$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json) Hash identifier: RRuFzD9vyEoR3p172Diz3BUTYkYhvVyaAk66jV6Pig4= Subject key identifier: ED:94:5E:F4:36:C5:F7:9F:DD:07:9F:A6:4F:51:BF:82:86:1F:D4:87 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft Manifest number: 0916 Signing time: Sat 18 May 2024 22:05:54 +0000 Manifest this update: Sat 18 May 2024 22:05:53 +0000 Manifest next update: Sat 25 May 2024 22:05:53 +0000 Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: OgC/g8KzH0LWzt3liJy7NAXzs++o7vXF0TeCfLLj9qA=) 2: 190B6470D03E11ECAE983D56C4F9AE02.roa (hash: UUh2th6F776umy2ch9csxV9P3QQNk87d9aXEjoTH56w=) 3: 3FB06C820DD211EF9DD9C850C4F9AE02.roa (hash: E+YUFuKcRgvsuA+f4ZCz4x6D1vptEZ56a+A3OFsM1Uw=) 4: 50AF9F1E9D9611EE9CA1F335C4F9AE02.roa (hash: NV96w4VrkiKBU8OTzFGPVJC8p8UB2vcNyUNcQZNomGk=) 5: A6B06B10A0EA11EB81AC5B57C4F9AE02.roa (hash: O56EDvNF5kYeHURdNn23pDWaGQr9sK4mVkuapZGuQN8=) 6: FB18FF8C100511EE9849087AC4F9AE02.roa (hash: b8obSeix/+SdwUcpXSjPZbH8eaYd7bNJOcUrRV6IC54=) 7: 730D118EB51C11EEAF42E271C4F9AE02.roa (hash: I761yr+EyEDy6KQPhv34LpBDXOaegzv+VwL/hkwVAc8=) 8: B3B998DE093011EFB45BFD7EC4F9AE02.roa (hash: YhMbHz9QfyRZbcjaMeXRx7jctV3RUh10kj4OkAfMYrM=) 9: 242CD1DC95EB11EC9715DA5BC4F9AE02.roa (hash: uQ2jtBTM9Z78RAZqVUcoal6Ix2e6zlg7uOCydimofCk=) 10: D1915FB4014611EFA951730DC4F9AE02.roa (hash: XSy9YW1szQkITCgwTx93sv54O37nbqmrg7mDHwc5e88=) 11: BE0C16060B5E11EFA6867D6FC4F9AE02.roa (hash: mF30mUnG46Mr3WtTcPX15G4umncWtXLNvFdpcM4GUqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: May 18 22:05:53 2024 GMT Not After : May 25 22:05:53 2024 GMT Subject: CN=66492641-c77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:62:c1:77:8a:8f:88:fe:7b:73:89:5c:91: eb:80:a8:d6:50:dd:73:0f:3b:79:f8:a7:1e:71:2d: cc:01:8d:54:77:c5:77:a1:34:a4:e4:da:6b:70:c8: 90:44:a9:2a:6c:34:11:ad:fa:22:51:2f:94:78:5b: 59:cb:a4:40:26:38:21:e2:ac:6a:aa:44:fa:21:97: 68:78:9a:92:69:10:1d:82:da:48:6d:6b:6c:95:c4: fd:9b:da:71:48:78:9a:f7:54:17:6c:9a:fe:bf:8f: c9:95:85:e2:1b:9a:2b:96:50:6b:47:a9:03:1f:1c: ff:36:c3:cd:c4:30:47:42:90:27:ff:87:5e:31:a6: eb:25:72:1b:19:11:7e:d8:91:b8:50:87:1b:2a:4a: a6:87:8d:78:a4:ef:00:b5:50:a1:e9:6d:8d:84:46: 90:40:55:8b:75:0d:a2:9c:8d:53:c0:20:6d:58:1f: ea:09:b0:e8:d5:27:a2:48:f7:23:17:af:d9:99:53: 