSU5tLipa1WMk LOorzbVPvv+kxb2GeOSjS99YTQ5NoGU5RWeHavEtAiBYfdm3bmGsx3A/w288vkt9 L24OJ37NvlC0PcRv4QvbUacFUvBQiGrBSGFflwJnqww/1KBF3a5rE4XQ4vaZcsEk SmIMgJ+6rFbNK4X1d7mcMB+riTEdH3ndHsBm3EERx0CF+A0uxjrzB6ksu+H/UNGQ qT/adkSBWTpfGSfbUe3UdPFBbBd3zH7Ea8GqnyNs5r6xbDooHC7kFcGodEmeomCB aEkjNLH9hzc+OmXsNGOJ8x/cvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMFoaJi iRhiPKWxGEUSTF3tWgQFMB8GA1UdIwQYMBaAFJrgIt2Q+sryvFxzduioTOUFHolq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjcxQy9FREYxM0M2MDUw M0MxMUVCQTJERjMyNUZDNEY5QUUwMi9tdUFpM1pENnl2SzhYSE4yNktoTTVRVWVp V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL211QWkzWkQ2eXZLOFhITjI2S2hNNVFVZWlXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjcxQy9FREYxM0M2MDUwM0MxMUVCQTJERjMyNUZDNEY5QUUwMi9tdUFpM1pENnl2 SzhYSE4yNktoTTVRVWVpV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNh2ufRxsGqAj8xOkGajLVYOqvqRaYcLV+hLz9oPKpdNLnXqPEynbv GnGUZ61EVN96jUBybBouyYjt0aMpyH6dZPBqwmsyjmo71Lbr/NeYu6xsKlHXFC/Q KybEJxppHGd1tfXQnY2mWuuF8rNIIVl2LeugQRjfSgvD94FgGt8+3te3QZaAk+di ZYY/7TMBqYtKDIKIqWaCHUubCM8up+Soziseok3V48H7pY0MTBjHSwccMiG/5HJj FLr+fcVpxczMNG2HdGQZDW4bfHH4/J0wewOvoQHZPUpXaFgw/57LsUB6ftoEDnqe 4EoNB8P70n2XjsiZ+YnQWJek/RBn0qb2 -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org