$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json) Hash identifier: R4yQnMnJ3WmRtPsiVnrXlJa5BcAz5DuTsq2n037z8wk= Subject key identifier: EA:D2:5F:CE:82:FA:59:AD:9F:67:8F:B1:0D:DA:41:41:56:8D:83:1E Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft Manifest number: 7A Signing time: Wed 15 May 2024 07:25:00 +0000 Manifest this update: Wed 15 May 2024 07:25:00 +0000 Manifest next update: Wed 22 May 2024 07:25:00 +0000 Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: gn6dAr3KulrkA++5wEWl4gacRXTir3gqH/9VVz/1Cps=) 2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: 7H/o9WVNvbIAlbhkr+4Ry+kOFXKkHNIKo5p7Mvq+8NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Validity Not Before: May 15 07:25:00 2024 GMT Not After : May 22 07:25:00 2024 GMT Subject: CN=6644634c-d567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:af:76:fe:75:64:31:7e:18:fe:eb:f5:27: 9c:20:ce:90:a9:ca:89:57:84:b9:13:28:37:3f:e4: 4b:05:00:3e:44:e3:26:8e:ed:0e:f4:66:f9:47:ca: 46:69:37:c2:56:31:b7:81:64:dc:89:b2:39:d7:dc: 69:e0:53:cb:0b:c6:74:59:f8:37:72:7d:59:33:50: 05:c8:47:44:9d:d9:d4:c3:6d:ba:d2:ef:28:6e:25: 97:d6:eb:99:82:89:71:c5:78:2f:58:bd:df:35:3d: 0e:47:2a:19:76:bc:89:b0:32:60:18:4b:99:24:58: d4:f8:d1:a1:55:59:64:8a:30:7a:c1:75:c2:84:9a: 75:c6:90:2d:02:32:7e:da:fe:66:72:ed:a8:ec:41: aa:96:e8:2b:69:a5:38:cf:26:6d:b1:1f:51:0d:94: 55:64:10:08:bd:1f:79:eb:c2:2d:35:2d:47:0e:2e: 36:83:78:8b:b7:22:a9:40:e7:87:38:52:8a:61:48: 48:df:0c:db:07:30:31:eb:61:45:b8:3d:f7:43:f8: 1f:52:1c:ba:8a:67:ea:2f:d5:08:c8:e6:77:33:4b: 3e:b9:dd:6f:fb:94:47:c9:45:d0:20:34:4f:67:c8: 03:5b:89:b1:cf:ce:83:34:8c:19:86:e3:64:50:0b: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D2:5F:CE:82:FA:59:AD:9F:67:8F:B1:0D:DA:41:41:56:8D:83:1E X509v3 Authority Key Identifier: keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:23:19:c5:4c:99:5f:ed:0b:20:77:92:53:48:2b:66:f8:a6: 8d:09:da:cc:44:6a:5a:84:67:03:07:4b:ce:93:14:10:3a:b7: 8c:b4:48:40:04:f3:93:4e:a1:df:d5:25:dd:41:d8:d9:50:1b: 4f:b9:fc:27:44:e8:a0:69:2e:e6:24:1d:39:95:94:68:07:c4: 97:4f:89:e3:be:4f:f6:82:24:6e:92:53:da:c2:75:bb:81:d5: 50:21:48:03:cb:55:65:45:04:ce:ff:0e:86:45:c8:c5:b1:4f: 3a:03:fb:1b:2a:9c:92:b0:48:00:39:29:a7:ba:80:b9:60:1a: 2a:b3:da:15:c5:99:5b:0e:1b:a4:ca:90:20:bf:91:08:5d:0e: 2f:97:31:bd:4d:de:e5:ee:37:7b:0e:f7:81:8c:e3:4c:b6:ef: fc:03:48:0d:39:48:44:20:56:e8:78:2a:09:ba:6b:c3:a6:6a: c8:44:1d:55:ff:a0:f3:0c:82:e6:8e:1c:4e:a2:53:85:d9:88: 45:5f:c7:aa:c8:85:9c:dd:fe:ce:18:64:71:05:bf:c2:1d:c7: 24:4e:63:28:a5:d6:70:cc:c6:4d:5d:9b:ba:c0:63:df:71:25: 39:2e:ca:d4:35:83:73:83:50:8c:fa:3d:d5:dd:af:43:2c:7d: f5:6e:db:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkUxRTExMC8GA1UEBRMoMzAxNEREMzg3QjE3RjMzODg3M0EyQTdBMzdGODI0NEQ5 MzcwMkVBODAeFw0yNDA1MTUwNzI1MDBaFw0yNDA1MjIwNzI1MDBaMBgxFjAUBgNV BAMTDTY2NDQ2MzRjLWQ1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJTa92/nVkMX4Y/uv1J5wgzpCpyolXhLkTKDc/5EsFAD5E4yaO7Q70ZvlHykZp N8JWMbeBZNyJsjnX3GngU8sLxnRZ+DdyfVkzUAXIR0Sd2dTDbbrS7yhuJZfW65mC iXHFeC9Yvd81PQ5HKhl2vImwMmAYS5kkWNT40aFVWWSKMHrBdcKEmnXGkC0CMn7a /mZy7ajsQaqW6CtppTjPJm2xH1ENlFVkEAi9H3nrwi01LUcOLjaDeIu3IqlA54c4 UophSEjfDNsHMDHrYUW4PfdD+B9SHLqKZ+ov1QjI5nczSz653W/7lEfJRdAgNE9n yANbibHPzoM0jBmG42RQCxX1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6tJfzoL6 Wa2fZ4+xDdpBQVaNgx4wHwYDVR0jBBgwFoAUMBTdOHsX8ziHOip6N/gkTZNwLqgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyRTFFLzI3ODgxN0MwNUMx MzExRUVBOTA3MTgzREM0RjlBRTAyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xx Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUJUZE9Ic1g4emlIT2lwNk5fZ2tUWk53THFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy RTFFLzI3ODgxN0MwNUMxMzExRUVBOTA3MTgzREM0RjlBRTAyL01CVGRPSHNYOHpp SE9pcDZOX2drVFpOd0xxZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAMjGcVMmV/tCyB3klNIK2b4po0J2sxEalqEZwMHS86TFBA6t4y0SEAE 85NOod/VJd1B2NlQG0+5/CdE6KBpLuYkHTmVlGgHxJdPieO+T/aCJG6SU9rCdbuB 1VAhSAPLVWVFBM7/DoZFyMWxTzoD+xsqnJKwSAA5Kae6gLlgGiqz2hXFmVsOG6TK kCC/kQhdDi+XMb1N3uXuN3sO94GM40y27/wDSA05SEQgVuh4Kgm6a8OmashEHVX/ oPMMguaOHE6iU4XZiEVfx6rIhZzd/s4YZHEFv8IdxyROYyil1nDMxk1dm7rAY99x JTkuytQ1g3ODUIz6PdXdr0MsffVu2+Y= -----END CERTIFICATE-----Generated at Wed May 15 09:27:34 2024 by rpki-client on console-fra.rpki-client.org