4e:4e:2e:bb:08:49:9a:fd:60:f7:20:ef:09:3c:db: ab:9f:3d:5b:93:7d:5c:bb:79:6d:ba:d4:62:90:a5: 2e:f4:03:03:d6:c3:44:58:95:4d:2b:8d:f4:71:60: 06:13:33:40:74:16:5b:33:35:8f:5d:fd:77:62:0e: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:94:5E:F4:36:C5:F7:9F:DD:07:9F:A6:4F:51:BF:82:86:1F:D4:87 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:ea:d1:d9:26:47:1d:c6:d3:e6:82:00:8f:5c:4b:ee:3b:03: bd:1d:c0:91:f4:32:d9:e7:65:a9:a1:ad:62:38:67:b8:82:46: d2:9d:c8:5b:ea:91:34:33:aa:0b:c7:15:c8:9c:b3:59:24:57: d1:b1:bd:b8:1b:dd:b0:bd:3e:ac:fa:a2:79:ee:22:d4:b0:5b: db:96:1d:0e:7e:55:cb:fb:e7:92:13:60:4f:08:ab:9d:e4:84: 58:43:a1:e7:e9:89:e7:f8:45:c3:39:01:81:ab:24:3b:83:26: 97:e5:37:18:18:1c:0d:c7:d2:77:d0:38:96:e4:70:6e:9b:f3: 04:df:9d:82:cd:82:cf:5c:5a:17:ad:a9:6a:31:89:b0:8f:55: 72:c5:09:b5:d5:f0:cb:03:8c:af:af:03:9f:3b:99:ab:ec:a4: 87:fe:d6:51:d2:e4:6a:a5:d6:9f:e2:6f:6b:ec:35:28:d2:ce: 57:78:10:43:13:86:93:e9:77:96:d6:72:ec:9a:e1:84:98:49: a2:2a:6e:75:ab:74:7f:ca:c6:d4:94:d6:a6:7f:63:74:e1:c4: 10:a6:84:60:33:7a:21:3b:6d:ca:ce:5f:d3:ca:9a:e3:71:b9: 16:ad:a5:8a:0e:32:ff:30:6c:d3:aa:3c:d7:09:b9:eb:cd:fb: 78:47:a7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjQwNTE4MjIwNTUzWhcNMjQwNTI1MjIwNTUzWjAYMRYwFAYD VQQDEw02NjQ5MjY0MS1jNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD5iwXeKj4j+e3OJXJHrgKjWUN1zDzt5+KcecS3MAY1Ud8V3oTSk5NprcMiQ RKkqbDQRrfoiUS+UeFtZy6RAJjgh4qxqqkT6IZdoeJqSaRAdgtpIbWtslcT9m9px SHia91QXbJr+v4/JlYXiG5orllBrR6kDHxz/NsPNxDBHQpAn/4deMabrJXIbGRF+ 2JG4UIcbKkqmh414pO8AtVCh6W2NhEaQQFWLdQ2inI1TwCBtWB/qCbDo1SeiSPcj F6/ZmVNOTi67CEma/WD3IO8JPNurnz1bk31cu3ltutRikKUu9AMD1sNEWJVNK430 cWAGEzNAdBZbMzWPXf13Yg6JCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2UXvQ2 xfef3Qefpk9Rv4KGH9SHMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH eUhMamlBV3haUXRmaUNkdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH6tHZJkcdxtPmggCPXEvuOwO9HcCR9DLZ52Wpoa1iOGe4gkbSnchb 6pE0M6oLxxXInLNZJFfRsb24G92wvT6s+qJ57iLUsFvblh0OflXL++eSE2BPCKud 5IRYQ6Hn6Ynn+EXDOQGBqyQ7gyaX5TcYGBwNx9J30DiW5HBum/ME352CzYLPXFoX ralqMYmwj1VyxQm11fDLA4yvrwOfO5mr7KSH/tZR0uRqpdaf4m9r7DUo0s5XeBBD E4aT6XeW1nLsmuGEmEmiKm51q3R/ysbUlNamf2N04cQQpoRgM3ohO23Kzl/Typrj cbkWraWKDjL/MGzTqjzXCbnrzft4R6c2 -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org