$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json) Hash identifier: ZEuKSBqezPTq3IO7rw6WMwpjJeRQsd+ouhXCTT/fX/M= Subject key identifier: 2C:4A:C2:B2:3F:ED:6E:5E:A8:97:C9:8F:EB:C3:98:55:AD:A0:8B:EA Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft Manifest number: 79 Signing time: Fri 17 May 2024 07:24:27 +0000 Manifest this update: Fri 17 May 2024 07:24:26 +0000 Manifest next update: Fri 24 May 2024 07:24:26 +0000 Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: skh05YbPuhhgxImmZybtcJ0kNGPLKmd+S/D9Rvt5g3M=) 2: 0404E7B2672911EE9967640AC4F9AE02.roa (hash: bobDoBHZJSHFFObAgyfQp+yUa0gR9NbIlCcxLTCOjYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Validity Not Before: May 17 07:24:26 2024 GMT Not After : May 24 07:24:26 2024 GMT Subject: CN=6647062a-2c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:97:b2:e4:f0:86:f5:8b:d3:70:fc:56:e3: 04:df:93:01:71:3c:f6:0a:19:59:d1:a4:68:94:f2: e9:73:37:61:c1:c9:bb:3d:73:c0:01:23:01:4d:7c: 70:77:6d:e8:95:8a:17:c5:72:cc:ad:2f:59:81:e3: fd:52:d0:04:83:4f:65:05:6b:de:01:5a:a2:63:0c: 53:66:8a:a8:a3:31:a1:96:d7:7a:38:cf:82:e3:17: b1:3e:fb:fe:cb:ff:fc:9b:60:a2:67:d8:ee:d7:63: 27:51:0d:04:ff:4b:9e:4e:90:f1:c3:85:97:29:1d: b5:32:47:b8:86:d0:32:9c:4b:63:20:7e:ba:5e:93: ba:4a:56:74:cf:01:61:c2:c4:49:1b:7b:92:2d:6a: d8:3c:54:ec:5c:12:7b:35:58:4b:92:09:a8:88:fb: 9f:11:df:bc:d9:4a:45:2e:79:fe:d1:2e:34:42:5b: b0:7c:bf:ba:49:6d:b2:cc:0b:6e:b4:91:71:c0:d0: 45:d4:05:6e:83:a8:32:92:7c:4c:92:8e:ca:16:2e: 13:e4:22:91:4a:12:ff:96:b3:a4:32:c7:27:e6:88: 11:ea:fa:c6:5e:9e:7b:c7:95:62:e1:32:b4:9a:23: 81:20:7b:c5:e5:a9:81:f2:e2:3e:aa:af:67:ad:ba: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4A:C2:B2:3F:ED:6E:5E:A8:97:C9:8F:EB:C3:98:55:AD:A0:8B:EA X509v3 Authority Key Identifier: keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0b:8e:50:37:ec:f7:ab:54:0b:2c:39:81:8f:6f:1b:32:52: 9d:18:f4:78:b3:94:32:fb:b4:b7:9c:d3:6a:a7:27:a0:d5:f7: 92:0e:bf:95:db:3c:07:a8:34:70:2c:19:7b:01:dc:45:48:a0: ae:7c:b5:34:20:77:88:8f:b7:52:59:2c:fd:4d:28:de:1a:58: f0:14:77:ba:52:4e:72:44:59:65:9d:91:dd:43:31:1e:f2:75: 1a:31:9a:75:6c:b2:49:e5:fa:8b:80:26:81:f7:e9:72:78:9f: a3:23:36:cb:e8:6e:9b:ae:52:37:f4:b5:ba:87:aa:72:e0:e0: c3:cb:c3:b0:3e:14:b0:05:a6:55:96:0f:e7:72:25:d0:05:c7: a6:3c:31:b9:c0:88:12:2f:91:64:15:41:60:cb:7c:d1:39:fc: 22:29:0c:71:8d:5b:a3:02:31:4b:c0:3b:6a:13:da:69:93:4d: f0:f1:f8:23:c2:6b:db:96:7b:a5:f3:68:da:d4:17:b1:42:d5: 4a:53:cf:f9:1d:e0:e4:05:fe:e6:07:b1:7f:23:5a:46:5a:4b: 29:07:ea:b9:6f:0a:f2:89:5b:40:79:31:a9:83:0a:1b:3c:24: 6c:b2:a3:ac:b7:62:8d:21:b5:44:c0:98:7a:88:a1:31:06:a6: 46:bb:37:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDEyNzExMC8GA1UEBRMoMzIxNUM1NTE2QUZCNTREOEU2MTJEMUVDM0Q1MTgyRDMy MUU1MzE3MTAeFw0yNDA1MTcwNzI0MjZaFw0yNDA1MjQwNzI0MjZaMBgxFjAUBgNV BAMTDTY2NDcwNjJhLTJjNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP45ey5PCG9YvTcPxW4wTfkwFxPPYKGVnRpGiU8ulzN2HBybs9c8ABIwFNfHB3 beiVihfFcsytL1mB4/1S0ASDT2UFa94BWqJjDFNmiqijMaGW13o4z4LjF7E++/7L //ybYKJn2O7XYydRDQT/S55OkPHDhZcpHbUyR7iG0DKcS2Mgfrpek7pKVnTPAWHC xEkbe5Itatg8VOxcEns1WEuSCaiI+58R37zZSkUuef7RLjRCW7B8v7pJbbLMC260 kXHA0EXUBW6DqDKSfEySjsoWLhPkIpFKEv+Ws6QyxyfmiBHq+sZennvHlWLhMrSa I4Ege8XlqYHy4j6qr2etupW9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULErCsj/t bl6ol8mP68OYVa2gi+owHwYDVR0jBBgwFoAUMhXFUWr7VNjmEtHsPVGC0yHlMXEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwMTI3LzE2QUYxRDIwNUI3 RjExRUVCRTMyMEUzNUM0RjlBRTAyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1Y RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWhYRlVXcjdWTmptRXRIc1BWR0MweUhsTVhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw MTI3LzE2QUYxRDIwNUI3RjExRUVCRTMyMEUzNUM0RjlBRTAyL01oWEZVV3I3Vk5q bUV0SHNQVkdDMHlIbE1YRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHcLjlA37PerVAssOYGPbxsyUp0Y9HizlDL7tLec02qnJ6DV95IOv5Xb PAeoNHAsGXsB3EVIoK58tTQgd4iPt1JZLP1NKN4aWPAUd7pSTnJEWWWdkd1DMR7y dRoxmnVssknl+ouAJoH36XJ4n6MjNsvobpuuUjf0tbqHqnLg4MPLw7A+FLAFplWW D+dyJdAFx6Y8MbnAiBIvkWQVQWDLfNE5/CIpDHGNW6MCMUvAO2oT2mmTTfDx+CPC a9uWe6XzaNrUF7FC1UpTz/kd4OQF/uYHsX8jWkZaSykH6rlvCvKJW0B5MamDChs8 JGyyo6y3Yo0htUTAmHqIoTEGpka7N9c= -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org