$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: WvM5e/QZf5MxcW68BN/PpnJjZ8w5SidAGEuic2VO5so= Subject key identifier: F4:5B:71:4F:75:39:B7:26:ED:F0:82:EC:C8:0F:85:2D:5E:F2:E5:7D Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: E7 Signing time: Sun 05 May 2024 05:56:22 +0000 Manifest this update: Sun 05 May 2024 05:56:22 +0000 Manifest next update: Sun 12 May 2024 05:56:22 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: JIwSWyCDBQgamgFbIQvR4JttlIwq4aPL3umII4m1/A4=) 2: C1E7447CAC1811EDA8A31B61C4F9AE02.roa (hash: 98+iZebrw7jfDpHpe2Oijdj9V13HnwTaUJ2Zxc/Ozus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 05:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: May 5 05:56:22 2024 GMT Not After : May 12 05:56:22 2024 GMT Subject: CN=66371f86-45f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:55:c6:8c:aa:72:ab:a5:c8:9b:05:bd:b8: 6e:11:79:a0:92:4d:28:11:68:9f:8f:6a:2d:b4:a4: e7:b2:92:79:e3:90:14:60:37:a2:42:45:b4:6f:63: a0:ba:e8:44:d8:74:36:f0:ff:74:6c:ce:05:04:9f: df:1e:3e:8c:64:58:d0:5d:02:7f:53:d9:fb:cb:13: ed:0f:0d:4e:2d:35:da:d4:c9:9a:2d:bc:8f:50:5d: de:4c:80:47:10:e1:0a:09:db:da:b8:58:6c:ca:01: 0c:ef:63:26:e4:d2:b3:e7:6f:a2:27:f9:20:b9:0e: eb:1e:69:07:13:1d:d5:75:89:b7:5e:22:29:91:73: 91:cf:8f:e2:5e:87:8f:5e:fc:2d:0a:ee:c3:69:fb: 25:aa:58:b8:cd:8b:fe:6b:1d:42:2d:5c:18:13:a6: 85:fc:79:53:71:7b:c3:8a:1a:9d:5b:b5:e5:ae:bf: 5b:3b:82:15:79:55:99:3a:0b:30:ab:bb:71:7d:da: 27:7b:fa:37:91:eb:77:97:be:e3:b7:37:88:11:6b: 65:7f:da:80:f9:55:d8:cd:0d:fb:e3:a1:3f:9d:82: 92:8f:d6:84:62:71:bf:25:30:1b:9d:55:2b:d3:9c: 60:8f:e6:e0:69:f1:9f:2d:e9:eb:dc:ca:27:c7:38: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5B:71:4F:75:39:B7:26:ED:F0:82:EC:C8:0F:85:2D:5E:F2:E5:7D X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1d:a6:14:56:ce:87:6c:fc:45:54:e1:d4:81:83:3b:87:61: c2:36:1f:41:49:70:80:a7:b6:6a:af:45:f3:c5:6f:81:5c:ad: 14:fa:79:0e:75:74:9c:08:2f:17:0e:df:66:5d:de:b0:9b:17: 52:70:3f:59:a8:dc:82:cb:40:44:8e:3b:74:2e:99:39:d5:25: 91:95:1f:c3:db:9d:72:b4:10:f8:00:f5:f5:fe:2f:a9:62:58: e9:87:07:c9:44:76:68:27:fe:4a:3d:f3:f9:b2:4b:d7:00:09: 5b:a6:b5:71:6d:fb:24:9e:65:af:af:a2:88:5c:c9:c2:20:5f: 58:3d:e4:22:aa:ed:b4:a0:ba:bf:33:ab:22:07:d0:ab:4a:2d: 5a:c1:a9:6a:23:cc:32:c1:9c:61:d2:6f:c5:42:f3:62:50:f1: 0b:29:41:f0:fc:d1:ef:18:00:c8:ae:1c:25:d1:be:93:96:62: 3d:0d:10:ff:94:44:e2:ae:b8:51:34:e4:04:47:eb:c0:dd:31: f7:ed:e6:47:56:0d:c6:f6:fd:0f:0a:ec:63:89:35:c4:af:c5: 9f:5b:48:d8:e3:5b:3f:33:8c:f3:f8:59:2f:ca:9d:ce:91:4a: c4:ee:52:7b:57:ac:17:fe:da:6c:2c:12:4a:75:76:e4:f2:0c: 7d:f5:44:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjQwNTA1MDU1NjIyWhcNMjQwNTEyMDU1NjIyWjAYMRYwFAYD VQQDEw02NjM3MWY4Ni00NWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gBVxoyqcqulyJsFvbhuEXmgkk0oEWifj2ottKTnspJ545AUYDeiQkW0b2Og uuhE2HQ28P90bM4FBJ/fHj6MZFjQXQJ/U9n7yxPtDw1OLTXa1MmaLbyPUF3eTIBH EOEKCdvauFhsygEM72Mm5NKz52+iJ/kguQ7rHmkHEx3VdYm3XiIpkXORz4/iXoeP XvwtCu7Dafslqli4zYv+ax1CLVwYE6aF/HlTcXvDihqdW7Xlrr9bO4IVeVWZOgsw q7txfdone/o3ket3l77jtzeIEWtlf9qA+VXYzQ3746E/nYKSj9aEYnG/JTAbnVUr 05xgj+bgafGfLenr3Monxzj/BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRbcU91 Obcm7fCC7MgPhS1e8uV9MB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/HaYUVs6HbPxFVOHUgYM7h2HCNh9BSXCAp7Zqr0XzxW+BXK0U+nkO dXScCC8XDt9mXd6wmxdScD9ZqNyCy0BEjjt0Lpk51SWRlR/D251ytBD4APX1/i+p YljphwfJRHZoJ/5KPfP5skvXAAlbprVxbfsknmWvr6KIXMnCIF9YPeQiqu20oLq/ M6siB9CrSi1awalqI8wywZxh0m/FQvNiUPELKUHw/NHvGADIrhwl0b6TlmI9DRD/ lETirrhRNOQER+vA3TH37eZHVg3G9v0PCuxjiTXEr8WfW0jY41s/M4zz+Fkvyp3O kUrE7lJ7V6wX/tpsLBJKdXbk8gx99UQd -----END CERTIFICATE-----Generated at Sun May 5 08:21:04 2024 by rpki-client on console-ams.rpki-client.org