$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json) Hash identifier: xCjqggUq0bfu3pN+fQaLoM7td/NGZyGIUNQrildueg4= Subject key identifier: C9:A8:E4:57:46:51:F7:38:75:D7:A7:EF:34:E8:64:FC:BD:CB:31:1B Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Certificate serial: 0308 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft Manifest number: 0302 Signing time: Tue 07 May 2024 03:10:42 +0000 Manifest this update: Tue 07 May 2024 03:10:41 +0000 Manifest next update: Tue 14 May 2024 03:10:41 +0000 Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: SGKzoIGbGu0VPbJtMG9poGIMNj/FtRVmDL+asKkQcuE=) 2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: UrbJsMDvic5k1jmHHB0Ko/WCM+KH522o7MbYuPKrfeY=) 3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: wYKDxu1d4XWvT7wP1qJaDnfimZ4e4Sw8zO4waVce/8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Validity Not Before: May 7 03:10:41 2024 GMT Not After : May 14 03:10:41 2024 GMT Subject: CN=66399bb1-5527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:ad:8b:fe:34:98:bc:dd:3e:a2:14:65:56: 39:45:8b:19:57:c6:55:72:a4:d7:5a:ed:0f:57:cd: a7:c3:53:02:b6:5b:1c:5c:fa:b6:08:4d:0f:d3:83: e5:00:31:7a:90:5e:bf:77:73:86:0f:af:3f:83:53: 47:19:d9:7f:07:9c:f7:c2:75:d3:3a:9e:00:5d:59: 4f:69:ef:56:ed:d9:f0:3d:40:53:fb:d7:b0:5b:60: 14:51:cd:c9:38:c8:61:0c:85:aa:dc:50:b6:97:06: 80:81:8d:85:b4:67:2e:15:5c:3a:21:bf:9c:f3:81: b2:a2:8a:fd:38:8d:44:ed:dc:6c:57:ee:1a:22:54: b0:80:b1:0a:00:4a:d5:be:71:44:82:34:fe:c6:f8: 2b:03:f5:3e:de:22:92:21:0c:2d:a8:6e:1b:79:08: 00:78:70:3b:08:a7:8d:16:3e:fc:25:84:61:86:e9: 3b:e8:ba:e7:9f:8f:df:5a:3d:de:aa:65:61:6e:f5: 89:92:7e:16:6b:81:27:71:fa:8a:4c:0f:17:48:3a: 70:8e:df:96:75:8f:f8:b2:22:70:a0:6a:3d:50:db: ea:9c:27:76:64:48:25:47:fd:ba:13:33:56:ed:37: 31:fb:65:38:db:48:a8:9d:21:75:d4:ae:2f:1c:92: 96:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A8:E4:57:46:51:F7:38:75:D7:A7:EF:34:E8:64:FC:BD:CB:31:1B X509v3 Authority Key Identifier: keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0e:74:2f:71:e3:58:eb:61:80:63:e8:16:08:b1:a6:a7:4e: c2:93:5a:51:06:98:da:10:fc:98:95:25:3e:77:a9:30:e5:8f: 8d:d7:47:15:37:3c:01:60:5c:3e:13:04:8f:69:d4:9e:f5:d7: 65:4c:0a:ab:ff:9a:66:e5:e1:33:54:82:66:62:1c:5e:bb:d8: c9:60:86:84:ea:84:67:03:c0:e5:be:07:ee:8d:4a:91:41:be: cc:4e:53:5c:24:1b:8f:8c:0e:ab:9f:36:e0:4f:33:6b:d8:2a: 50:f9:32:b1:56:64:82:be:e3:96:77:d8:38:e5:ef:3f:96:92: 00:79:0e:46:fc:4d:b7:c6:58:f2:43:06:b2:7d:68:09:a0:27: 9b:77:9a:df:00:de:63:86:55:ea:ce:49:e2:fe:e2:8e:b6:73: b7:77:1b:ed:5d:e1:38:15:64:22:de:fa:81:ce:3f:fb:5b:00: d1:af:3c:42:ed:66:3e:6a:c7:9c:c1:9c:5e:6a:36:28:4f:c9: 49:72:b4:79:fa:55:31:e7:46:85:de:0b:c3:b9:eb:a0:b5:ec: 4c:96:90:98:8b:90:47:d7:00:2e:8b:47:9b:35:5b:10:15:52: 39:05:af:2a:58:6d:1c:15:92:d2:6b:a5:68:9b:0d:8a:fe:36: 2b:d4:ee:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0MjkxMTAvBgNVBAUTKDk4OTMxOUY1NkE3QUUyNDIwOEQxMzYyNERENjlEOEU0 MDkxQjdDMjQwHhcNMjQwNTA3MDMxMDQxWhcNMjQwNTE0MDMxMDQxWjAYMRYwFAYD VQQDEw02NjM5OWJiMS01NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7yti/40mLzdPqIUZVY5RYsZV8ZVcqTXWu0PV82nw1MCtlscXPq2CE0P04Pl ADF6kF6/d3OGD68/g1NHGdl/B5z3wnXTOp4AXVlPae9W7dnwPUBT+9ewW2AUUc3J OMhhDIWq3FC2lwaAgY2FtGcuFVw6Ib+c84Gyoor9OI1E7dxsV+4aIlSwgLEKAErV vnFEgjT+xvgrA/U+3iKSIQwtqG4beQgAeHA7CKeNFj78JYRhhuk76Lrnn4/fWj3e qmVhbvWJkn4Wa4EncfqKTA8XSDpwjt+WdY/4siJwoGo9UNvqnCd2ZEglR/26EzNW 7Tcx+2U420ionSF11K4vHJKWBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmo5FdG Ufc4dden7zToZPy9yzEbMB8GA1UdIwQYMBaAFJiTGfVqeuJCCNE2JN1p2OQJG3wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQyOS9FODBGRkI0ODhB MzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRrSUkwVFlrM1duWTVBa2Jm Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KTVo5V3A2NGtJSTBUWWszV25ZNUFrYmZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjQyOS9FODBGRkI0ODhBMzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRr SUkwVFlrM1duWTVBa2JmQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABDnQvceNY62GAY+gWCLGmp07Ck1pRBpjaEPyYlSU+d6kw5Y+N10cV NzwBYFw+EwSPadSe9ddlTAqr/5pm5eEzVIJmYhxeu9jJYIaE6oRnA8DlvgfujUqR Qb7MTlNcJBuPjA6rnzbgTzNr2CpQ+TKxVmSCvuOWd9g45e8/lpIAeQ5G/E23xljy QwayfWgJoCebd5rfAN5jhlXqzkni/uKOtnO3dxvtXeE4FWQi3vqBzj/7WwDRrzxC 7WY+asecwZxeajYoT8lJcrR5+lUx50aF3gvDueugtexMlpCYi5BH1wAui0ebNVsQ FVI5Ba8qWG0cFZLSa6Vomw2K/jYr1O7j -----END CERTIFICATE-----Generated at Tue May 7 03:53:36 2024 by rpki-client on console-fra.rpki-client.org