$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: GMXUo8zhWTjmWtKV4p1qPrmNzQAyNjJw79HtZQbv0hE= Subject key identifier: F4:79:97:32:E1:2A:AE:61:E6:51:5D:E5:40:BE:5D:86:6E:EF:23:9A Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 184E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 1845 Signing time: Sat 18 May 2024 16:55:09 +0000 Manifest this update: Sat 18 May 2024 16:55:09 +0000 Manifest next update: Sat 25 May 2024 16:55:09 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: dYg3gbrxpZdaryifEBShs6K8QQVF+E5Kf+ro43wH2ko=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: JiV9mLYeWZvcL2vahqcJlLwXx2ErSbCIwbymjkbUaQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6222 (0x184e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: May 18 16:55:09 2024 GMT Not After : May 25 16:55:09 2024 GMT Subject: CN=6648dd6d-7a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:cf:1b:0a:f0:b4:01:f4:62:8d:6a:b5:d0: 8a:87:5c:de:e9:46:e5:e6:e5:5d:77:da:e9:5e:1b: 47:9c:7d:a7:88:50:db:7a:15:71:8c:41:e2:8b:4d: 6f:34:ae:fb:a4:e6:d9:68:26:54:c2:2f:ee:56:48: ae:04:ec:c5:cd:a8:0c:db:48:73:de:17:f2:f4:d8: 64:e6:74:9a:8d:88:9e:b7:19:8b:40:bb:eb:b4:fc: 0d:90:34:bd:29:c9:b9:d3:44:32:4f:62:44:f9:c2: 97:6a:c5:15:bb:42:08:cf:7f:ff:f8:6b:cd:5c:e7: aa:49:6b:3e:e6:42:3d:22:07:cc:d7:c4:39:b1:6c: 67:e2:49:0f:05:c5:57:98:db:76:66:46:ae:0c:d4: 78:4a:e5:37:60:00:e8:14:2b:16:53:44:43:64:b9: f5:30:e3:c6:1f:71:20:7d:59:48:44:27:e7:de:a4: 9c:b1:b7:a0:f7:4c:e3:04:ee:14:fb:35:31:01:1e: 49:87:63:a9:98:89:39:25:6e:d9:6b:1d:63:0f:58: f1:51:2b:fe:95:fb:17:0a:96:d6:1a:30:c9:2d:c7: c0:00:33:be:bc:ac:65:09:62:0b:c3:70:eb:eb:69: 9f:31:94:67:10:96:73:02:00:0c:c6:56:ec:ed:9f: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:79:97:32:E1:2A:AE:61:E6:51:5D:E5:40:BE:5D:86:6E:EF:23:9A X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f5:38:4c:bb:a5:d5:91:86:26:9e:c4:63:81:95:70:31:21: a8:68:90:21:fc:fb:29:c6:a0:fb:b0:8a:df:1b:ee:66:36:fe: 49:86:84:a9:c1:71:a7:69:26:a7:88:45:1c:59:e9:2e:f6:db: 3f:36:ff:63:16:28:7d:75:11:88:e1:34:e1:5c:f9:57:a8:19: 36:b7:ae:c2:33:a9:3e:3e:f8:24:ca:03:69:f1:0b:25:81:4a: 0f:89:f2:39:d9:49:06:b3:4d:4a:88:eb:c3:96:2e:03:c0:17: 4f:9f:00:7e:2b:92:b3:3b:73:8e:40:6e:6d:a4:f3:7f:23:27: 01:a1:4e:9d:81:62:4f:93:3e:3a:c5:9f:84:7b:fa:33:d9:92: 30:bf:7f:89:6c:8a:9f:5c:30:dc:7b:77:e6:1a:03:d1:8d:a1: 22:bd:6a:53:91:59:84:a2:e9:6a:e2:a3:b5:c7:97:6a:7a:a8: cd:71:8e:d9:3d:1a:44:12:05:c5:fe:82:cf:35:58:17:cb:cd: 1a:86:b2:a7:b8:ff:e8:90:e1:a0:dd:79:bb:1b:94:3d:c6:28: d0:7b:f2:dd:44:60:49:12:9a:df:b1:3b:2d:5f:2f:aa:6c:dd: 59:8a:8f:69:29:fb:38:fb:6a:c3:b7:6d:00:c7:b8:63:29:a8: 4a:e0:16:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjQwNTE4MTY1NTA5WhcNMjQwNTI1MTY1NTA5WjAYMRYwFAYD VQQDEw02NjQ4ZGQ2ZC03YTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPvPGwrwtAH0Yo1qtdCKh1ze6Ubl5uVdd9rpXhtHnH2niFDbehVxjEHii01v NK77pObZaCZUwi/uVkiuBOzFzagM20hz3hfy9Nhk5nSajYietxmLQLvrtPwNkDS9 Kcm500QyT2JE+cKXasUVu0IIz3//+GvNXOeqSWs+5kI9IgfM18Q5sWxn4kkPBcVX mNt2ZkauDNR4SuU3YADoFCsWU0RDZLn1MOPGH3EgfVlIRCfn3qScsbeg90zjBO4U +zUxAR5Jh2OpmIk5JW7Zax1jD1jxUSv+lfsXCpbWGjDJLcfAADO+vKxlCWILw3Dr 62mfMZRnEJZzAgAMxlbs7Z9HcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR5lzLh Kq5h5lFd5UC+XYZu7yOaMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa9ThMu6XVkYYmnsRjgZVwMSGoaJAh/PspxqD7sIrfG+5mNv5JhoSp wXGnaSaniEUcWeku9ts/Nv9jFih9dRGI4TThXPlXqBk2t67CM6k+PvgkygNp8Qsl gUoPifI52UkGs01KiOvDli4DwBdPnwB+K5KzO3OOQG5tpPN/IycBoU6dgWJPkz46 xZ+Ee/oz2ZIwv3+JbIqfXDDce3fmGgPRjaEivWpTkVmEoulq4qO1x5dqeqjNcY7Z PRpEEgXF/oLPNVgXy80ahrKnuP/okOGg3Xm7G5Q9xijQe/LdRGBJEprfsTstXy+q bN1Zio9pKfs4+2rDt20Ax7hjKahK4Bbb -----END CERTIFICATE-----Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org