$ rpki-client -vvf rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.mft File: CcMqtUuEo5tXwU1hvGOVMOe1vRw.mft (raw, json) Hash identifier: jAWJO4qtKtzXs8RGWKz1EgQVN7PD/xWwc35GeRw607M= Subject key identifier: C0:BA:77:40:10:DA:37:B3:4E:08:B7:8B:BA:4C:C2:FC:9B:44:72:6D Authority key identifier: 09:C3:2A:B5:4B:84:A3:9B:57:C1:4D:61:BC:63:95:30:E7:B5:BD:1C Certificate issuer: /CN=A91D49BC/serialNumber=09C32AB54B84A39B57C14D61BC639530E7B5BD1C Certificate serial: 0F6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcMqtUuEo5tXwU1hvGOVMOe1vRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.mft Manifest number: 0F67 Signing time: Thu 02 May 2024 18:13:52 +0000 Manifest this update: Thu 02 May 2024 18:13:51 +0000 Manifest next update: Thu 09 May 2024 18:13:51 +0000 Files and hashes: 1: CcMqtUuEo5tXwU1hvGOVMOe1vRw.crl (hash: 71z8B9QFT68oMuac7WiNYa/ZajSOXZc4UXTxNXuoifI=) 2: 07A0E9283F1211E9A1B8771AC4F9AE02.roa (hash: YL+yiwTAzbDDI+B5xygyw/iTywypV0xv3d0hvl5twuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.crl rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcMqtUuEo5tXwU1hvGOVMOe1vRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3951 (0xf6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D49BC/serialNumber=09C32AB54B84A39B57C14D61BC639530E7B5BD1C Validity Not Before: May 2 18:13:51 2024 GMT Not After : May 9 18:13:51 2024 GMT Subject: CN=6633d7e0-5453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:34:6e:3c:9f:ab:6a:04:33:dd:c2:ab:7c: 23:3d:3d:e9:26:75:2d:6a:04:97:af:e6:ae:47:b5: 5f:6f:53:09:2d:7c:eb:6b:06:e4:7f:47:26:2f:e1: e4:67:71:9a:c2:bb:af:4c:01:89:2e:e5:90:56:dd: dc:3f:f6:ef:f3:45:e4:87:85:60:5c:b9:8c:3f:14: 9b:17:2e:28:5b:b1:32:8c:3e:eb:b1:ea:83:73:eb: 68:d9:b3:18:c3:81:69:89:88:9c:31:1e:6d:53:ef: 0d:39:65:7f:63:64:82:61:de:53:cd:8e:31:6c:3e: 29:8f:5d:9d:c7:94:8a:14:76:89:40:f8:6c:7e:0e: a7:04:df:a1:91:e6:17:0d:77:fa:67:d9:99:b6:a2: 48:53:21:6b:b4:cf:48:36:59:42:7b:78:be:4e:9c: f0:3d:29:8c:ac:ad:0a:ba:57:a9:45:45:84:a0:e2: 28:36:2a:df:35:69:6c:ba:62:6d:b9:a7:c9:3b:19: 7e:d5:dd:21:6f:35:3c:d5:6b:e5:bb:2f:78:42:ad: 5b:b2:0a:1a:57:f9:23:ed:9c:86:c7:78:fb:51:a9: ad:45:8f:21:00:a7:0f:5b:3b:ea:75:98:06:ca:9f: 9b:e9:28:3c:46:0b:1a:9e:42:4b:90:a4:a1:dc:9d: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BA:77:40:10:DA:37:B3:4E:08:B7:8B:BA:4C:C2:FC:9B:44:72:6D X509v3 Authority Key Identifier: