$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft File: MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json) Hash identifier: 8qF6BoxiiFFPV7cHbMmQUL+ruqsN/d4RX76e8d8aQXo= Subject key identifier: F0:ED:84:52:32:1B:13:21:85:B8:1C:8C:2C:A8:EE:4D:E7:13:1E:6F Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft Manifest number: 063A Signing time: Sat 18 May 2024 23:45:17 +0000 Manifest this update: Sat 18 May 2024 23:45:16 +0000 Manifest next update: Sat 25 May 2024 23:45:16 +0000 Files and hashes: 1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: kZApwdTggcrwegcetapznrRBFiCb1WnzHIrV8+N8eww=) 2: E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa (hash: KbmKtTlUkbGUXMfBow8Um6GLcqBvDst3ajH55Y7RS70=) 3: 8A162CBC5CC011EEAD18A95CC4F9AE02.roa (hash: uWXYe8F4NZ1KTtscCCzXjUiRK9hUa9iZhisG2LywSZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Validity Not Before: May 18 23:45:16 2024 GMT Not After : May 25 23:45:16 2024 GMT Subject: CN=66493d8c-f5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:47:96:bb:17:a8:91:9f:7b:b2:50:db:b5: d4:4d:61:b0:47:93:ac:91:3b:38:d4:2a:c2:b4:b1: 7d:eb:35:68:6c:a5:36:6d:4a:24:3f:e9:65:60:40: f4:60:c6:80:fb:58:1d:cd:6b:1a:44:ad:07:79:53: dd:d8:90:0d:0c:70:74:ed:3f:ca:bf:3a:65:3f:a8: 57:68:e9:c8:58:c0:7f:dc:a2:48:f6:a7:46:fc:52: c3:81:c2:90:0a:a4:89:87:94:ec:6d:48:c7:15:07: ee:75:c1:d9:e2:96:3c:6b:ea:48:d1:7c:6d:71:d1: a0:32:47:e5:94:f7:c2:2f:5b:77:c5:10:35:e4:30: 3d:51:a6:e9:51:78:0f:5b:a5:1d:4b:09:34:55:7f: 29:71:34:75:70:7c:71:52:74:60:16:35:72:23:85: d7:4e:bf:76:0e:4b:3d:2a:f3:a5:d1:8b:06:d2:82: ca:76:6a:09:09:1f:73:4e:22:c0:d4:4e:0a:00:8e: a0:e7:42:8b:c3:37:2a:33:42:74:71:b0:8a:bf:65: 62:53:8f:fe:1e:5c:b8:7e:8b:c5:08:75:6d:4d:e5: 0a:d7:f5:0b:1b:24:58:e0:89:ba:8c:90:cf:a6:10: 66:2d:b7:a2:9b:80:ca:da:be:6b:f4:32:94:3d:fb: 2a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:ED:84:52:32:1B:13:21:85:B8:1C:8C:2C:A8:EE:4D:E7:13:1E:6F X509v3 Authority Key Identifier: keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:29:cf:85:df:95:9a:89:87:ed:3c:e6:89:bf:92:2c:89:8e: 63:de:96:1d:2b:54:53:c1:6a:c0:94:ed:57:73:40:b8:41:1d: f3:70:52:42:ff:9d:07:d6:98:b9:2b:45:b9:cb:9d:f8:eb:aa: 36:a7:01:d5:8a:e8:28:fa:75:a5:92:4b:f4:49:0d:8a:b0:9d: 56:8b:2f:f8:3e:80:dd:b0:dd:00:dd:03:34:8d:e3:fc:52:15: 22:a4:76:d8:e3:0d:6d:94:9f:bb:1d:d1:bc:b7:7d:01:c7:a6: 40:48:05:8a:43:75:1d:73:a5:6f:54:9c:b9:74:24:af:ea:a3: c9:34:45:0a:28:35:ff:82:bb:bf:5a:c4:19:16:a5:90:0f:13: ed:60:7b:3b:1e:2c:3b:d5:b1:5f:48:ba:00:2c:bb:6e:dc:84: 42:1b:06:ba:bf:ac:3a:10:b9:51:ea:a6:73:78:65:f0:62:fa: a9:f4:43:44:39:ab:d9:e0:65:1d:73:9b:8f:9f:a4:92:06:3d: cd:76:18:30:9f:e1:56:7a:e4:78:b7:a7:68:14:5b:29:d9:33: 46:fc:18:cf:01:36:c0:42:1e:fa:69:a2:64:14:f5:06:82:9a: 71:8c:09:da:53:35:40:85:dd:d6:2b:91:d8:85:4b:a5:6e:85: 9f:70:ed:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEzODVFOUYyQUFC QkExMzRFMkIwHhcNMjQwNTE4MjM0NTE2WhcNMjQwNTI1MjM0NTE2WjAYMRYwFAYD VQQDEw02NjQ5M2Q4Yy1mNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmRHlrsXqJGfe7JQ27XUTWGwR5OskTs41CrCtLF96zVobKU2bUokP+llYED0 YMaA+1gdzWsaRK0HeVPd2JANDHB07T/KvzplP6hXaOnIWMB/3KJI9qdG/FLDgcKQ CqSJh5TsbUjHFQfudcHZ4pY8a+pI0XxtcdGgMkfllPfCL1t3xRA15DA9UabpUXgP W6UdSwk0VX8pcTR1cHxxUnRgFjVyI4XXTr92Dks9KvOl0YsG0oLKdmoJCR9zTiLA 1E4KAI6g50KLwzcqM0J0cbCKv2ViU4/+Hly4fovFCHVtTeUK1/ULGyRY4Im6jJDP phBmLbeim4DK2r5r9DKUPfsqIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDthFIy GxMhhbgcjCyo7k3nEx5vMB8GA1UdIwQYMBaAFDBYpGm2fQMHLC2KOF6fKqu6E04r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTY2NS82RDBEMTJCODRC RjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3Y3NMWW80WHA4cXE3b1RU aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01GaWthYlo5QXdjc0xZbzRYcDhxcTdvVFRpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTY2NS82RDBEMTJCODRCRjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3 Y3NMWW80WHA4cXE3b1RUaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuKc+F35WaiYftPOaJv5IsiY5j3pYdK1RTwWrAlO1Xc0C4QR3zcFJC /50H1pi5K0W5y53466o2pwHViugo+nWlkkv0SQ2KsJ1Wiy/4PoDdsN0A3QM0jeP8 UhUipHbY4w1tlJ+7HdG8t30Bx6ZASAWKQ3Udc6VvVJy5dCSv6qPJNEUKKDX/gru/ WsQZFqWQDxPtYHs7Hiw71bFfSLoALLtu3IRCGwa6v6w6ELlR6qZzeGXwYvqp9ENE OavZ4GUdc5uPn6SSBj3Ndhgwn+FWeuR4t6doFFsp2TNG/BjPATbAQh76aaJkFPUG gppxjAnaUzVAhd3WK5HYhUulboWfcO0A -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org