$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: xJWLrbhUhJvlFj4jnrY02RIURlZSwGCzO9jiN6W+p6Y= Subject key identifier: 35:2B:9B:11:B0:E4:D3:D8:4B:19:61:48:B5:60:E8:37:28:1B:A3:C0 Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0B8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0B87 Signing time: Mon 06 May 2024 19:23:55 +0000 Manifest this update: Mon 06 May 2024 19:23:55 +0000 Manifest next update: Mon 13 May 2024 19:23:55 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: lrPBX4kluWfVvQF2YHFEHr1OrYjMvCa4OaeVMbIW41o=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: o+VMp71/GLHtG51m95hXFokEV8K4E+0lvgU5Cjm++Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2956 (0xb8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: May 6 19:23:55 2024 GMT Not After : May 13 19:23:55 2024 GMT Subject: CN=66392e4b-3475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:51:c8:f7:31:ca:24:d0:d6:13:40:9e:11: b3:de:9d:7d:40:9d:4b:90:80:49:3a:80:a1:53:9d: 0a:3d:1e:99:72:3d:7c:cd:9e:87:2c:a5:73:13:e8: 97:cc:96:f4:98:84:0a:bc:aa:c9:cc:a4:1b:59:1d: 43:eb:b9:13:67:6f:8c:9f:a3:f8:e7:24:14:01:5d: 19:2a:96:04:56:df:6e:a8:75:ad:e4:e1:5a:53:7b: 2f:fa:f4:8d:95:5e:45:77:43:c0:ab:f7:58:07:b2: 80:3b:4b:a1:7e:ad:ee:00:cc:b5:dd:c1:40:00:52: 25:97:3f:0d:2c:17:68:ae:81:1a:c1:3f:1c:73:4e: 85:59:f6:20:85:d0:46:be:d4:e5:d8:a4:b7:bb:0d: 03:79:fa:14:e2:9d:a9:f4:50:87:f5:a5:e5:3e:e9: 4b:12:53:2d:fe:4e:c8:ac:06:ff:ed:0e:74:47:91: 13:95:88:ba:7c:db:39:7f:71:ae:51:d9:df:fd:28: 63:2c:d0:bc:e4:01:fd:83:59:d8:e8:10:e1:73:85: 39:93:73:c3:06:a2:85:32:54:7b:96:1b:db:ff:59: 05:3b:b2:12:f4:d5:c4:e6:14:67:19:e4:18:a9:55: dd:7a:76:28:7e:fe:6e:14:f5:97:a3:64:80:88:c0: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:9B:11:B0:E4:D3:D8:4B:19:61:48:B5:60:E8:37:28:1B:A3:C0 X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9c:63:d7:5b:e3:46:95:88:05:eb:3b:31:0c:a4:20:8a:a1: 1c:b5:c3:f1:29:ac:86:81:a2:95:9a:bb:f1:9b:87:7a:7a:39: 59:eb:53:70:d2:69:d5:c2:ed:cc:24:5e:ff:81:7e:66:70:59: 43:16:62:f5:cc:d3:b9:72:9b:b2:5b:0c:a6:00:14:4b:72:e5: 25:d6:2b:66:73:59:b7:0c:66:5c:9f:7d:a6:f8:44:43:67:7d: 2b:46:72:4d:b7:b5:36:40:73:6a:fb:a4:0f:f3:05:dc:a7:fc: 17:ec:7b:7c:10:9c:0f:3f:8e:b6:8f:fd:60:b8:ff:40:cf:a1: b4:55:22:94:24:56:41:70:15:7e:46:c9:d2:ab:1f:01:df:cc: a0:25:ff:da:2c:89:4e:77:7e:1d:c4:42:81:13:56:ff:12:5c: 8c:62:e5:f0:ad:3b:8f:56:62:c6:e7:5f:18:d3:fe:21:57:49: 38:22:65:84:1a:02:97:99:1f:6e:1c:de:92:6a:43:d1:1f:6c: 68:ae:f3:17:47:59:8b:56:21:fd:68:16:79:7e:75:45:75:bc: 76:b3:47:7b:db:74:5d:28:9a:e6:0f:de:63:b0:a5:4e:04:60: 92:2b:52:90:e7:7e:d6:3f:f6:98:ca:73:c5:f2:9e:7a:cb:88: cf:a7:b1:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjQwNTA2MTkyMzU1WhcNMjQwNTEzMTkyMzU1WjAYMRYwFAYD VQQDEw02NjM5MmU0Yi0zNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmVRyPcxyiTQ1hNAnhGz3p19QJ1LkIBJOoChU50KPR6Zcj18zZ6HLKVzE+iX zJb0mIQKvKrJzKQbWR1D67kTZ2+Mn6P45yQUAV0ZKpYEVt9uqHWt5OFaU3sv+vSN lV5Fd0PAq/dYB7KAO0uhfq3uAMy13cFAAFIllz8NLBdoroEawT8cc06FWfYghdBG vtTl2KS3uw0DefoU4p2p9FCH9aXlPulLElMt/k7IrAb/7Q50R5ETlYi6fNs5f3Gu Udnf/ShjLNC85AH9g1nY6BDhc4U5k3PDBqKFMlR7lhvb/1kFO7IS9NXE5hRnGeQY qVXdenYofv5uFPWXo2SAiMC5BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUrmxGw 5NPYSxlhSLVg6DcoG6PAMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUnGPXW+NGlYgF6zsxDKQgiqEctcPxKayGgaKVmrvxm4d6ejlZ61Nw 0mnVwu3MJF7/gX5mcFlDFmL1zNO5cpuyWwymABRLcuUl1itmc1m3DGZcn32m+ERD Z30rRnJNt7U2QHNq+6QP8wXcp/wX7Ht8EJwPP462j/1guP9Az6G0VSKUJFZBcBV+ RsnSqx8B38ygJf/aLIlOd34dxEKBE1b/ElyMYuXwrTuPVmLG518Y0/4hV0k4ImWE GgKXmR9uHN6SakPRH2xorvMXR1mLViH9aBZ5fnVFdbx2s0d723RdKJrmD95jsKVO BGCSK1KQ537WP/aYynPF8p56y4jPp7Hq -----END CERTIFICATE-----Generated at Mon May 6 20:19:33 2024 by rpki-client on console-ams.rpki-client.org