$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: 2E8cz43woq9kUKLhkA9GPmfTCRP7KIHy5eQICTwTobc= Subject key identifier: 40:24:11:B4:CF:88:99:25:6E:E2:30:27:F0:B6:04:89:CD:EB:E2:D1 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 7E Signing time: Sat 25 May 2024 07:34:07 +0000 Manifest this update: Sat 25 May 2024 07:34:07 +0000 Manifest next update: Sat 01 Jun 2024 07:34:07 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: OKX/QaXXEsD0xbOD5B7fAxwH02zCrME+Bck2NwsNUsw=) 2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: UU48qML74BflhU1qL+0Ak4D82yZ8NydrD9esJZZYc34=) 3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: GZhFZn/QqgHIBZMkP7Gz2PewXUnn3FknNIdKPzC+8nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 06:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: May 25 07:34:07 2024 GMT Not After : Jun 1 07:34:07 2024 GMT Subject: CN=6651946f-e257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:7c:0a:19:b1:b8:c8:f7:fb:98:be:5b:36: 3f:14:b1:2e:49:a9:2d:bf:99:b8:62:7c:d5:15:a9: 20:d4:d0:6f:c3:67:d3:1c:9f:6b:3b:58:c7:2f:90: 51:41:96:a9:ce:54:46:8b:51:5b:4f:42:07:1f:d0: 1f:0b:2d:5d:d5:6a:93:5b:f1:90:c8:c4:37:38:c5: 04:2c:03:e7:14:c0:e4:3f:84:38:e7:cd:0f:3a:eb: 34:61:ed:75:95:d8:f5:ed:cb:43:8e:24:fa:ba:56: c4:75:d5:d4:b6:60:2e:5c:fc:00:bc:d6:2e:92:2c: 18:0a:a2:dd:44:60:08:97:2f:db:3d:26:73:96:ef: 02:6b:b7:fd:16:f8:9e:5b:29:71:0f:37:84:70:86: a4:b6:69:0c:af:a1:a5:ac:86:fc:1e:e0:a8:a0:a5: 18:95:bf:c8:61:f8:4d:ed:74:b5:f7:8b:89:25:3d: f1:f0:1b:23:c5:7d:c3:b0:e6:f2:c8:58:24:42:d2: 52:75:75:93:31:b0:b1:4d:46:e9:68:65:51:80:b1: 2a:44:68:43:79:84:0e:8d:c6:c5:ce:35:46:03:35: 4a:db:f4:31:77:e9:f4:5f:b4:69:c5:0c:a6:8c:c8: b8:fd:9f:02:ba:9f:e8:6c:00:0b:a1:23:ae:4d:17: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:24:11:B4:CF:88:99:25:6E:E2:30:27:F0:B6:04:89:CD:EB:E2:D1 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:05:ce:ba:0e:ff:93:8e:c5:a5:04:f1:50:23:52:f5:42:fd: 32:93:f6:9e:79:dd:55:e5:77:10:4f:15:35:a5:46:a2:fd:96: 44:3f:a9:86:7d:a9:16:a2:7e:55:aa:ce:75:77:5e:ea:5d:0d: f7:a9:cc:f8:46:8d:46:e2:04:10:93:a4:2e:c7:bc:53:9e:86: ad:f7:9e:90:2e:92:05:8c:c1:df:21:58:2b:e1:79:7d:bf:16: 50:65:2b:78:e2:f2:22:ea:1e:75:0d:78:8d:91:98:d6:21:6f: 99:d2:06:fc:af:4c:fc:08:d9:85:af:19:00:64:a8:8e:53:d9: 8e:41:c8:10:88:79:46:66:3b:32:f8:a8:45:1e:d5:f5:fe:a2: 51:71:ef:11:6f:5e:0a:70:9a:64:97:c9:14:11:db:fa:61:82: 98:bc:16:7a:f0:24:13:1d:2b:a8:d9:ac:f6:bd:ba:65:b0:29: e7:1a:b1:52:84:ac:71:a6:90:cc:73:f3:8b:63:50:f2:d3:ad: 1b:be:2b:92:cb:3e:de:b7:6d:28:89:37:7a:1d:6c:48:9b:0a: 1e:f3:52:ee:28:c3:53:08:80:d8:f7:c2:cf:50:9a:bb:5e:65: c7:ef:54:15:28:4d:92:bf:3b:21:65:c2:54:e6:4a:08:ef:ec: e3:8b:a9:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjQwNTI1MDczNDA3WhcNMjQwNjAxMDczNDA3WjAYMRYwFAYD VQQDEw02NjUxOTQ2Zi1lMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgV8ChmxuMj3+5i+WzY/FLEuSaktv5m4YnzVFakg1NBvw2fTHJ9rO1jHL5BR QZapzlRGi1FbT0IHH9AfCy1d1WqTW/GQyMQ3OMUELAPnFMDkP4Q4580POus0Ye11 ldj17ctDjiT6ulbEddXUtmAuXPwAvNYukiwYCqLdRGAIly/bPSZzlu8Ca7f9Fvie WylxDzeEcIaktmkMr6GlrIb8HuCooKUYlb/IYfhN7XS194uJJT3x8BsjxX3DsOby yFgkQtJSdXWTMbCxTUbpaGVRgLEqRGhDeYQOjcbFzjVGAzVK2/Qxd+n0X7RpxQym jMi4/Z8Cup/obAALoSOuTRf/0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAkEbTP iJklbuIwJ/C2BInN6+LRMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArBc66Dv+TjsWlBPFQI1L1Qv0yk/aeed1V5XcQTxU1pUai/ZZEP6mG fakWon5Vqs51d17qXQ33qcz4Ro1G4gQQk6Qux7xTnoat956QLpIFjMHfIVgr4Xl9 vxZQZSt44vIi6h51DXiNkZjWIW+Z0gb8r0z8CNmFrxkAZKiOU9mOQcgQiHlGZjsy +KhFHtX1/qJRce8Rb14KcJpkl8kUEdv6YYKYvBZ68CQTHSuo2az2vbplsCnnGrFS hKxxppDMc/OLY1Dy060bviuSyz7et20oiTd6HWxImwoe81LuKMNTCIDY98LPUJq7 XmXH71QVKE2SvzshZcJU5koI7+zji6nC -----END CERTIFICATE-----Generated at Sat May 25 09:04:16 2024 by rpki-client on console-fra.rpki-client.org