$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: Wm4TdWcJjKPnZKphT49BKXNbNk3yDmZYyzL0x+2dZUY= Subject key identifier: D0:BB:23:B7:60:97:B0:32:94:F0:55:C2:82:64:E4:8A:A2:26:D0:4A Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 0EEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 0EDA Signing time: Tue 30 Apr 2024 18:34:09 +0000 Manifest this update: Tue 30 Apr 2024 18:34:08 +0000 Manifest next update: Tue 07 May 2024 18:34:08 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: VroJv1BJe16T9W72mTFxaMEt44IUwaWYRPxU+MbWc84=) 2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: kbWfE4+lQ3eJtzTz+bGLRGAhbJNnY1HHy7GZu7SpmnE=) 3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: pCQ6Zv4AQRohxIezVUYwDmwCrvRYPnBVH50M3Opl1jc=) 4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: ee7Du24pr7R8ebpqXGV4EXWAUmNVLXaWx0uPbdyG68s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3820 (0xeec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Apr 30 18:34:08 2024 GMT Not After : May 7 18:34:08 2024 GMT Subject: CN=663139a1-3609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:95:c7:79:7b:db:30:a2:d1:c8:d9:0c:8c: c6:e1:48:db:0d:48:6d:c5:7b:94:9e:b3:67:c4:f4: a8:45:17:1c:03:17:39:45:27:a6:7c:e9:b7:ea:35: 4c:1b:dd:3b:83:9d:7f:83:f8:3e:ed:bc:80:18:30: 66:48:58:4f:a3:11:1d:c1:69:47:31:ca:73:4d:44: 3b:37:63:a9:d3:89:50:73:df:73:fb:2b:b5:23:72: 11:b1:d6:96:b1:a9:4c:ee:2f:fe:47:c6:43:88:38: 28:70:de:67:79:28:3d:90:67:f9:5d:98:f3:91:71: e3:86:ff:35:7b:ac:49:6c:9b:1d:ba:37:8b:f2:c8: 24:8f:25:a8:45:64:29:40:43:4f:21:61:45:b3:42: 01:c1:bd:65:d6:ad:74:48:52:d6:5a:97:d5:ec:39: 47:a0:1c:8a:85:6a:2c:3f:29:66:05:28:b4:1d:2f: 35:c9:f1:d0:51:19:48:5a:36:00:e9:98:03:34:44: da:8b:d8:23:0e:08:30:6f:71:69:8f:9b:b6:ca:81: a5:a6:53:d1:55:6b:5a:33:0d:12:e4:f5:8a:5a:42: fc:9f:eb:92:06:d1:d9:53:2c:6a:13:50:e3:23:6f: fb:c2:f2:98:ba:07:7e:bf:b5:1f:69:e2:f9:65:d7: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BB:23:B7:60:97:B0:32:94:F0:55:C2:82:64:E4:8A:A2:26:D0:4A X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:2c:4c:29:79:1e:7b:bb:1f:38:bd:86:9a:c0:30:dc:23:50: 82:fb:16:53:1a:28:58:4f:ec:88:0a:7b:db:fb:1c:58:e3:b3: 61:80:ba:80:30:ef:71:82:2d:c8:d3:56:86:de:9e:5d:09:bd: ac:40:46:b8:99:98:b8:a2:53:26:8e:67:d3:d5:80:77:96:cd: 1f:eb:22:73:a4:56:98:a7:77:c8:d7:1a:5b:c8:b3:36:5d:91: 67:87:3a:74:0f:5a:8e:18:1c:43:58:83:b3:e5:34:7e:38:3b: 58:c2:b5:b4:e7:07:59:55:21:85:b6:a5:a5:cd:93:93:2f:77: ae:8e:91:fa:68:93:ad:08:13:df:73:4d:64:7e:ed:74:ec:74: 52:33:9e:19:30:bf:f0:7b:bf:5e:4a:19:c4:f0:8f:ce:6f:6d: 22:86:2b:af:aa:ef:08:c0:f8:0b:bf:1b:33:cd:3c:dc:d2:92: 5d:b8:17:38:04:cf:e1:25:06:21:8e:d2:ff:ad:28:63:8d:44: ca:53:0c:5b:54:7b:f7:5c:a3:0f:90:ef:bc:af:67:63:ee:e3: af:d4:8f:b0:f1:53:0b:a8:fc:21:98:59:dd:39:48:f0:92:8f: 33:c3:95:57:3b:15:73:5c:65:31:cc:6c:c9:2d:ae:28:d2:a6: 79:65:f4:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjQwNDMwMTgzNDA4WhcNMjQwNTA3MTgzNDA4WjAYMRYwFAYD VQQDEw02NjMxMzlhMS0zNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG6Vx3l72zCi0cjZDIzG4UjbDUhtxXuUnrNnxPSoRRccAxc5RSemfOm36jVM G907g51/g/g+7byAGDBmSFhPoxEdwWlHMcpzTUQ7N2Op04lQc99z+yu1I3IRsdaW salM7i/+R8ZDiDgocN5neSg9kGf5XZjzkXHjhv81e6xJbJsdujeL8sgkjyWoRWQp QENPIWFFs0IBwb1l1q10SFLWWpfV7DlHoByKhWosPylmBSi0HS81yfHQURlIWjYA 6ZgDNETai9gjDggwb3Fpj5u2yoGlplPRVWtaMw0S5PWKWkL8n+uSBtHZUyxqE1Dj I2/7wvKYugd+v7UfaeL5ZdeONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC7I7dg l7AylPBVwoJk5IqiJtBKMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASLEwpeR57ux84vYaawDDcI1CC+xZTGihYT+yICnvb+xxY47NhgLqA MO9xgi3I01aG3p5dCb2sQEa4mZi4olMmjmfT1YB3ls0f6yJzpFaYp3fI1xpbyLM2 XZFnhzp0D1qOGBxDWIOz5TR+ODtYwrW05wdZVSGFtqWlzZOTL3eujpH6aJOtCBPf c01kfu107HRSM54ZML/we79eShnE8I/Ob20ihiuvqu8IwPgLvxszzTzc0pJduBc4 BM/hJQYhjtL/rShjjUTKUwxbVHv3XKMPkO+8r2dj7uOv1I+w8VMLqPwhmFndOUjw ko8zw5VXOxVzXGUxzGzJLa4o0qZ5ZfTT -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:07 2024 by rpki-client on console-ams.rpki-client.org