$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: en8ZLx6EYX9IoneS8eTYUBTLK41jQaL1kvDgIooctcY= Subject key identifier: BB:CD:2C:B7:26:34:6C:CB:D2:AC:A1:F1:3E:34:0A:7F:75:F3:9D:05 Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 03B5 Signing time: Sun 05 May 2024 02:37:30 +0000 Manifest this update: Sun 05 May 2024 02:37:29 +0000 Manifest next update: Sun 12 May 2024 02:37:29 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: m61Kqu8RWRzNA4KEBLCnUoGLul4Av2mR45tL1WZ/knw=) 2: D061270A9C5111EEB28AC931C4F9AE02.roa (hash: 8Xa/VwyU4s9nAISVSMWl7RHJ83XTMNtNTrp4qhGQTeQ=) 3: 920570C69B3711EEB43EFD3BC4F9AE02.roa (hash: Xz1iVZgdXYaRYkwacJw220rRWcAV4lYe4PDqq9waBwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: May 5 02:37:29 2024 GMT Not After : May 12 02:37:29 2024 GMT Subject: CN=6636f0e9-f065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:dd:b8:fa:27:62:7a:78:5a:e9:f0:ef:83: 79:ff:f2:ba:30:7d:c8:06:1c:e7:6a:db:fd:b0:63: 4a:b4:7b:ed:05:31:61:c9:65:8b:c7:04:8c:64:39: e2:7d:09:77:c2:d3:69:e7:30:89:bc:3e:17:41:9e: af:16:06:4e:37:15:8e:1d:9f:bf:96:49:02:f4:51: cd:d7:97:a2:9d:8c:da:e6:d4:5d:97:44:e7:7a:9c: f9:20:06:c0:dc:fa:f7:95:54:b0:cb:97:9f:30:d7: 5f:18:07:87:1b:c7:7c:48:ec:59:99:f8:cc:53:e8: 93:23:05:f0:ae:db:e3:13:6d:48:de:40:b0:3e:0d: 73:0f:53:0b:4f:c4:ec:2d:02:e8:29:05:80:63:3b: 83:75:37:29:9f:24:35:8c:7c:2c:19:9f:1f:ac:10: 33:37:9f:6e:26:1d:67:43:01:e5:5d:bd:e0:c7:d2: b2:01:0e:0a:d1:53:50:d2:fb:d9:e5:ab:df:34:c0: 27:c1:75:30:11:15:60:25:71:83:95:dc:30:21:ed: 66:9f:d0:cf:fb:89:26:7d:03:b3:9b:a1:44:90:2a: d6:d2:e7:26:4b:be:ce:0d:3a:c5:f3:96:30:b9:98: fc:10:c0:8d:5b:83:67:40:29:93:e6:e4:c3:6f:cf: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CD:2C:B7:26:34:6C:CB:D2:AC:A1:F1:3E:34:0A:7F:75:F3:9D:05 X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:02:ef:8b:6b:c4:d8:55:74:cd:62:2a:b8:55:8c:01:7a:02: 56:52:4b:c3:2b:89:e6:79:f3:a5:90:03:8b:74:31:3a:20:2f: 55:5e:4d:79:4e:cb:21:c0:90:34:0c:8d:23:63:5c:56:9c:09: 19:8e:7a:b0:47:27:20:33:1c:16:8f:09:1a:00:03:a1:eb:d2: df:5d:7f:4f:98:21:d5:97:fc:7b:0b:3c:d0:14:cc:86:a1:d0: 70:97:a3:9a:01:d2:53:3b:ed:67:d2:97:c2:2b:81:fa:b7:b4: 58:39:23:23:8a:72:02:12:a5:75:a6:bc:0b:36:8a:a2:06:d5: 87:98:ae:31:2d:95:64:92:df:f4:a7:fd:36:cb:d5:39:bb:cf: 70:76:04:42:ef:b9:09:3b:49:7e:37:ec:b9:2d:0d:54:47:ba: 02:2f:f0:27:c3:ef:da:2c:a8:56:46:d2:ec:a8:10:bb:79:4c: c4:f8:a5:db:1c:51:d2:18:05:23:57:f6:06:c4:27:b5:4e:60: 5a:98:0f:c8:27:84:1a:47:fe:78:e6:1d:54:90:f2:da:55:e8: 5b:8d:1c:42:e6:b9:86:83:75:d9:f2:c4:2d:7e:e1:fd:fa:20: a2:05:27:62:98:62:05:62:f3:df:63:88:cd:8d:fb:db:10:81: 68:94:7f:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjQwNTA1MDIzNzI5WhcNMjQwNTEyMDIzNzI5WjAYMRYwFAYD VQQDEw02NjM2ZjBlOS1mMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/nduPonYnp4Wunw74N5//K6MH3IBhznatv9sGNKtHvtBTFhyWWLxwSMZDni fQl3wtNp5zCJvD4XQZ6vFgZONxWOHZ+/lkkC9FHN15einYza5tRdl0Tnepz5IAbA 3Pr3lVSwy5efMNdfGAeHG8d8SOxZmfjMU+iTIwXwrtvjE21I3kCwPg1zD1MLT8Ts LQLoKQWAYzuDdTcpnyQ1jHwsGZ8frBAzN59uJh1nQwHlXb3gx9KyAQ4K0VNQ0vvZ 5avfNMAnwXUwERVgJXGDldwwIe1mn9DP+4kmfQOzm6FEkCrW0ucmS77ODTrF85Yw uZj8EMCNW4NnQCmT5uTDb8/iFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvNLLcm NGzL0qyh8T40Cn91850FMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgAu+La8TYVXTNYiq4VYwBegJWUkvDK4nmefOlkAOLdDE6IC9VXk15 TsshwJA0DI0jY1xWnAkZjnqwRycgMxwWjwkaAAOh69LfXX9PmCHVl/x7CzzQFMyG odBwl6OaAdJTO+1n0pfCK4H6t7RYOSMjinICEqV1prwLNoqiBtWHmK4xLZVkkt/0 p/02y9U5u89wdgRC77kJO0l+N+y5LQ1UR7oCL/Anw+/aLKhWRtLsqBC7eUzE+KXb HFHSGAUjV/YGxCe1TmBamA/IJ4QaR/545h1UkPLaVehbjRxC5rmGg3XZ8sQtfuH9 +iCiBSdimGIFYvPfY4jNjfvbEIFolH9L -----END CERTIFICATE-----Generated at Sun May 5 03:09:57 2024 by rpki-client on console-ams.rpki-client.org