$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: z8H7FmQ4eZhl2af723QepNf6OhQTb8KoMj47VlW7BIQ= Subject key identifier: E0:EE:0A:96:04:07:CC:1A:E1:E9:1C:D0:A6:BE:D4:3C:E3:3D:5B:6D Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 02EF Signing time: Wed 01 May 2024 03:33:53 +0000 Manifest this update: Wed 01 May 2024 03:33:53 +0000 Manifest next update: Wed 08 May 2024 03:33:53 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: uLRsQdp1HNnNac0Vk91oJPkRSGoNsSwavZl7H+EXD5M=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: nAlZh2Crlblsryg6pGWxcdvNcmrlL8+GA2PtOu0hmxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: May 1 03:33:53 2024 GMT Not After : May 8 03:33:53 2024 GMT Subject: CN=6631b821-7bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:7e:2a:94:da:5a:ea:37:ce:f7:8b:66:1c: 66:61:93:8e:5f:d3:e4:66:d8:ea:eb:01:d7:d8:0d: 94:c3:18:8e:3a:7f:bb:da:48:b7:a2:1f:2c:14:e6: 1b:f5:72:d6:36:8a:c1:45:a7:90:1b:13:14:90:4b: 13:81:3b:00:e7:a1:04:7c:f5:f0:0f:c3:47:38:43: 61:29:32:f0:04:e3:dc:fd:be:ac:a3:45:90:fc:f3: 9c:e4:e5:03:ff:44:cc:de:ea:d8:ac:29:1e:8d:b7: 79:76:aa:fe:63:d5:60:8c:a1:a7:f6:b9:f3:36:6e: 7c:75:1c:5f:35:9c:69:e8:ff:01:91:46:4e:c9:21: a3:76:52:76:0d:ed:d8:fb:26:72:f4:b6:0a:22:48: 6a:f9:ad:3a:39:c0:d0:3f:e0:ff:33:f2:dd:f7:b9: a5:75:25:a8:8e:fe:e7:90:1c:d6:64:c2:8a:88:9b: 57:95:f8:a3:75:32:59:24:05:48:1e:50:1f:39:07: bb:07:43:92:76:cf:2e:f9:b4:53:72:b6:5e:bb:cb: fc:f9:90:5d:36:04:26:f6:1e:b8:22:c1:1e:79:72: 6a:31:d6:6d:18:bd:36:2d:71:9f:82:c6:db:b1:73: a8:1f:ff:5e:e2:23:fc:97:15:80:6f:d5:63:ae:8b: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:0A:96:04:07:CC:1A:E1:E9:1C:D0:A6:BE:D4:3C:E3:3D:5B:6D X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:97:ad:92:97:7c:c4:e2:de:f9:f4:ad:e6:c7:00:8c:b5:67: 5f:47:91:a8:c3:ac:2e:6c:5f:26:b1:02:20:15:fc:0c:d6:06: 51:2d:5b:62:c2:4e:36:23:26:96:6a:6c:a5:8c:4e:c2:9f:20: 71:ff:0e:da:cd:f2:d4:72:93:e9:77:c1:aa:17:3d:f4:25:22: d4:b0:ed:96:48:61:31:81:c1:5a:0d:1f:01:d5:0d:b9:28:07: 4c:dc:04:5f:04:24:27:42:91:c3:43:72:75:2b:0b:a0:a1:31: cb:a1:2c:19:4c:da:2e:bb:20:29:59:99:67:2c:72:f4:3b:93: 9d:ea:d7:11:2d:91:54:0d:1b:9c:24:9a:65:4b:85:50:25:c8: 2b:b6:b5:33:e4:4e:db:40:da:cb:1e:27:3c:4c:58:5e:e3:c8: 49:af:67:21:dc:fa:69:99:cf:8c:ee:68:35:58:be:e9:f3:30: 73:d4:5e:8d:db:a5:e9:81:4d:b7:cf:b9:7a:60:25:a7:22:c0: 18:c0:7d:2c:8d:d6:3b:99:bf:80:29:9a:4f:24:26:83:f5:98: 8e:42:8b:08:18:ff:ba:e9:ee:30:41:5e:fa:ee:8a:13:ae:86: fd:2f:83:60:fc:40:85:ae:95:42:4f:dd:de:3d:71:b6:f2:d1: 4f:69:98:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjQwNTAxMDMzMzUzWhcNMjQwNTA4MDMzMzUzWjAYMRYwFAYD VQQDEw02NjMxYjgyMS03YmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJV+KpTaWuo3zveLZhxmYZOOX9PkZtjq6wHX2A2UwxiOOn+72ki3oh8sFOYb 9XLWNorBRaeQGxMUkEsTgTsA56EEfPXwD8NHOENhKTLwBOPc/b6so0WQ/POc5OUD /0TM3urYrCkejbd5dqr+Y9VgjKGn9rnzNm58dRxfNZxp6P8BkUZOySGjdlJ2De3Y +yZy9LYKIkhq+a06OcDQP+D/M/Ld97mldSWojv7nkBzWZMKKiJtXlfijdTJZJAVI HlAfOQe7B0OSds8u+bRTcrZeu8v8+ZBdNgQm9h64IsEeeXJqMdZtGL02LXGfgsbb sXOoH/9e4iP8lxWAb9VjrotsgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODuCpYE B8wa4ekc0Ka+1DzjPVttMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcl62Sl3zE4t759K3mxwCMtWdfR5Gow6wubF8msQIgFfwM1gZRLVti wk42IyaWamyljE7CnyBx/w7azfLUcpPpd8GqFz30JSLUsO2WSGExgcFaDR8B1Q25 KAdM3ARfBCQnQpHDQ3J1KwugoTHLoSwZTNouuyApWZlnLHL0O5Od6tcRLZFUDRuc JJplS4VQJcgrtrUz5E7bQNrLHic8TFhe48hJr2ch3Pppmc+M7mg1WL7p8zBz1F6N 26XpgU23z7l6YCWnIsAYwH0sjdY7mb+AKZpPJCaD9ZiOQosIGP+66e4wQV767ooT rob9L4Ng/ECFrpVCT93ePXG28tFPaZiA -----END CERTIFICATE-----Generated at Wed May 1 04:49:25 2024 by rpki-client on console-ams.rpki-client.org