$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: SPlG0nnHUMiIJpluMBkmINlBSzfPM0L5hqhUoi4BIEA= Subject key identifier: C0:80:8F:E7:FB:61:66:EA:41:01:48:05:E8:F1:14:B3:AC:25:9C:F7 Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 0140 Signing time: Fri 03 May 2024 05:04:19 +0000 Manifest this update: Fri 03 May 2024 05:04:19 +0000 Manifest next update: Fri 10 May 2024 05:04:19 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: EDVxLN6hriIDyT6+b4Uje+Nyfn8di9CrYEGdWJHHMyk=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: cTS7M1Wjy1ClELn766job4sxPlpHZcmp+6g0yRtK3x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: May 3 05:04:19 2024 GMT Not After : May 10 05:04:19 2024 GMT Subject: CN=66347053-c822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:41:1a:02:d6:aa:97:49:12:21:aa:7b:f1: 3f:ad:29:e9:56:37:0d:a5:05:fb:0c:41:fc:c5:0e: 59:80:1e:6f:bd:6b:c6:0a:54:09:42:74:4d:32:b3: 68:8a:0f:51:66:e9:8f:de:c4:5b:8a:34:28:a1:1a: 67:7f:6d:11:b2:42:6c:a4:9c:0b:2d:7d:32:7c:b5: 1b:af:a8:c1:38:ac:92:57:81:76:63:20:15:9b:78: bf:02:3f:5e:bc:10:c4:5f:7c:9a:16:84:92:87:32: 2b:ea:1b:35:0a:d4:a2:31:f9:ed:a3:d4:8a:4c:5d: 2f:9b:98:f9:98:5f:06:59:36:3d:67:66:52:c9:21: 22:24:a1:fa:64:ee:77:ee:cd:94:41:94:f4:46:1c: 99:e8:38:fd:a4:b1:a8:1a:da:4a:24:d9:25:b5:2e: 4c:75:13:d4:e1:9b:5b:71:d6:b7:d3:7e:20:1d:18: 66:b7:11:a5:37:10:fb:da:57:bd:64:4a:8a:c9:fb: c9:bf:b3:c3:07:ec:bb:36:cc:2f:12:e8:fe:74:1b: 5b:eb:57:69:c4:f1:37:01:7c:33:b1:05:ee:25:05: a8:e6:49:60:17:35:7b:b5:3b:2a:36:c1:80:6b:12: 89:b2:d5:e0:7d:fa:e2:ce:ee:64:62:4c:30:30:67: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:80:8F:E7:FB:61:66:EA:41:01:48:05:E8:F1:14:B3:AC:25:9C:F7 X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:15:9a:0f:1c:e4:d1:65:45:07:33:b8:0e:f3:fd:29:8a:9a: 41:bd:39:36:93:55:92:f2:d9:08:ae:81:e4:df:74:5c:06:96: 60:ab:5e:23:3b:61:78:c8:d0:f2:60:60:2e:d7:c8:29:24:91: 9e:6b:53:80:48:28:5c:70:d4:00:c4:d0:e0:18:c4:40:04:f4: f2:05:b4:52:b4:b2:2a:d8:4d:d4:f4:81:09:e5:ac:9c:3a:11: ff:d2:d8:af:08:d2:44:57:4b:91:58:f0:c0:e0:6f:e9:4b:cd: ca:13:1d:ec:4c:f4:6f:30:97:e3:bf:93:8b:0c:10:30:7e:11: c2:02:cf:91:4c:9a:2c:b2:54:59:c5:4d:05:c4:0e:25:13:3a: 3b:d0:95:17:98:2d:9a:ba:e7:df:e5:35:20:34:7c:d4:9d:a8: 12:b7:f3:cb:08:47:6c:35:b0:16:d9:40:d1:e9:1d:79:12:e9: fc:68:9a:6d:f9:df:8a:6b:22:aa:f5:0f:d3:f0:b9:76:0c:6b: e6:30:7c:37:f8:79:2c:f8:93:bd:2c:6f:37:a7:b7:2c:9d:92: bd:36:69:76:25:fd:87:13:9a:09:ed:d0:d7:74:17:b3:28:1b: cc:86:42:c6:05:7f:fb:b9:52:31:ff:6f:d9:ef:6b:dc:74:19: 31:26:f7:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjQwNTAzMDUwNDE5WhcNMjQwNTEwMDUwNDE5WjAYMRYwFAYD VQQDEw02NjM0NzA1My1jODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQBBGgLWqpdJEiGqe/E/rSnpVjcNpQX7DEH8xQ5ZgB5vvWvGClQJQnRNMrNo ig9RZumP3sRbijQooRpnf20RskJspJwLLX0yfLUbr6jBOKySV4F2YyAVm3i/Aj9e vBDEX3yaFoSShzIr6hs1CtSiMfnto9SKTF0vm5j5mF8GWTY9Z2ZSySEiJKH6ZO53 7s2UQZT0RhyZ6Dj9pLGoGtpKJNkltS5MdRPU4Ztbcda3034gHRhmtxGlNxD72le9 ZEqKyfvJv7PDB+y7NswvEuj+dBtb61dpxPE3AXwzsQXuJQWo5klgFzV7tTsqNsGA axKJstXgffrizu5kYkwwMGdPJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCAj+f7 YWbqQQFIBejxFLOsJZz3MB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEFZoPHOTRZUUHM7gO8/0pippBvTk2k1WS8tkIroHk33RcBpZgq14j O2F4yNDyYGAu18gpJJGea1OASChccNQAxNDgGMRABPTyBbRStLIq2E3U9IEJ5ayc OhH/0tivCNJEV0uRWPDA4G/pS83KEx3sTPRvMJfjv5OLDBAwfhHCAs+RTJosslRZ xU0FxA4lEzo70JUXmC2auuff5TUgNHzUnagSt/PLCEdsNbAW2UDR6R15Eun8aJpt +d+KayKq9Q/T8Ll2DGvmMHw3+Hks+JO9LG83p7csnZK9Nml2Jf2HE5oJ7dDXdBez KBvMhkLGBX/7uVIx/2/Z72vcdBkxJvcF -----END CERTIFICATE-----Generated at Fri May 3 06:29:24 2024 by rpki-client on console-fra.rpki-client.org