$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: M+0OS9kQDVwY1LT3Ut7dEEkhjHmtKQh/MKMmu++GQxY= Subject key identifier: 11:5A:23:09:19:D8:96:B9:B6:3B:EA:20:21:77:56:CE:4E:AD:C2:C9 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0C38 Signing time: Fri 31 May 2024 19:31:36 +0000 Manifest this update: Fri 31 May 2024 19:31:36 +0000 Manifest next update: Fri 07 Jun 2024 19:31:36 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: XVdsV2Rlz6CxOWADXdzRmT1oJIS09FZeQanxMQuuILU=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: 7sqEC8Li2Wpa2EC0aCoYj3xpQ6F4tY2L8bnpzQlh9hg=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: TkTv3Z7gNpifQ4P5rE0+fJOw+J2G+8lPdPOcWNUUfVw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: t/3xs1tllIZ0lEVRUOVq7qYsLRIvRot539D1245Vi/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: May 31 19:31:36 2024 GMT Not After : Jun 7 19:31:36 2024 GMT Subject: CN=665a2598-1535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:eb:0d:a2:1b:53:58:9e:67:e6:90:2b:40: 22:2e:10:f9:27:52:cb:7b:6e:65:2a:3f:6e:35:d6: c9:fd:36:28:04:5f:b6:0a:6a:eb:46:1b:29:e3:0a: 21:ed:ab:b7:c8:b4:8a:f3:99:86:bb:7a:cc:5d:63: ce:f9:df:59:46:84:a4:28:91:b8:77:0c:71:21:27: ba:7f:4c:58:08:e9:3a:79:c4:64:ba:c2:38:e9:96: 39:1d:11:56:25:f3:ff:3a:54:a7:37:b2:35:33:86: 0b:b3:fe:85:da:fd:d4:ce:db:b1:53:3d:87:2a:9d: 57:7e:32:93:95:51:10:fd:6e:0f:af:6b:06:c2:d3: f1:c3:c0:22:9b:b5:5b:61:8f:5c:37:09:cb:61:ed: 99:25:f4:c1:42:ec:e2:14:59:78:8c:ff:2a:77:89: 33:63:ff:b4:73:ae:0d:5b:24:b8:bf:e2:bd:94:26: e4:12:9a:f2:a4:7d:5d:57:88:0a:eb:ea:7c:d2:cd: ce:97:8a:75:d7:42:d7:7f:8d:d5:01:d5:f9:4c:56: 92:3d:0a:59:32:02:48:2c:c0:8c:1b:c2:73:a5:39: 59:3c:15:18:cb:d1:d2:e7:f7:17:0a:74:3f:1b:db: 6b:51:03:64:36:a7:c8:47:32:01:46:9d:60:dd:6e: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:23:09:19:D8:96:B9:B6:3B:EA:20:21:77:56:CE:4E:AD:C2:C9 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5f:1e:33:c6:ae:c9:53:b5:66:6c:c3:5e:49:fe:13:fa:f6: c8:38:e6:b8:f7:35:d6:eb:2a:6c:b5:75:f0:e6:59:58:0d:20: 4a:b6:e0:f8:97:86:10:d8:42:4c:66:41:97:b8:78:ec:d4:70: 60:a5:23:9d:f6:51:c7:b4:9d:7d:9c:2d:7c:9a:ed:27:62:3f: 60:48:60:81:c5:62:bb:19:b4:c7:40:6c:46:55:09:f0:e8:74: 3c:39:5e:96:b4:1a:c2:3d:33:18:fe:e7:f8:89:43:58:f6:ab: 6d:12:fc:29:67:b8:e2:46:3b:c4:97:95:74:2d:01:97:6b:ce: db:cc:f5:d2:16:85:d3:69:5c:27:c8:5a:de:11:87:e0:9e:eb: 9e:de:7e:63:ea:dc:4f:af:21:3b:08:a6:70:94:47:ec:56:8c: 5b:31:90:26:b5:b2:e0:87:ec:76:c3:94:c5:f2:14:9f:6f:59: a7:7a:e9:41:cc:b0:88:28:17:5f:a4:5e:c6:f2:d5:f3:e9:47: ac:83:60:cd:da:b0:5a:83:82:1d:09:12:7c:f7:c6:d5:68:2e: af:cf:db:03:8c:97:f6:a8:6d:a6:3c:ac:95:ef:32:d7:57:96: ef:b0:be:3b:b6:36:d0:97:3d:37:ee:67:e9:dc:20:dd:68:d3: 20:f0:08:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjQwNTMxMTkzMTM2WhcNMjQwNjA3MTkzMTM2WjAYMRYwFAYD VQQDEw02NjVhMjU5OC0xNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjrrDaIbU1ieZ+aQK0AiLhD5J1LLe25lKj9uNdbJ/TYoBF+2CmrrRhsp4woh 7au3yLSK85mGu3rMXWPO+d9ZRoSkKJG4dwxxISe6f0xYCOk6ecRkusI46ZY5HRFW JfP/OlSnN7I1M4YLs/6F2v3UztuxUz2HKp1XfjKTlVEQ/W4Pr2sGwtPxw8Aim7Vb YY9cNwnLYe2ZJfTBQuziFFl4jP8qd4kzY/+0c64NWyS4v+K9lCbkEprypH1dV4gK 6+p80s3Ol4p110LXf43VAdX5TFaSPQpZMgJILMCMG8JzpTlZPBUYy9HS5/cXCnQ/ G9trUQNkNqfIRzIBRp1g3W5IdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFaIwkZ 2Ja5tjvqICF3Vs5OrcLJMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNXx4zxq7JU7VmbMNeSf4T+vbIOOa49zXW6ypstXXw5llYDSBKtuD4 l4YQ2EJMZkGXuHjs1HBgpSOd9lHHtJ19nC18mu0nYj9gSGCBxWK7GbTHQGxGVQnw 6HQ8OV6WtBrCPTMY/uf4iUNY9qttEvwpZ7jiRjvEl5V0LQGXa87bzPXSFoXTaVwn yFreEYfgnuue3n5j6txPryE7CKZwlEfsVoxbMZAmtbLgh+x2w5TF8hSfb1mneulB zLCIKBdfpF7G8tXz6Uesg2DN2rBag4IdCRJ898bVaC6vz9sDjJf2qG2mPKyV7zLX V5bvsL47tjbQlz037mfp3CDdaNMg8Aga -----END CERTIFICATE-----Generated at Fri May 31 22:13:12 2024 by rpki-client on console-fra.rpki-client.org