$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json) Hash identifier: PnKmexDsYNhVpF6Vculabe6g70ixmWlNF2bjLrI3WTI= Subject key identifier: F0:52:B2:DD:37:9D:E1:B3:CF:1E:82:8B:B0:D5:EE:57:EC:D1:CB:B4 Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft Manifest number: 05AD Signing time: Sun 05 May 2024 00:22:51 +0000 Manifest this update: Sun 05 May 2024 00:22:50 +0000 Manifest next update: Sun 12 May 2024 00:22:50 +0000 Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: XE1kbjh8clFICQ+x1HpcqZOLyULImi0AGON/Bs2bGeM=) 2: 8197D3007ABA11EBBB87DE59C4F9AE02.roa (hash: sjsAbrQZyhQPywQaRF4eXaLe/mDToFMYM/ZTjPsGVhM=) 3: 204B342ECEF111ED9D71580AC4F9AE02.roa (hash: GCFWHH3ZIGeHMDZKkLbSVzgFKzs6HSAW8HBAGzMnYm4=) 4: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: crKetBPw2QbyXxfnCHVX+ZtxC09OD/027xR0uYCQJrY=) 5: 4D692DF6259C11EE98270417C4F9AE02.roa (hash: YJq/SaQsBjLQ6rVR1eTKBsf8kleKyIyI7xbhaJy8QYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Validity Not Before: May 5 00:22:50 2024 GMT Not After : May 12 00:22:50 2024 GMT Subject: CN=6636d15b-1236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:05:89:17:84:6c:94:ce:42:35:c8:2f:90: 04:cd:c8:0a:e8:52:19:7f:37:85:79:f3:03:e1:e6: 2c:3d:34:c7:43:62:8e:75:13:01:44:2b:6a:f1:bc: 70:fe:69:4d:b1:55:58:56:02:37:f7:99:62:a0:2f: 09:f7:ad:5d:d6:86:7b:c2:fc:86:f3:02:c2:fe:b7: ed:cb:5f:70:3c:46:5f:2d:75:e9:61:d5:fa:cf:48: 9a:28:7c:e1:48:d3:23:8e:e4:85:3d:1c:7d:e8:61: 96:56:7a:24:a6:53:d0:74:66:b2:2c:dd:ef:d1:b4: 58:4e:21:17:94:e8:f8:8f:0b:da:8d:6a:7f:64:28: 3e:61:c9:09:26:0d:20:33:dc:30:ce:c0:3e:a4:b9: f2:75:da:c9:ee:a5:a0:f7:a6:51:cb:fd:98:df:c9: f4:e7:83:05:8a:bc:34:84:f5:21:aa:00:34:89:7e: 6b:f2:cd:64:c8:2b:b3:87:21:f3:87:56:00:37:b3: 0b:e7:5b:30:05:2b:fd:94:66:54:53:10:ee:f2:46: aa:e8:fa:59:39:41:84:6c:fa:55:f8:a0:20:c2:90: 5a:50:7e:f3:46:ae:99:97:d1:a0:62:7d:89:9c:49: b8:68:be:fa:14:97:72:1c:7d:f6:af:58:2e:37:b5: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:52:B2:DD:37:9D:E1:B3:CF:1E:82:8B:B0:D5:EE:57:EC:D1:CB:B4 X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:94:b5:c1:8a:6e:48:9d:f4:f0:23:56:0e:96:ad:a2:2d:5c: fe:97:be:1a:fc:15:2a:35:5b:51:09:22:71:1f:3a:40:48:e2: dc:f6:46:b9:6b:21:71:31:33:69:bf:74:1c:60:04:ff:af:ac: 8f:d8:74:15:e3:ae:d5:3d:b7:2e:58:be:14:2a:97:80:0a:7e: d9:58:d2:56:16:1b:28:9c:82:3d:63:b8:eb:02:bf:28:f8:3e: ef:9d:e5:3e:7d:07:09:0c:28:b8:a9:7a:21:42:a8:1d:1c:5f: df:1c:d0:44:85:a5:bb:d9:d5:9c:a3:d4:c8:9c:41:23:3a:5e: 7e:06:76:7e:22:c8:08:04:f5:9e:4b:38:e1:bc:72:b6:80:7e: 14:65:50:8e:84:72:d3:ae:19:b6:25:31:b0:2e:4c:94:31:8b: a8:f7:d4:5e:4e:9e:6a:b1:2b:3a:fd:ff:a9:76:c6:cd:2f:05: ad:14:45:fd:18:7e:f1:fe:27:9b:30:8a:ed:48:ac:7c:0e:db: 9a:2e:e9:58:19:80:a7:9b:87:60:f4:56:10:32:81:4f:69:fd: 85:ae:5e:21:b7:e5:4b:bc:4f:71:b4:bf:50:6f:3d:73:d9:05: 7d:51:8b:1a:65:6c:5c:f4:6d:13:21:84:49:00:42:6d:fa:41: 25:ef:6b:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjQwNTA1MDAyMjUwWhcNMjQwNTEyMDAyMjUwWjAYMRYwFAYD VQQDEw02NjM2ZDE1Yi0xMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsQFiReEbJTOQjXIL5AEzcgK6FIZfzeFefMD4eYsPTTHQ2KOdRMBRCtq8bxw /mlNsVVYVgI395lioC8J961d1oZ7wvyG8wLC/rfty19wPEZfLXXpYdX6z0iaKHzh SNMjjuSFPRx96GGWVnokplPQdGayLN3v0bRYTiEXlOj4jwvajWp/ZCg+YckJJg0g M9wwzsA+pLnyddrJ7qWg96ZRy/2Y38n054MFirw0hPUhqgA0iX5r8s1kyCuzhyHz h1YAN7ML51swBSv9lGZUUxDu8kaq6PpZOUGEbPpV+KAgwpBaUH7zRq6Zl9GgYn2J nEm4aL76FJdyHH32r1guN7XXQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBSst03 neGzzx6Ci7DV7lfs0cu0MB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUYwNC85OTFFQjc1QTdBQjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJC YjFhUERzWUpqbjNFOVFTamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6lLXBim5InfTwI1YOlq2iLVz+l74a/BUqNVtRCSJxHzpASOLc9ka5 ayFxMTNpv3QcYAT/r6yP2HQV467VPbcuWL4UKpeACn7ZWNJWFhsonII9Y7jrAr8o +D7vneU+fQcJDCi4qXohQqgdHF/fHNBEhaW72dWco9TInEEjOl5+BnZ+IsgIBPWe SzjhvHK2gH4UZVCOhHLTrhm2JTGwLkyUMYuo99ReTp5qsSs6/f+pdsbNLwWtFEX9 GH7x/iebMIrtSKx8DtuaLulYGYCnm4dg9FYQMoFPaf2Frl4ht+VLvE9xtL9Qbz1z 2QV9UYsaZWxc9G0TIYRJAEJt+kEl72vo -----END CERTIFICATE-----Generated at Sun May 5 01:13:21 2024 by rpki-client on console-ams.rpki-client.org