$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: L8wO9aoic2huIhg9TuNgJyraOwtCGeQjeTqimkWtA6Y= Subject key identifier: B8:AD:A5:05:F6:D1:21:7C:07:96:24:F6:26:56:1D:3C:4A:E7:CB:18 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 03C7 Signing time: Fri 03 May 2024 02:31:37 +0000 Manifest this update: Fri 03 May 2024 02:31:36 +0000 Manifest next update: Fri 10 May 2024 02:31:36 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: 271aXVZWocjq2X3HDLOMY/MvzXhIXeAfoZcSEPbpATI=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: ZZ3AWsXi2QuxvDhmH4XofVeIQLIAI+5UE6Sz9E2LloA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: May 3 02:31:36 2024 GMT Not After : May 10 02:31:36 2024 GMT Subject: CN=66344c88-e351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:ab:65:64:49:ec:31:ec:54:d9:74:f1:a9: 0e:f9:45:8d:55:75:14:1d:28:a9:29:d1:3e:89:bd: 73:40:b2:32:70:e5:a5:c9:bb:e5:62:02:f8:52:9b: 59:8a:7f:f5:14:47:e3:20:5e:eb:97:99:00:24:46: 0c:42:a4:a0:85:1d:5d:bc:52:7d:23:9d:bd:45:42: 6b:60:eb:b3:74:65:40:2e:17:8c:4e:98:3f:61:9c: 76:a3:ee:42:ca:9f:3b:8f:41:25:49:55:a6:c8:d1: 07:6f:be:78:89:cc:6a:57:30:e2:fd:2a:bb:0d:90: 45:36:1c:1d:74:52:ac:fe:9f:15:af:67:b6:49:47: 6f:6a:11:47:be:89:96:a8:62:0d:af:0e:12:56:c1: 68:03:b9:d7:2b:69:38:c7:27:24:b1:83:fa:9a:5d: 88:07:f3:0f:e7:55:c7:36:7c:7b:62:fb:ed:62:b2: d2:e3:80:9b:b5:db:49:2a:71:29:48:81:80:44:56: 8d:44:b2:a8:24:86:1a:a9:55:af:7b:8a:11:66:eb: a9:c3:d0:b2:2e:5b:22:6c:a9:eb:8c:53:6b:d4:6c: a9:14:d4:6f:74:b8:8d:12:b1:d0:8d:4d:c3:b6:0c: 93:07:1f:e3:44:f3:08:ef:a9:35:32:3c:e0:db:88: 2c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AD:A5:05:F6:D1:21:7C:07:96:24:F6:26:56:1D:3C:4A:E7:CB:18 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:58:79:6b:27:af:82:15:3f:5a:a8:8f:4a:1e:44:bc:92:5f: fe:bf:8b:d0:15:6a:6a:85:ad:16:4f:21:c0:0c:75:dd:5f:c3: ae:77:d5:b8:f3:f8:94:7d:0c:07:58:c8:5c:a4:d5:6d:e4:a8: ab:e4:df:9e:3c:1c:98:08:a4:e9:bc:7a:8a:6a:e0:5b:f9:34: 95:a1:1a:57:b9:74:56:6e:a1:5f:d4:87:75:37:d7:9f:a2:da: ec:a2:37:fb:0a:52:f4:0d:4d:16:2c:7c:1f:a5:ab:0a:73:44: 61:dc:8e:67:14:8c:71:fd:a6:dc:95:a8:32:cd:8e:f0:e9:16: c2:79:77:ee:73:36:98:60:8d:9b:05:b9:2e:0d:91:37:26:9e: c4:ca:62:f4:85:c8:b2:65:5c:5a:12:1a:d7:f9:37:c9:c3:31: aa:3f:ee:68:cf:b8:50:90:9e:42:66:1b:28:c0:7f:32:f1:8d: b8:e0:da:74:2e:18:dd:f9:05:ab:b3:62:74:19:be:1b:c3:b7: ab:be:3d:21:eb:90:57:9a:ae:8b:1f:ce:d9:3b:66:67:be:00: de:4a:2e:c0:70:74:12:f8:ee:cc:c3:4a:2f:a6:5a:2d:9b:d9: a7:11:95:b5:8c:f5:80:71:93:c2:ae:67:71:6a:81:a2:47:3b: 16:1f:89:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjQwNTAzMDIzMTM2WhcNMjQwNTEwMDIzMTM2WjAYMRYwFAYD VQQDEw02NjM0NGM4OC1lMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseerZWRJ7DHsVNl08akO+UWNVXUUHSipKdE+ib1zQLIycOWlybvlYgL4UptZ in/1FEfjIF7rl5kAJEYMQqSghR1dvFJ9I529RUJrYOuzdGVALheMTpg/YZx2o+5C yp87j0ElSVWmyNEHb754icxqVzDi/Sq7DZBFNhwddFKs/p8Vr2e2SUdvahFHvomW qGINrw4SVsFoA7nXK2k4xycksYP6ml2IB/MP51XHNnx7YvvtYrLS44CbtdtJKnEp SIGARFaNRLKoJIYaqVWve4oRZuupw9CyLlsibKnrjFNr1GypFNRvdLiNErHQjU3D tgyTBx/jRPMI76k1Mjzg24gstQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLitpQX2 0SF8B5Yk9iZWHTxK58sYMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8WHlrJ6+CFT9aqI9KHkS8kl/+v4vQFWpqha0WTyHADHXdX8Oud9W4 8/iUfQwHWMhcpNVt5Kir5N+ePByYCKTpvHqKauBb+TSVoRpXuXRWbqFf1Id1N9ef otrsojf7ClL0DU0WLHwfpasKc0Rh3I5nFIxx/abclagyzY7w6RbCeXfuczaYYI2b BbkuDZE3Jp7EymL0hciyZVxaEhrX+TfJwzGqP+5oz7hQkJ5CZhsowH8y8Y244Np0 Lhjd+QWrs2J0Gb4bw7ervj0h65BXmq6LH87ZO2ZnvgDeSi7AcHQS+O7Mw0ovplot m9mnEZW1jPWAcZPCrmdxaoGiRzsWH4kp -----END CERTIFICATE-----Generated at Fri May 3 04:45:15 2024 by rpki-client on console-fra.rpki-client.org