$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: iEwW6BTI41EWDGznAk5ZWbTvNySiC0MabcENbR7JLGg= Subject key identifier: 1E:D2:30:B1:15:26:3D:B4:01:2F:C8:E7:81:C3:D7:57:37:51:C7:61 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 22A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 227A Signing time: Tue 30 Apr 2024 16:14:30 +0000 Manifest this update: Tue 30 Apr 2024 16:14:30 +0000 Manifest next update: Tue 07 May 2024 16:14:30 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: 7FI9YtC7ReJU+PkTE1YQrcaxsNchZ3vrztBhnLSqVK8=) 2: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: rDV2Bqm6eu0V34tibuKUZctwH1/aGEeBJq9xYgfrF4M=) 3: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: ZSSj+nj4XtmDSSbhR3/ZQ9pIMEJPxXE0yFuyRf1+0mg=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: wB2xqrT+WR1TypBe1cC2uIvhjvM4FdmDgb+8xMqoHto=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: jE7AaszQtYcG7lhVkdXgcAsQzG9kznaN6CoPyvw8kr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8865 (0x22a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Apr 30 16:14:30 2024 GMT Not After : May 7 16:14:30 2024 GMT Subject: CN=663118e6-1917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:20:a5:e1:cf:0c:83:68:20:79:f3:ed:3e: 89:24:ae:9a:f3:5b:e7:c3:6b:44:ea:e7:9f:d5:81: 4f:3f:69:a9:25:79:1b:33:8b:1e:9a:65:37:7f:79: 14:fb:9d:13:59:44:d7:73:4b:08:ac:99:80:9f:fb: 92:f3:0b:51:26:7e:ff:bc:d5:de:8f:eb:6d:0c:76: 8b:42:14:ba:54:26:84:69:ca:da:8b:3f:a5:78:a1: 10:63:e0:1e:b2:19:dc:e9:82:47:d4:50:e3:67:73: b1:60:dd:e3:ce:07:d8:1d:c5:d3:02:25:83:90:99: d3:fc:54:58:dc:78:84:f3:d9:e4:f2:ba:ed:44:37: 97:d9:42:a3:7c:c7:36:2f:ec:42:7c:5a:b5:e0:1d: bf:4b:70:7d:3a:88:44:0b:46:fb:f6:e5:4b:62:89: 2c:47:91:f8:d4:96:5e:ec:55:8b:69:1a:cc:0b:de: 00:b6:d7:e2:c5:06:93:7b:c5:42:e1:87:12:41:3c: 63:b5:23:5f:15:aa:00:31:dc:5a:46:55:13:f6:68: 47:6d:ad:4e:17:c9:c6:d7:5a:8e:88:47:26:ec:bd: 37:33:d0:e1:49:be:2d:de:37:ff:b8:aa:c2:ce:d5: 64:05:b2:9b:16:1e:34:cc:44:01:f2:e2:bb:88:cb: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D2:30:B1:15:26:3D:B4:01:2F:C8:E7:81:C3:D7:57:37:51:C7:61 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d3:cf:03:c5:83:96:53:47:47:16:76:22:49:32:9f:e4:76: 8b:8e:ac:1c:9f:a4:9c:ac:6e:6a:bc:c7:65:c5:c8:a4:65:cd: 37:6a:cc:5a:aa:8c:78:2f:ca:58:9d:7a:a1:68:fb:27:10:e2: 0e:59:5a:f4:94:12:a2:33:70:24:22:99:f1:f5:33:32:94:ab: b3:db:ce:f4:58:52:ea:f5:d6:b2:3f:51:44:5e:a6:2a:81:79: 38:d8:2c:99:4a:d6:d7:b3:0a:cd:31:f8:6d:a0:d9:f7:5d:01: f0:9e:4f:1b:6b:78:59:0b:9d:f0:9f:c8:89:d3:ef:80:42:65: e9:3b:61:de:0b:e6:04:ac:27:4b:1c:5c:bb:cb:35:45:1e:0a: ca:b8:f7:17:74:83:f3:bd:fa:e1:42:aa:03:23:e4:34:2e:3a: c4:0e:b3:b1:ff:00:a6:f3:03:87:d3:b9:b4:00:dc:f9:d8:c1: ba:ba:cf:9d:6c:e6:14:ec:02:a5:56:e2:2b:f3:81:a3:c8:4f: 37:0a:c1:92:82:c9:3b:ce:8e:1f:58:a0:90:75:d4:f4:bb:ec: 50:9f:5a:6d:f0:21:74:c2:ea:c6:0f:5f:3a:62:4a:bb:d1:8b: a7:22:a4:2a:9c:31:4f:b5:70:fa:8c:e4:2d:87:43:80:45:ca: a5:be:e8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjQwNDMwMTYxNDMwWhcNMjQwNTA3MTYxNDMwWjAYMRYwFAYD VQQDEw02NjMxMThlNi0xOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi4gpeHPDINoIHnz7T6JJK6a81vnw2tE6uef1YFPP2mpJXkbM4semmU3f3kU +50TWUTXc0sIrJmAn/uS8wtRJn7/vNXej+ttDHaLQhS6VCaEacraiz+leKEQY+Ae shnc6YJH1FDjZ3OxYN3jzgfYHcXTAiWDkJnT/FRY3HiE89nk8rrtRDeX2UKjfMc2 L+xCfFq14B2/S3B9OohEC0b79uVLYoksR5H41JZe7FWLaRrMC94AttfixQaTe8VC 4YcSQTxjtSNfFaoAMdxaRlUT9mhHba1OF8nG11qOiEcm7L03M9DhSb4t3jf/uKrC ztVkBbKbFh40zEQB8uK7iMv/fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7SMLEV Jj20AS/I54HD11c3UcdhMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO088DxYOWU0dHFnYiSTKf5HaLjqwcn6ScrG5qvMdlxcikZc03asxa qox4L8pYnXqhaPsnEOIOWVr0lBKiM3AkIpnx9TMylKuz2870WFLq9dayP1FEXqYq gXk42CyZStbXswrNMfhtoNn3XQHwnk8ba3hZC53wn8iJ0++AQmXpO2HeC+YErCdL HFy7yzVFHgrKuPcXdIPzvfrhQqoDI+Q0LjrEDrOx/wCm8wOH07m0ANz52MG6us+d bOYU7AKlVuIr84GjyE83CsGSgsk7zo4fWKCQddT0u+xQn1pt8CF0wurGD186Ykq7 0YunIqQqnDFPtXD6jOQth0OARcqlvujD -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:03 2024 by rpki-client on console-fra.rpki-client.org