$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: rh98+edfruwEoJZ3Yr6dl0E3dhc38G/bSolS9pI+1xY= Subject key identifier: 6C:8C:CF:7C:3E:7D:BD:51:53:96:A3:3C:86:94:EB:4E:5E:A4:6E:B0 Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 1146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 1140 Signing time: Thu 02 May 2024 17:53:07 +0000 Manifest this update: Thu 02 May 2024 17:53:06 +0000 Manifest next update: Thu 09 May 2024 17:53:06 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: qCcWdxYfN1gwjFhGeyYGcacBX+blkXcxxLhuyEf8bh0=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: uKb0CD161FjgAIVCPD2XTQx6ds9Glzmbbj5YPi3I1QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4422 (0x1146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: May 2 17:53:06 2024 GMT Not After : May 9 17:53:06 2024 GMT Subject: CN=6633d302-6b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:69:8b:af:15:da:89:0d:cc:3e:e2:32:fb:52: cb:ff:65:a1:bd:6c:4b:65:e6:cc:e9:33:8b:09:13: d8:99:4b:78:ac:53:23:a8:ea:22:05:f1:47:ac:bb: 7d:cc:3a:66:56:83:59:36:aa:42:35:de:a9:84:2a: 0e:09:f2:b9:54:53:dd:6b:88:6b:a6:77:4b:30:2a: a4:99:61:47:d4:43:b9:30:a6:75:cd:62:30:bd:e3: e5:67:02:f1:8a:86:5e:e3:a0:0c:8f:cf:43:8e:ba: ee:a0:8b:68:f0:36:2d:74:d6:aa:cb:c2:a5:65:92: 20:b0:f5:5a:76:d4:99:66:5c:2d:a8:bf:67:c8:af: a6:4a:6f:34:17:96:25:12:08:72:98:58:53:e4:f0: 67:fa:e3:08:ee:fe:8a:8f:a3:87:d8:69:17:dc:8e: a3:be:e0:47:8a:27:c9:d8:0b:3f:bd:22:02:05:dc: ba:45:b9:6d:67:19:39:af:c3:39:be:32:c3:55:8c: c9:58:b1:62:05:2f:d7:c8:0d:1e:96:8c:27:a0:68: f0:bc:3c:0c:03:a4:40:97:f4:a7:2d:62:77:97:5e: 2f:e0:2e:e8:da:7f:74:fe:9c:c7:9a:7e:72:3c:db: 0c:94:3c:a5:82:a8:f2:fd:66:8b:99:c7:04:11:67: a0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8C:CF:7C:3E:7D:BD:51:53:96:A3:3C:86:94:EB:4E:5E:A4:6E:B0 X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:4d:82:54:6b:1a:fe:8e:da:b7:be:8b:5a:40:9d:f7:6b:b2: 35:ef:be:3c:8f:ae:5f:d9:e8:a0:9a:28:8a:de:f6:4c:16:3a: b9:77:ff:b0:a3:47:b3:a1:24:92:ea:ae:ae:3e:d5:50:97:f9: f7:d7:cf:9f:a3:2c:23:2d:ca:6a:61:f0:f1:74:b3:7f:f9:16: 8b:49:18:c8:9e:db:2c:f4:f1:8d:34:82:17:bf:5c:32:84:58: 79:45:cf:1f:96:39:eb:8b:7f:b1:f2:5a:aa:3c:97:04:a6:d8: 40:eb:45:3c:92:37:84:ae:c7:2c:99:5d:f8:f6:b1:ba:77:da: e3:a5:0a:a5:4f:67:66:9d:99:35:e0:66:68:f8:67:c9:8c:f3: 26:ff:e9:13:2d:fe:aa:5c:ea:39:3b:da:8c:16:4e:73:51:f0: a3:25:20:5d:b3:25:bf:07:18:20:67:05:53:f9:a0:2e:9b:f5: 7d:34:20:83:1a:78:05:39:12:e9:cd:d0:1f:e4:d7:53:af:f5: f7:70:3b:23:67:36:43:85:29:d7:e6:2b:28:cf:26:af:e3:fa: 88:1c:a0:c4:c6:d8:3e:52:19:07:51:ec:f7:bf:c8:46:ce:b8: 88:1a:3a:6f:69:bd:70:ce:08:26:1d:8f:93:46:42:eb:88:7a: 46:71:55:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjQwNTAyMTc1MzA2WhcNMjQwNTA5MTc1MzA2WjAYMRYwFAYD VQQDEw02NjMzZDMwMi02YjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mmLrxXaiQ3MPuIy+1LL/2WhvWxLZebM6TOLCRPYmUt4rFMjqOoiBfFHrLt9 zDpmVoNZNqpCNd6phCoOCfK5VFPda4hrpndLMCqkmWFH1EO5MKZ1zWIwvePlZwLx ioZe46AMj89DjrruoIto8DYtdNaqy8KlZZIgsPVadtSZZlwtqL9nyK+mSm80F5Yl EghymFhT5PBn+uMI7v6Kj6OH2GkX3I6jvuBHiifJ2As/vSICBdy6RbltZxk5r8M5 vjLDVYzJWLFiBS/XyA0elownoGjwvDwMA6RAl/SnLWJ3l14v4C7o2n90/pzHmn5y PNsMlDylgqjy/WaLmccEEWeg0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyMz3w+ fb1RU5ajPIaU605epG6wMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmTYJUaxr+jtq3votaQJ33a7I17748j65f2eigmiiK3vZMFjq5d/+w o0ezoSSS6q6uPtVQl/n318+foywjLcpqYfDxdLN/+RaLSRjIntss9PGNNIIXv1wy hFh5Rc8fljnri3+x8lqqPJcEpthA60U8kjeErscsmV349rG6d9rjpQqlT2dmnZk1 4GZo+GfJjPMm/+kTLf6qXOo5O9qMFk5zUfCjJSBdsyW/BxggZwVT+aAum/V9NCCD GngFORLpzdAf5NdTr/X3cDsjZzZDhSnX5isozyav4/qIHKDExtg+UhkHUez3v8hG zriIGjpvab1wzggmHY+TRkLriHpGcVXR -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org