$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft File: _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json) Hash identifier: JhdbIutS/1FXA9X1WGx91TLiGTYwWazsqUVdBbXlJE4= Subject key identifier: 79:DD:B3:01:1A:7D:68:7D:44:BD:1C:C8:CB:2D:2D:05:CB:81:94:7B Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft Manifest number: 08A5 Signing time: Sat 04 May 2024 21:41:37 +0000 Manifest this update: Sat 04 May 2024 21:41:37 +0000 Manifest next update: Sat 11 May 2024 21:41:37 +0000 Files and hashes: 1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: tWM2nhcnn5wzaItS7DWVRxml40JLBywCqZwT2W2XUww=) 2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: 8e98CKDKPlUYkaS3gFpmFg+52wx/pHC0SDMOErN/wvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Validity Not Before: May 4 21:41:37 2024 GMT Not After : May 11 21:41:37 2024 GMT Subject: CN=6636ab91-e7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:c6:cc:21:cd:cd:04:e4:75:6f:3c:66:92: 5e:0a:fd:18:bd:c1:19:58:b4:77:f8:ad:3b:32:8d: 97:96:32:93:66:2a:76:d1:22:59:22:72:aa:bf:2f: 5b:24:f1:d1:06:1e:88:1a:09:04:1b:24:8e:c0:d4: f3:43:f0:57:3f:37:34:72:f9:ec:50:fa:ac:03:f8: 3d:c2:6d:f3:cf:91:14:3a:9e:97:13:ba:c9:fd:24: 56:b3:fd:20:17:1f:0b:15:cb:7c:00:e9:0a:49:0b: a8:67:7d:f1:01:8f:38:38:cc:87:b7:5a:d5:1a:58: 0e:3f:41:8f:16:7c:f2:f6:80:9b:ea:71:82:cb:db: 14:57:2f:1e:b5:13:11:6e:0b:5e:e0:48:aa:b6:83: 42:13:aa:2a:00:bd:c8:7c:79:12:f7:ce:0f:b8:ca: 9a:89:96:7b:75:71:31:94:85:95:67:03:6a:dd:b9: 11:28:8c:52:0c:88:a6:65:8e:1f:79:8d:97:56:3c: bd:dd:0c:ef:50:26:c4:95:22:47:2e:b5:16:af:aa: 56:41:e5:e2:b8:51:8a:7b:e8:33:4a:be:f1:db:f5: ce:fc:de:5a:6e:14:d1:6b:d8:f2:28:dc:52:90:53: 5c:c9:8a:ed:72:f2:54:e8:99:2a:7b:43:95:cd:9f: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DD:B3:01:1A:7D:68:7D:44:BD:1C:C8:CB:2D:2D:05:CB:81:94:7B X509v3 Authority Key Identifier: keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6c:58:1c:83:91:21:7a:ff:c6:5f:44:91:21:8b:4a:a1:28: e8:b2:1e:41:07:8a:d2:2e:3f:36:6c:d3:f7:c4:35:6a:a6:0e: 60:85:e7:0d:6d:bb:38:83:6d:1e:dd:11:23:ee:5e:88:3a:61: 56:aa:e0:30:ea:7c:01:99:a8:75:91:7e:99:2f:0c:d6:6f:79: 23:29:25:91:a5:76:29:b5:fc:d3:40:c0:be:2b:f9:0f:c3:cd: 53:f0:1c:28:5b:2e:fb:4b:9b:70:e4:f8:11:5f:23:b8:80:5d: 3d:48:b9:cf:9e:be:28:81:f5:f3:02:e2:8e:2d:42:c5:0a:09: 4b:80:10:e7:39:d3:74:c9:2b:56:0e:67:99:dd:3f:8d:2d:5a: 9a:a7:b8:1a:f7:53:de:67:41:cf:65:4b:d4:4f:b1:ad:11:d9: 3d:f0:38:b9:27:2f:02:6d:e8:d6:83:f4:0d:7b:21:dc:7e:96: ac:83:7d:32:02:dd:25:06:ea:94:e7:d2:64:8a:ca:a0:6e:98: 90:7e:44:02:06:89:5e:14:80:c1:82:9f:c3:b1:2b:ff:4d:bb: 29:f0:de:1b:82:0c:56:eb:c5:d5:7e:1a:bb:f7:b4:e6:71:e4: 78:e1:d7:fc:82:4a:14:03:68:10:b9:ed:37:09:b1:06:ac:95: 87:e0:2e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND OTBDMUExMDkwHhcNMjQwNTA0MjE0MTM3WhcNMjQwNTExMjE0MTM3WjAYMRYwFAYD VQQDEw02NjM2YWI5MS1lN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2jGzCHNzQTkdW88ZpJeCv0YvcEZWLR3+K07Mo2XljKTZip20SJZInKqvy9b JPHRBh6IGgkEGySOwNTzQ/BXPzc0cvnsUPqsA/g9wm3zz5EUOp6XE7rJ/SRWs/0g Fx8LFct8AOkKSQuoZ33xAY84OMyHt1rVGlgOP0GPFnzy9oCb6nGCy9sUVy8etRMR bgte4EiqtoNCE6oqAL3IfHkS984PuMqaiZZ7dXExlIWVZwNq3bkRKIxSDIimZY4f eY2XVjy93QzvUCbElSJHLrUWr6pWQeXiuFGKe+gzSr7x2/XO/N5abhTRa9jyKNxS kFNcyYrtcvJU6Jkqe0OVzZ/KcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHndswEa fWh9RL0cyMstLQXLgZR7MB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFFRi8yRTk0ODc0RTkxREExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpH YmR2eXc1SzNVWnpKREJvUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPbFgcg5Ehev/GX0SRIYtKoSjosh5BB4rSLj82bNP3xDVqpg5ghecN bbs4g20e3REj7l6IOmFWquAw6nwBmah1kX6ZLwzWb3kjKSWRpXYptfzTQMC+K/kP w81T8BwoWy77S5tw5PgRXyO4gF09SLnPnr4ogfXzAuKOLULFCglLgBDnOdN0yStW DmeZ3T+NLVqap7ga91PeZ0HPZUvUT7GtEdk98Di5Jy8CbejWg/QNeyHcfpasg30y At0lBuqU59JkisqgbpiQfkQCBoleFIDBgp/DsSv/Tbsp8N4bggxW68XVfhq797Tm ceR44df8gkoUA2gQue03CbEGrJWH4C6/ -----END CERTIFICATE-----Generated at Sun May 5 00:12:20 2024 by rpki-client on console-fra.rpki-client.org