$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: PLxc4SSa9Eu5DoMPJpml87kqRWnuclYMTRUjtyEmdEc= Subject key identifier: 3D:20:D9:21:CD:34:CC:92:B5:DB:34:01:56:14:19:DB:F9:62:8B:B4 Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 014D Signing time: Fri 31 May 2024 05:36:13 +0000 Manifest this update: Fri 31 May 2024 05:36:13 +0000 Manifest next update: Fri 07 Jun 2024 05:36:13 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: zM530nE+Ty8hiK08B+rgQM2qVcarmGkQl/g8eIMOXNk=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: cTS7M1Wjy1ClELn766job4sxPlpHZcmp+6g0yRtK3x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: May 31 05:36:13 2024 GMT Not After : Jun 7 05:36:13 2024 GMT Subject: CN=665961cd-8fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:6f:c6:29:2a:0d:64:1a:a4:62:d2:49:c9: 11:17:8b:39:a5:ed:47:b3:9e:74:54:76:4c:a2:26: 66:25:de:f1:12:35:70:99:d8:cd:2d:eb:5a:f0:9d: 92:16:fa:cc:ec:7f:29:af:44:a5:0f:09:13:b0:31: 86:19:1c:19:29:d9:c5:88:dc:5f:2a:57:bd:d4:09: e1:fa:be:e4:ca:55:3e:3f:f7:f2:d9:a9:fa:f6:48: 59:6c:a4:25:50:ad:c9:ca:92:bb:b8:f8:a0:c2:8e: b5:bc:d8:63:21:77:84:b6:e1:a5:99:5d:b6:34:cd: 41:a2:f2:62:fd:78:bc:c9:c3:f4:bd:6b:ee:26:05: 31:b6:f1:f7:ab:39:1f:b3:a7:65:fc:15:10:9d:56: 6f:4a:a4:c0:4f:9f:7d:69:36:54:6b:01:27:a3:a1: a3:fe:d7:a5:e3:29:cc:ee:93:f6:4f:ad:8b:88:cc: f6:65:a6:f7:3b:07:db:14:59:2d:ab:b0:8f:bf:f3: d3:85:be:2f:5c:c1:81:e2:c4:e3:b3:a2:01:09:39: 24:ad:55:22:77:aa:58:9a:9c:46:e6:c9:bb:82:1e: e4:44:84:45:4e:14:43:66:12:5a:6e:65:00:79:48: 7d:88:9c:f8:56:6c:e2:32:c5:3c:72:18:3f:fd:e2: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:20:D9:21:CD:34:CC:92:B5:DB:34:01:56:14:19:DB:F9:62:8B:B4 X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:70:42:81:93:de:be:c4:fd:e9:4e:88:1b:bf:e9:67:5e:56: 96:79:ce:a0:00:17:d4:75:89:5a:5b:4c:61:30:9b:de:27:73: 14:8a:25:20:30:72:2c:c7:ef:53:3c:dd:5f:f6:08:29:20:89: c8:c3:aa:74:63:08:a9:67:0a:fb:2a:53:b3:43:68:99:18:45: 8b:49:9f:25:2a:87:01:3f:d4:5b:a8:12:fe:7e:74:47:5e:36: 5e:30:b6:f5:2c:d7:d2:fa:06:8f:93:8a:45:d1:a6:cb:68:89: b2:2a:7f:ed:dc:b5:93:c2:7a:06:f9:24:21:03:27:e0:e0:80: 79:1d:8e:60:fe:06:1c:83:62:c0:fe:ec:07:f1:fc:18:ce:8d: 73:db:44:65:f9:f8:4f:24:ac:b4:7a:35:c3:be:41:a9:75:36: b9:40:73:06:8c:ba:a4:ab:11:97:4f:68:66:16:57:0a:ba:51: 90:74:07:f9:21:55:75:bf:01:8d:17:73:ee:58:77:5e:e5:a6: 61:97:e2:da:78:97:9c:fe:9c:bb:00:4f:df:cf:4b:5a:e5:ab: a0:a0:51:9e:85:cb:fb:89:a9:93:77:d0:d0:14:b5:13:20:3a: 91:50:4f:b5:c3:48:29:a5:8c:a9:75:b0:55:ae:42:af:21:82: 4c:a6:bd:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjQwNTMxMDUzNjEzWhcNMjQwNjA3MDUzNjEzWjAYMRYwFAYD VQQDEw02NjU5NjFjZC04ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN9vxikqDWQapGLSSckRF4s5pe1Hs550VHZMoiZmJd7xEjVwmdjNLeta8J2S FvrM7H8pr0SlDwkTsDGGGRwZKdnFiNxfKle91Anh+r7kylU+P/fy2an69khZbKQl UK3JypK7uPigwo61vNhjIXeEtuGlmV22NM1BovJi/Xi8ycP0vWvuJgUxtvH3qzkf s6dl/BUQnVZvSqTAT599aTZUawEno6Gj/tel4ynM7pP2T62LiMz2Zab3OwfbFFkt q7CPv/PThb4vXMGB4sTjs6IBCTkkrVUid6pYmpxG5sm7gh7kRIRFThRDZhJabmUA eUh9iJz4VmziMsU8chg//eL27wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0g2SHN NMyStds0AVYUGdv5You0MB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADcEKBk96+xP3pTogbv+lnXlaWec6gABfUdYlaW0xhMJveJ3MUiiUg MHIsx+9TPN1f9ggpIInIw6p0YwipZwr7KlOzQ2iZGEWLSZ8lKocBP9RbqBL+fnRH XjZeMLb1LNfS+gaPk4pF0abLaImyKn/t3LWTwnoG+SQhAyfg4IB5HY5g/gYcg2LA /uwH8fwYzo1z20Rl+fhPJKy0ejXDvkGpdTa5QHMGjLqkqxGXT2hmFlcKulGQdAf5 IVV1vwGNF3PuWHde5aZhl+LaeJec/py7AE/fz0ta5augoFGehcv7iamTd9DQFLUT IDqRUE+1w0gppYypdbBVrkKvIYJMpr2x -----END CERTIFICATE-----Generated at Fri May 31 06:49:27 2024 by rpki-client on console-ams.rpki-client.org