$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: F8M1hVbr5uGxDp+w9H4jtHvJOoB6EqOje9kbZRn9mTM= Subject key identifier: DA:77:2B:CA:BD:BD:9D:BF:C5:36:C7:0D:34:1C:79:A8:C1:94:90:BD Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 1154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 114E Signing time: Thu 30 May 2024 18:08:55 +0000 Manifest this update: Thu 30 May 2024 18:08:54 +0000 Manifest next update: Thu 06 Jun 2024 18:08:54 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: vwroF8dmRuI3la+KQ8gATyti4qegTs+GrFIArsTyZOA=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: uKb0CD161FjgAIVCPD2XTQx6ds9Glzmbbj5YPi3I1QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 18:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4436 (0x1154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: May 30 18:08:54 2024 GMT Not After : Jun 6 18:08:54 2024 GMT Subject: CN=6658c0b7-6448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:ac:5c:2c:31:21:35:f9:3c:6f:6c:98:11: 22:e9:1c:f5:bf:1e:21:86:e1:8d:28:2a:38:5c:eb: ec:16:b3:47:dc:fa:91:d0:a2:89:b6:ab:4d:1c:1b: 08:5a:f5:32:63:60:94:fe:4d:38:14:00:6c:65:69: 8a:ab:f2:2c:d7:73:6a:61:b3:22:35:79:c6:1f:91: 99:01:d4:35:57:92:4d:e8:24:37:30:ea:47:11:de: 76:e3:fe:d8:5f:32:a1:e9:57:ac:70:c3:bf:94:4d: 75:a2:a1:c9:18:8c:f1:91:b7:b9:8c:6c:61:69:61: 4d:22:fd:89:7a:6d:32:5d:71:0f:26:ab:db:35:f2: cc:c8:eb:12:0a:79:f3:35:9c:2e:98:23:6c:91:b5: a3:48:e3:66:cc:dd:08:07:e2:34:8a:18:aa:81:fc: 17:9c:4b:f8:21:9a:10:ab:20:80:33:0c:77:13:17: a3:93:ec:8d:df:b3:35:e5:95:fd:b6:d2:02:e3:ce: ed:0c:39:e3:86:9a:ca:9f:2b:59:51:22:6e:10:21: 43:5a:0c:d0:82:09:e4:ec:d4:8c:95:2d:09:3d:56: f1:bc:98:c3:78:33:97:c7:d5:8c:5b:65:8a:68:60: 24:94:1e:ef:09:35:9e:69:dc:e7:e3:41:72:1a:82: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:77:2B:CA:BD:BD:9D:BF:C5:36:C7:0D:34:1C:79:A8:C1:94:90:BD X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:7f:9e:7b:0b:8c:36:be:f5:6d:3f:46:81:f2:21:7c:96: a2:50:6c:5f:93:f3:c9:39:96:89:19:ab:af:93:80:29:49:51: dd:df:9d:8b:09:7c:34:17:bf:ca:5f:44:ff:7c:39:6b:4e:87: d4:1b:62:7a:81:56:37:9c:a6:7e:2f:47:be:0c:5b:39:d5:90: 46:7a:c7:05:09:e7:37:6f:5f:06:61:21:f7:58:65:6c:11:bc: 82:b1:a6:27:34:53:fa:a2:17:45:1b:a5:fd:d3:f7:43:17:56: c6:fb:7f:04:37:6e:13:b2:17:a2:e1:f4:59:6a:8a:3a:9d:6c: fe:54:df:96:13:12:d4:8f:2f:50:57:8a:8c:d0:ac:32:8b:ca: bb:d8:b0:e6:c7:81:00:d6:22:47:9b:9e:90:93:f7:cf:15:3f: 8b:79:00:0f:82:ba:a3:f4:d7:91:af:44:83:b0:b9:e9:6a:83: c9:29:47:2c:f9:cc:4f:cf:aa:e9:a1:42:02:e8:3e:9c:a7:7f: d8:a7:59:bc:74:d4:c8:10:75:8c:ea:08:90:de:e2:b1:84:2e: 37:09:e5:b4:b4:85:b3:9c:85:78:06:33:2f:9a:32:41:87:9c: 48:a8:36:a6:29:eb:58:88:65:c4:99:b0:32:26:16:92:ea:94: 5c:4a:c1:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjQwNTMwMTgwODU0WhcNMjQwNjA2MTgwODU0WjAYMRYwFAYD VQQDEw02NjU4YzBiNy02NDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhysXCwxITX5PG9smBEi6Rz1vx4hhuGNKCo4XOvsFrNH3PqR0KKJtqtNHBsI WvUyY2CU/k04FABsZWmKq/Is13NqYbMiNXnGH5GZAdQ1V5JN6CQ3MOpHEd524/7Y XzKh6VescMO/lE11oqHJGIzxkbe5jGxhaWFNIv2Jem0yXXEPJqvbNfLMyOsSCnnz NZwumCNskbWjSONmzN0IB+I0ihiqgfwXnEv4IZoQqyCAMwx3Exejk+yN37M15ZX9 ttIC487tDDnjhprKnytZUSJuECFDWgzQggnk7NSMlS0JPVbxvJjDeDOXx9WMW2WK aGAklB7vCTWeadzn40FyGoKt4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNp3K8q9 vZ2/xTbHDTQceajBlJC9MB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/MX+eewuMNr71bT9GgfIhfJaiUGxfk/PJOZaJGauvk4ApSVHd352L CXw0F7/KX0T/fDlrTofUG2J6gVY3nKZ+L0e+DFs51ZBGescFCec3b18GYSH3WGVs EbyCsaYnNFP6ohdFG6X90/dDF1bG+38EN24Tshei4fRZaoo6nWz+VN+WExLUjy9Q V4qM0Kwyi8q72LDmx4EA1iJHm56Qk/fPFT+LeQAPgrqj9NeRr0SDsLnpaoPJKUcs +cxPz6rpoUIC6D6cp3/Yp1m8dNTIEHWM6giQ3uKxhC43CeW0tIWznIV4BjMvmjJB h5xIqDamKetYiGXEmbAyJhaS6pRcSsGA -----END CERTIFICATE-----Generated at Thu May 30 20:35:38 2024 by rpki-client on console-fra.rpki-client.org