$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: AjjUvsZgVR9teE4R7lNPDCPqEXDw9LX+POLBanA+5ys= Subject key identifier: C8:C1:C8:A5:13:B2:33:C6:98:05:AA:8F:28:C8:78:38:84:62:03:89 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 98 Signing time: Sun 19 May 2024 06:58:41 +0000 Manifest this update: Sun 19 May 2024 06:58:40 +0000 Manifest next update: Sun 26 May 2024 06:58:40 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: R0zM/vhS1FJQLMkmHTVG5VXnOG0ysM2CoPbQ0uPxE44=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: h0QB44dJJWpkUB5Nn8bPiyK2eYO401b5CN+amBjtxwk=) 3: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: Oj41RURSpGJXQ5nqhJ8c+Iycw6Ovr5EgTSpyp5KCPE0=) 4: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: OCW5pcvUAU8JAXjdZKOmENQCXIcoeff+ExAgbdgfAjQ=) 5: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: OeW8BLgkc58uILCZYLvhTkPH8PzObHvU/yKQAx0JSC0=) 6: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: Oc6FnVfPTuGFLrdjCboTDLNxDvcGFQDTupYNuLVUDEI=) 7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: tteglKGihCQVs3h+zk0FgvgH6wR9ojI8iLV0ircfkIQ=) 8: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: fBMn5Dfcp0kaHwVBgpQ2HNrRgr9yjmbsbdEJ3VN87js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: May 19 06:58:40 2024 GMT Not After : May 26 06:58:40 2024 GMT Subject: CN=6649a320-faef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:80:03:96:22:85:c7:65:b9:b7:e3:01:d9:2f: ec:32:0f:41:66:22:5d:3d:ea:87:7a:0a:ac:08:db: 38:5d:f1:3a:48:1c:40:9b:c3:ea:ce:df:9b:66:66: 53:5f:47:24:34:84:3a:09:f3:7a:38:b6:96:30:93: 06:46:b7:f2:22:0d:44:3a:bc:7b:86:fa:f7:e6:6c: 57:30:76:7e:02:66:45:a6:fc:bb:02:83:da:85:13: 99:b5:8b:4a:0d:d2:90:66:e3:2c:d5:c3:54:28:6b: 69:44:9b:0f:df:64:8a:c6:aa:bb:aa:4f:21:ea:bc: d2:9d:21:a1:84:46:b7:26:e7:e2:35:9f:55:1c:3e: c7:f8:1f:77:51:00:bb:ed:d5:1f:02:91:1c:db:65: ba:81:5f:ca:86:c7:cb:13:e0:6a:0d:b3:90:cf:0a: 59:87:cb:93:a7:44:9d:f0:85:eb:48:e9:36:7b:ab: 1c:88:8f:84:72:04:bc:08:e0:67:7d:15:a9:6c:6a: 7c:a6:25:93:85:76:a3:05:1a:f3:1d:85:fd:0b:07: 9c:15:82:8c:d3:60:3b:29:f4:f0:b4:22:58:cf:92: 9f:38:b0:af:ce:60:81:07:c6:4c:dc:a0:13:02:2c: e1:59:64:79:ea:6f:60:cd:1f:e0:f3:d8:d1:87:6c: ad:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C1:C8:A5:13:B2:33:C6:98:05:AA:8F:28:C8:78:38:84:62:03:89 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f9:66:4d:ee:e0:b7:90:ca:8d:38:5d:ab:03:49:da:1f:2a:44: c7:8f:1c:2e:75:e6:47:bc:29:49:ee:ff:40:2e:2d:a6:71:61: 9f:aa:08:86:3e:11:ca:08:24:86:5e:79:5e:c9:d4:44:04:fa: 83:0f:79:9e:f9:92:15:a2:38:e6:c0:8b:ac:3f:01:76:4b:62: a4:1b:c3:21:5d:f8:be:dd:06:fd:53:c7:01:5e:cd:72:e7:47: a4:48:38:17:a5:33:70:c4:4e:69:03:6c:14:af:db:45:53:40: 98:95:16:a2:a9:05:8a:a5:89:44:0a:a4:9f:d0:aa:2d:af:79: e1:ec:56:fc:42:2f:a2:e3:0d:da:aa:a5:57:ef:86:a3:90:50: 8d:9b:a7:bf:b4:4c:c2:2c:2b:51:8a:84:fd:f8:27:cb:8a:8e: c7:ca:a5:6d:e2:ae:27:cb:1a:e8:9d:d9:d1:53:44:d1:12:9b: a3:33:6f:d2:cd:aa:f3:2e:6c:f2:e3:1e:88:d9:c0:cc:93:e1: 04:2d:8e:ec:e3:95:e9:b8:36:d8:d6:b0:41:25:26:2c:7c:c2: 69:35:78:0a:f6:3e:2f:c1:71:cc:54:b0:46:62:d5:c3:1e:b6: 38:41:cd:eb:eb:52:1b:51:56:d3:3b:c4:74:e5:da:08:47:31: c8:62:cc:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjQwNTE5MDY1ODQwWhcNMjQwNTI2MDY1ODQwWjAYMRYwFAYD VQQDEw02NjQ5YTMyMC1mYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+YADliKFx2W5t+MB2S/sMg9BZiJdPeqHegqsCNs4XfE6SBxAm8Pqzt+bZmZT X0ckNIQ6CfN6OLaWMJMGRrfyIg1EOrx7hvr35mxXMHZ+AmZFpvy7AoPahROZtYtK DdKQZuMs1cNUKGtpRJsP32SKxqq7qk8h6rzSnSGhhEa3JufiNZ9VHD7H+B93UQC7 7dUfApEc22W6gV/KhsfLE+BqDbOQzwpZh8uTp0Sd8IXrSOk2e6sciI+EcgS8COBn fRWpbGp8piWThXajBRrzHYX9CwecFYKM02A7KfTwtCJYz5KfOLCvzmCBB8ZM3KAT AizhWWR56m9gzR/g89jRh2ytVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjByKUT sjPGmAWqjyjIeDiEYgOJMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD5Zk3u4LeQyo04XasDSdofKkTHjxwudeZHvClJ7v9ALi2mcWGfqgiG PhHKCCSGXnleydREBPqDD3me+ZIVojjmwIusPwF2S2KkG8MhXfi+3Qb9U8cBXs1y 50ekSDgXpTNwxE5pA2wUr9tFU0CYlRaiqQWKpYlECqSf0Kotr3nh7Fb8Qi+i4w3a qqVX74ajkFCNm6e/tEzCLCtRioT9+CfLio7HyqVt4q4nyxrondnRU0TREpujM2/S zarzLmzy4x6I2cDMk+EELY7s45XpuDbY1rBBJSYsfMJpNXgK9j4vwXHMVLBGYtXD HrY4Qc3r61IbUVbTO8R05doIRzHIYsxM -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org