$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json) Hash identifier: GHHnJaVLUpF3yCTGd2KKoOnAYhL9zjDvACUSwdP8xq4= Subject key identifier: BF:09:A7:B0:1F:19:40:33:10:FF:0B:37:61:E1:D2:1B:C1:AC:FA:84 Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Certificate serial: 0B4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft Manifest number: 3F08 Signing time: Wed 08 May 2024 15:13:55 +0000 Manifest this update: Wed 08 May 2024 15:13:55 +0000 Manifest next update: Wed 15 May 2024 15:13:55 +0000 Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: K6Vynjgr2iKDBVct3BSobq/aXX2bULzg22BjvnnGbhU=) 2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: aZpW8xwxHpvdqSec7gvMhuD6mkz9Cv9cHkZect5E07I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2893 (0xb4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Validity Not Before: May 8 15:13:55 2024 GMT Not After : May 15 15:13:55 2024 GMT Subject: CN=663b96b3-0f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:e8:c1:f1:52:ff:9c:d0:4f:5f:68:26:d2: 33:8c:59:26:f7:6b:99:97:0d:79:b3:56:40:df:70: 41:ed:8b:44:09:10:a8:eb:f9:55:2d:17:f9:8b:10: e4:28:f7:90:c3:93:24:04:d1:f5:b1:dc:86:2a:9c: ca:93:29:5a:c5:51:bb:c3:63:4d:8c:5f:6b:fe:63: bd:7c:a8:51:30:28:03:ca:23:0d:ee:2c:38:7f:ac: 5a:53:7e:9f:ea:79:2f:5f:5b:92:19:e1:c0:9d:1f: 8d:1b:bd:65:7e:7d:dd:f7:f7:14:e6:2e:a9:7c:9e: ec:68:a5:b9:a6:70:4a:b3:cf:1b:68:da:a9:0d:36: a0:02:8c:16:45:d6:95:75:59:99:0b:8e:bc:ea:0a: 01:22:5b:65:92:da:7f:85:af:29:3c:48:d3:64:d6: a8:4f:7c:a7:c8:76:10:43:dc:6d:28:97:c1:f1:e7: 4c:03:7d:95:b6:6d:a1:70:8c:0f:44:7a:5a:8b:22: a1:43:e6:eb:ae:49:7d:5f:4b:9a:9e:de:4a:c5:41: 47:d7:40:ca:2a:3a:70:7b:62:1f:95:e3:f4:78:5d: 4e:2e:94:9b:27:35:e9:6d:53:2b:9c:f4:db:b5:e9: 27:a7:ee:6e:b0:89:17:e8:58:78:d9:bf:d5:0c:14: b9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:09:A7:B0:1F:19:40:33:10:FF:0B:37:61:E1:D2:1B:C1:AC:FA:84 X509v3 Authority Key Identifier: keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:23:f7:fd:2b:57:c6:d1:c6:18:d7:76:d8:6d:c2:ce:2d:dc: 9d:bc:f6:2c:4b:47:04:a1:6e:dd:99:f0:e9:72:05:49:bb:f8: 07:b9:c0:63:d1:bd:64:e2:18:a2:39:d3:53:12:9c:b0:51:9b: a0:56:d0:af:c7:5a:33:8c:e7:1a:ea:4e:b3:e9:cd:cf:cb:fc: 45:db:30:5c:89:8a:41:40:d6:20:8d:41:d2:50:7d:57:9c:93: 4a:eb:95:f3:02:92:58:1c:aa:00:a4:7d:f0:8d:cd:8a:db:c2: d1:17:a5:3e:ee:e8:49:e3:26:49:e4:88:7c:d9:d2:f8:54:8e: 45:b1:82:6a:80:b9:51:49:f2:da:66:14:58:73:2b:dc:d6:73: 1b:52:c6:41:4a:a2:51:b0:80:c4:12:df:b0:31:4f:b4:b3:91: 58:fe:8d:6a:ff:81:9b:8c:29:5b:59:24:4c:88:52:58:3c:f9: eb:ed:7d:80:c0:d2:23:09:de:0d:51:81:04:fa:20:26:6c:44: c3:3f:2e:d0:e1:73:8f:7f:86:e8:f9:3f:8e:eb:fe:b8:23:39: 87:67:89:62:45:62:20:0c:51:dd:55:78:ba:d9:63:ba:87:4a: 7e:7f:93:28:57:3b:7c:67:a3:2a:5f:2e:bb:d8:39:3a:78:43: 46:ee:56:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy RDNCMjY0Q0EwHhcNMjQwNTA4MTUxMzU1WhcNMjQwNTE1MTUxMzU1WjAYMRYwFAYD VQQDEw02NjNiOTZiMy0wZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMPowfFS/5zQT19oJtIzjFkm92uZlw15s1ZA33BB7YtECRCo6/lVLRf5ixDk KPeQw5MkBNH1sdyGKpzKkylaxVG7w2NNjF9r/mO9fKhRMCgDyiMN7iw4f6xaU36f 6nkvX1uSGeHAnR+NG71lfn3d9/cU5i6pfJ7saKW5pnBKs88baNqpDTagAowWRdaV dVmZC4686goBIltlktp/ha8pPEjTZNaoT3ynyHYQQ9xtKJfB8edMA32Vtm2hcIwP RHpaiyKhQ+brrkl9X0uant5KxUFH10DKKjpwe2IfleP0eF1OLpSbJzXpbVMrnPTb teknp+5usIkX6Fh42b/VDBS5gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8Jp7Af GUAzEP8LN2Hh0hvBrPqEMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX WS1oNjNHNlpYNGd0T3laTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTI/f9K1fG0cYY13bYbcLOLdydvPYsS0cEoW7dmfDpcgVJu/gHucBj 0b1k4hiiOdNTEpywUZugVtCvx1ozjOca6k6z6c3Py/xF2zBciYpBQNYgjUHSUH1X nJNK65XzApJYHKoApH3wjc2K28LRF6U+7uhJ4yZJ5Ih82dL4VI5FsYJqgLlRSfLa ZhRYcyvc1nMbUsZBSqJRsIDEEt+wMU+0s5FY/o1q/4GbjClbWSRMiFJYPPnr7X2A wNIjCd4NUYEE+iAmbETDPy7Q4XOPf4bo+T+O6/64IzmHZ4liRWIgDFHdVXi62WO6 h0p+f5MoVzt8Z6MqXy672Dk6eENG7lbh -----END CERTIFICATE-----Generated at Wed May 8 17:47:41 2024 by rpki-client on console-ams.rpki-client.org