$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: YJFO3RwogZKY/oe+H75bHz6P+fvBqVX8AzWe/ZIJsdM= Subject key identifier: 4A:7A:CC:49:2F:12:A4:A3:80:08:3F:E4:DC:00:50:58:25:91:E0:97 Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 03A1 Signing time: Sat 01 Jun 2024 03:39:55 +0000 Manifest this update: Sat 01 Jun 2024 03:39:55 +0000 Manifest next update: Sat 08 Jun 2024 03:39:55 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: nhuzb0SEjFC6Ehdnba0S2Eh2Y6K6GTAgCeGmuMcIAOE=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: 1XjeHDQ66gK9l4CFDY2wsyvhO3mqIEjFkltw+gwNQXM=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: dSUbP0To+9LJFWpBicB2PCzASwn6qpJhInRJqpT56ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Validity Not Before: Jun 1 03:39:55 2024 GMT Not After : Jun 8 03:39:55 2024 GMT Subject: CN=665a980b-58a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:46:a9:92:81:dd:d8:34:7f:ef:d0:b6:53:6e: e5:87:48:e9:fa:66:20:db:0c:09:16:d2:1d:f7:ba: 4a:d2:fe:0f:ea:bb:dd:71:38:2a:3b:fc:7c:08:bd: 4f:88:76:21:d3:e1:a5:50:19:60:15:e3:6a:72:28: 75:b8:f2:f9:13:6e:5a:f2:a0:87:06:f2:ba:e4:e0: c7:5e:aa:d9:29:ed:1b:f9:92:ce:18:1f:18:94:10: 06:df:e0:f0:18:4e:a8:46:8b:a4:80:c1:1e:fa:58: d7:17:48:70:cf:5f:94:2e:6e:c1:75:fe:5f:03:b4: 40:96:ce:cb:fe:4b:b7:18:53:f9:bc:a2:8c:4b:c1: 4d:bd:de:c9:54:ab:a6:48:4a:73:b8:55:27:a7:3c: ca:cf:57:1f:79:fc:74:fe:59:3d:05:6e:4b:51:19: db:25:a0:ad:64:61:99:e9:3d:8b:ac:bd:6a:39:d7: b7:8c:05:25:7f:b3:cc:48:d3:5e:46:83:8a:59:5a: 83:89:3f:24:9a:54:be:c1:44:74:f5:67:cc:02:48: 98:a5:da:2c:a0:90:dc:82:d4:10:5b:dc:0e:42:dd: 25:55:cb:57:8e:5a:34:bd:e5:c3:26:45:dc:b4:ed: d1:da:dc:04:c8:a3:f3:30:7f:fd:91:fb:0a:13:c3: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:CC:49:2F:12:A4:A3:80:08:3F:E4:DC:00:50:58:25:91:E0:97 X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:da:a6:e1:fe:a1:f7:3f:a5:3a:7c:ca:c5:a4:2d:e7:30:0c: b7:f7:c5:7f:c3:9d:91:0a:f9:d4:45:c3:3a:ef:9f:71:07:de: 3c:5b:d6:79:df:87:45:09:2a:79:c2:73:ec:71:e0:35:dc:0e: f4:8e:50:b3:ac:09:fc:37:da:87:f5:a3:1b:9c:ec:aa:b5:b4: 39:dd:7a:12:4e:99:ff:85:cb:a2:b2:29:e8:f6:cb:14:c3:4b: 03:a8:ba:ed:f3:57:87:f0:93:01:2b:fa:ad:e1:54:17:e7:9c: ce:51:dd:40:cd:8a:ac:94:cd:a8:d3:58:49:4a:73:f1:ce:8c: 68:35:15:57:d1:5e:f2:68:85:85:13:81:79:3f:17:c2:68:c8: ac:f1:13:d1:fa:74:83:03:81:be:29:a7:bc:e8:a7:ed:e5:4e: 52:68:29:04:4a:63:6c:7b:cd:19:cf:52:66:43:ec:a1:52:68: f4:a0:b1:f9:e4:ed:8e:dc:34:5b:05:cc:3f:cd:ec:aa:df:0c: 94:31:6e:23:84:13:f3:b9:ad:8d:9c:12:b8:c3:6b:32:cb:99: 51:78:51:6d:f4:7a:e2:07:14:7b:09:ba:74:02:9a:d2:4f:f6: cd:5c:15:c1:b1:dc:55:8f:1a:54:78:67:9c:72:48:b9:9c:37: 4a:2a:5d:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjQwNjAxMDMzOTU1WhcNMjQwNjA4MDMzOTU1WjAYMRYwFAYD VQQDEw02NjVhOTgwYi01OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EapkoHd2DR/79C2U27lh0jp+mYg2wwJFtId97pK0v4P6rvdcTgqO/x8CL1P iHYh0+GlUBlgFeNqcih1uPL5E25a8qCHBvK65ODHXqrZKe0b+ZLOGB8YlBAG3+Dw GE6oRoukgMEe+ljXF0hwz1+ULm7Bdf5fA7RAls7L/ku3GFP5vKKMS8FNvd7JVKum SEpzuFUnpzzKz1cfefx0/lk9BW5LURnbJaCtZGGZ6T2LrL1qOde3jAUlf7PMSNNe RoOKWVqDiT8kmlS+wUR09WfMAkiYpdosoJDcgtQQW9wOQt0lVctXjlo0veXDJkXc tO3R2twEyKPzMH/9kfsKE8NkhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp6zEkv EqSjgAg/5NwAUFglkeCXMB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa2qbh/qH3P6U6fMrFpC3nMAy398V/w52RCvnURcM6759xB948W9Z5 34dFCSp5wnPsceA13A70jlCzrAn8N9qH9aMbnOyqtbQ53XoSTpn/hcuisino9ssU w0sDqLrt81eH8JMBK/qt4VQX55zOUd1AzYqslM2o01hJSnPxzoxoNRVX0V7yaIWF E4F5PxfCaMis8RPR+nSDA4G+Kae86Kft5U5SaCkESmNse80Zz1JmQ+yhUmj0oLH5 5O2O3DRbBcw/zeyq3wyUMW4jhBPzua2NnBK4w2syy5lReFFt9HriBxR7Cbp0AprS T/bNXBXBsdxVjxpUeGeccki5nDdKKl0K -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:05 2024 by rpki-client on console-fra.rpki-client.org