$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: 5+gOW7x9BiZ67tcDf2IDUXzqFYYLyM4ulhkpFerY9lQ= Subject key identifier: E5:BF:E6:5B:69:49:B7:38:DA:18:2A:FD:29:DA:D5:C1:1E:E1:5B:58 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0B5E Signing time: Sat 18 May 2024 19:38:27 +0000 Manifest this update: Sat 18 May 2024 19:38:27 +0000 Manifest next update: Sat 25 May 2024 19:38:27 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: AlpjAbpPg9wSiUghcmRJj6Xl0Hti3hiKNzBOBoZ8GfI=) 2: 7714B9B20CA611EAA69C3B41C4F9AE02.roa (hash: q5Ip+XJJXjIIuk4O+US/jQ4BGRmoQDtfjgDsKC944jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: May 18 19:38:27 2024 GMT Not After : May 25 19:38:27 2024 GMT Subject: CN=664903b3-cdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:d2:71:b0:f1:5f:39:d6:a0:3b:c5:c1:4c: be:11:30:d8:e2:d2:16:99:bf:26:21:e2:7d:4b:d8: cf:c6:dc:52:90:2c:97:5a:22:9a:41:d0:9c:5a:30: 05:7b:15:ff:46:ba:2b:68:ea:8a:79:b5:e6:49:fc: db:8d:61:ff:5f:9d:10:96:cc:7c:b6:3b:94:43:4b: aa:0d:50:1a:4e:24:7c:1b:57:5b:58:ff:bf:c1:3e: a8:37:37:1d:5c:04:fc:a4:b3:16:87:d2:a8:93:27: cc:4e:87:fd:57:25:02:05:16:e7:63:9b:17:d9:46: 8e:51:cd:f0:e4:c9:8f:8a:c3:b9:b5:04:3c:59:5a: 75:52:6e:24:f7:b7:04:41:2a:f1:fc:0c:b6:04:a5: 13:2b:e8:b2:6e:c2:a1:07:66:dc:4b:e9:1f:96:e3: fa:01:e3:c0:b4:87:31:1a:88:09:01:90:3f:54:04: 38:4e:67:ec:51:c1:7f:5e:74:58:d0:22:d5:d3:c2: 4d:cf:6a:c8:59:be:7e:7e:52:d7:ca:c1:f1:66:fa: 7b:d9:ae:76:1a:d9:e8:7a:de:6c:ea:5c:e6:90:68: 46:db:5c:c0:e3:cf:d0:fb:99:e4:51:37:ca:22:00: cd:72:85:1e:35:4d:9a:a1:c4:42:31:7e:4b:e0:2e: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BF:E6:5B:69:49:B7:38:DA:18:2A:FD:29:DA:D5:C1:1E:E1:5B:58 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5d:90:48:c7:bf:c6:01:d4:ec:58:44:a2:66:8e:67:e8:9a: b9:5d:d0:11:51:69:f4:c7:31:0a:92:62:9b:ee:49:fe:f0:ae: 58:f6:b1:6c:ad:37:07:bf:99:54:23:2c:75:4f:15:bd:8a:ff: 8f:3f:52:32:d2:d4:51:60:2d:5d:8c:e3:9b:03:a1:17:39:51: 40:43:20:09:30:a6:ba:ff:9e:4a:49:bd:07:ab:da:7b:a0:a0: 45:3e:72:d4:58:2e:3c:db:87:97:f4:88:be:5a:29:ad:bb:cb: 4b:8f:a9:62:70:79:70:96:f2:21:ef:22:cf:88:8a:45:48:76: e8:6a:b0:3f:5e:a8:b6:96:43:89:f6:ed:48:e8:65:d6:06:09: ee:ee:1b:18:a2:a4:85:42:ab:12:f9:95:d7:a0:73:54:55:12: fa:b2:8c:7a:21:13:c6:6b:95:24:d0:32:fe:e8:e3:65:64:fd: 76:07:cf:62:7f:70:a3:dd:90:78:9a:bd:e0:80:85:45:eb:50: 50:6b:ce:a7:80:a4:d5:95:0b:a5:35:ca:2d:2c:f6:27:ff:3c: 8f:9e:b6:a7:e1:39:c1:85:78:a0:9c:37:93:ae:1f:bb:8c:38: e3:83:9f:73:35:9b:06:27:bc:5d:98:4c:92:36:79:bc:7b:7f: d1:ae:9f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjQwNTE4MTkzODI3WhcNMjQwNTI1MTkzODI3WjAYMRYwFAYD VQQDEw02NjQ5MDNiMy1jZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpvScbDxXznWoDvFwUy+ETDY4tIWmb8mIeJ9S9jPxtxSkCyXWiKaQdCcWjAF exX/RroraOqKebXmSfzbjWH/X50Qlsx8tjuUQ0uqDVAaTiR8G1dbWP+/wT6oNzcd XAT8pLMWh9KokyfMTof9VyUCBRbnY5sX2UaOUc3w5MmPisO5tQQ8WVp1Um4k97cE QSrx/Ay2BKUTK+iybsKhB2bcS+kfluP6AePAtIcxGogJAZA/VAQ4TmfsUcF/XnRY 0CLV08JNz2rIWb5+flLXysHxZvp72a52Gtnoet5s6lzmkGhG21zA48/Q+5nkUTfK IgDNcoUeNU2aocRCMX5L4C4ipQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOW/5ltp Sbc42hgq/Sna1cEe4VtYMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnXZBIx7/GAdTsWESiZo5n6Jq5XdARUWn0xzEKkmKb7kn+8K5Y9rFs rTcHv5lUIyx1TxW9iv+PP1Iy0tRRYC1djOObA6EXOVFAQyAJMKa6/55KSb0Hq9p7 oKBFPnLUWC4824eX9Ii+Wimtu8tLj6licHlwlvIh7yLPiIpFSHboarA/Xqi2lkOJ 9u1I6GXWBgnu7hsYoqSFQqsS+ZXXoHNUVRL6sox6IRPGa5Uk0DL+6ONlZP12B89i f3Cj3ZB4mr3ggIVF61BQa86ngKTVlQulNcotLPYn/zyPnran4TnBhXignDeTrh+7 jDjjg59zNZsGJ7xdmEySNnm8e3/Rrp98 -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org