$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json) Hash identifier: kQGTGNi3z3Q5OADXVigZeTazAzbfbyLTu7CO8OWqLFs= Subject key identifier: 8A:D6:FB:86:BB:D7:42:75:51:48:02:19:FD:9A:CA:A5:B5:5E:98:11 Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Certificate serial: 13C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft Manifest number: 13B2 Signing time: Tue 30 Apr 2024 17:41:36 +0000 Manifest this update: Tue 30 Apr 2024 17:41:36 +0000 Manifest next update: Tue 07 May 2024 17:41:36 +0000 Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: Z4hYh6dDzbLcuWBUUcWPin+gGyMTFWw8wN9ihepYueo=) 2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: 9Nen7WG8gK+IlwkBFugoTrxoP1pEbDc8+Ntb1RtzlaM=) 3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: HoUHV+GmITwyK5riWdqwb9duWApcXNvc/kNzW+yVHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5058 (0x13c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Validity Not Before: Apr 30 17:41:36 2024 GMT Not After : May 7 17:41:36 2024 GMT Subject: CN=66312d50-9fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:0b:43:ca:f4:4f:a6:4f:d9:e8:55:70:aa: 8d:ef:00:69:25:cd:84:1a:7b:5f:79:03:7c:82:07: 96:fd:8d:5a:f1:c4:57:33:1e:86:10:c3:1a:76:2b: f7:16:58:f0:04:7f:86:3c:3e:3b:76:81:46:3c:aa: ff:26:bf:24:c1:b7:54:af:18:ec:bd:c5:49:a5:ce: 4a:a4:1f:b5:00:e2:a6:91:3c:33:f4:e4:86:5c:30: c4:31:d6:61:05:80:ef:36:bd:ed:37:3a:ab:a9:89: e2:8d:0e:9d:1c:48:7e:37:df:e1:27:2f:03:80:09: d5:2f:15:f2:1d:ac:14:b8:3d:cf:ed:51:ff:b6:b4: 66:e1:3a:01:cb:16:5a:4e:8d:47:09:a8:1b:bf:58: 8b:81:23:55:80:da:5e:c9:30:f8:14:22:df:91:b6: 3c:a0:ca:97:85:c8:ea:fe:61:de:89:01:a8:19:33: 8c:44:e7:e3:39:46:97:cd:79:18:de:55:99:f8:73: c2:6f:47:0c:b8:01:df:6b:85:2d:c9:72:22:37:6a: 17:81:aa:df:43:c6:d7:1c:b1:7a:e9:f3:85:19:36: eb:24:94:07:31:0b:06:48:18:5e:a1:e9:d6:29:2f: 65:17:de:ae:c3:9e:08:b7:77:1a:e7:2c:ab:dd:b1: 7c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D6:FB:86:BB:D7:42:75:51:48:02:19:FD:9A:CA:A5:B5:5E:98:11 X509v3 Authority Key Identifier: keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7c:ef:3c:00:d7:e3:0a:3d:60:51:2e:c9:4b:7b:77:ba:5b: 3f:68:9b:8f:9e:f3:c8:6f:fd:a7:15:ab:a7:e1:ec:b3:48:3d: 8e:3e:22:f3:49:65:04:4a:c0:49:27:7a:c1:c9:f0:58:31:d4: 5e:9b:b6:e5:3f:c5:16:4a:42:b8:fe:da:a1:dd:90:28:21:fb: 53:3c:dd:db:24:35:4a:1a:27:06:09:b2:f9:10:d9:57:ff:35: 2a:84:93:9d:01:71:2a:66:24:fb:8e:2f:ef:68:f9:fd:f7:3e: 6c:dd:02:ae:d9:0b:62:26:63:d4:e1:83:36:0e:db:4c:c5:38: 14:18:36:98:5c:77:eb:b4:7f:b9:77:b2:c7:c0:90:a2:d4:0e: d8:d5:19:63:ca:05:ff:c2:c7:fd:ff:8d:d3:65:40:fe:45:25: 81:70:fd:cb:36:72:ab:2c:ae:95:84:ae:01:f4:ff:47:98:c4: cb:6d:d7:8e:c7:e3:7d:1f:32:da:ac:a1:92:d7:cd:f1:ea:6d: a8:31:41:b5:38:eb:f4:f5:26:2b:b2:40:28:93:f5:8f:34:a2: 63:00:04:af:7a:dc:aa:2a:1b:e0:2f:25:b1:f0:b7:d1:43:69: bd:47:8b:6c:75:42:8e:1e:99:ff:c2:07:ca:92:26:31:57:e0: ee:d9:08:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2 RTFFMzlGQzYwHhcNMjQwNDMwMTc0MTM2WhcNMjQwNTA3MTc0MTM2WjAYMRYwFAYD VQQDEw02NjMxMmQ1MC05ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4ILQ8r0T6ZP2ehVcKqN7wBpJc2EGntfeQN8ggeW/Y1a8cRXMx6GEMMadiv3 FljwBH+GPD47doFGPKr/Jr8kwbdUrxjsvcVJpc5KpB+1AOKmkTwz9OSGXDDEMdZh BYDvNr3tNzqrqYnijQ6dHEh+N9/hJy8DgAnVLxXyHawUuD3P7VH/trRm4ToByxZa To1HCagbv1iLgSNVgNpeyTD4FCLfkbY8oMqXhcjq/mHeiQGoGTOMROfjOUaXzXkY 3lWZ+HPCb0cMuAHfa4UtyXIiN2oXgarfQ8bXHLF66fOFGTbrJJQHMQsGSBheoenW KS9lF96uw54It3ca5yyr3bF8NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrW+4a7 10J1UUgCGf2ayqW1XpgRMB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02 bklqV1FFdzlfb2R1SGpuOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGfO88ANfjCj1gUS7JS3t3uls/aJuPnvPIb/2nFaun4eyzSD2OPiLz SWUESsBJJ3rByfBYMdRem7blP8UWSkK4/tqh3ZAoIftTPN3bJDVKGicGCbL5ENlX /zUqhJOdAXEqZiT7ji/vaPn99z5s3QKu2QtiJmPU4YM2DttMxTgUGDaYXHfrtH+5 d7LHwJCi1A7Y1RljygX/wsf9/43TZUD+RSWBcP3LNnKrLK6VhK4B9P9HmMTLbdeO x+N9HzLarKGS183x6m2oMUG1OOv09SYrskAok/WPNKJjAASvetyqKhvgLyWx8LfR Q2m9R4tsdUKOHpn/wgfKkiYxV+Du2Qhv -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:41 2024 by rpki-client on console-fra.rpki-client.org