$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: HQMZNDSWzAx50KiH+MFsuNqNu23JbcXBp4PDUbdJ/9w= Subject key identifier: E7:2B:F7:8C:56:75:77:24:8C:F7:E1:5D:6B:C8:75:A7:10:0E:55:9B Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 02F7 Signing time: Sun 19 May 2024 03:14:20 +0000 Manifest this update: Sun 19 May 2024 03:14:20 +0000 Manifest next update: Sun 26 May 2024 03:14:20 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: O3GXKw4l3FwF3/T/MlkZvedzmONx08qpr6Xe4m5DUuQ=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: nAlZh2Crlblsryg6pGWxcdvNcmrlL8+GA2PtOu0hmxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: May 19 03:14:20 2024 GMT Not After : May 26 03:14:20 2024 GMT Subject: CN=66496e8c-685e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:af:ce:d5:f8:71:b1:23:1d:a0:a8:b9:be: 13:82:10:2e:40:ed:30:8d:4b:41:3b:28:90:f5:c0: 82:5d:79:ac:31:eb:07:00:17:01:7d:fa:d1:5f:96: c0:31:88:bd:87:02:99:3e:43:eb:6f:db:6e:f7:0e: 15:e2:e5:83:6b:38:92:30:80:8f:ee:f6:a6:7d:f9: 52:fc:10:c9:c8:63:ed:30:ce:7a:af:a5:82:ea:65: f8:a3:e8:d4:bb:e0:12:10:d4:7d:c7:c9:cb:a2:75: 6d:11:eb:25:ff:0a:51:ac:c6:bd:9b:12:af:53:03: 3c:fe:4b:b5:0a:27:db:db:5b:d2:85:a4:a1:05:1e: e2:e9:64:12:33:bf:a6:81:00:62:a4:69:df:0a:3c: e8:b0:99:8f:02:c1:86:fc:92:96:90:4d:64:9c:f9: ba:e6:a7:21:f3:ca:61:e2:6e:ef:0b:7b:d8:c1:50: 8b:66:2d:aa:cd:77:51:af:b5:0e:45:d3:b5:f9:56: da:7d:e5:69:d4:3f:c3:f0:72:d9:30:25:c3:74:29: f7:23:2c:a6:d7:7d:3e:c5:6b:e4:a8:e6:8e:84:ee: e0:cf:ee:75:a2:cb:0b:8b:1b:c5:79:b8:f6:68:4c: 8b:ff:eb:cd:7c:06:3c:a6:fd:87:f0:37:20:b0:3a: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2B:F7:8C:56:75:77:24:8C:F7:E1:5D:6B:C8:75:A7:10:0E:55:9B X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8c:d5:95:1d:73:5f:71:25:eb:80:4f:66:07:f6:16:5b:5b: 2e:7f:e3:6b:82:06:63:f3:cf:07:b3:81:2f:84:d3:be:ca:7a: 34:5c:a9:3e:6e:fe:dc:d1:06:67:61:a3:ca:f4:80:7f:aa:31: 2e:37:5a:cd:36:1b:44:28:19:84:15:87:58:ba:da:f5:a1:50: 17:e4:a7:a7:e6:af:6f:f3:e9:e5:6c:dd:ff:8e:94:90:ff:19: f1:1b:a6:2e:e9:fc:26:64:ef:c8:f0:e2:a3:37:58:89:4f:4f: 5a:03:8c:cb:ce:a0:bb:62:5a:b0:da:74:8b:8c:cc:be:53:77: 13:3b:a3:ee:ae:56:a5:f3:98:aa:c9:81:fe:57:b0:8c:f5:1d: 7a:08:65:ee:96:0c:c6:ad:c2:ac:8b:56:e1:4a:70:76:ec:15: f8:ac:83:86:5c:ce:6a:a6:96:9a:4f:71:d5:50:89:0e:ba:e7: 09:9e:8e:26:9a:a9:3a:3a:39:c8:8a:09:99:64:34:c3:2f:71: 5f:58:bd:34:91:52:f2:a7:0f:89:ca:b8:3e:e2:e4:88:53:7d: b6:04:4a:2c:cb:5d:d4:e2:e4:cf:56:de:c2:06:df:2a:e5:54: 1e:67:5b:87:ba:53:23:e1:30:cb:f9:11:a6:df:ac:2c:e0:3a: a8:49:f8:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjQwNTE5MDMxNDIwWhcNMjQwNTI2MDMxNDIwWjAYMRYwFAYD VQQDEw02NjQ5NmU4Yy02ODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnivztX4cbEjHaCoub4TghAuQO0wjUtBOyiQ9cCCXXmsMesHABcBffrRX5bA MYi9hwKZPkPrb9tu9w4V4uWDaziSMICP7vamfflS/BDJyGPtMM56r6WC6mX4o+jU u+ASENR9x8nLonVtEesl/wpRrMa9mxKvUwM8/ku1Cifb21vShaShBR7i6WQSM7+m gQBipGnfCjzosJmPAsGG/JKWkE1knPm65qch88ph4m7vC3vYwVCLZi2qzXdRr7UO RdO1+VbafeVp1D/D8HLZMCXDdCn3Iyym130+xWvkqOaOhO7gz+51ossLixvFebj2 aEyL/+vNfAY8pv2H8DcgsDo5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcr94xW dXckjPfhXWvIdacQDlWbMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSjNWVHXNfcSXrgE9mB/YWW1suf+NrggZj888Hs4EvhNO+yno0XKk+ bv7c0QZnYaPK9IB/qjEuN1rNNhtEKBmEFYdYutr1oVAX5Ken5q9v8+nlbN3/jpSQ /xnxG6Yu6fwmZO/I8OKjN1iJT09aA4zLzqC7Ylqw2nSLjMy+U3cTO6Purlal85iq yYH+V7CM9R16CGXulgzGrcKsi1bhSnB27BX4rIOGXM5qppaaT3HVUIkOuucJno4m mqk6OjnIigmZZDTDL3FfWL00kVLypw+Jyrg+4uSIU322BEosy13U4uTPVt7CBt8q 5VQeZ1uHulMj4TDL+RGm36ws4DqoSfiO -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org