keyid:09:C3:2A:B5:4B:84:A3:9B:57:C1:4D:61:BC:63:95:30:E7:B5:BD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcMqtUuEo5tXwU1hvGOVMOe1vRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:10:5f:5c:78:1d:b9:8c:4d:f1:cc:27:b2:82:d6:f0:a2:8f: 72:e3:da:7f:3d:d5:49:bc:17:38:55:76:e2:7a:54:b4:50:0b: 4c:ea:92:a4:24:5e:33:29:75:84:9a:4c:55:f7:ab:f5:bc:4f: cd:e4:2c:dc:49:00:84:bb:63:86:0b:07:d9:e5:c5:96:7d:43: 77:07:72:e3:f7:ef:1f:6a:9a:97:3a:63:b2:cc:9f:b6:7c:d9: 7c:79:28:cc:9d:56:a0:23:1c:89:bc:ea:a5:3b:1a:81:1d:8e: 2d:45:e7:00:d5:f0:57:3f:43:11:c8:eb:5c:27:1e:54:22:9f: 25:7d:b8:a3:75:69:9d:e5:03:cc:90:41:e1:ed:d1:df:ee:2e: ad:f6:98:57:c9:e5:26:68:3b:79:14:20:be:ec:4d:d4:65:e6: 2c:54:c7:b0:99:5c:3d:14:bc:2c:88:29:0e:21:17:29:b4:b1: 70:4e:c9:ed:4f:e2:fc:de:e0:f5:cd:08:73:26:b0:8e:8f:c2: 89:e8:2a:fb:50:29:ee:f3:3b:58:de:95:ab:51:06:bd:a3:c0: f6:cb:9a:e3:af:9f:b9:9e:56:bc:da:e9:5f:71:3d:5f:40:32: b3:bb:f9:37:9b:d8:02:71:59:8b:45:5e:5f:6a:cc:9c:67:93: 7c:6b:4d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ5QkMxMTAvBgNVBAUTKDA5QzMyQUI1NEI4NEEzOUI1N0MxNEQ2MUJDNjM5NTMw RTdCNUJEMUMwHhcNMjQwNTAyMTgxMzUxWhcNMjQwNTA5MTgxMzUxWjAYMRYwFAYD VQQDEw02NjMzZDdlMC01NDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26M0bjyfq2oEM93Cq3wjPT3pJnUtagSXr+auR7Vfb1MJLXzrawbkf0cmL+Hk Z3GawruvTAGJLuWQVt3cP/bv80Xkh4VgXLmMPxSbFy4oW7EyjD7rseqDc+to2bMY w4FpiYicMR5tU+8NOWV/Y2SCYd5TzY4xbD4pj12dx5SKFHaJQPhsfg6nBN+hkeYX DXf6Z9mZtqJIUyFrtM9INllCe3i+TpzwPSmMrK0KulepRUWEoOIoNirfNWlsumJt uafJOxl+1d0hbzU81Wvluy94Qq1bsgoaV/kj7ZyGx3j7UamtRY8hAKcPWzvqdZgG yp+b6Sg8RgsankJLkKSh3J2rSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC6d0AQ 2jezTgi3i7pMwvybRHJtMB8GA1UdIwQYMBaAFAnDKrVLhKObV8FNYbxjlTDntb0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDlCQy84N0Y1RTE2NjNG MTAxMUU5ODExMjYwMThDNEY5QUUwMi9DY01xdFV1RW81dFh3VTFodkdPVk1PZTF2 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTXF0VXVFbzV0WHdVMWh2R09WTU9lMXZSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDlCQy84N0Y1RTE2NjNGMTAxMUU5ODExMjYwMThDNEY5QUUwMi9DY01xdFV1RW81 dFh3VTFodkdPVk1PZTF2UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFEF9ceB25jE3xzCeygtbwoo9y49p/PdVJvBc4VXbielS0UAtM6pKk JF4zKXWEmkxV96v1vE/N5CzcSQCEu2OGCwfZ5cWWfUN3B3Lj9+8fapqXOmOyzJ+2 fNl8eSjMnVagIxyJvOqlOxqBHY4tRecA1fBXP0MRyOtcJx5UIp8lfbijdWmd5QPM kEHh7dHf7i6t9phXyeUmaDt5FCC+7E3UZeYsVMewmVw9FLwsiCkOIRcptLFwTsnt T+L83uD1zQhzJrCOj8KJ6Cr7UCnu8ztY3pWrUQa9o8D2y5rjr5+5nla82ulfcT1f QDKzu/k3m9gCcVmLRV5fasycZ5N8a00f -----END CERTIFICATE-----Generated at Thu May 2 20:50:37 2024 by rpki-client on console-fra.rpki-client.org