$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: f7mp0rizQ9ymClsuWlPVBch7VwSI/suGL3vZve/WBcg= Subject key identifier: 5E:67:D2:4D:21:73:82:01:64:79:25:5C:7B:25:2E:06:BE:91:C0:0D Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0B83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0B79 Signing time: Sat 04 May 2024 19:33:41 +0000 Manifest this update: Sat 04 May 2024 19:33:40 +0000 Manifest next update: Sat 11 May 2024 19:33:40 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: Hw14OHqOkpL9RORjFcNZpcoyhgUnmlOCSBcfdKLRG0c=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: Ey8ekaM4J2crEGLxgaKjmK3pxTQIHfbb3eEbz5HXzO4=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: UpGIQk8BsZLFwV7TMC1CS3ghrERTM72pXAJpFHbtOlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2947 (0xb83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: May 4 19:33:40 2024 GMT Not After : May 11 19:33:40 2024 GMT Subject: CN=66368d94-4c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:a4:ce:ff:f1:c6:d5:a8:df:19:1e:33:48: 5e:bf:8a:17:0c:e4:b2:06:e3:d9:5c:3c:26:92:e0: 65:21:e5:83:2d:ff:8e:b4:9f:34:90:2c:23:dc:c0: 95:3b:58:c8:68:2a:29:61:c4:0e:e0:28:f2:b6:04: 0f:a3:4b:e5:53:db:74:a9:dd:0c:5f:4c:12:25:27: 65:f1:cc:3d:40:f3:02:73:a0:97:68:d1:9c:a8:a7: bc:31:46:ed:75:07:a5:5f:bc:b2:53:c5:2a:14:39: df:4f:28:35:3b:7d:60:28:7c:99:d8:55:be:65:7e: 1f:36:b3:94:76:3b:85:2a:f8:64:c8:7a:5c:80:58: dd:b8:94:2e:21:5b:e8:35:7b:55:5f:d4:a4:5c:c6: 72:16:1c:17:a4:08:5f:55:51:64:66:6c:62:5d:6f: 21:2d:0b:e7:96:2c:93:72:95:8b:b6:f7:34:76:00: 38:b4:11:c1:6a:f4:8e:61:0f:bb:00:a9:f8:dc:81: f2:ba:b3:d2:27:10:b4:a3:48:32:28:c1:b9:90:30: a2:ce:6f:53:e1:e1:19:47:26:7c:e1:3f:85:ef:dc: 6a:81:53:0b:1e:c1:f0:28:8f:a5:c9:dc:e1:eb:b8: c6:43:ec:84:0e:32:3c:e2:de:8e:44:63:03:3b:3c: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:67:D2:4D:21:73:82:01:64:79:25:5C:7B:25:2E:06:BE:91:C0:0D X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:30:0b:90:cd:a3:4e:2c:0b:84:63:30:74:ac:05:7d:77:a3: 47:5c:84:3a:b1:a5:0d:0f:43:34:6a:97:79:95:34:6a:b9:87: 5b:a3:da:ff:74:a8:6d:ba:b7:6a:ed:ed:f6:8c:0a:2f:67:60: 09:a6:ea:4b:73:00:4f:7c:26:d9:df:75:b8:5b:5f:41:fa:cc: f1:af:68:36:06:cc:2a:8b:e9:c6:04:ce:f3:bd:d2:ed:28:8a: 2d:26:40:0b:4c:0c:ca:9b:6b:91:7f:9d:fa:ee:73:48:34:0e: 4a:3c:20:32:db:3e:80:ef:cf:9b:73:9a:f3:e2:0e:61:74:c8: a3:93:df:47:e0:05:29:e8:05:0d:f0:95:49:07:51:df:d2:ae: ef:bc:7f:ce:5c:79:b3:4d:de:8a:8a:7f:d2:88:9d:38:40:54: e3:c9:d6:83:1c:45:38:04:fe:a0:15:f4:36:06:e8:b9:eb:e0: 4a:c9:c8:c2:6c:1d:66:f3:2c:08:f7:96:c3:a5:96:81:7e:df: 07:2a:57:d3:99:b6:b7:c8:70:41:22:da:1b:6f:67:f6:90:e6: dc:87:0a:a1:16:6d:69:a9:1b:1b:8e:bd:f4:ba:a2:48:3b:8b: 96:70:37:b6:25:81:fe:b8:48:9d:7e:b7:b7:2e:70:35:8e:d9: e9:eb:e3:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjQwNTA0MTkzMzQwWhcNMjQwNTExMTkzMzQwWjAYMRYwFAYD VQQDEw02NjM2OGQ5NC00YzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mikzv/xxtWo3xkeM0hev4oXDOSyBuPZXDwmkuBlIeWDLf+OtJ80kCwj3MCV O1jIaCopYcQO4CjytgQPo0vlU9t0qd0MX0wSJSdl8cw9QPMCc6CXaNGcqKe8MUbt dQelX7yyU8UqFDnfTyg1O31gKHyZ2FW+ZX4fNrOUdjuFKvhkyHpcgFjduJQuIVvo NXtVX9SkXMZyFhwXpAhfVVFkZmxiXW8hLQvnliyTcpWLtvc0dgA4tBHBavSOYQ+7 AKn43IHyurPSJxC0o0gyKMG5kDCizm9T4eEZRyZ84T+F79xqgVMLHsHwKI+lydzh 67jGQ+yEDjI84t6ORGMDOzxWRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5n0k0h c4IBZHklXHslLga+kcANMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZMAuQzaNOLAuEYzB0rAV9d6NHXIQ6saUND0M0apd5lTRquYdbo9r/ dKhturdq7e32jAovZ2AJpupLcwBPfCbZ33W4W19B+szxr2g2Bswqi+nGBM7zvdLt KIotJkALTAzKm2uRf5367nNINA5KPCAy2z6A78+bc5rz4g5hdMijk99H4AUp6AUN 8JVJB1Hf0q7vvH/OXHmzTd6Kin/SiJ04QFTjydaDHEU4BP6gFfQ2Bui56+BKycjC bB1m8ywI95bDpZaBft8HKlfTmba3yHBBItobb2f2kObchwqhFm1pqRsbjr30uqJI O4uWcDe2JYH+uEidfre3LnA1jtnp6+Or -----END CERTIFICATE-----Generated at Sat May 4 20:37:11 2024 by rpki-client on console-fra.rpki-client.org