$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: MVwxg5/ski1c/DkUM0yl1c3J90iwYrDcgHTMnkSwF2M= Subject key identifier: 06:63:14:DA:DB:1C:EC:44:6A:43:33:FB:1F:E0:75:39:76:29:8F:E0 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 203E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 2033 Signing time: Mon 06 May 2024 16:23:45 +0000 Manifest this update: Mon 06 May 2024 16:23:44 +0000 Manifest next update: Mon 13 May 2024 16:23:44 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: PXLTh9wlgGii8pc3bps1wK6Q+zLYcsfo2dtsazl5qcc=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: A0Wle0bhJAdQOvif+bzDwubbrA+KDjTDCFRXLiqYDos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8254 (0x203e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: May 6 16:23:44 2024 GMT Not After : May 13 16:23:44 2024 GMT Subject: CN=66390410-6204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:e4:9c:e9:1b:0b:9b:ca:2e:62:fa:50:6b: 57:6a:e3:da:c3:55:61:ca:77:ae:cf:fe:97:3e:b4: 46:ee:c1:85:34:7c:46:ed:ea:1a:09:1b:14:b6:d7: db:0f:fb:f5:6d:a4:e9:b0:b0:c4:f7:9e:f3:1a:ad: f4:b4:3b:60:d7:02:a5:bb:58:61:2f:22:a3:a3:16: 10:40:8b:58:67:fc:a0:bd:f8:00:e3:c0:3d:ae:9d: e3:fa:55:1b:6a:d9:ac:5f:f6:c9:15:d4:f4:f2:cd: 77:7a:34:2e:93:d0:42:e7:b0:dd:46:99:22:02:91: 33:a5:c3:84:b4:bc:13:48:cb:f2:32:9f:91:d5:d8: 96:93:cb:28:ba:0b:3d:74:e8:14:7c:0b:00:da:32: bd:23:af:08:63:77:b4:32:ac:83:ca:69:10:5c:9b: 27:b7:c2:98:76:64:6b:9f:1c:6c:7c:98:63:89:5b: 45:88:66:50:e0:f7:30:75:5e:af:b4:50:a2:6d:e8: d8:54:88:91:20:dc:84:88:90:5c:f0:c1:9b:df:56: 55:32:bb:e6:aa:e7:27:67:f5:f8:e9:cc:55:14:00: 25:aa:0d:4f:df:cf:8a:73:e6:81:38:dc:43:70:00: 29:09:20:fa:8a:31:a2:ad:f7:0c:0f:25:a6:31:59: 6a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:63:14:DA:DB:1C:EC:44:6A:43:33:FB:1F:E0:75:39:76:29:8F:E0 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c2:89:75:7a:b5:81:6b:67:43:09:79:d7:9a:29:1a:45:77: a2:30:31:1d:0a:db:ae:e3:26:77:35:a1:11:88:aa:e6:44:c5: 85:94:f9:e0:75:d6:1f:3c:3d:5f:72:23:6f:e4:f9:90:93:14: 39:8e:72:fd:41:35:6f:f3:25:6a:94:88:6f:0f:b6:49:6d:58: 6e:a4:e2:e8:5b:c0:ab:9a:9a:e8:f1:5d:a2:ea:53:03:5e:30: fb:cb:c4:44:bc:05:ea:83:e9:20:73:c5:e2:07:16:30:c7:bd: af:2f:18:9f:b8:eb:7a:7c:34:a2:f3:e8:7e:65:4b:56:af:f7: 2c:ea:d5:85:77:23:f8:0d:72:74:2b:33:64:9b:2d:6c:2e:61: 4c:7c:dd:54:0b:24:82:9f:1b:17:27:d8:26:a2:ac:b1:45:26: b3:4a:dd:68:ea:36:ce:0e:05:73:42:34:dd:cf:87:db:39:70: ea:ee:a8:81:bb:eb:4c:61:69:4b:8f:15:2a:32:0f:36:0b:1c: 41:22:69:c8:f0:1d:09:37:1b:54:72:45:3e:4a:dd:b9:f1:63: 32:f6:7d:30:25:64:10:32:78:6a:e1:e2:d4:61:c1:d2:29:4b: d4:45:53:9a:8f:c4:87:bf:11:2a:f6:f5:bb:7d:2c:08:9a:41: 02:3a:b2:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICID4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjQwNTA2MTYyMzQ0WhcNMjQwNTEzMTYyMzQ0WjAYMRYwFAYD VQQDEw02NjM5MDQxMC02MjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HPknOkbC5vKLmL6UGtXauPaw1Vhyneuz/6XPrRG7sGFNHxG7eoaCRsUttfb D/v1baTpsLDE957zGq30tDtg1wKlu1hhLyKjoxYQQItYZ/ygvfgA48A9rp3j+lUb atmsX/bJFdT08s13ejQuk9BC57DdRpkiApEzpcOEtLwTSMvyMp+R1diWk8sougs9 dOgUfAsA2jK9I68IY3e0MqyDymkQXJsnt8KYdmRrnxxsfJhjiVtFiGZQ4PcwdV6v tFCibejYVIiRINyEiJBc8MGb31ZVMrvmqucnZ/X46cxVFAAlqg1P38+Kc+aBONxD cAApCSD6ijGirfcMDyWmMVlqdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZjFNrb HOxEakMz+x/gdTl2KY/gMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAwol1erWBa2dDCXnXmikaRXeiMDEdCtuu4yZ3NaERiKrmRMWFlPng ddYfPD1fciNv5PmQkxQ5jnL9QTVv8yVqlIhvD7ZJbVhupOLoW8Crmpro8V2i6lMD XjD7y8REvAXqg+kgc8XiBxYwx72vLxifuOt6fDSi8+h+ZUtWr/cs6tWFdyP4DXJ0 KzNkmy1sLmFMfN1UCySCnxsXJ9gmoqyxRSazSt1o6jbODgVzQjTdz4fbOXDq7qiB u+tMYWlLjxUqMg82CxxBImnI8B0JNxtUckU+St258WMy9n0wJWQQMnhq4eLUYcHS KUvURVOaj8SHvxEq9vW7fSwImkECOrLl -----END CERTIFICATE-----Generated at Mon May 6 17:36:22 2024 by rpki-client on console-fra.rpki-client.org