$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: DgOkpOzgO9B0C0TDZZEQIXzANADVjzaIlD3bkssN1Po= Subject key identifier: 73:16:6C:B3:D5:26:47:89:3C:F0:BB:E6:FE:62:0C:A7:E5:8C:63:12 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1CEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1CCD Signing time: Thu 02 May 2024 16:36:01 +0000 Manifest this update: Thu 02 May 2024 16:36:00 +0000 Manifest next update: Thu 09 May 2024 16:36:00 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: pDoXsj11dUpnbHv9bKgAvgDybHZbPW60l0yijIVFTng=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: kDT0M7EORsZ1+/t04l6akhen7QWghNIlq1HRmuoO7iA=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: ZBnczf6i1Ft0AmNpKiJIV1DqYZIANTcE+WYR+xMSOmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7406 (0x1cee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: May 2 16:36:00 2024 GMT Not After : May 9 16:36:00 2024 GMT Subject: CN=6633c0f1-386f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:9f:cc:f7:9c:fc:c7:e8:a0:0d:dd:54:03: 8c:97:15:aa:aa:52:48:3f:77:81:84:1c:cb:6a:a1: 46:22:78:73:26:fa:c5:1f:01:b9:a2:f7:d4:04:00: 41:de:9c:dc:e0:30:35:37:e8:81:f4:7d:5b:7b:7c: ab:f9:8a:80:24:8c:f6:5d:6a:45:d7:da:e2:59:d7: 54:9c:b4:5c:1b:d3:51:82:93:73:45:75:44:05:ec: 35:b4:9f:21:ba:b6:5f:07:d1:25:e6:8c:65:e8:22: 48:2c:40:51:9a:24:6c:70:6e:9b:e9:cd:b3:42:cf: 9a:27:28:26:25:75:a4:19:36:70:1a:b4:73:76:4f: 64:47:77:91:96:58:c8:53:9f:fa:2c:3c:88:a6:78: 99:f4:c2:ae:10:b4:d7:cc:ae:ad:29:6b:f4:f7:84: 0c:9f:65:69:ec:20:ed:f1:7f:23:66:cf:5d:0c:8b: 15:b4:f5:81:5c:cd:0a:a5:9d:1b:ae:96:95:56:6b: 63:ae:96:89:ea:13:53:7b:ac:d6:0c:ab:f7:83:4b: 02:be:dc:ed:f6:60:dd:1d:32:79:45:9e:74:96:90: a2:3f:29:09:a8:0f:10:e2:87:bd:ac:00:0b:8e:02: 86:38:1e:67:b1:0f:f8:03:ac:1c:e3:7e:4f:a1:1a: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:16:6C:B3:D5:26:47:89:3C:F0:BB:E6:FE:62:0C:A7:E5:8C:63:12 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:72:4d:fa:da:96:f3:83:f1:e7:5f:b8:e3:93:7f:d5:3b:f5: 06:26:db:85:5b:0a:55:05:37:33:48:ae:5e:e5:b9:d0:c8:37: 92:34:72:2a:13:82:8c:79:9d:77:2f:d9:f4:ad:19:8f:bd:43: 9b:a0:6f:c4:30:5a:18:72:6b:17:0b:08:5e:0d:d4:63:52:8e: 05:20:c1:ad:27:1a:82:5a:e1:b6:90:a2:e6:84:01:7c:27:4e: 08:9f:82:63:fa:c0:39:6c:ce:bb:af:56:3e:55:ab:aa:db:7d: 33:16:35:64:9e:2e:e7:af:d0:f5:ad:7b:9b:48:3e:4f:24:7b: 9d:90:d6:62:0e:ce:4f:b7:42:aa:55:ec:de:8a:22:be:1d:90: 38:a5:f3:30:12:38:e0:63:4d:ec:f8:1e:e7:2a:9e:44:d5:27: 7c:63:e1:da:5f:99:7e:62:f9:eb:4e:a6:bd:c2:ed:35:84:7e: 28:8d:48:a0:17:f4:62:36:9f:a1:a7:82:90:5e:c6:8f:cd:49: 00:3e:2b:ff:7a:c7:68:6d:1a:85:94:08:ad:84:b8:6b:0f:6d: f1:53:36:87:2c:19:7b:37:c0:58:15:ff:88:47:ce:b2:16:20: 80:10:ce:32:c5:3c:ba:14:7e:83:44:69:18:7d:25:2a:ca:76: ec:a9:e3:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjQwNTAyMTYzNjAwWhcNMjQwNTA5MTYzNjAwWjAYMRYwFAYD VQQDEw02NjMzYzBmMS0zODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/ifzPec/MfooA3dVAOMlxWqqlJIP3eBhBzLaqFGInhzJvrFHwG5ovfUBABB 3pzc4DA1N+iB9H1be3yr+YqAJIz2XWpF19riWddUnLRcG9NRgpNzRXVEBew1tJ8h urZfB9El5oxl6CJILEBRmiRscG6b6c2zQs+aJygmJXWkGTZwGrRzdk9kR3eRlljI U5/6LDyIpniZ9MKuELTXzK6tKWv094QMn2Vp7CDt8X8jZs9dDIsVtPWBXM0KpZ0b rpaVVmtjrpaJ6hNTe6zWDKv3g0sCvtzt9mDdHTJ5RZ50lpCiPykJqA8Q4oe9rAAL jgKGOB5nsQ/4A6wc435PoRoIjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMWbLPV JkeJPPC75v5iDKfljGMSMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMck362pbzg/HnX7jjk3/VO/UGJtuFWwpVBTczSK5e5bnQyDeSNHIq E4KMeZ13L9n0rRmPvUOboG/EMFoYcmsXCwheDdRjUo4FIMGtJxqCWuG2kKLmhAF8 J04In4Jj+sA5bM67r1Y+Vauq230zFjVkni7nr9D1rXubSD5PJHudkNZiDs5Pt0Kq VezeiiK+HZA4pfMwEjjgY03s+B7nKp5E1Sd8Y+HaX5l+YvnrTqa9wu01hH4ojUig F/RiNp+hp4KQXsaPzUkAPiv/esdobRqFlAithLhrD23xUzaHLBl7N8BYFf+IR86y FiCAEM4yxTy6FH6DRGkYfSUqynbsqeMa -----END CERTIFICATE-----Generated at Thu May 2 17:18:58 2024 by rpki-client on console-ams.rpki-client.org