$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: R7XbjIUVXxtmWMQjZSKlcahFUOychvKQhcKBJRUXZtg= Subject key identifier: E4:2A:36:2B:7F:B6:1C:2F:E6:FB:FE:D1:38:9B:5D:EB:09:57:C6:89 Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 1846 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 183D Signing time: Thu 02 May 2024 16:59:06 +0000 Manifest this update: Thu 02 May 2024 16:59:06 +0000 Manifest next update: Thu 09 May 2024 16:59:06 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: zDtCkt+2AjtyTgdb/wD+u6RPNnpCWrIBgAYHMlcc1H0=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: JiV9mLYeWZvcL2vahqcJlLwXx2ErSbCIwbymjkbUaQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6214 (0x1846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: May 2 16:59:06 2024 GMT Not After : May 9 16:59:06 2024 GMT Subject: CN=6633c65a-a6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:d1:ee:12:a4:6c:55:f1:6a:a9:a0:66:ef: 82:b6:30:12:b9:e3:05:3d:21:27:f1:91:3a:ad:94: 6d:f4:f4:51:4d:06:fe:51:1b:f2:fe:ea:3d:99:91: 75:40:a8:7c:cf:2a:97:d9:86:68:b4:7d:b1:5e:ec: 61:45:69:83:89:ef:cb:02:d3:ec:50:64:12:2b:8d: 4e:94:32:b0:f9:f8:43:53:d2:fc:3b:dc:e5:a0:fe: ed:1b:11:b0:b4:09:8c:96:d8:cd:06:ec:dd:5e:a3: 86:92:fc:ba:c0:55:ef:f0:62:31:1d:43:28:44:cd: 01:eb:22:ce:e0:7b:3e:77:be:55:a1:92:23:f7:9e: 6f:c0:59:56:83:37:e1:f1:38:b0:17:60:90:f4:7b: 99:b1:41:70:23:5b:55:04:ad:93:4d:18:11:ca:1f: bf:8f:a1:c9:58:ad:fa:fc:13:04:a4:53:d7:b7:1f: 6e:30:e0:3b:c3:91:25:e7:0e:cb:e6:1a:09:7f:07: 28:39:5d:50:35:7e:12:50:50:36:c4:82:ff:05:c6: dd:de:ff:c7:a2:ff:c8:97:df:f2:98:eb:b2:86:e3: 41:09:40:90:bc:6e:a3:5e:34:cd:f6:34:1b:41:ed: 79:4d:04:23:df:08:b7:68:50:ae:2f:11:d1:de:89: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2A:36:2B:7F:B6:1C:2F:E6:FB:FE:D1:38:9B:5D:EB:09:57:C6:89 X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:43:8a:7b:02:b1:3f:b3:15:0d:75:19:d6:f8:74:ef:71:ab: 0a:b1:b4:0b:16:78:98:5e:14:27:58:c0:f1:3f:72:d4:25:8a: 62:27:e1:69:2b:a6:69:66:e5:06:af:43:fe:c3:bb:7c:38:fd: 52:79:b9:f7:88:80:17:c2:6c:a3:33:55:80:31:7f:25:33:7b: 25:02:d9:e7:b8:8d:82:b4:88:5c:d4:7a:9c:e9:a7:03:3d:11: c9:5e:d3:5f:fc:b9:8c:80:f9:f0:d1:42:fe:93:b8:bc:b3:c9: 26:ae:fc:50:c2:fe:55:9d:b1:39:86:54:14:0a:43:34:ac:ad: d6:c2:f1:44:2a:dd:a8:cc:1b:a0:38:ff:4c:ec:4b:da:d0:13: 3f:40:33:d1:44:f8:5d:dc:ca:fb:ec:de:82:ae:18:62:0e:13: 33:e8:3d:20:25:23:00:df:de:cf:44:51:5c:97:ea:8e:f3:2b: 46:cb:6d:e9:59:54:ea:a5:72:93:54:78:a0:ce:ec:1c:52:21: 5f:fc:78:1e:48:b9:a5:e5:05:c8:95:7a:55:2a:ad:ba:7a:84: 7f:bc:15:37:39:ad:db:38:01:c2:19:9d:ab:07:80:a1:c7:7a: e3:a5:c2:cc:a1:c0:7f:c9:68:d5:ac:2a:62:10:8a:f8:6e:77: c0:0f:8e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjQwNTAyMTY1OTA2WhcNMjQwNTA5MTY1OTA2WjAYMRYwFAYD VQQDEw02NjMzYzY1YS1hNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IjR7hKkbFXxaqmgZu+CtjASueMFPSEn8ZE6rZRt9PRRTQb+URvy/uo9mZF1 QKh8zyqX2YZotH2xXuxhRWmDie/LAtPsUGQSK41OlDKw+fhDU9L8O9zloP7tGxGw tAmMltjNBuzdXqOGkvy6wFXv8GIxHUMoRM0B6yLO4Hs+d75VoZIj955vwFlWgzfh 8TiwF2CQ9HuZsUFwI1tVBK2TTRgRyh+/j6HJWK36/BMEpFPXtx9uMOA7w5El5w7L 5hoJfwcoOV1QNX4SUFA2xIL/Bcbd3v/Hov/Il9/ymOuyhuNBCUCQvG6jXjTN9jQb Qe15TQQj3wi3aFCuLxHR3oliTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQqNit/ thwv5vv+0TibXesJV8aJMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Q4p7ArE/sxUNdRnW+HTvcasKsbQLFniYXhQnWMDxP3LUJYpiJ+Fp K6ZpZuUGr0P+w7t8OP1Sebn3iIAXwmyjM1WAMX8lM3slAtnnuI2CtIhc1Hqc6acD PRHJXtNf/LmMgPnw0UL+k7i8s8kmrvxQwv5VnbE5hlQUCkM0rK3WwvFEKt2ozBug OP9M7Eva0BM/QDPRRPhd3Mr77N6CrhhiDhMz6D0gJSMA397PRFFcl+qO8ytGy23p WVTqpXKTVHigzuwcUiFf/HgeSLml5QXIlXpVKq26eoR/vBU3Oa3bOAHCGZ2rB4Ch x3rjpcLMocB/yWjVrCpiEIr4bnfAD463 -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org