$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft File: MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json) Hash identifier: w7UQL+xBOOM6uMAGLTDJRxHAnvpOfrewUdGZ/K2pk5U= Subject key identifier: 50:10:20:F1:FF:19:5F:82:32:DF:95:90:8E:62:A6:39:CC:3B:83:03 Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft Manifest number: 02AA Signing time: Fri 31 May 2024 04:10:52 +0000 Manifest this update: Fri 31 May 2024 04:10:51 +0000 Manifest next update: Fri 07 Jun 2024 04:10:51 +0000 Files and hashes: 1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: mOL1fBXYsPXqSCN3ueA9isvltCGbQu4LOdiD/W54vwc=) 2: A21435C410EB11ED9C882A38C4F9AE02.roa (hash: 5EF0iAN9JRHhE6nWZ8EPIuzzwX38JNzCJ2F94kB78lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Validity Not Before: May 31 04:10:51 2024 GMT Not After : Jun 7 04:10:51 2024 GMT Subject: CN=66594dcc-2434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:81:53:82:12:89:c4:db:c0:a0:83:d0:11: d6:f7:d7:99:40:39:e7:e8:c3:69:d1:8a:27:f9:24: c9:d7:19:72:d3:9c:c6:b3:6b:25:34:6d:75:63:01: 73:ac:98:1d:82:7f:79:28:fd:11:fe:6a:69:86:d1: 33:44:13:aa:32:2a:5b:53:cb:7a:a3:8b:ed:bd:6e: d9:2a:30:71:7a:6e:79:0b:b2:6c:56:f0:0d:a4:0f: 1a:36:a8:4f:cb:23:e7:72:dc:98:d4:48:cd:49:12: 36:dd:81:e7:dc:97:89:9e:c5:26:15:d0:85:4e:6a: b1:ad:31:89:56:f5:0b:ab:c3:6e:13:06:14:07:b3: 78:e5:9a:f5:a8:41:8d:73:14:3e:9b:2b:03:60:79: f4:9d:e3:ab:7d:d9:be:95:2b:5f:75:fe:e1:08:7f: 9a:91:65:51:e8:45:0e:0f:24:b5:7b:74:87:3d:a9: 10:e5:67:2a:c8:b7:12:6c:21:72:8e:c7:08:25:ed: cd:c9:68:2c:c9:66:44:5e:5b:aa:e3:ec:3a:d0:b4: 9e:5d:eb:42:cc:ca:d6:9f:b9:94:78:a9:0d:15:e8: eb:bd:5d:8d:19:a9:fb:d5:3a:7e:a8:64:61:ac:0f: 51:2a:b5:76:ca:04:26:76:38:c8:43:63:45:47:bd: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:10:20:F1:FF:19:5F:82:32:DF:95:90:8E:62:A6:39:CC:3B:83:03 X509v3 Authority Key Identifier: keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:fe:d4:c4:36:4d:c3:ef:57:85:14:49:cd:77:cb:eb:41:03: 0c:46:4d:31:8f:ea:c3:d1:c7:56:54:e1:6d:b4:7e:68:d8:d2: b9:a7:e3:35:05:e0:0d:7d:dc:00:c2:6c:be:a3:f0:a8:c3:74: ae:7e:38:0b:02:0a:4b:99:01:ef:22:bd:ba:1a:f2:51:ec:dc: 94:eb:ef:71:06:69:17:0b:d4:9d:9d:22:2e:d7:70:6d:76:d8: 29:41:8e:28:6b:09:fb:02:ad:fc:27:75:a0:55:8d:a9:01:c4: ae:3f:80:c5:ec:41:25:fc:d2:94:bc:bf:6e:64:00:7a:f2:66: 96:b7:a5:8a:3c:72:4a:8e:b4:21:7b:62:52:66:49:18:e0:69: 2c:c4:3a:20:89:9c:6e:5d:20:8a:3d:c5:e5:d3:d2:b0:64:a6: e0:d4:73:3c:68:f5:c9:b5:c3:f7:ce:e3:0e:ca:82:7b:89:c6: df:e4:3e:25:f1:6f:58:59:5e:75:9f:c7:e4:df:dd:00:d0:b5: 5b:e7:74:96:b6:2b:24:5f:9d:5e:bf:e0:02:dc:61:75:05:d1: 9a:0a:2a:5f:c6:a6:48:41:fa:48:48:03:e7:cb:fe:87:8a:6e: b1:20:59:ca:40:3b:56:c0:31:c1:1e:e6:6c:ed:3d:8a:c1:31: db:8b:4d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3 QUJGOTdERTMwHhcNMjQwNTMxMDQxMDUxWhcNMjQwNjA3MDQxMDUxWjAYMRYwFAYD VQQDEw02NjU5NGRjYy0yNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MWBU4ISicTbwKCD0BHW99eZQDnn6MNp0Yon+STJ1xly05zGs2slNG11YwFz rJgdgn95KP0R/mpphtEzRBOqMipbU8t6o4vtvW7ZKjBxem55C7JsVvANpA8aNqhP yyPnctyY1EjNSRI23YHn3JeJnsUmFdCFTmqxrTGJVvULq8NuEwYUB7N45Zr1qEGN cxQ+mysDYHn0neOrfdm+lStfdf7hCH+akWVR6EUODyS1e3SHPakQ5WcqyLcSbCFy jscIJe3NyWgsyWZEXluq4+w60LSeXetCzMrWn7mUeKkNFejrvV2NGan71Tp+qGRh rA9RKrV2ygQmdjjIQ2NFR72JhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAQIPH/ GV+CMt+VkI5ipjnMO4MDMB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc3MS81NUYyRjBGRUIxN0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1Vy cXNPemdhdWt6RE42djVmZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy/tTENk3D71eFFEnNd8vrQQMMRk0xj+rD0cdWVOFttH5o2NK5p+M1 BeANfdwAwmy+o/Cow3SufjgLAgpLmQHvIr26GvJR7NyU6+9xBmkXC9SdnSIu13Bt dtgpQY4oawn7Aq38J3WgVY2pAcSuP4DF7EEl/NKUvL9uZAB68maWt6WKPHJKjrQh e2JSZkkY4GksxDogiZxuXSCKPcXl09KwZKbg1HM8aPXJtcP3zuMOyoJ7icbf5D4l 8W9YWV51n8fk390A0LVb53SWtiskX51ev+AC3GF1BdGaCipfxqZIQfpISAPny/6H im6xIFnKQDtWwDHBHuZs7T2KwTHbi003 -----END CERTIFICATE-----Generated at Fri May 31 04:54:03 2024 by rpki-client on console-fra.rpki-client.org