$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json) Hash identifier: mRridkux28iMd57KlbFd6VsGI9mbSjP8P4KwjLT1Cho= Subject key identifier: C2:1B:98:A8:BB:48:D6:E4:3E:BB:3D:DE:CB:00:D3:E9:2B:49:B9:8C Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft Manifest number: 02DB Signing time: Tue 07 May 2024 03:18:29 +0000 Manifest this update: Tue 07 May 2024 03:18:28 +0000 Manifest next update: Tue 14 May 2024 03:18:28 +0000 Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: ioMtan93zZdVnm9oJaZYE7lFFBHjKQByzHWMSYggRjU=) 2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: jXK7FgTQqSCTHg8vIOSb18iOetFhGEksUVwCwiy1lBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Validity Not Before: May 7 03:18:28 2024 GMT Not After : May 14 03:18:28 2024 GMT Subject: CN=66399d85-5f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:8e:96:d5:14:3c:c1:29:e4:f3:e2:a5:22: df:85:ba:79:55:4b:b5:6d:36:e5:4a:13:b8:7e:2d: 52:2d:63:a5:03:07:65:ff:b2:19:3a:c8:ff:d7:42: c3:54:5f:07:22:d3:fb:86:f8:ef:3a:36:06:25:26: ad:43:61:37:8f:28:93:3a:1d:e1:9a:cc:02:9d:fc: cf:36:a3:47:ae:73:ee:a0:73:ec:d1:a0:6a:6a:f4: 78:1b:15:df:21:ba:cd:8c:74:ad:7b:42:c8:66:03: 52:6e:a7:02:4b:34:76:38:dd:ca:ef:f5:6e:17:79: c3:0b:59:82:e9:e9:b0:97:b0:bd:54:16:d8:db:be: 9b:11:6d:36:be:33:32:31:14:ce:3d:9b:47:da:a7: 35:77:e3:6d:a2:70:cb:98:96:c5:ce:6d:05:63:f4: 6f:71:2e:0c:b0:d4:0a:1e:25:12:c9:05:65:16:d3: 80:5f:df:1e:80:62:83:58:b2:2b:f7:91:09:e7:f5: 25:15:29:31:12:d0:c4:b9:a5:45:bf:d9:73:6d:f2: 87:48:3c:bc:49:96:f8:dd:c8:c1:48:28:14:82:77: f8:32:2d:9f:f5:0a:bc:86:dd:c1:cb:70:03:08:2f: 00:79:93:a4:5a:36:19:48:19:7a:27:aa:29:df:c6: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1B:98:A8:BB:48:D6:E4:3E:BB:3D:DE:CB:00:D3:E9:2B:49:B9:8C X509v3 Authority Key Identifier: keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:6d:b3:6d:21:ba:97:82:93:f2:a7:fe:7f:27:a7:da:3f:b8: b6:a9:0d:2c:2e:af:9a:8f:b1:6f:53:d0:92:a3:86:f8:ca:fe: 0a:e4:b7:05:b1:c2:0e:32:97:c0:8c:ed:63:32:f0:43:b4:77: 0e:c7:d5:ad:17:72:12:26:a7:35:aa:0e:25:fd:14:5a:84:85: 72:56:94:5e:9e:60:96:f6:01:af:a2:d9:5c:1b:59:4f:2a:54: 33:57:00:92:df:1a:92:7f:0f:22:da:13:e5:64:6a:9c:09:68: 02:b4:88:e6:6b:93:56:20:c9:68:56:b5:7d:e6:92:5a:82:3a: 33:24:b1:b7:3a:70:fb:75:9d:2d:6e:ec:0a:67:71:0c:40:40: 2e:8c:27:a4:96:6a:07:2a:e8:71:28:5e:4f:a9:fa:ef:55:ce: 8d:94:38:67:c9:22:d7:06:be:25:e3:7f:e0:60:46:54:d6:ff: 0c:50:f9:0c:05:60:4a:67:37:b4:85:6a:fa:e3:c8:10:94:45: 1c:f3:70:ed:b9:87:35:a7:2c:16:a6:8b:20:48:42:37:ee:e3: d3:ed:7e:d9:ef:2e:00:1f:dd:4b:71:c8:e6:59:45:d6:b2:2c: ee:e3:89:e6:40:93:06:04:cd:5e:7c:ee:dc:66:00:88:9c:66: a6:2e:c6:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3OUMxMTAvBgNVBAUTKDMxOTc0MDJDQzFENDA2Rjk3MDdEMkUyMjA0MzYzQkMw RDEzQzAyOTkwHhcNMjQwNTA3MDMxODI4WhcNMjQwNTE0MDMxODI4WjAYMRYwFAYD VQQDEw02NjM5OWQ4NS01ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRuOltUUPMEp5PPipSLfhbp5VUu1bTblShO4fi1SLWOlAwdl/7IZOsj/10LD VF8HItP7hvjvOjYGJSatQ2E3jyiTOh3hmswCnfzPNqNHrnPuoHPs0aBqavR4GxXf IbrNjHSte0LIZgNSbqcCSzR2ON3K7/VuF3nDC1mC6emwl7C9VBbY276bEW02vjMy MRTOPZtH2qc1d+NtonDLmJbFzm0FY/RvcS4MsNQKHiUSyQVlFtOAX98egGKDWLIr 95EJ5/UlFSkxEtDEuaVFv9lzbfKHSDy8SZb43cjBSCgUgnf4Mi2f9Qq8ht3By3AD CC8AeZOkWjYZSBl6J6op38YmbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIbmKi7 SNbkPrs93ssA0+krSbmMMB8GA1UdIwQYMBaAFDGXQCzB1Ab5cH0uIgQ2O8DRPAKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDc5Qy8zMkJGODUwRTk4 RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2bHdmUzRpQkRZN3dORThB cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01aZEFMTUhVQnZsd2ZTNGlCRFk3d05FOEFway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDc5Qy8zMkJGODUwRTk4RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2 bHdmUzRpQkRZN3dORThBcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAbbNtIbqXgpPyp/5/J6faP7i2qQ0sLq+aj7FvU9CSo4b4yv4K5LcF scIOMpfAjO1jMvBDtHcOx9WtF3ISJqc1qg4l/RRahIVyVpRenmCW9gGvotlcG1lP KlQzVwCS3xqSfw8i2hPlZGqcCWgCtIjma5NWIMloVrV95pJagjozJLG3OnD7dZ0t buwKZ3EMQEAujCeklmoHKuhxKF5PqfrvVc6NlDhnySLXBr4l43/gYEZU1v8MUPkM BWBKZze0hWr648gQlEUc83DtuYc1pywWposgSEI37uPT7X7Z7y4AH91LccjmWUXW sizu44nmQJMGBM1efO7cZgCInGamLsaR -----END CERTIFICATE-----Generated at Tue May 7 03:53:40 2024 by rpki-client on console-fra.rpki-client.org