$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: HjbRMoPeBhN2MB06c2UqJmx4Nmwh1korwvvVjFTP7tk= Subject key identifier: 5A:58:A0:98:4E:97:91:97:70:7B:4B:46:5A:DB:F5:CA:BE:0F:33:FB Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 01E1 Signing time: Wed 01 May 2024 04:37:16 +0000 Manifest this update: Wed 01 May 2024 04:37:15 +0000 Manifest next update: Wed 08 May 2024 04:37:15 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: tbIimaM5655Z+bRHw1Wr6rH6Jl51WTrOLlG7MIkaJpw=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: vfdbKyJ3mviRT1GnKxYZo1xv2FhpXFvdbF0/IM2Mc1w=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: qqSsVUySdeF/mPXA1H2/Nb+W0uFPMOk9qHP5kfHhs6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: May 1 04:37:15 2024 GMT Not After : May 8 04:37:15 2024 GMT Subject: CN=6631c6fc-5de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:bc:12:db:1c:e5:f4:e1:51:05:93:63:86: 64:c9:fb:24:b9:73:20:6b:9d:cf:c1:b6:b1:dc:92: a7:ca:ef:0a:d0:d2:14:5a:3a:0f:b2:91:9c:43:5d: e2:41:92:6d:03:e7:a2:bb:12:73:57:69:ff:ee:35: 0d:3e:a6:f6:77:63:71:c0:32:db:83:8f:a4:12:34: 17:c0:cb:b9:92:96:c1:0b:d6:e0:1a:2e:97:ea:0c: 62:0a:1e:e3:41:ab:05:14:a9:c9:cc:0b:37:93:22: 93:57:7b:a2:0b:eb:a6:68:11:5c:b1:5f:19:ee:70: 9c:3b:34:b4:39:44:45:ca:5d:44:7e:14:e5:ae:a4: c5:db:a1:88:6c:49:04:a8:b5:45:7a:0b:9f:9d:c5: 99:21:2c:4c:4c:20:43:1a:e7:27:e8:37:a9:1b:d3: e8:2a:12:fa:10:f9:b7:f9:a0:d7:1d:f8:be:e2:aa: 83:20:f8:56:d2:6d:21:44:c5:a0:30:d9:b2:a0:b0: 61:ae:96:6e:ea:ac:01:49:09:02:5e:fc:3b:f4:0e: 23:2c:7e:67:f1:2b:38:ff:1c:4c:6e:4f:f5:cb:c8: 1c:1f:83:bc:72:bf:3c:ba:d2:f3:bf:2b:77:f3:e9: 37:a2:8b:31:8a:10:91:d0:9e:32:45:76:ca:97:2a: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:58:A0:98:4E:97:91:97:70:7B:4B:46:5A:DB:F5:CA:BE:0F:33:FB X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:00:83:8b:95:97:13:73:aa:5a:30:c2:71:e7:86:61:f0:71: 85:ba:83:44:4e:d6:81:3b:50:e7:be:c6:41:17:50:47:2e:3e: e7:ab:b3:04:8d:1e:f9:34:49:68:77:de:17:20:dc:dc:5c:a6: c5:a6:cc:65:bb:86:0f:d9:df:65:0b:20:84:7e:b6:f9:fc:66: de:05:9e:2e:77:0c:83:a5:45:3a:a4:a5:0e:26:25:a5:7c:c2: 88:07:50:e1:6e:f0:83:a1:f5:33:dd:c3:2f:f3:4d:d0:bf:9a: 67:6c:79:06:c5:30:e9:5e:f4:aa:79:ba:14:2a:43:ae:b4:c9: ce:43:a8:6e:b7:30:e4:27:27:f3:68:f3:a8:d1:b1:ba:d0:f9: ed:16:99:63:56:e0:e8:67:e2:d0:ef:01:a1:64:04:0d:eb:aa: f7:0c:80:1d:d9:1f:d6:1e:09:b5:53:6c:cc:9a:93:60:02:a4: 64:63:c9:3f:e6:0d:5b:05:6e:32:c7:d9:dc:52:2c:f0:c0:cf: d7:c8:98:b8:90:51:86:3d:7c:21:a9:5d:05:df:ce:6b:9a:f4: 7c:f6:15:3e:f1:7e:0f:2e:a3:f0:10:52:0d:f1:98:b7:98:1b: b9:26:27:b9:11:5a:cf:28:7a:36:03:c6:c0:8a:69:69:0f:ed: 5e:68:42:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjQwNTAxMDQzNzE1WhcNMjQwNTA4MDQzNzE1WjAYMRYwFAYD VQQDEw02NjMxYzZmYy01ZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD28Etsc5fThUQWTY4ZkyfskuXMga53Pwbax3JKnyu8K0NIUWjoPspGcQ13i QZJtA+eiuxJzV2n/7jUNPqb2d2NxwDLbg4+kEjQXwMu5kpbBC9bgGi6X6gxiCh7j QasFFKnJzAs3kyKTV3uiC+umaBFcsV8Z7nCcOzS0OURFyl1EfhTlrqTF26GIbEkE qLVFegufncWZISxMTCBDGucn6DepG9PoKhL6EPm3+aDXHfi+4qqDIPhW0m0hRMWg MNmyoLBhrpZu6qwBSQkCXvw79A4jLH5n8Ss4/xxMbk/1y8gcH4O8cr88utLzvyt3 8+k3oosxihCR0J4yRXbKlypVDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpYoJhO l5GXcHtLRlrb9cq+DzP7MB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADAIOLlZcTc6paMMJx54Zh8HGFuoNETtaBO1DnvsZBF1BHLj7nq7ME jR75NElod94XINzcXKbFpsxlu4YP2d9lCyCEfrb5/GbeBZ4udwyDpUU6pKUOJiWl fMKIB1DhbvCDofUz3cMv803Qv5pnbHkGxTDpXvSqeboUKkOutMnOQ6hutzDkJyfz aPOo0bG60PntFpljVuDoZ+LQ7wGhZAQN66r3DIAd2R/WHgm1U2zMmpNgAqRkY8k/ 5g1bBW4yx9ncUizwwM/XyJi4kFGGPXwhqV0F385rmvR89hU+8X4PLqPwEFIN8Zi3 mBu5Jie5EVrPKHo2A8bAimlpD+1eaEIw -----END CERTIFICATE-----Generated at Wed May 1 05:59:13 2024 by rpki-client on console-fra.rpki-client.org