$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: Wy3HgmIXJIlRh1hssXx6LNzz95BMffhnnnzzQZtNmMU= Subject key identifier: A7:05:15:69:40:2B:DF:9C:60:5A:77:C8:D6:B9:13:50:A1:59:07:79 Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: D2 Signing time: Fri 03 May 2024 06:14:06 +0000 Manifest this update: Fri 03 May 2024 06:14:06 +0000 Manifest next update: Fri 10 May 2024 06:14:06 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: fABFuH54WKMPu/JUOyehLOUQYDNb5LwbfG4rYXdy3B4=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: uQdj5jTz7pEFdjbztLf6kBlbDqXIgK1CUMCX5/deqpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: May 3 06:14:06 2024 GMT Not After : May 10 06:14:06 2024 GMT Subject: CN=663480ae-00e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6e:11:ca:4c:79:ca:fd:95:89:ca:1a:00:f6: b5:e5:20:6b:28:60:91:a0:aa:b9:e8:ba:c8:2e:3b: 27:6c:89:f5:06:c4:d1:64:36:bb:0c:a3:78:43:29: d2:94:e9:11:8a:be:0e:de:85:f3:7a:27:22:01:58: 23:94:2b:49:06:fc:f7:61:00:0c:a4:17:8b:ce:74: ba:de:25:90:36:44:a9:23:eb:e8:7c:ee:9f:f2:af: c9:7b:1e:4a:01:07:ef:3f:7f:4e:ef:72:f5:00:83: aa:de:fa:e8:d7:ff:45:2a:1f:1a:16:2a:d9:6d:0b: 57:29:e9:ec:9a:7d:31:7f:6f:28:42:8e:46:e0:5f: c8:31:b7:f6:02:2b:b6:26:b8:4b:2a:68:65:5b:29: 3a:52:e1:5e:76:03:4b:01:b9:a9:39:3f:04:07:f3: 81:a5:3b:45:26:9c:11:03:f9:b1:9f:c7:e4:e3:c2: 66:ad:bd:16:64:76:9b:d5:4a:88:2d:fa:4f:83:31: 19:e0:9b:9a:42:1d:40:86:3d:cc:a0:99:2c:49:9f: dc:03:1c:70:2f:ab:8c:48:09:98:de:ce:35:45:ad: 08:29:eb:a4:84:0a:f6:24:ba:34:63:50:e5:dd:53: da:4c:45:3d:43:c2:e4:f2:f7:28:bc:4b:de:49:bb: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:05:15:69:40:2B:DF:9C:60:5A:77:C8:D6:B9:13:50:A1:59:07:79 X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2c:37:b2:c4:aa:f3:43:18:b3:21:d4:8d:19:c4:db:bf:7d: 52:6f:5d:3b:19:27:ee:ac:ec:9a:b8:7d:59:26:08:19:06:43: c9:c4:62:29:7f:4c:89:55:0a:28:9e:8f:f5:f5:b6:54:ef:b3: 2f:c9:93:3e:15:57:27:29:65:b8:0f:4b:f3:0b:fa:d3:b1:13: cd:3e:01:18:2d:0a:02:cb:47:96:dd:c7:59:3c:19:6b:3a:7a: c7:3e:aa:ca:cb:3b:77:4c:d9:52:49:28:a7:1c:f8:e4:4c:f0: 9f:ce:a7:a5:07:e7:ed:46:08:4d:74:81:3d:5c:a0:a9:c7:ef: 3b:ed:38:57:49:8c:69:c8:e5:c2:7d:05:f6:fd:eb:be:d2:38: 4d:24:35:e4:d4:70:b2:be:35:19:36:b5:dc:de:94:2b:2f:11: 95:22:fb:c8:0a:cb:34:8c:49:f5:44:d4:77:d1:63:55:75:49: 29:ac:9c:16:61:be:8f:48:4d:e1:f0:85:de:7b:84:5c:0e:71: 9b:2d:08:18:4c:ed:35:89:42:ff:6e:07:48:76:28:e0:d2:e0: 89:66:fd:1d:67:ad:21:94:4c:ae:5c:06:b4:c4:06:16:a5:e6: df:6c:08:97:c0:10:1c:d4:04:8f:64:22:d0:8e:a0:6b:05:b6: 77:25:2c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjQwNTAzMDYxNDA2WhcNMjQwNTEwMDYxNDA2WjAYMRYwFAYD VQQDEw02NjM0ODBhZS0wMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7m4Rykx5yv2VicoaAPa15SBrKGCRoKq56LrILjsnbIn1BsTRZDa7DKN4QynS lOkRir4O3oXzeiciAVgjlCtJBvz3YQAMpBeLznS63iWQNkSpI+vofO6f8q/Jex5K AQfvP39O73L1AIOq3vro1/9FKh8aFirZbQtXKensmn0xf28oQo5G4F/IMbf2Aiu2 JrhLKmhlWyk6UuFedgNLAbmpOT8EB/OBpTtFJpwRA/mxn8fk48Jmrb0WZHab1UqI LfpPgzEZ4JuaQh1Ahj3MoJksSZ/cAxxwL6uMSAmY3s41Ra0IKeukhAr2JLo0Y1Dl 3VPaTEU9Q8Lk8vcovEveSbsGmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcFFWlA K9+cYFp3yNa5E1ChWQd5MB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5LDeyxKrzQxizIdSNGcTbv31Sb107GSfurOyauH1ZJggZBkPJxGIp f0yJVQoono/19bZU77MvyZM+FVcnKWW4D0vzC/rTsRPNPgEYLQoCy0eW3cdZPBlr OnrHPqrKyzt3TNlSSSinHPjkTPCfzqelB+ftRghNdIE9XKCpx+877ThXSYxpyOXC fQX2/eu+0jhNJDXk1HCyvjUZNrXc3pQrLxGVIvvICss0jEn1RNR30WNVdUkprJwW Yb6PSE3h8IXee4RcDnGbLQgYTO01iUL/bgdIdijg0uCJZv0dZ60hlEyuXAa0xAYW pebfbAiXwBAc1ASPZCLQjqBrBbZ3JSyc -----END CERTIFICATE-----Generated at Fri May 3 09:09:35 2024 by rpki-client on console-fra.rpki-client.org