$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: Qw2qMLhOW1oEUkrP2lvKd6geIuFCIg5NW9SZOY4oBP4= Subject key identifier: A4:98:F5:CD:D3:43:1F:C6:1B:F0:25:CA:99:6A:BD:FF:2D:1B:9A:C6 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 137A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 1371 Signing time: Thu 02 May 2024 17:35:41 +0000 Manifest this update: Thu 02 May 2024 17:35:41 +0000 Manifest next update: Thu 09 May 2024 17:35:41 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: 2ZsJ7G9P1ZUSZ8Ml81T3O4hIlzrx/LODdkP1nAZYk3Y=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: mOAjzTD688ThJmEPZ134eNBOUODYA5QmMjO6+tOsvzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4986 (0x137a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: May 2 17:35:41 2024 GMT Not After : May 9 17:35:41 2024 GMT Subject: CN=6633ceed-7406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:9e:2e:f4:8f:e3:69:73:eb:b0:04:30:40: cb:74:09:af:93:6d:53:6f:08:62:e6:e1:f7:35:d1: 69:11:ee:a2:5c:68:eb:00:27:e9:0c:37:d1:d6:36: b9:f8:80:93:2f:5e:e4:e9:62:1b:42:1c:82:c2:51: 8c:48:bf:bc:e4:80:33:cb:d2:49:16:b1:b8:a8:74: 62:e6:c2:3c:df:af:e8:31:7f:09:8f:54:04:d0:81: fd:f3:5c:46:47:39:a6:28:4a:dd:74:13:9d:36:cf: 00:56:c7:77:20:ef:21:26:29:2c:b5:68:6b:3d:eb: 5c:61:af:86:09:76:44:9a:27:1e:29:fc:9b:17:0c: ca:57:76:2a:7e:97:45:d2:79:ed:f2:a0:f2:9a:1a: 83:90:c5:45:f6:db:e3:4a:bb:22:23:4b:74:d3:ac: f4:84:e8:d9:95:08:c5:f7:1a:2c:bd:bf:79:d6:f3: 7a:5e:cc:3c:45:aa:ea:f9:17:a4:86:6b:3f:e6:f1: 5c:59:4d:e5:54:91:75:56:48:29:ac:34:4f:03:03: 4d:09:6a:77:c6:f3:f8:62:67:78:a9:e6:36:99:1c: 99:c0:dd:4d:4c:0a:ba:68:3b:3b:e9:fb:7d:6e:a5: 64:33:9a:46:45:6e:8f:7b:5f:76:4f:1d:c5:66:94: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:98:F5:CD:D3:43:1F:C6:1B:F0:25:CA:99:6A:BD:FF:2D:1B:9A:C6 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ec:bf:8b:9a:99:1c:6b:b5:f3:5a:3d:74:ce:e8:77:81:e9: ee:51:91:a9:c2:3e:89:de:12:e0:cf:89:25:ba:40:ca:94:96: d0:3b:a3:60:73:2c:c2:66:69:3a:4c:c5:fa:d4:56:79:21:e0: 5f:49:f1:c0:68:bc:a9:f9:3c:ea:02:e9:73:5b:d6:17:62:1a: 36:1e:6c:0a:60:6f:e8:45:09:32:bd:82:dc:86:c9:a3:37:7e: d0:7c:e9:a7:05:8e:46:7c:04:4c:2e:5d:f2:f6:ce:32:e9:90: fe:2e:21:7a:59:f3:5a:55:1b:6e:60:90:33:f8:83:ff:b5:d3: 16:c6:27:8e:33:3a:f3:a4:88:9d:8a:f5:43:19:e7:52:82:7a: f2:2b:e1:47:df:10:14:07:79:75:68:1d:8e:86:b5:6c:7f:94: 97:8b:cd:b4:55:d1:1c:03:d2:4d:4f:46:aa:3c:17:8d:c6:ec: 66:8f:16:fa:28:b1:c8:96:a4:61:07:fd:8c:0b:e3:65:2f:c4: 03:1f:24:4e:72:f7:aa:61:78:e5:2e:4b:aa:e6:61:1a:27:52: 79:cc:da:65:cc:c8:1f:5c:74:bd:0b:bb:2b:d6:5d:dd:5c:41: 78:cd:5e:b0:bd:cc:67:63:02:d3:ae:64:0d:bd:dc:24:9d:a6: 71:70:32:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjQwNTAyMTczNTQxWhcNMjQwNTA5MTczNTQxWjAYMRYwFAYD VQQDEw02NjMzY2VlZC03NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dieLvSP42lz67AEMEDLdAmvk21Tbwhi5uH3NdFpEe6iXGjrACfpDDfR1ja5 +ICTL17k6WIbQhyCwlGMSL+85IAzy9JJFrG4qHRi5sI836/oMX8Jj1QE0IH981xG RzmmKErddBOdNs8AVsd3IO8hJikstWhrPetcYa+GCXZEmiceKfybFwzKV3YqfpdF 0nnt8qDymhqDkMVF9tvjSrsiI0t006z0hOjZlQjF9xosvb951vN6Xsw8Rarq+Rek hms/5vFcWU3lVJF1VkgprDRPAwNNCWp3xvP4Ymd4qeY2mRyZwN1NTAq6aDs76ft9 bqVkM5pGRW6Pe192Tx3FZpR3dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSY9c3T Qx/GG/Alyplqvf8tG5rGMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY7L+Lmpkca7XzWj10zuh3genuUZGpwj6J3hLgz4klukDKlJbQO6Ng cyzCZmk6TMX61FZ5IeBfSfHAaLyp+TzqAulzW9YXYho2HmwKYG/oRQkyvYLchsmj N37QfOmnBY5GfARMLl3y9s4y6ZD+LiF6WfNaVRtuYJAz+IP/tdMWxieOMzrzpIid ivVDGedSgnryK+FH3xAUB3l1aB2OhrVsf5SXi820VdEcA9JNT0aqPBeNxuxmjxb6 KLHIlqRhB/2MC+NlL8QDHyROcveqYXjlLkuq5mEaJ1J5zNplzMgfXHS9C7sr1l3d XEF4zV6wvcxnYwLTrmQNvdwknaZxcDJp -----END CERTIFICATE-----Generated at Thu May 2 20:04:52 2024 by rpki-client on console-ams.rpki-client.org