$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft File: McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json) Hash identifier: r3iPytpxKEvhJLruS6IiPnNUDs9Z+TZRDFDTQnMN+n4= Subject key identifier: 64:96:B9:A8:8D:52:E6:5D:85:90:AE:9C:6B:33:FE:44:21:D4:24:DE Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 Certificate issuer: /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft Manifest number: 79 Signing time: Sun 19 May 2024 07:21:54 +0000 Manifest this update: Sun 19 May 2024 07:21:54 +0000 Manifest next update: Sun 26 May 2024 07:21:54 +0000 Files and hashes: 1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: e7Y6MqLpguiJFFi0SqZA8vy41L1t2LNNW4M8TppD9sY=) 2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: V8Zp+nAsYIlE3XVLWHEpLyn3xdZCD/9TBOLVEQMgunU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Validity Not Before: May 19 07:21:54 2024 GMT Not After : May 26 07:21:54 2024 GMT Subject: CN=6649a892-0655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:f7:58:50:5b:e4:05:bd:bd:01:6f:6b:00: 81:be:b5:40:7a:f9:d4:5f:50:8f:e4:05:90:67:a7: 6b:bd:ea:c4:72:f2:dd:e2:93:d1:2c:4d:38:34:ef: e9:c9:9e:df:da:5d:69:e1:3b:3f:11:da:df:cf:b3: ab:4d:ec:e0:7b:90:f3:00:68:34:63:44:58:82:97: f4:52:04:85:24:95:43:5b:aa:70:d1:a5:d4:34:1a: ea:3c:9a:94:cd:5b:bf:dd:54:d9:d8:05:d4:14:10: 10:02:28:4a:a3:fe:8a:f6:41:79:dd:f3:7e:ea:61: 75:ce:0e:ae:60:45:38:fd:4a:4c:2c:a6:e9:a2:f6: c7:cd:a1:95:28:54:05:89:f4:70:2e:f3:43:5b:e2: 47:09:63:c2:2e:0f:02:a8:8b:86:29:62:49:6e:a2: cc:44:49:c8:8b:14:22:f3:fe:b1:ab:29:10:dc:73: 82:6e:21:d3:cf:e0:67:6a:75:fa:43:87:d2:8e:bb: 5c:74:8a:29:af:40:d4:4c:b1:a6:1b:8d:2d:c2:54: fe:6a:93:77:b7:fb:0a:0d:70:94:e4:dd:7f:da:8e: ce:3f:88:aa:8a:7b:36:74:f1:0c:b3:dc:c8:4f:6d: 60:bf:3f:cb:2a:14:d6:a9:48:28:91:9c:f4:94:a4: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:B9:A8:8D:52:E6:5D:85:90:AE:9C:6B:33:FE:44:21:D4:24:DE X509v3 Authority Key Identifier: keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:05:40:a4:ad:32:64:c0:86:4e:e3:68:bb:87:64:77:fc:b8: 79:f0:e7:9a:74:a9:04:64:b0:6f:b3:e3:cb:62:94:53:40:dd: 7f:1c:fc:09:2d:e1:c8:5c:cb:d6:03:ea:05:d6:b5:8c:5d:a8: e5:c6:e1:2a:8c:89:84:ca:cd:4d:ef:45:54:f5:f9:61:54:93: 83:88:6d:09:c6:68:3b:02:de:77:0f:96:83:e3:9a:3c:f7:5e: f4:8c:64:e0:82:85:e3:56:ff:ab:ad:cc:a4:0f:b4:96:85:27: 4e:9e:f4:08:ef:f0:c0:79:47:73:20:d5:c6:50:ee:5e:cf:0b: db:f2:ea:92:8a:e6:50:45:55:8b:f4:7f:42:92:c4:f7:2b:d4: 73:39:e2:ea:5c:de:e3:ef:11:84:d7:e0:4d:39:1c:3c:6e:fb: 53:bb:33:e3:30:e9:f4:a6:e1:b4:82:23:c4:4c:65:d5:34:2e: d3:f7:dc:51:60:a1:8a:0f:f9:62:a6:07:51:63:a0:97:c1:9e: ac:07:43:54:7a:57:ba:eb:44:9f:63:6d:1b:98:2e:6b:fc:c7: 7f:46:66:1b:34:19:33:fb:64:46:6d:b1:9a:e4:43:c4:21:e7: a1:83:eb:7d:5d:08:7b:c1:33:0d:04:a5:00:bd:7a:d2:b4:32: f6:e3:a6:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjA3QzExMC8GA1UEBRMoMzFDQkVEMUQ0QTAyMTcwODMxODA3RDc3NDRBQzRBQUZG MjZBMDZFNjAeFw0yNDA1MTkwNzIxNTRaFw0yNDA1MjYwNzIxNTRaMBgxFjAUBgNV BAMTDTY2NDlhODkyLTA2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnkPdYUFvkBb29AW9rAIG+tUB6+dRfUI/kBZBnp2u96sRy8t3ik9EsTTg07+nJ nt/aXWnhOz8R2t/Ps6tN7OB7kPMAaDRjRFiCl/RSBIUklUNbqnDRpdQ0Guo8mpTN W7/dVNnYBdQUEBACKEqj/or2QXnd837qYXXODq5gRTj9Skwspumi9sfNoZUoVAWJ 9HAu80Nb4kcJY8IuDwKoi4YpYkluosxESciLFCLz/rGrKRDcc4JuIdPP4GdqdfpD h9KOu1x0iimvQNRMsaYbjS3CVP5qk3e3+woNcJTk3X/ajs4/iKqKezZ08Qyz3MhP bWC/P8sqFNapSCiRnPSUpP6NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZJa5qI1S 5l2FkK6cazP+RCHUJN4wHwYDVR0jBBgwFoAUMcvtHUoCFwgxgH13RKxKr/JqBuYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MDdDL0Q0REQzQTg4NjI4 ODExRUU5NjQ0QTkwQ0M0RjlBRTAyL01jdnRIVW9DRndneGdIMTNSS3hLcl9KcUJ1 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWN2dEhVb0NGd2d4Z0gxM1JLeEtyX0pxQnVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MDdDL0Q0REQzQTg4NjI4ODExRUU5NjQ0QTkwQ0M0RjlBRTAyL01jdnRIVW9DRndn eGdIMTNSS3hLcl9KcUJ1WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOcFQKStMmTAhk7jaLuHZHf8uHnw55p0qQRksG+z48tilFNA3X8c/Akt 4chcy9YD6gXWtYxdqOXG4SqMiYTKzU3vRVT1+WFUk4OIbQnGaDsC3ncPloPjmjz3 XvSMZOCCheNW/6utzKQPtJaFJ06e9Ajv8MB5R3Mg1cZQ7l7PC9vy6pKK5lBFVYv0 f0KSxPcr1HM54upc3uPvEYTX4E05HDxu+1O7M+Mw6fSm4bSCI8RMZdU0LtP33FFg oYoP+WKmB1FjoJfBnqwHQ1R6V7rrRJ9jbRuYLmv8x39GZhs0GTP7ZEZtsZrkQ8Qh 56GD631dCHvBMw0EpQC9etK0MvbjpoY= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org