$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft File: MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json) Hash identifier: 8njtv4AcVDHRPnU+QGlbp9JXYyLMZTbGJjfMFBwTW9E= Subject key identifier: 36:4B:F3:1B:DF:41:D3:30:2D:F4:0E:E6:BF:1B:6E:72:1C:89:C1:65 Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7 Certificate issuer: /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7 Certificate serial: 05C0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft Manifest number: 05BB Signing time: Fri 31 May 2024 15:30:46 +0000 Manifest this update: Fri 31 May 2024 15:30:46 +0000 Manifest next update: Fri 07 Jun 2024 15:30:46 +0000 Files and hashes: 1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: C2r8ytAfc2O8VEDhgny6fYqaGG902x2CTWSE6ns7f/M=) 2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: qiqkWwHqRRJzS1+kLrMRORcyejq5wX+sQ/09xLL4Yok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7 Validity Not Before: May 31 15:30:46 2024 GMT Not After : Jun 7 15:30:46 2024 GMT Subject: CN=6659ed26-6351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:be:31:a3:41:8e:01:31:07:a8:fd:70:68: a5:32:fc:c3:cb:e1:65:0a:ff:5a:09:a4:a5:40:e6: 1c:22:c3:30:4f:3f:0a:3c:d4:66:13:2e:68:16:d6: 2f:44:6a:c2:7b:18:b8:b9:10:ba:f0:98:0c:4a:b3: 2a:4b:c3:e1:5a:2f:96:1c:f5:08:a1:58:21:75:21: 15:38:48:b6:d3:82:d2:02:fd:57:9f:a4:66:83:b6: f4:d7:aa:41:9f:2d:5e:eb:2c:23:74:06:00:05:ac: 95:e2:71:75:a9:4e:30:fe:bc:08:ea:8f:01:b6:77: 56:9d:5a:88:76:ab:75:2b:b1:6e:fd:a8:c9:5d:7e: 47:1a:2e:02:ed:5e:64:7e:0b:90:e4:cd:68:25:34: 3c:b9:b4:58:76:e2:a3:5a:45:d8:80:6b:ca:77:1b: a1:95:57:a8:0c:7e:18:6b:ff:7f:8d:b3:9e:d1:df: 17:e4:84:4a:40:fa:8c:ed:d2:13:90:c0:13:f0:b0: c8:90:92:67:61:f3:ce:3c:25:26:32:58:a6:81:ed: 37:41:70:3c:0c:d1:f9:bb:d5:81:72:e2:81:8b:c1: 47:06:6d:13:57:3e:f9:0c:c5:5b:63:c1:4d:a3:7a: 93:35:72:95:00:93:cc:03:b3:c3:48:1c:e1:5d:4e: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4B:F3:1B:DF:41:D3:30:2D:F4:0E:E6:BF:1B:6E:72:1C:89:C1:65 X509v3 Authority Key Identifier: keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6b:0b:cc:47:66:4e:84:a9:ed:f5:22:4c:f5:87:e0:34:eb: d2:e9:1f:df:15:51:56:e2:51:0e:33:99:0a:f5:33:15:33:52: 49:27:fe:96:75:db:0e:87:7c:78:ba:de:ad:04:b2:e1:ec:0b: 7b:d0:2d:39:e0:51:bb:69:82:cd:1b:46:e0:cd:2a:1a:42:a5: f7:80:d8:b6:67:1c:91:01:09:1c:8f:5b:f4:59:c6:72:2f:90: d0:b5:b0:4d:c7:36:f2:63:1d:2c:4d:04:b0:78:7e:9e:ec:fd: 18:23:47:f0:90:d5:6a:dd:e0:83:d4:a0:9a:8b:d5:e8:25:e8: 5e:80:b1:c7:5d:b3:cc:95:ec:e3:56:c2:b1:40:bb:50:84:7e: a7:62:da:54:67:a6:72:d2:e7:23:70:b3:6b:60:eb:e3:36:81: e5:98:f2:ac:d3:d9:1d:d4:a7:8b:0e:46:cc:91:ce:fc:ef:89: 4b:45:54:6d:87:bb:dc:30:2c:fb:5d:10:fd:6c:dd:e6:34:17: 62:ef:9d:7a:c9:e5:89:6a:69:80:83:a4:df:aa:62:3f:54:1d: 78:9b:5a:d4:1a:57:f6:4d:07:5a:ae:9a:99:c4:b6:96:ba:aa: 9b:72:5f:92:66:3b:3a:2f:7d:6e:cf:05:dd:c8:cd:86:6e:c2: 49:13:8d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDMxOUIzMTQ0RjA2QThGMkIzMEQ0MTIwNzFGRTEyMTA3 NzRGRTg2RTcwHhcNMjQwNTMxMTUzMDQ2WhcNMjQwNjA3MTUzMDQ2WjAYMRYwFAYD VQQDEw02NjU5ZWQyNi02MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk++MaNBjgExB6j9cGilMvzDy+FlCv9aCaSlQOYcIsMwTz8KPNRmEy5oFtYv RGrCexi4uRC68JgMSrMqS8PhWi+WHPUIoVghdSEVOEi204LSAv1Xn6Rmg7b016pB ny1e6ywjdAYABayV4nF1qU4w/rwI6o8BtndWnVqIdqt1K7Fu/ajJXX5HGi4C7V5k fguQ5M1oJTQ8ubRYduKjWkXYgGvKdxuhlVeoDH4Ya/9/jbOe0d8X5IRKQPqM7dIT kMAT8LDIkJJnYfPOPCUmMlimge03QXA8DNH5u9WBcuKBi8FHBm0TVz75DMVbY8FN o3qTNXKVAJPMA7PDSBzhXU7wpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZL8xvf QdMwLfQO5r8bbnIcicFlMB8GA1UdIwQYMBaAFDGbMUTwao8rMNQSBx/hIQd0/obn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8wMTBFQjI4ODgw ODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5c3cxQklISC1FaEIzVC1o dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL01ac3hSUEJxanlzdzFCSUhILUVoQjNULWh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8wMTBFQjI4ODgwODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5 c3cxQklISC1FaEIzVC1odWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoawvMR2ZOhKnt9SJM9YfgNOvS6R/fFVFW4lEOM5kK9TMVM1JJJ/6W ddsOh3x4ut6tBLLh7At70C054FG7aYLNG0bgzSoaQqX3gNi2ZxyRAQkcj1v0WcZy L5DQtbBNxzbyYx0sTQSweH6e7P0YI0fwkNVq3eCD1KCai9XoJehegLHHXbPMlezj VsKxQLtQhH6nYtpUZ6Zy0ucjcLNrYOvjNoHlmPKs09kd1KeLDkbMkc7874lLRVRt h7vcMCz7XRD9bN3mNBdi7516yeWJammAg6TfqmI/VB14m1rUGlf2TQdarpqZxLaW uqqbcl+SZjs6L31uzwXdyM2GbsJJE400 -----END CERTIFICATE-----Generated at Fri May 31 16:41:38 2024 by rpki-client on console-ams.rpki-client.org