$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json) Hash identifier: k7GGCTwZhQ0XLLhvwshczjuK8TnnNWEu9kEGI9ecj9I= Subject key identifier: BA:0C:13:DC:8C:37:6F:BE:AE:2A:E5:DC:FB:DC:D6:AC:82:97:28:C8 Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft Manifest number: 04A6 Signing time: Fri 03 May 2024 01:39:51 +0000 Manifest this update: Fri 03 May 2024 01:39:51 +0000 Manifest next update: Fri 10 May 2024 01:39:51 +0000 Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: 8iK1CA1jN9ZrOq+BlHzEUxnMyf1ofBviJVTEp11LWcA=) 2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: uAeYA2RBz25orqR8DIJforOl53u2gX6OUO9tZfJSkxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: May 3 01:39:51 2024 GMT Not After : May 10 01:39:51 2024 GMT Subject: CN=66344067-fb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:36:35:7a:20:c8:0c:72:c1:49:f2:1a:18: 1a:8e:df:f2:b5:b0:2e:61:40:30:87:f7:7e:3f:68: 64:81:1d:f1:44:50:91:75:19:69:5c:39:73:02:24: df:60:5a:02:b6:85:85:64:98:fd:dc:8d:17:79:6f: b9:a0:0a:ad:32:c0:47:88:f2:9e:94:3b:00:33:18: f5:34:0f:84:88:13:74:34:52:40:e0:c0:9c:eb:15: b6:cb:75:85:4a:28:72:35:5d:8c:3b:df:13:41:4d: bf:54:6a:51:da:5b:1a:24:9d:92:25:37:31:fc:07: f9:f3:e7:a1:9c:fa:d2:f0:53:b7:d6:0c:ce:cc:91: ff:b2:77:9a:ec:a2:f2:e4:3f:52:ac:72:b3:14:e4: dd:95:45:25:ec:4f:0c:aa:62:aa:f0:0a:ef:e7:8b: 88:11:d7:ff:d7:3a:74:82:96:e4:28:ad:12:81:77: af:a9:c8:08:6d:64:ad:9f:b6:5c:0a:8b:4b:19:77: 5a:a6:93:f5:08:29:64:b8:6d:e5:9a:36:f1:71:07: 68:4f:81:2f:8b:eb:e1:4c:9d:79:fc:de:8f:99:07: fc:77:e1:e6:aa:19:12:39:59:4f:56:cf:27:d5:0c: 29:fc:f3:d0:e6:be:84:73:a1:2c:c4:4c:94:1c:f0: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0C:13:DC:8C:37:6F:BE:AE:2A:E5:DC:FB:DC:D6:AC:82:97:28:C8 X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4e:8c:f4:44:e1:86:a2:16:d8:11:cb:9d:eb:34:57:36:bd: f8:b1:21:58:35:ad:66:88:c1:c1:a2:5e:d8:08:e2:75:63:43: ed:92:06:c9:b7:01:71:ad:de:0e:ad:45:2e:41:30:2c:78:21: ec:08:40:58:f5:58:27:05:61:b3:cf:e8:6b:08:66:9c:fa:08: cf:95:1b:ee:f5:66:07:d4:20:0e:f5:1b:ee:fe:e3:ac:f4:d0: 6e:d2:86:62:72:07:f8:ba:a9:b9:ff:cb:19:d2:a6:34:0b:31: 40:a3:a0:e3:b7:b4:88:f5:1f:4b:43:f1:e5:60:a9:f1:62:e3: 6e:54:e0:e4:26:4d:18:3f:e6:ba:d9:83:ef:90:85:b1:f3:76: 9d:1b:af:1b:8a:f2:a1:21:dd:7d:f4:27:bc:75:7e:c3:fd:5d: 15:55:ce:f4:72:6a:5c:5a:f9:c2:f0:1a:dd:64:96:44:56:f4: 3c:c2:b4:c3:8e:29:2f:4c:24:8a:e0:42:b8:ec:69:a9:08:7f: f1:c0:b2:32:48:61:fd:e3:50:48:e1:df:58:e9:b2:a0:43:9b: ab:78:c9:49:64:8f:94:ff:62:62:ca:e0:3d:a1:54:fb:d0:29: 56:d0:07:df:94:b7:37:55:b9:51:45:73:ca:4c:22:44:f5:38: 10:b6:a9:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjQwNTAzMDEzOTUxWhcNMjQwNTEwMDEzOTUxWjAYMRYwFAYD VQQDEw02NjM0NDA2Ny1mYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOk2NXogyAxywUnyGhgajt/ytbAuYUAwh/d+P2hkgR3xRFCRdRlpXDlzAiTf YFoCtoWFZJj93I0XeW+5oAqtMsBHiPKelDsAMxj1NA+EiBN0NFJA4MCc6xW2y3WF SihyNV2MO98TQU2/VGpR2lsaJJ2SJTcx/Af58+ehnPrS8FO31gzOzJH/snea7KLy 5D9SrHKzFOTdlUUl7E8MqmKq8Arv54uIEdf/1zp0gpbkKK0SgXevqcgIbWStn7Zc CotLGXdappP1CClkuG3lmjbxcQdoT4Evi+vhTJ15/N6PmQf8d+HmqhkSOVlPVs8n 1Qwp/PPQ5r6Ec6EsxEyUHPArhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoME9yM N2++rirl3Pvc1qyClyjIMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeToz0ROGGohbYEcud6zRXNr34sSFYNa1miMHBol7YCOJ1Y0PtkgbJ twFxrd4OrUUuQTAseCHsCEBY9VgnBWGzz+hrCGac+gjPlRvu9WYH1CAO9Rvu/uOs 9NBu0oZicgf4uqm5/8sZ0qY0CzFAo6Djt7SI9R9LQ/HlYKnxYuNuVODkJk0YP+a6 2YPvkIWx83adG68bivKhId199Ce8dX7D/V0VVc70cmpcWvnC8BrdZJZEVvQ8wrTD jikvTCSK4EK47GmpCH/xwLIySGH941BI4d9Y6bKgQ5ureMlJZI+U/2JiyuA9oVT7 0ClW0AfflLc3VblRRXPKTCJE9TgQtqmt -----END CERTIFICATE-----Generated at Fri May 3 04:45:30 2024 by rpki-client on console-fra.rpki-client.org