$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: traJRMDYfzi5S3Cd1Z3BIAhgRI9M89qlqkaO2wIBn8Y= Subject key identifier: 0D:AA:B5:67:09:51:E8:D8:58:95:3D:DF:55:38:00:D1:58:32:5D:29 Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 0314 Signing time: Fri 31 May 2024 03:44:44 +0000 Manifest this update: Fri 31 May 2024 03:44:44 +0000 Manifest next update: Fri 07 Jun 2024 03:44:44 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: C3ZuoHKKFGTU8kQoQRbA5MokbtpMWg3IyrTcyd8zMK4=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: NvR9oTP8aVtW41+HpR5ZnWPqrkmQ4StnKs9ffYZOrLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: May 31 03:44:44 2024 GMT Not After : Jun 7 03:44:44 2024 GMT Subject: CN=665947ac-1584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:df:c8:c4:b2:52:34:12:da:e7:28:04:79: a3:bb:c8:97:99:28:ef:d3:c4:7f:3d:55:39:cd:1a: 0f:0e:c8:20:d1:63:d7:03:40:43:21:30:6d:53:c8: a4:cd:4b:33:ae:45:9a:1c:58:df:80:02:60:11:49: 3e:1f:c2:0b:0b:f1:47:17:f1:3c:ae:1c:1a:9c:ad: cc:90:ff:fc:bf:db:d6:43:6b:2c:23:9b:b6:db:77: de:39:b3:b7:75:1a:8f:bc:eb:52:b3:5b:ec:40:0b: 4f:15:17:b3:d7:23:9f:ff:80:72:01:32:23:5b:ae: ef:63:ab:b0:4a:7a:75:f4:bf:4d:26:5e:64:9a:d2: be:9d:43:d4:ae:29:c3:94:77:27:7b:3b:75:64:8d: ed:16:7f:d8:c3:cf:0a:9f:6a:4a:3f:e5:b8:8c:59: 0f:4b:8e:16:2b:27:3e:5b:6b:7e:21:6c:cc:85:67: 2f:a0:35:16:7d:0e:f4:b2:a4:bc:ad:17:5e:06:9a: 28:e1:2a:14:cb:f8:eb:ae:7a:da:8e:b4:14:bc:ef: 47:5a:21:7d:5d:e1:89:ce:96:bf:53:2f:3b:ce:bd: 11:4d:54:5d:b6:55:fa:e4:ca:9b:ca:bc:aa:d4:03: c4:d8:42:d0:13:f3:cc:e1:02:18:8f:30:bb:81:19: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AA:B5:67:09:51:E8:D8:58:95:3D:DF:55:38:00:D1:58:32:5D:29 X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:97:11:ff:71:e3:82:b3:7a:fc:07:04:d5:81:7b:41:76:05: dc:7c:97:41:a8:8c:59:5b:54:b1:9d:c8:6a:66:4c:ea:87:96: 20:c1:53:89:4e:91:f9:f5:16:f9:0b:2e:b7:2f:39:f9:f5:b4: 94:f0:9c:03:17:30:c8:95:21:74:a3:2c:f8:a8:c0:d7:20:2c: 40:d9:0c:73:e4:a3:80:af:0a:40:ed:23:07:1e:60:ac:9d:70: f8:cd:93:15:e0:ba:7f:4c:2b:b4:1d:95:6f:67:73:fd:9d:16: be:3a:6e:c7:fe:b6:8b:db:3e:a4:08:ec:53:a3:a9:03:57:32: 7f:56:b6:02:e8:d3:cb:07:1d:3f:70:9b:88:5d:b3:1f:31:e4: b9:c3:e3:ec:2c:cc:f1:13:32:50:ac:39:68:08:b6:6c:26:95: 5d:6b:3c:dc:bd:39:c5:e4:a2:23:8c:8d:16:62:95:d4:b5:b5: 5b:01:d5:fe:a6:a5:cb:ae:68:3d:98:dd:0e:fd:5d:c6:20:b1: 78:c2:bf:5a:e9:59:60:6f:9e:3a:e2:f4:6f:87:f7:4d:99:a6: c3:7c:40:a9:8d:26:7b:e9:0c:49:e3:e5:56:8d:b0:1a:a9:bd: 9d:5d:be:14:47:05:22:ef:42:cd:02:82:fa:f4:4e:cb:8c:de: 1a:be:af:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjQwNTMxMDM0NDQ0WhcNMjQwNjA3MDM0NDQ0WjAYMRYwFAYD VQQDEw02NjU5NDdhYy0xNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAvfyMSyUjQS2ucoBHmju8iXmSjv08R/PVU5zRoPDsgg0WPXA0BDITBtU8ik zUszrkWaHFjfgAJgEUk+H8ILC/FHF/E8rhwanK3MkP/8v9vWQ2ssI5u223feObO3 dRqPvOtSs1vsQAtPFRez1yOf/4ByATIjW67vY6uwSnp19L9NJl5kmtK+nUPUrinD lHcnezt1ZI3tFn/Yw88Kn2pKP+W4jFkPS44WKyc+W2t+IWzMhWcvoDUWfQ70sqS8 rRdeBpoo4SoUy/jrrnrajrQUvO9HWiF9XeGJzpa/Uy87zr0RTVRdtlX65Mqbyryq 1APE2ELQE/PM4QIYjzC7gRkufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2qtWcJ UejYWJU931U4ANFYMl0pMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3lxH/ceOCs3r8BwTVgXtBdgXcfJdBqIxZW1SxnchqZkzqh5YgwVOJ TpH59Rb5Cy63Lzn59bSU8JwDFzDIlSF0oyz4qMDXICxA2Qxz5KOArwpA7SMHHmCs nXD4zZMV4Lp/TCu0HZVvZ3P9nRa+Om7H/raL2z6kCOxTo6kDVzJ/VrYC6NPLBx0/ cJuIXbMfMeS5w+PsLMzxEzJQrDloCLZsJpVdazzcvTnF5KIjjI0WYpXUtbVbAdX+ pqXLrmg9mN0O/V3GILF4wr9a6Vlgb5464vRvh/dNmabDfECpjSZ76QxJ4+VWjbAa qb2dXb4URwUi70LNAoL69E7LjN4avq9i -----END CERTIFICATE-----Generated at Fri May 31 04:54:00 2024 by rpki-client on console-fra.rpki-client.org