$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json) Hash identifier: LfHlYKyGaalMrHslyb0xKbNEFzADuCKUtnxxFcn5fh8= Subject key identifier: 1A:44:05:0C:69:0D:B3:BA:9B:BC:28:47:D3:4D:E2:44:6C:DE:F0:32 Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft Manifest number: 3F12 Signing time: Sat 18 May 2024 15:13:58 +0000 Manifest this update: Sat 18 May 2024 15:13:58 +0000 Manifest next update: Sat 25 May 2024 15:13:58 +0000 Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: AIuStpCQHxAMJ2FDbIL4rMCuFTe9KiZL2Dh2Uob/JSA=) 2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: aZpW8xwxHpvdqSec7gvMhuD6mkz9Cv9cHkZect5E07I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Validity Not Before: May 18 15:13:58 2024 GMT Not After : May 25 15:13:58 2024 GMT Subject: CN=6648c5b6-09bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:19:36:fd:3d:e6:ba:c6:68:25:18:96:34: fa:c1:d6:eb:07:19:2c:e9:3c:31:3c:9d:fb:3c:94: d5:28:45:76:0c:11:60:cc:ea:44:da:1f:4a:fc:5a: 30:38:71:65:50:ab:5c:a7:d2:b3:51:9a:a6:24:42: fe:1a:2b:05:70:03:d6:93:d8:9e:5b:3b:76:44:65: 11:09:41:c3:8d:23:ab:db:28:f5:47:f7:6f:3e:66: f2:98:05:e4:ec:9a:eb:c3:d8:c9:8b:d7:a3:c9:e7: bd:55:dc:46:84:ea:c3:8b:0c:b3:0f:28:81:14:86: b7:db:ff:f3:24:e5:80:e0:a3:91:fa:da:ea:af:06: 19:c1:e7:9b:1d:28:df:71:34:d7:92:8a:50:16:11: 6a:57:be:49:62:af:89:1e:4d:81:45:5f:09:a0:57: 24:e7:5d:cb:59:cc:b9:1c:56:28:11:d5:b6:46:d7: 33:c2:a8:12:72:d8:6d:7a:c9:24:2f:32:c5:59:2a: 78:b6:06:75:2b:28:eb:f1:6b:a4:e6:db:b0:ba:f5: fa:02:9c:1c:f0:ad:69:ec:7d:e7:e3:1e:1c:83:52: 9d:05:3d:dd:8e:18:cc:f6:5f:d6:d0:21:d8:b6:7f: 16:2b:ee:80:7c:b5:4a:0f:35:75:af:5b:55:5f:88: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:44:05:0C:69:0D:B3:BA:9B:BC:28:47:D3:4D:E2:44:6C:DE:F0:32 X509v3 Authority Key Identifier: keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e2:5b:98:10:17:3f:d3:9d:db:89:8f:3d:83:7c:1f:ad:1a: 78:a0:2a:55:ec:32:a5:67:5c:47:50:38:79:e7:a0:c1:03:17: b9:9f:a5:92:36:25:35:c5:f2:0d:42:00:61:a6:7c:0b:f3:39: fa:37:31:d7:b6:2e:3c:2e:d0:df:a6:d9:f3:9f:07:a3:f2:28: d7:2b:c7:39:04:50:e5:d1:dd:32:4f:55:3a:a9:09:1d:c8:37: b7:02:7d:79:41:a1:a0:0a:9c:b8:3f:38:93:4c:be:26:b5:58: 9c:6d:17:d3:35:23:a6:0d:54:79:a7:73:f2:91:82:02:49:87: 86:be:d4:b4:eb:bf:85:b0:4b:4f:93:a4:19:a3:86:62:70:f9: 03:bb:e2:6e:1c:cf:70:cb:4b:47:88:cf:3e:62:ef:d1:d6:6f: 5c:8b:e4:8f:ed:73:a6:c4:d4:d4:e7:89:1e:00:20:4a:f8:fb: a9:a8:4a:6d:91:29:58:5e:55:7e:24:03:bc:22:85:3c:0e:ed: 5e:14:c7:57:84:f8:94:d6:11:cc:69:63:0e:9a:1c:79:5e:b8: b9:7d:e1:08:e6:1a:df:23:c9:bf:79:69:31:29:e9:13:36:6d: 00:c4:13:7b:01:e5:d9:be:65:a4:d0:a7:b0:67:2e:84:21:03: c2:4a:ea:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy RDNCMjY0Q0EwHhcNMjQwNTE4MTUxMzU4WhcNMjQwNTI1MTUxMzU4WjAYMRYwFAYD VQQDEw02NjQ4YzViNi0wOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC4ZNv095rrGaCUYljT6wdbrBxks6TwxPJ37PJTVKEV2DBFgzOpE2h9K/Fow OHFlUKtcp9KzUZqmJEL+GisFcAPWk9ieWzt2RGURCUHDjSOr2yj1R/dvPmbymAXk 7Jrrw9jJi9ejyee9VdxGhOrDiwyzDyiBFIa32//zJOWA4KOR+trqrwYZweebHSjf cTTXkopQFhFqV75JYq+JHk2BRV8JoFck513LWcy5HFYoEdW2RtczwqgScthteskk LzLFWSp4tgZ1Kyjr8Wuk5tuwuvX6Apwc8K1p7H3n4x4cg1KdBT3djhjM9l/W0CHY tn8WK+6AfLVKDzV1r1tVX4ghwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpEBQxp DbO6m7woR9NN4kRs3vAyMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX WS1oNjNHNlpYNGd0T3laTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL4luYEBc/053biY89g3wfrRp4oCpV7DKlZ1xHUDh556DBAxe5n6WS NiU1xfINQgBhpnwL8zn6NzHXti48LtDfptnznwej8ijXK8c5BFDl0d0yT1U6qQkd yDe3An15QaGgCpy4PziTTL4mtVicbRfTNSOmDVR5p3PykYICSYeGvtS067+FsEtP k6QZo4ZicPkDu+JuHM9wy0tHiM8+Yu/R1m9ci+SP7XOmxNTU54keACBK+PupqEpt kSlYXlV+JAO8IoU8Du1eFMdXhPiU1hHMaWMOmhx5Xri5feEI5hrfI8m/eWkxKekT Nm0AxBN7AeXZvmWk0KewZy6EIQPCSuq4 -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org