$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json) Hash identifier: In9MMJtASpsavvYNrVF3wGSFuXeyBrYJ87p3tcYgLtQ= Subject key identifier: 6E:D1:05:97:C1:FC:E8:16:B9:BD:7F:F4:A1:D4:64:DB:91:E9:20:C7 Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft Manifest number: 04CC Signing time: Wed 01 May 2024 01:42:26 +0000 Manifest this update: Wed 01 May 2024 01:42:26 +0000 Manifest next update: Wed 08 May 2024 01:42:26 +0000 Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: nwNWzvPg+ZkpqvOXvaTmdeGr0CCILpoK8SSdjHgNy08=) 2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: SIrfJsq6HaiS8oimPNRCAQub1/qi+vBYLTGVinSD4Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Validity Not Before: May 1 01:42:26 2024 GMT Not After : May 8 01:42:26 2024 GMT Subject: CN=66319e02-5e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:44:8c:40:60:f7:bc:b0:51:6b:22:90:0c: 6f:cf:d8:87:4d:2e:bf:9d:82:5c:98:3c:bd:9d:07: 02:3d:90:93:5f:27:dc:91:b7:14:a4:69:79:99:05: 43:d1:64:ea:8c:e2:f0:c2:16:d5:a1:be:2c:8d:c9: 87:39:70:a4:79:bd:3e:c3:fd:54:4b:a0:3b:7b:17: 94:ee:46:38:66:42:2a:a5:7d:24:aa:4b:43:4c:27: 73:3f:5a:c2:69:c0:13:b1:bb:fe:c2:87:59:b5:38: 48:86:d9:c2:d6:fd:c4:7f:63:1c:fe:04:d6:c4:0d: ee:1c:34:27:1e:2f:15:29:92:ea:f9:43:00:d7:21: 55:c1:10:9e:7e:59:8b:fc:a8:91:e1:e0:19:21:83: 64:d5:b0:75:a4:9b:ef:fc:cb:0a:53:b4:e7:6a:64: d6:c7:f6:2a:26:ac:80:bf:e8:a5:20:44:d8:01:36: 41:b8:25:0e:1c:57:19:09:31:b8:85:30:e1:d6:76: 94:61:27:d0:2b:e2:5c:e6:91:89:53:5f:05:b6:11: 12:ea:81:c0:2f:60:ee:ee:24:73:95:70:18:f6:c9: 1a:3f:16:0b:e0:2e:a6:b4:bf:3e:22:a9:76:0e:47: dd:9b:3d:ff:a1:6a:c8:be:53:32:b1:d9:d5:84:98: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D1:05:97:C1:FC:E8:16:B9:BD:7F:F4:A1:D4:64:DB:91:E9:20:C7 X509v3 Authority Key Identifier: keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:67:21:81:f1:8f:b9:a7:f3:f2:6f:62:36:b0:4f:25:9b:e6: 2b:e2:86:ef:39:53:9e:c1:2a:f4:b1:3b:6c:17:70:cd:ba:01: 24:ca:17:5f:f6:66:b9:4e:4a:c3:79:0d:2c:fd:d8:1c:77:bc: 0f:57:f0:23:50:c6:39:b0:a1:93:5f:6e:12:ca:98:80:63:50: 2c:2b:09:f2:df:28:bb:12:0b:ba:9b:6a:d9:4d:79:8d:97:2c: b7:09:24:ec:79:9c:64:78:2d:27:47:90:0a:21:0a:e6:44:cb: b2:dd:c6:50:77:de:8a:a5:ca:45:5b:27:24:86:20:43:d9:13: 30:58:99:86:c5:6a:a6:a5:c3:79:5b:80:14:c9:9d:5f:53:81: 35:2d:bb:13:cd:f9:6a:f2:ea:41:81:e2:63:3f:f2:43:8c:53: 39:82:33:44:d7:b5:15:d4:3e:be:77:18:12:71:ac:d5:20:fd: b8:26:0b:76:39:eb:32:7e:cd:ac:ad:33:37:19:d6:77:ec:70: a1:25:73:6d:3d:f8:e9:64:85:27:c1:73:08:f3:54:35:0a:f5: a0:67:78:e2:ca:a0:21:54:3d:fd:cb:6c:99:00:04:19:87:75: 29:1e:6f:16:27:77:e8:4f:03:f5:49:e5:bf:79:8b:9b:18:e1: de:f6:d4:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2NDcxMTAvBgNVBAUTKDk4QTVBOTU1OTJDMDRFQkVEMzg3MTZCQzFEQ0UzNTE3 QjdCMTJEMDgwHhcNMjQwNTAxMDE0MjI2WhcNMjQwNTA4MDE0MjI2WjAYMRYwFAYD VQQDEw02NjMxOWUwMi01ZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmy1EjEBg97ywUWsikAxvz9iHTS6/nYJcmDy9nQcCPZCTXyfckbcUpGl5mQVD 0WTqjOLwwhbVob4sjcmHOXCkeb0+w/1US6A7exeU7kY4ZkIqpX0kqktDTCdzP1rC acATsbv+wodZtThIhtnC1v3Ef2Mc/gTWxA3uHDQnHi8VKZLq+UMA1yFVwRCeflmL /KiR4eAZIYNk1bB1pJvv/MsKU7TnamTWx/YqJqyAv+ilIETYATZBuCUOHFcZCTG4 hTDh1naUYSfQK+Jc5pGJU18FthES6oHAL2Du7iRzlXAY9skaPxYL4C6mtL8+Iql2 Dkfdmz3/oWrIvlMysdnVhJgdUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7RBZfB /OgWub1/9KHUZNuR6SDHMB8GA1UdIwQYMBaAFJilqVWSwE6+04cWvB3ONRe3sS0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjY0Ny8wMTU3QkFERUQy NDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRyN1RoeGE4SGM0MUY3ZXhM UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21LV3BWWkxBVHI3VGh4YThIYzQxRjdleExRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjY0Ny8wMTU3QkFERUQyNDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRy N1RoeGE4SGM0MUY3ZXhMUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdZyGB8Y+5p/Pyb2I2sE8lm+Yr4obvOVOewSr0sTtsF3DNugEkyhdf 9ma5TkrDeQ0s/dgcd7wPV/AjUMY5sKGTX24SypiAY1AsKwny3yi7Egu6m2rZTXmN lyy3CSTseZxkeC0nR5AKIQrmRMuy3cZQd96KpcpFWyckhiBD2RMwWJmGxWqmpcN5 W4AUyZ1fU4E1LbsTzflq8upBgeJjP/JDjFM5gjNE17UV1D6+dxgScazVIP24Jgt2 Oesyfs2srTM3GdZ37HChJXNtPfjpZIUnwXMI81Q1CvWgZ3jiyqAhVD39y2yZAAQZ h3UpHm8WJ3foTwP1SeW/eYubGOHe9tTZ -----END CERTIFICATE-----Generated at Wed May 1 02:46:19 2024 by rpki-client on console-ams.rpki-client.org