$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: RJ9QY0WhHKziHy4HuwQSJrW7p8y2KhWGWhrxN9JVmwQ= Subject key identifier: EF:60:1F:B3:F5:B2:BA:D6:F7:D4:7C:AE:45:79:AB:A9:75:1B:B7:38 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 33CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 33CB Signing time: Sat 18 May 2024 14:36:20 +0000 Manifest this update: Sat 18 May 2024 14:36:20 +0000 Manifest next update: Sat 25 May 2024 14:36:20 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: guCaNLSUpg4oBV21tCtc2Hz4x3ccY0VnsBJw1DJsp/0=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: njnvlZhJpg+O1H7mK6/K1EfgkaOPGFRep0ckaeGXK3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13262 (0x33ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: May 18 14:36:20 2024 GMT Not After : May 25 14:36:20 2024 GMT Subject: CN=6648bce4-5d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:2f:54:84:0e:42:ba:d6:27:30:b3:59:8d: 42:0a:64:5c:e7:49:bf:4f:5b:33:02:e7:c2:1e:0a: 82:72:80:e1:e8:df:df:a4:8e:5b:89:0a:7c:91:ac: 62:60:f3:1e:f6:31:ec:28:aa:52:47:3b:ea:b6:92: ee:77:7f:dc:2e:b1:92:1c:e4:78:23:83:97:f6:79: 97:e9:37:9f:b5:be:d1:89:6a:5c:b8:68:9f:5c:13: 2f:9d:8f:ee:ce:72:c3:52:bc:3e:ea:ad:bc:f9:ec: 0f:9d:9f:0b:cf:c0:be:23:cc:f6:b0:16:6f:05:9c: 50:d9:32:b4:ef:97:3c:72:1a:08:ad:7e:57:1b:14: 23:0a:eb:f8:e5:f5:a9:d9:b0:e5:9a:92:85:10:cf: 0b:ed:f3:f2:3d:4a:8b:25:40:5e:e7:5f:bb:92:ef: e8:d1:0b:17:b7:93:25:96:94:08:d6:4b:5c:d8:f5: 61:60:79:72:70:22:ce:51:d8:08:72:a2:c4:e9:bb: 0f:51:4f:33:e0:17:46:5e:4a:06:4d:3c:d7:01:1e: 16:b0:de:c7:a3:10:9a:a7:ae:b7:03:4a:12:28:1b: 0c:80:b9:47:95:9e:4a:3e:3f:b0:53:7f:b9:35:7d: 0e:de:0b:be:64:b8:46:de:c1:ef:ae:82:dd:b0:1c: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:60:1F:B3:F5:B2:BA:D6:F7:D4:7C:AE:45:79:AB:A9:75:1B:B7:38 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:03:7d:87:c1:aa:2f:00:fc:24:b4:65:04:f4:8c:ff:97:e4: 52:06:3d:44:98:85:b6:ea:e5:c5:75:75:3b:83:57:3a:d3:ee: b2:7a:92:b6:13:50:04:12:9d:5f:01:de:26:f8:eb:ec:41:71: b7:0e:56:df:3a:b0:2d:d1:65:ab:27:c1:2e:43:1d:fc:c7:fa: 7a:3a:da:de:32:d7:2d:99:80:5c:0f:0c:b8:8b:7a:84:b6:6d: b4:8c:39:30:aa:e1:6a:8a:8f:d5:c3:bf:88:3d:0a:e8:29:7d: 31:1e:e9:71:57:41:2d:65:47:22:77:6a:c1:76:09:72:47:de: 33:e6:da:74:af:cc:65:63:77:7c:8f:aa:1f:13:33:2b:99:1a: d1:1a:44:e9:18:85:0d:9c:ec:e9:0b:b0:90:cb:92:8b:0e:33: 00:ba:88:d6:cd:f7:de:06:9c:4c:c9:71:1a:6a:47:54:c4:b6: 63:d7:26:a5:4c:39:75:01:bb:09:2b:5b:b6:a7:30:41:95:5d: 6a:79:da:e3:86:b5:1a:e7:91:18:9b:ae:91:3e:d3:25:5d:85: b4:d6:a1:b6:00:34:51:bc:c7:7e:dc:ab:9e:3b:04:fc:c5:ce: f9:de:3a:4c:b4:6b:db:0d:ca:8a:4c:91:67:da:4c:32:94:cc: af:6a:19:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjQwNTE4MTQzNjIwWhcNMjQwNTI1MTQzNjIwWjAYMRYwFAYD VQQDEw02NjQ4YmNlNC01ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXkvVIQOQrrWJzCzWY1CCmRc50m/T1szAufCHgqCcoDh6N/fpI5biQp8kaxi YPMe9jHsKKpSRzvqtpLud3/cLrGSHOR4I4OX9nmX6Teftb7RiWpcuGifXBMvnY/u znLDUrw+6q28+ewPnZ8Lz8C+I8z2sBZvBZxQ2TK075c8choIrX5XGxQjCuv45fWp 2bDlmpKFEM8L7fPyPUqLJUBe51+7ku/o0QsXt5MllpQI1ktc2PVhYHlycCLOUdgI cqLE6bsPUU8z4BdGXkoGTTzXAR4WsN7HoxCap663A0oSKBsMgLlHlZ5KPj+wU3+5 NX0O3gu+ZLhG3sHvroLdsBwzgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9gH7P1 srrW99R8rkV5q6l1G7c4MB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWA32HwaovAPwktGUE9Iz/l+RSBj1EmIW26uXFdXU7g1c60+6yepK2 E1AEEp1fAd4m+OvsQXG3DlbfOrAt0WWrJ8EuQx38x/p6OtreMtctmYBcDwy4i3qE tm20jDkwquFqio/Vw7+IPQroKX0xHulxV0EtZUcid2rBdglyR94z5tp0r8xlY3d8 j6ofEzMrmRrRGkTpGIUNnOzpC7CQy5KLDjMAuojWzffeBpxMyXEaakdUxLZj1yal TDl1AbsJK1u2pzBBlV1qedrjhrUa55EYm66RPtMlXYW01qG2ADRRvMd+3KueOwT8 xc753jpMtGvbDcqKTJFn2kwylMyvahmL -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org