$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft File: MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json) Hash identifier: /N4suSSs/c/Nf0XcpGcOvBiJqesTkZorYyTVXBJHSPM= Subject key identifier: 23:40:A8:14:33:C7:82:35:53:65:2C:3B:B1:D8:96:8D:1F:C5:73:D3 Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC Certificate issuer: /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC Certificate serial: 0D80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft Manifest number: 0D73 Signing time: Fri 24 May 2024 18:41:46 +0000 Manifest this update: Fri 24 May 2024 18:41:46 +0000 Manifest next update: Fri 31 May 2024 18:41:46 +0000 Files and hashes: 1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: eBErtKiKvex0zstQw08kf711MTfQigoCSGtAO4Q4V18=) 2: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: iR4RoH3CimLxnFj7TtgZPU44u+Avhx+YT3aC4DIXKE4=) 3: 5822028E51F811EAB221F834C4F9AE02.roa (hash: a46sUMEGeG7t+t/Aob9FowZw7Fxc5Y+U8m7RVWBM66E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 18:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC Validity Not Before: May 24 18:41:46 2024 GMT Not After : May 31 18:41:46 2024 GMT Subject: CN=6650df6a-2f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:40:02:9e:4a:32:d8:9d:53:85:e2:d9:3f:f2: 66:04:bc:40:c9:d8:91:84:d9:e1:f0:4b:46:be:84: b2:e7:1d:f8:15:53:4e:bd:0d:43:8a:f8:d7:70:2d: 74:14:9a:22:be:70:c0:14:76:68:4e:8c:de:c4:dc: c5:00:46:6e:41:7e:64:75:e9:b1:76:67:04:b6:b3: 5b:fd:b5:4c:92:72:c9:a6:76:b1:10:4a:37:46:6c: 2d:0a:46:e4:6d:30:3c:25:61:a2:95:22:1d:05:8c: 90:dc:9c:b1:9d:a1:b4:ce:f2:76:16:56:5a:d4:0c: 71:8f:50:6a:a8:3e:3f:18:3d:da:d8:dc:91:2e:97: e4:14:5f:b8:6c:26:b2:66:cd:f5:9d:bb:2d:6d:a8: 50:cc:20:21:69:f3:f4:22:0a:49:6e:8e:ea:f3:d2: 2d:5e:8b:96:c4:78:2c:31:1e:b0:9c:26:ca:99:3b: c2:6b:c5:5d:2d:81:0c:2d:5a:4c:dd:d1:84:c4:62: 35:86:2f:87:c5:b9:cc:a9:10:9c:56:8b:d8:e1:d1: 0e:12:a7:9d:1c:80:69:7c:c5:26:63:30:69:2d:76: 2e:8f:d8:b8:02:1c:5f:48:cb:54:00:f1:dc:ca:1c: af:37:60:35:5c:f3:46:92:e3:ef:b3:72:31:6e:92: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:A8:14:33:C7:82:35:53:65:2C:3B:B1:D8:96:8D:1F:C5:73:D3 X509v3 Authority Key Identifier: keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:ae:33:a5:1d:4d:d8:a9:be:62:e1:c4:e3:f3:77:22:cd:60: 73:fb:08:94:c9:da:a1:65:9b:16:55:9c:31:ae:22:23:b7:ce: af:b3:11:b9:cd:d0:57:18:27:03:29:29:c1:25:d5:ff:48:91: 01:64:8c:6a:43:6c:fd:d0:54:0c:9e:e1:3f:d3:a6:a7:18:d9: ae:c1:f2:6b:77:74:16:2b:24:45:b4:c1:54:89:08:21:7e:eb: 5b:da:4b:ba:44:8e:ac:6b:d7:00:d0:ef:da:32:f5:2f:88:32: 59:5a:f5:8b:08:f3:30:b6:2f:ea:85:7a:76:62:fd:b9:50:72: 46:e1:f0:72:39:e9:d7:7e:1f:24:9c:be:e2:e4:98:2e:6e:de: 7a:3c:62:a8:30:d8:a0:78:56:95:c6:11:33:48:1b:00:0e:e6: ed:a4:fa:b7:a2:fd:f8:c2:f3:02:a0:32:d0:2b:c0:4a:41:71: 36:82:73:93:0a:ff:b2:7f:ce:f7:0b:4a:69:d3:58:02:5e:d4: 38:13:31:f7:f0:4e:14:9b:ad:49:91:0d:22:9b:a5:ce:07:75: 29:76:5f:8d:71:eb:a1:30:6d:da:a4:c9:f0:e9:39:4d:18:53: 48:16:ac:af:0d:1a:d0:26:ba:b3:59:bb:54:5c:f5:47:c0:ad: 96:39:59:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQUQxMTAvBgNVBAUTKDMyNjJGNzgxMkQ3QzdEQUFFODc1QkMxRUU4RDcxRjkw NzJDRUVEQkMwHhcNMjQwNTI0MTg0MTQ2WhcNMjQwNTMxMTg0MTQ2WjAYMRYwFAYD VQQDEw02NjUwZGY2YS0yZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EACnkoy2J1TheLZP/JmBLxAydiRhNnh8EtGvoSy5x34FVNOvQ1DivjXcC10 FJoivnDAFHZoTozexNzFAEZuQX5kdemxdmcEtrNb/bVMknLJpnaxEEo3RmwtCkbk bTA8JWGilSIdBYyQ3JyxnaG0zvJ2FlZa1Axxj1BqqD4/GD3a2NyRLpfkFF+4bCay Zs31nbstbahQzCAhafP0IgpJbo7q89ItXouWxHgsMR6wnCbKmTvCa8VdLYEMLVpM 3dGExGI1hi+HxbnMqRCcVovY4dEOEqedHIBpfMUmYzBpLXYuj9i4AhxfSMtUAPHc yhyvN2A1XPNGkuPvs3IxbpKMIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNAqBQz x4I1U2UsO7HYlo0fxXPTMB8GA1UdIwQYMBaAFDJi94EtfH2q6HW8HujXH5Byzu28 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJBRC84OUMwQkZDMEE0 MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZhcm9kYndlNk5jZmtITE83 YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTDNnUzE4ZmFyb2Rid2U2TmNma0hMTzdidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJBRC84OUMwQkZDMEE0MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZh cm9kYndlNk5jZmtITE83YncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRrjOlHU3Yqb5i4cTj83cizWBz+wiUydqhZZsWVZwxriIjt86vsxG5 zdBXGCcDKSnBJdX/SJEBZIxqQ2z90FQMnuE/06anGNmuwfJrd3QWKyRFtMFUiQgh futb2ku6RI6sa9cA0O/aMvUviDJZWvWLCPMwti/qhXp2Yv25UHJG4fByOenXfh8k nL7i5Jgubt56PGKoMNigeFaVxhEzSBsADubtpPq3ov34wvMCoDLQK8BKQXE2gnOT Cv+yf873C0pp01gCXtQ4EzH38E4Um61JkQ0im6XOB3Updl+NceuhMG3apMnw6TlN GFNIFqyvDRrQJrqzWbtUXPVHwK2WOVkj -----END CERTIFICATE-----Generated at Fri May 24 21:43:05 2024 by rpki-client on console-ams.rpki-client.org