$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json) Hash identifier: AkwYrmSR6n44tSwIKnf0OUgKBOkOP9+ssH8/IOWawoU= Subject key identifier: AE:C7:25:65:EF:74:1F:F2:99:24:36:75:A5:9B:7C:9B:55:7D:4A:CE Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Certificate serial: 061B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft Manifest number: 060F Signing time: Thu 02 May 2024 23:58:28 +0000 Manifest this update: Thu 02 May 2024 23:58:28 +0000 Manifest next update: Thu 09 May 2024 23:58:28 +0000 Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: 9lo1w8TLe6/Ek7Fm1AWddGtVjyNVVfKYmidtavXzr/s=) 2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: T5q+eImeXNp91yECBvJenA539SIQtdXjJLj9KEHZwJA=) 3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: Xg3MEPCbPkaEDSePRNK0YQVKPDagtg02uBwUqJ223/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Validity Not Before: May 2 23:58:28 2024 GMT Not After : May 9 23:58:28 2024 GMT Subject: CN=663428a4-7e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:15:f3:66:45:8d:af:9f:f5:0e:25:d0:f5: 9e:63:db:a5:2a:37:75:96:1d:87:d4:b8:7c:51:91: d8:90:88:dc:38:24:80:89:07:5d:8c:a6:28:1b:a5: 8d:af:e7:80:ed:2a:82:d9:72:31:5a:03:c8:6a:91: 29:7a:eb:bf:a6:55:2d:ea:73:8d:8c:20:68:9d:1c: da:44:a1:81:2b:6a:bf:e6:21:12:fd:56:0b:a6:c6: 5c:ff:99:81:3d:7b:45:29:d2:3d:9a:a4:ff:39:f3: 9b:90:c9:12:fe:10:3d:ba:9d:67:e3:5c:a5:4b:1d: 32:c7:fb:de:b9:91:27:e6:52:59:1e:53:2c:83:b5: 01:1e:e2:0c:e2:89:ec:ef:95:d0:62:ff:03:97:9b: d2:ae:ae:41:32:22:3d:04:13:ba:fa:1c:58:a7:19: a9:e0:c2:6b:59:27:b4:cc:4e:6e:7b:4b:6f:a6:95: 80:6a:bb:72:05:96:3f:9e:ba:5b:2e:f7:3e:73:17: e1:9f:28:70:4e:ae:14:9c:73:ea:67:b6:20:49:a4: 9c:1a:3c:21:34:f4:59:60:77:78:81:ff:c6:fa:66: cf:39:b4:7f:5d:77:3a:ad:9d:47:c9:85:22:f9:62: 86:9d:91:3d:90:ae:9e:b6:18:9d:2d:c7:85:47:83: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C7:25:65:EF:74:1F:F2:99:24:36:75:A5:9B:7C:9B:55:7D:4A:CE X509v3 Authority Key Identifier: keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:13:c4:b4:48:4a:ea:0f:67:74:ea:4f:45:b5:10:2d:09:57: fe:ab:d4:53:a8:94:30:55:a1:e9:04:17:31:5a:da:66:39:30: 9a:13:49:03:cf:b5:c2:7a:87:eb:c5:6b:27:4e:c6:54:29:41: 39:b9:04:fa:fb:47:32:91:97:0b:b7:e9:42:81:bf:5b:23:9f: de:98:ca:76:10:25:2b:9d:e8:15:99:2c:29:73:ce:fd:b8:2f: 98:e1:2b:1d:55:e6:95:7f:cd:df:e1:c1:11:fb:00:ab:7e:30: 72:dc:3d:73:49:4b:34:57:21:35:bb:fc:cd:57:6d:48:60:a0: b4:0b:fd:44:4e:66:7f:e5:37:3a:e2:0c:4a:f8:2b:35:ce:24: 42:d9:95:39:ed:67:29:ef:ea:7d:d6:bc:73:61:0a:59:b5:df: 5f:f8:9b:00:c1:6a:4d:a4:1e:92:02:0e:a7:dc:de:d2:35:4a: 75:8b:6e:1f:9f:be:1d:32:a2:4d:10:21:e2:1e:bf:1c:e9:94: 6a:8b:13:90:aa:76:79:f8:a0:e6:6d:b7:b4:28:1c:22:69:dd: 2d:6c:6e:0c:2a:a2:d9:50:f6:9b:6a:47:f7:bf:22:18:85:29: 33:d5:4a:8c:f9:d0:1a:ed:3b:13:da:e6:3d:9b:c7:9a:76:9c: ba:49:37:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1QzcxMTAvBgNVBAUTKDlBMTQ4MzZBMjE4NkQxOTcyMjE0ODYyMjQ4MzU1REFC OEJCOTczNjYwHhcNMjQwNTAyMjM1ODI4WhcNMjQwNTA5MjM1ODI4WjAYMRYwFAYD VQQDEw02NjM0MjhhNC03ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdcV82ZFja+f9Q4l0PWeY9ulKjd1lh2H1Lh8UZHYkIjcOCSAiQddjKYoG6WN r+eA7SqC2XIxWgPIapEpeuu/plUt6nONjCBonRzaRKGBK2q/5iES/VYLpsZc/5mB PXtFKdI9mqT/OfObkMkS/hA9up1n41ylSx0yx/veuZEn5lJZHlMsg7UBHuIM4ons 75XQYv8Dl5vSrq5BMiI9BBO6+hxYpxmp4MJrWSe0zE5ue0tvppWAartyBZY/nrpb Lvc+cxfhnyhwTq4UnHPqZ7YgSaScGjwhNPRZYHd4gf/G+mbPObR/XXc6rZ1HyYUi +WKGnZE9kK6ethidLceFR4NXYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7HJWXv dB/ymSQ2daWbfJtVfUrOMB8GA1UdIwQYMBaAFJoUg2ohhtGXIhSGIkg1XauLuXNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVDNy8yNDM5ODIzMDU0 ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBaY2lGSVlpU0RWZHE0dTVj MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21oU0RhaUdHMFpjaUZJWWlTRFZkcTR1NWMyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVDNy8yNDM5ODIzMDU0ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBa Y2lGSVlpU0RWZHE0dTVjMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2E8S0SErqD2d06k9FtRAtCVf+q9RTqJQwVaHpBBcxWtpmOTCaE0kD z7XCeofrxWsnTsZUKUE5uQT6+0cykZcLt+lCgb9bI5/emMp2ECUrnegVmSwpc879 uC+Y4SsdVeaVf83f4cER+wCrfjBy3D1zSUs0VyE1u/zNV21IYKC0C/1ETmZ/5Tc6 4gxK+Cs1ziRC2ZU57Wcp7+p91rxzYQpZtd9f+JsAwWpNpB6SAg6n3N7SNUp1i24f n74dMqJNECHiHr8c6ZRqixOQqnZ5+KDmbbe0KBwiad0tbG4MKqLZUPabakf3vyIY hSkz1UqM+dAa7TsT2uY9m8eadpy6STdq -----END CERTIFICATE-----Generated at Fri May 3 00:28:37 2024 by rpki-client on console-fra.rpki-client.org