$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft File: rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json) Hash identifier: DpdF8VWo/Jahv5ifD8HqwJQfp6Keu3NpsYOOnTS6Lgw= Subject key identifier: D5:CE:95:D9:2C:F1:08:7B:D8:B4:4E:F5:3E:F6:7C:79:5A:52:D9:C3 Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft Manifest number: 01B7 Signing time: Fri 03 May 2024 04:36:46 +0000 Manifest this update: Fri 03 May 2024 04:36:46 +0000 Manifest next update: Fri 10 May 2024 04:36:46 +0000 Files and hashes: 1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: OSljDx6nqAPjOYhBzx2IEMD0h14MZRHey6p5J/y22e4=) 2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: 7MYe95Dg9StTC8B6i+6IlKmaEnZaWeos8v9u3t+jNTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Validity Not Before: May 3 04:36:46 2024 GMT Not After : May 10 04:36:46 2024 GMT Subject: CN=663469de-fa85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:22:cf:cc:b0:33:d0:03:01:77:81:f3:e3:84: d5:e3:f8:1b:2f:13:f9:15:ae:f3:6d:bf:5b:87:89: 52:c6:fe:54:a2:41:3a:7d:29:e2:74:34:e6:9c:b4: df:42:a5:5c:79:4d:28:a7:4b:3a:52:65:c6:19:41: 0e:cc:47:21:00:4c:84:c6:38:1b:d3:ed:e6:af:be: 2b:0b:1f:5c:3e:1d:62:c5:89:df:ba:b1:e7:1d:b4: be:11:6f:9d:b5:d4:b8:4a:d5:64:bb:3d:38:05:70: 3e:b8:ae:5d:15:ac:cb:67:80:b7:d0:b1:43:e6:94: 54:f4:0e:23:0f:8e:c1:c8:e1:f3:50:58:9f:1a:c1: 62:32:9f:a0:b9:c3:79:8f:02:b7:a2:ad:5c:9c:d6: f7:a5:69:a8:7b:89:f0:32:a3:56:7d:2e:90:9e:e3: eb:54:e0:cd:7c:0c:d6:ec:39:1a:21:df:3e:35:14: 23:47:51:9b:f3:7f:0a:a6:13:eb:2b:0d:e5:f5:1d: df:61:f1:7a:10:39:5c:e5:8a:ed:04:58:b5:e1:82: 5f:28:32:3e:e1:a6:68:7e:06:c3:1f:e5:07:04:6e: dc:56:5e:5f:9f:d5:df:30:1a:85:63:84:b6:22:f9: 9e:3e:5a:e0:10:cc:8e:bc:86:7f:f7:2f:6d:c5:f3: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CE:95:D9:2C:F1:08:7B:D8:B4:4E:F5:3E:F6:7C:79:5A:52:D9:C3 X509v3 Authority Key Identifier: keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:af:d9:d3:5a:8f:c5:5a:aa:3f:b5:2f:47:af:40:51:61:99: c6:4a:20:b8:0b:e1:9b:03:5f:9b:59:9d:1b:1e:ff:8e:83:3f: 47:da:12:fc:82:ad:b5:ab:56:1b:a5:78:f4:8f:55:fa:eb:3d: be:80:a8:d1:ad:6a:9d:f3:0f:36:9c:01:76:4e:11:5d:ae:19: d6:b6:0c:93:ca:8f:8f:a6:5e:0c:84:e6:43:6b:03:6c:dd:b2: bd:63:fa:75:95:b7:02:a1:59:20:57:56:8a:8e:a4:82:01:e4: 1f:d4:03:9f:31:b1:37:00:28:89:91:98:21:5c:a1:bc:ee:08: 76:dc:5a:e4:b2:21:4f:51:90:de:23:37:d0:9c:f2:68:9f:77: 0f:a0:c0:0e:e3:da:da:00:f8:69:c7:92:97:52:31:20:78:d2: 5e:85:39:75:e6:99:b5:ac:fa:3f:9b:32:61:c8:be:00:68:f3: b2:b3:60:44:40:7b:8f:0a:68:0c:a5:46:64:6f:41:73:db:29: e6:bf:6e:8b:88:e0:b6:ab:18:ec:f8:88:09:c7:18:66:ad:ad: 48:c0:75:45:ce:d1:66:86:09:a8:43:c6:54:63:9a:98:3a:f6: 2d:1f:ca:a2:f4:d3:14:89:66:36:ae:c9:f1:66:51:44:cb:f6: 86:f2:5e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz MjQ1MTM1MEIwHhcNMjQwNTAzMDQzNjQ2WhcNMjQwNTEwMDQzNjQ2WjAYMRYwFAYD VQQDEw02NjM0NjlkZS1mYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iLPzLAz0AMBd4Hz44TV4/gbLxP5Fa7zbb9bh4lSxv5UokE6fSnidDTmnLTf QqVceU0op0s6UmXGGUEOzEchAEyExjgb0+3mr74rCx9cPh1ixYnfurHnHbS+EW+d tdS4StVkuz04BXA+uK5dFazLZ4C30LFD5pRU9A4jD47ByOHzUFifGsFiMp+gucN5 jwK3oq1cnNb3pWmoe4nwMqNWfS6QnuPrVODNfAzW7DkaId8+NRQjR1Gb838KphPr Kw3l9R3fYfF6EDlc5YrtBFi14YJfKDI+4aZofgbDH+UHBG7cVl5fn9XfMBqFY4S2 IvmePlrgEMyOvIZ/9y9txfP0zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXOldks 8Qh72LRO9T72fHlaUtnDMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIxMy83MjM0RERDNDBDMTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9o d3lBYmppdEFBTWd5UlJOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtr9nTWo/FWqo/tS9Hr0BRYZnGSiC4C+GbA1+bWZ0bHv+Ogz9H2hL8 gq21q1YbpXj0j1X66z2+gKjRrWqd8w82nAF2ThFdrhnWtgyTyo+Ppl4MhOZDawNs 3bK9Y/p1lbcCoVkgV1aKjqSCAeQf1AOfMbE3ACiJkZghXKG87gh23FrksiFPUZDe IzfQnPJon3cPoMAO49raAPhpx5KXUjEgeNJehTl15pm1rPo/mzJhyL4AaPOys2BE QHuPCmgMpUZkb0Fz2ynmv26LiOC2qxjs+IgJxxhmra1IwHVFztFmhgmoQ8ZUY5qY OvYtH8qi9NMUiWY2rsnxZlFEy/aG8l4f -----END CERTIFICATE-----Generated at Fri May 3 06:29:21 2024 by rpki-client on console-fra.rpki-client.org