$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft File: MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json) Hash identifier: p84MsOhG5zSBa+Jns4NX+x+f6GUosJnKRVe0a9kk5jA= Subject key identifier: AC:44:03:59:1C:CE:B6:EB:23:0B:55:4A:74:8E:DA:D7:74:66:CD:C8 Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft Manifest number: 029E Signing time: Sun 05 May 2024 03:44:46 +0000 Manifest this update: Sun 05 May 2024 03:44:46 +0000 Manifest next update: Sun 12 May 2024 03:44:45 +0000 Files and hashes: 1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: bOKXtb+vE3OGg5OvRypUpnz4zyWtdaKQO3V662zAw/A=) 2: A21435C410EB11ED9C882A38C4F9AE02.roa (hash: 5EF0iAN9JRHhE6nWZ8EPIuzzwX38JNzCJ2F94kB78lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Validity Not Before: May 5 03:44:46 2024 GMT Not After : May 12 03:44:45 2024 GMT Subject: CN=663700ae-3e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:9d:41:b4:3a:d5:9f:89:c9:d3:b6:48:14: d7:b7:7f:a4:ba:65:68:01:b0:c2:2e:38:a6:4d:58: 19:a3:da:c7:cb:a9:9f:0b:e4:41:64:4c:ad:25:c2: cc:b4:3e:66:08:54:91:a3:d0:cb:45:79:4d:3c:2a: b7:5c:cc:94:7e:1e:55:aa:24:59:27:c3:5a:04:c2: eb:82:e9:0a:53:73:78:e6:06:64:76:8d:ee:41:2c: fb:7c:68:d6:85:fe:ff:4e:3b:fc:0d:82:88:03:1c: 47:66:36:a4:f2:00:5b:52:6a:c3:de:65:dd:3b:cf: dd:b9:82:64:fa:1d:5e:eb:fe:f7:d4:1c:ae:21:97: 2d:2d:61:07:c9:bd:9e:ef:a2:3f:82:8d:52:a9:49: 66:82:0a:20:d3:07:ef:68:56:d4:5e:0b:78:78:87: e0:7c:b7:68:98:31:e3:37:8c:ae:f7:26:8e:3e:a0: 14:b5:ab:3e:e6:71:89:86:1e:04:a0:3e:a9:06:f1: f2:eb:08:ec:7c:62:e9:94:12:28:d4:32:9d:ce:48: aa:58:e0:b1:51:4f:9d:cd:a6:0d:e0:97:7e:66:ce: 47:f1:64:3f:69:71:87:83:d3:48:42:fa:b0:e4:c7: 93:73:c5:9c:86:40:95:e0:7b:20:27:02:03:d1:41: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:44:03:59:1C:CE:B6:EB:23:0B:55:4A:74:8E:DA:D7:74:66:CD:C8 X509v3 Authority Key Identifier: keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:06:f4:b0:75:86:2d:2d:ce:1b:3b:61:bd:18:14:78:e4:f3: 26:19:2a:0a:a3:ec:06:2c:de:39:98:d4:01:1b:39:8f:28:c8: 9e:2d:46:76:b2:53:40:21:ff:c3:55:ff:17:a9:a8:59:1a:15: 12:71:08:b4:42:15:af:f7:88:1f:82:f2:25:75:2c:e9:18:e6: 8f:f5:2e:0b:35:e0:6f:81:93:fd:d2:3c:f8:98:d2:4d:c5:4e: e9:da:0c:58:56:dd:5e:75:ac:f7:93:6d:a0:6e:a8:ab:5d:cd: 01:0a:ae:b5:70:aa:b7:a9:38:d7:74:13:58:c6:a1:e1:37:31: ff:dc:1b:98:75:76:d1:e7:94:52:f4:50:cb:3e:03:6a:d4:f5: b3:96:2d:70:63:61:e6:27:4e:22:44:9b:7d:50:0c:70:c2:03: b4:73:b9:21:c0:06:2d:83:62:c9:7e:00:27:4f:b4:c0:f7:c6: 9d:f3:2f:58:51:7a:7a:29:f8:4d:21:33:f8:e3:e3:02:38:db: 3d:9c:13:54:70:fe:7c:ee:64:a7:5e:3d:0f:53:02:77:fd:26: e9:d8:73:5d:49:28:05:74:f2:29:54:f5:ec:5f:f3:a5:e0:11: 7d:5e:a2:ac:2a:38:a5:76:78:a0:2f:8d:1d:c2:7d:09:6c:a6: 43:ff:0a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3 QUJGOTdERTMwHhcNMjQwNTA1MDM0NDQ2WhcNMjQwNTEyMDM0NDQ1WjAYMRYwFAYD VQQDEw02NjM3MDBhZS0zZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0+dQbQ61Z+JydO2SBTXt3+kumVoAbDCLjimTVgZo9rHy6mfC+RBZEytJcLM tD5mCFSRo9DLRXlNPCq3XMyUfh5VqiRZJ8NaBMLrgukKU3N45gZkdo3uQSz7fGjW hf7/Tjv8DYKIAxxHZjak8gBbUmrD3mXdO8/duYJk+h1e6/731ByuIZctLWEHyb2e 76I/go1SqUlmggog0wfvaFbUXgt4eIfgfLdomDHjN4yu9yaOPqAUtas+5nGJhh4E oD6pBvHy6wjsfGLplBIo1DKdzkiqWOCxUU+dzaYN4Jd+Zs5H8WQ/aXGHg9NIQvqw 5MeTc8WchkCV4HsgJwID0UF7uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxEA1kc zrbrIwtVSnSO2td0Zs3IMB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc3MS81NUYyRjBGRUIxN0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1Vy cXNPemdhdWt6RE42djVmZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkBvSwdYYtLc4bO2G9GBR45PMmGSoKo+wGLN45mNQBGzmPKMieLUZ2 slNAIf/DVf8XqahZGhUScQi0QhWv94gfgvIldSzpGOaP9S4LNeBvgZP90jz4mNJN xU7p2gxYVt1edaz3k22gbqirXc0BCq61cKq3qTjXdBNYxqHhNzH/3BuYdXbR55RS 9FDLPgNq1PWzli1wY2HmJ04iRJt9UAxwwgO0c7khwAYtg2LJfgAnT7TA98ad8y9Y UXp6KfhNITP44+MCONs9nBNUcP587mSnXj0PUwJ3/Sbp2HNdSSgFdPIpVPXsX/Ol 4BF9XqKsKjildnigL40dwn0JbKZD/wqv -----END CERTIFICATE-----Generated at Sun May 5 04:40:01 2024 by rpki-client on console-ams.rpki-client.org