$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json) Hash identifier: Job+USmvLIgKsVYVvwbHvAgy2ZiL6jzJCWW12U6fXtc= Subject key identifier: E5:7B:8E:FE:17:C8:E3:19:A4:89:20:2D:9F:1A:F5:BD:2C:F8:DE:22 Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft Manifest number: 0831 Signing time: Sat 18 May 2024 21:47:45 +0000 Manifest this update: Sat 18 May 2024 21:47:44 +0000 Manifest next update: Sat 25 May 2024 21:47:44 +0000 Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: 6R8GTogdKGWO2bjLm66ZK/795FG8JsRoyaJpNwG++iE=) 2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: f5L6qbZHYJinb4dxqK06lf1TWxmjBDPvh/3tmuODvG0=) 3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: HGunzzYv3iFdylbWWDt7mDl9oSSW1dEW1MLMdnMxAEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Validity Not Before: May 18 21:47:44 2024 GMT Not After : May 25 21:47:44 2024 GMT Subject: CN=66492201-9e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:c0:c0:ab:eb:15:de:21:07:34:2f:df:68: a6:0f:f0:e4:ba:81:ee:99:38:dc:b4:55:79:08:59: 16:42:13:51:a4:b6:e7:c5:ae:28:88:eb:7a:ac:c0: 60:d4:1b:5b:a8:06:d8:41:9e:69:9f:c7:de:e2:64: 2b:4f:a4:ac:d6:a4:dc:e0:fa:ba:13:1e:c3:eb:3f: 97:d1:43:35:c0:7f:f4:8d:6c:8f:8a:ed:42:31:c4: 09:40:73:5f:92:c7:8b:bf:da:93:a9:d1:99:67:8f: 68:cb:4c:50:a6:c4:19:b8:b2:98:5c:43:be:f7:01: 26:bc:0a:67:a4:c4:cc:4c:e0:42:4e:93:66:28:b1: 52:e1:de:d2:e3:08:a1:07:ce:5c:f0:2d:09:2a:72: 13:3a:e6:a2:67:5c:15:50:65:39:57:0d:7e:92:fb: a2:59:45:51:2a:2d:e8:a1:e5:8b:9d:3a:3a:4a:fa: bd:eb:43:0c:40:02:45:a3:86:11:72:f4:85:0e:70: 4b:44:b9:a6:9f:c0:b7:a6:83:23:27:2e:17:76:5e: 8f:33:99:1a:19:8b:3f:2f:a8:f8:75:27:2e:fd:61: f5:65:51:b0:c3:8c:66:b5:30:69:53:84:cc:36:b1: 01:75:e7:b8:20:96:1c:8f:cf:97:59:7d:ef:bf:f6: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7B:8E:FE:17:C8:E3:19:A4:89:20:2D:9F:1A:F5:BD:2C:F8:DE:22 X509v3 Authority Key Identifier: keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:72:fa:c3:da:15:d8:fb:24:c6:94:aa:ae:65:70:42:6a:8c: 8d:b8:47:cb:ce:69:ed:f6:e2:3d:1a:7a:23:10:5e:f6:9d:07: 25:92:8b:c5:43:8b:3d:43:4d:05:b9:e9:24:44:36:88:de:82: c2:31:a5:e1:23:a2:92:52:5a:b8:b5:3a:39:ff:d6:8c:30:db: 8f:d5:0d:e8:fc:19:3a:f1:aa:0a:7a:1c:f0:26:3d:33:4c:d5: d8:3c:0c:1f:d4:30:8e:09:73:ce:f7:ea:01:d0:64:51:aa:84: 9a:be:61:27:24:0c:8c:72:03:23:ea:c7:e0:17:4c:f5:14:4a: 64:13:13:56:77:1a:57:c0:b7:96:91:e9:81:2b:ed:27:58:15: f5:0d:02:cd:f1:ce:cb:d2:c2:c9:47:61:6a:2f:ca:0b:3e:14: e1:43:eb:b1:e1:4e:43:49:41:38:e8:87:71:1d:03:99:94:d1: 1c:4d:d1:04:0e:4e:b7:2f:ff:fa:0a:ec:1a:b3:05:45:30:62: 92:d0:bd:f4:df:fd:43:48:e7:a7:55:bc:bb:d1:88:c5:91:4d: a2:e7:7f:83:d6:d4:a2:a2:62:f0:85:84:a6:f0:1b:b1:92:f2: 9c:0c:ef:36:39:07:4a:43:2c:d5:6c:16:35:a0:62:87:f6:08: f0:2c:8c:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDMxQzRGOTA2NEY4OUU1NkIxOTRFQjg4NDkyRTkwMjFD MTUyREVCM0UwHhcNMjQwNTE4MjE0NzQ0WhcNMjQwNTI1MjE0NzQ0WjAYMRYwFAYD VQQDEw02NjQ5MjIwMS05ZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvjAwKvrFd4hBzQv32imD/DkuoHumTjctFV5CFkWQhNRpLbnxa4oiOt6rMBg 1BtbqAbYQZ5pn8fe4mQrT6Ss1qTc4Pq6Ex7D6z+X0UM1wH/0jWyPiu1CMcQJQHNf kseLv9qTqdGZZ49oy0xQpsQZuLKYXEO+9wEmvApnpMTMTOBCTpNmKLFS4d7S4wih B85c8C0JKnITOuaiZ1wVUGU5Vw1+kvuiWUVRKi3ooeWLnTo6Svq960MMQAJFo4YR cvSFDnBLRLmmn8C3poMjJy4Xdl6PM5kaGYs/L6j4dScu/WH1ZVGww4xmtTBpU4TM NrEBdee4IJYcj8+XWX3vv/bR/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV7jv4X yOMZpIkgLZ8a9b0s+N4iMB8GA1UdIwQYMBaAFDHE+QZPieVrGU64hJLpAhwVLes+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9EQzU0RDlBNkFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVXc1pUcmlFa3VrQ0hCVXQ2 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jVDVCay1KNVdzWlRyaUVrdWtDSEJVdDZ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9EQzU0RDlBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVX c1pUcmlFa3VrQ0hCVXQ2ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkcvrD2hXY+yTGlKquZXBCaoyNuEfLzmnt9uI9GnojEF72nQclkovF Q4s9Q00FuekkRDaI3oLCMaXhI6KSUlq4tTo5/9aMMNuP1Q3o/Bk68aoKehzwJj0z TNXYPAwf1DCOCXPO9+oB0GRRqoSavmEnJAyMcgMj6sfgF0z1FEpkExNWdxpXwLeW kemBK+0nWBX1DQLN8c7L0sLJR2FqL8oLPhThQ+ux4U5DSUE46IdxHQOZlNEcTdEE Dk63L//6CuwaswVFMGKS0L303/1DSOenVby70YjFkU2i53+D1tSiomLwhYSm8Bux kvKcDO82OQdKQyzVbBY1oGKH9gjwLIys -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org