$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: skFVNESxrSAfmgg/cwtv7Nqioq1yYwPSxBPSx3tiCNU= Subject key identifier: 9B:D1:60:DC:D7:5A:0B:9B:A4:C5:12:2D:C3:29:7F:D3:D7:F3:1C:E9 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0B57 Signing time: Thu 02 May 2024 19:45:08 +0000 Manifest this update: Thu 02 May 2024 19:45:08 +0000 Manifest next update: Thu 09 May 2024 19:45:08 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: eQY+2dI3A2QDt6zmZuzZvJGYN3Y2gKXTyaBgJmX7J98=) 2: 7714B9B20CA611EAA69C3B41C4F9AE02.roa (hash: q5Ip+XJJXjIIuk4O+US/jQ4BGRmoQDtfjgDsKC944jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: May 2 19:45:08 2024 GMT Not After : May 9 19:45:08 2024 GMT Subject: CN=6633ed44-2694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:45:91:3d:72:78:8c:95:45:76:cb:b8:b4:72: 86:93:90:2a:c5:2e:c6:af:38:22:52:09:84:d6:dc: 27:48:33:73:c1:7d:23:b4:b1:b9:70:87:3f:b2:06: 63:db:6b:1d:3d:79:b8:e7:28:6e:17:39:58:5f:de: c2:5d:8c:7a:21:63:1e:2b:94:5f:13:de:b8:a5:a8: c4:58:f6:4d:ed:50:67:c9:dc:78:d2:ef:4e:59:7b: 6c:a8:3e:3e:85:93:df:d2:81:7f:c3:f1:2e:f0:a9: ee:cc:ae:3d:d9:0d:75:6f:18:f7:7b:ec:dc:7a:8f: f5:0a:8c:41:34:b1:a7:12:1d:79:da:be:2a:f6:06: 59:cf:28:31:ca:dc:7a:70:e8:a4:29:0a:a7:4b:6f: 7e:7f:98:ba:86:db:59:a1:7e:20:92:9f:bd:23:87: 07:0a:c5:42:6f:b3:3b:e6:f3:83:a3:cc:84:f9:27: 5f:66:c9:30:8d:cf:26:01:9a:78:6b:18:cd:1f:8e: 40:04:f4:9f:16:4f:ba:a1:cc:4b:85:e6:4f:47:f6: 5e:d0:e3:b5:29:b6:ea:5f:97:a0:c4:69:a2:b9:2f: 4d:f6:53:e3:d3:2c:2c:01:60:0e:67:e1:05:fc:21: d5:08:cf:78:0c:04:db:f6:4c:98:96:3a:92:65:2c: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D1:60:DC:D7:5A:0B:9B:A4:C5:12:2D:C3:29:7F:D3:D7:F3:1C:E9 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1f:34:15:ad:68:84:17:72:ba:f2:4a:69:5a:ea:4f:7d:8d: 18:02:a8:d3:6f:14:23:ba:d3:91:9a:df:f1:39:22:8e:84:ec: 21:b4:fb:4a:c2:86:f3:59:1b:97:e6:d3:05:5c:d1:22:bf:13: e1:d3:b1:9d:a5:5a:c4:2f:01:d0:6e:f6:f4:7d:53:aa:7b:11: 0e:58:3a:0d:16:0c:54:b0:08:ae:e8:bb:0e:0f:82:12:00:ca: 2f:fa:79:fe:e9:85:53:e4:ce:a0:a4:b4:df:56:0c:ef:3c:86: 7d:dd:4f:db:85:c2:4d:c1:31:86:df:de:9e:9c:f9:2f:bf:21: ea:82:f2:0a:63:5c:79:5f:9f:ef:35:42:71:58:18:cf:6f:1c: ae:5e:6b:b8:aa:6d:24:33:dc:16:01:47:dc:aa:61:7a:10:f9: 2b:da:a9:c2:01:de:b7:69:d2:27:b9:fd:c0:c0:88:0c:bd:a4: 98:c8:34:34:e6:8f:ec:c9:91:2a:d3:c5:0c:a6:c5:ea:d1:25: 39:b5:05:9d:d5:49:f3:c6:1e:32:f2:0e:1a:9c:2c:c0:9e:08: aa:49:de:6f:65:e8:ea:88:c7:4f:e2:51:35:05:4c:82:23:0d: 91:36:92:cf:5e:5a:2e:20:71:03:ce:0a:04:c7:b7:de:1b:ec: 3c:b3:dd:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjQwNTAyMTk0NTA4WhcNMjQwNTA5MTk0NTA4WjAYMRYwFAYD VQQDEw02NjMzZWQ0NC0yNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kWRPXJ4jJVFdsu4tHKGk5AqxS7GrzgiUgmE1twnSDNzwX0jtLG5cIc/sgZj 22sdPXm45yhuFzlYX97CXYx6IWMeK5RfE964pajEWPZN7VBnydx40u9OWXtsqD4+ hZPf0oF/w/Eu8KnuzK492Q11bxj3e+zceo/1CoxBNLGnEh152r4q9gZZzygxytx6 cOikKQqnS29+f5i6httZoX4gkp+9I4cHCsVCb7M75vODo8yE+SdfZskwjc8mAZp4 axjNH45ABPSfFk+6ocxLheZPR/Ze0OO1KbbqX5egxGmiuS9N9lPj0ywsAWAOZ+EF /CHVCM94DATb9kyYljqSZSwuQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvRYNzX WgubpMUSLcMpf9PX8xzpMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUHzQVrWiEF3K68kppWupPfY0YAqjTbxQjutORmt/xOSKOhOwhtPtK wobzWRuX5tMFXNEivxPh07GdpVrELwHQbvb0fVOqexEOWDoNFgxUsAiu6LsOD4IS AMov+nn+6YVT5M6gpLTfVgzvPIZ93U/bhcJNwTGG396enPkvvyHqgvIKY1x5X5/v NUJxWBjPbxyuXmu4qm0kM9wWAUfcqmF6EPkr2qnCAd63adInuf3AwIgMvaSYyDQ0 5o/syZEq08UMpsXq0SU5tQWd1Unzxh4y8g4anCzAngiqSd5vZejqiMdP4lE1BUyC Iw2RNpLPXlouIHEDzgoEx7feG+w8s92B -----END CERTIFICATE-----Generated at Thu May 2 22:28:58 2024 by rpki-client on console-ams.rpki-client.org