$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft File: mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json) Hash identifier: QykHR0TW0WhY7gzaRrpY4KMlEySrR+y1gdoM7bW5dxw= Subject key identifier: C6:9C:C5:F3:75:24:46:E6:B6:95:73:D7:FD:C4:B4:4F:38:F6:00:19 Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1 Certificate issuer: /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft Manifest number: C1 Signing time: Fri 03 May 2024 06:28:05 +0000 Manifest this update: Fri 03 May 2024 06:28:05 +0000 Manifest next update: Fri 10 May 2024 06:28:05 +0000 Files and hashes: 1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: QdAthY3zBllUDPIWErjGwBDhvCPAeA4Fa40FQQ3HyBM=) 2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: xsK374JtB2Fn6v7KyIaFk4fFls1uJkzIqMoTEXrm80Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1 Validity Not Before: May 3 06:28:05 2024 GMT Not After : May 10 06:28:05 2024 GMT Subject: CN=663483f5-d851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:04:50:2a:30:6d:df:0c:dd:f5:f6:28:09: 16:82:3d:80:6d:93:90:cf:7e:fc:fb:e4:99:bd:6e: 9c:14:98:a1:6a:df:b3:26:10:fc:ab:59:1f:94:4e: cd:55:3b:21:9e:35:57:0e:a5:e3:db:20:77:9e:13: 60:e1:44:98:fc:35:14:31:34:45:74:0a:36:46:36: ee:b1:ba:5a:1b:71:93:3b:cb:b0:00:01:2c:df:59: 65:ea:94:91:67:e1:6a:80:56:0d:34:ea:aa:d5:03: 6a:73:c7:30:ca:93:5b:e0:12:6a:f5:43:6b:b3:3a: 0e:06:7a:78:ef:16:29:1e:a2:2d:ec:2a:db:b2:36: e5:37:23:18:7e:81:20:77:78:46:61:5a:4d:00:98: 73:10:44:18:51:e1:e2:21:88:b5:a5:b2:01:ac:f0: b1:2a:55:25:0f:4d:83:a0:ef:ba:40:43:41:30:ca: d5:13:66:d4:17:34:aa:b3:82:0e:cd:50:71:88:d2: 3f:ac:2c:6a:95:4c:18:42:14:29:55:d9:2b:d2:74: 92:37:86:37:b3:0b:f5:62:b6:ce:e2:3d:fa:d3:ac: 9b:98:8a:a5:1c:20:10:e4:21:1f:b1:86:b1:10:a0: 1d:dd:fb:6e:45:8b:05:6e:84:45:5a:bc:0d:7b:74: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9C:C5:F3:75:24:46:E6:B6:95:73:D7:FD:C4:B4:4F:38:F6:00:19 X509v3 Authority Key Identifier: keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:2a:bc:33:8c:c2:73:55:ce:f3:63:f6:7c:eb:d8:b5:5a: b5:15:81:90:65:3c:de:1b:fb:28:a5:ef:6d:42:d8:5a:68:04: f8:4a:c3:1d:c5:3c:b4:0a:84:05:c4:31:c3:c3:f1:d8:35:b4: 44:1c:09:de:ad:47:2a:76:9d:85:14:19:57:c7:42:eb:75:42: 81:bb:e8:ef:2b:c2:d3:9e:e7:d3:2d:01:c6:50:44:4b:fe:d8: 17:c0:36:f7:b2:f6:c2:4a:60:ec:2e:57:5d:92:01:a9:ab:2e: 1a:67:e7:aa:8b:fd:a4:57:30:e1:d3:63:64:ef:16:4e:68:29: fd:35:08:fc:ed:46:61:37:83:c6:63:32:67:3b:f8:fd:b5:f1: 04:5f:d3:38:6a:7c:9a:2d:66:2a:77:be:74:f0:19:b8:60:80: d4:f0:58:40:b6:e7:89:94:3d:7f:da:a0:15:22:24:4e:32:6e: c2:b4:86:f0:80:27:59:a7:4a:04:25:4f:64:45:3b:3d:3a:12: b1:96:27:f6:cf:a1:87:2f:21:9a:41:d3:5d:d0:23:66:af:bd: ca:34:8e:99:db:17:7f:5a:c9:30:91:ac:e8:e0:9d:ef:1a:bb: 6f:9f:a7:98:48:e0:6a:40:e4:b5:e4:a8:95:a0:48:89:76:d6: 04:7a:0e:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzNTkxMTAvBgNVBAUTKDk5OUJBMzc0MTEwMjhBNjJGQjUxNURDRjAyOENEQTJE QzlBQkM5RDEwHhcNMjQwNTAzMDYyODA1WhcNMjQwNTEwMDYyODA1WjAYMRYwFAYD VQQDEw02NjM0ODNmNS1kODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYQEUCowbd8M3fX2KAkWgj2AbZOQz378++SZvW6cFJihat+zJhD8q1kflE7N VTshnjVXDqXj2yB3nhNg4USY/DUUMTRFdAo2RjbusbpaG3GTO8uwAAEs31ll6pSR Z+FqgFYNNOqq1QNqc8cwypNb4BJq9UNrszoOBnp47xYpHqIt7CrbsjblNyMYfoEg d3hGYVpNAJhzEEQYUeHiIYi1pbIBrPCxKlUlD02DoO+6QENBMMrVE2bUFzSqs4IO zVBxiNI/rCxqlUwYQhQpVdkr0nSSN4Y3swv1YrbO4j3606ybmIqlHCAQ5CEfsYax EKAd3ftuRYsFboRFWrwNe3QFqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMacxfN1 JEbmtpVz1/3EtE849gAZMB8GA1UdIwQYMBaAFJmbo3QRAopi+1FdzwKM2i3Jq8nR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDM1OS8zMzVFNjU2MkU0 QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2ltTDdVVjNQQW96YUxjbXJ5 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21adWpkQkVDaW1MN1VWM1BBb3phTGNtcnlkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDM1OS8zMzVFNjU2MkU0QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2lt TDdVVjNQQW96YUxjbXJ5ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh0yq8M4zCc1XO82P2fOvYtVq1FYGQZTzeG/sope9tQthaaAT4SsMd xTy0CoQFxDHDw/HYNbREHAnerUcqdp2FFBlXx0LrdUKBu+jvK8LTnufTLQHGUERL /tgXwDb3svbCSmDsLlddkgGpqy4aZ+eqi/2kVzDh02Nk7xZOaCn9NQj87UZhN4PG YzJnO/j9tfEEX9M4anyaLWYqd7508Bm4YIDU8FhAtueJlD1/2qAVIiROMm7CtIbw gCdZp0oEJU9kRTs9OhKxlif2z6GHLyGaQdNd0CNmr73KNI6Z2xd/Wskwkazo4J3v Grtvn6eYSOBqQOS15KiVoEiJdtYEeg6W -----END CERTIFICATE-----Generated at Fri May 3 08:21:09 2024 by rpki-client on console-ams.rpki-client.org