$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: 5kFLpxowGX+eY5mvgRIo0o8Dzg6A9ZlpYnMvBi1xqCg= Subject key identifier: 37:D9:6E:F3:FA:75:9E:B4:1A:FB:E1:AE:86:FF:F4:2C:8C:E7:81:C1 Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 05A4 Signing time: Sun 05 May 2024 00:30:45 +0000 Manifest this update: Sun 05 May 2024 00:30:44 +0000 Manifest next update: Sun 12 May 2024 00:30:44 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: KPUsqTyDtx+lvYdTZI8bfV4tSp5evROnfU2RXUIYxug=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: Mk7D+ha2bIGqlsR5pWf130g9P7kg9STpwyKO56RYmvU=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: CkmY6aTSblMTWjL3XN0ZCrZ152QBEwm/tP98rOerQ7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: May 5 00:30:44 2024 GMT Not After : May 12 00:30:44 2024 GMT Subject: CN=6636d335-0604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:a8:47:58:71:7e:4f:61:65:73:dc:dd:dd: 27:69:81:7e:51:c2:b3:a3:57:b4:62:35:06:19:c7: a4:35:a2:7f:03:0e:39:72:21:7b:b5:9b:de:29:af: 44:b3:12:6d:07:48:a7:d5:0f:08:e2:50:cf:c3:83: b8:d9:16:96:e4:ed:a1:e0:ce:f6:41:00:db:a6:9c: 5d:f6:6f:85:5e:1e:f2:84:fb:5d:7b:ed:fb:b7:56: 22:42:34:b7:62:85:c1:bd:b2:0c:25:b1:63:3b:56: b8:ac:bc:eb:9d:32:fe:79:4b:80:1d:de:0b:64:22: 24:09:ec:3e:77:58:fa:8b:70:fc:68:65:b7:2e:d6: e9:f4:20:b2:df:93:59:8f:b8:a3:ab:be:06:08:db: 15:cd:3d:6c:d7:e0:58:ee:06:80:25:17:45:d5:e7: 8c:90:d0:1d:a7:29:59:fc:4d:5c:24:5f:5d:e5:5f: d8:9b:58:3f:10:92:1d:22:bd:ff:28:7d:76:05:43: 0d:77:ce:ec:a5:a1:61:49:4c:54:9d:34:a5:dd:58: 06:dd:a0:ca:b2:c4:b9:d7:e4:23:68:05:2b:85:13: 49:08:96:ac:fb:98:48:b7:59:4a:b3:37:6b:20:c5: 47:95:ef:7b:fa:52:36:a8:87:c2:b6:18:bb:b9:eb: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D9:6E:F3:FA:75:9E:B4:1A:FB:E1:AE:86:FF:F4:2C:8C:E7:81:C1 X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:95:b1:d7:11:cc:32:95:96:b9:17:d0:93:31:99:31:68:af: 61:37:2c:fc:61:bd:7d:d7:62:cb:d7:11:06:da:34:82:55:1f: 2f:93:fe:ae:f2:40:4c:00:77:1d:12:f4:b4:c6:2d:6c:c3:43: a6:5a:f6:cb:fd:0f:80:78:6c:cf:a6:52:7f:8b:43:39:62:88: 38:a3:34:04:4b:9d:a9:d3:ea:7c:46:0b:46:c9:b4:81:dd:66: 2d:a5:bb:d0:c2:5d:be:2a:30:03:42:f8:83:80:d2:8e:1d:ef: e5:28:d0:83:bf:1e:f9:b0:a7:73:01:a6:04:ab:50:5d:b4:37: f0:a8:65:aa:98:e9:da:25:0f:b1:2b:09:42:97:ce:e8:e5:c9: cb:96:09:46:73:84:8c:22:51:af:68:d7:c7:13:9c:dc:25:6d: ab:90:a8:40:b2:ae:55:96:d0:ca:55:18:c0:27:4f:5a:34:f7: dd:ef:93:b4:cc:27:f3:89:28:1c:85:13:92:74:03:08:2e:02: da:b1:b8:6b:23:31:68:67:ff:88:87:12:41:96:c4:11:03:a4: db:e6:bb:0c:49:26:1e:4e:f6:b6:27:c4:70:05:27:b5:8d:a0: bc:67:02:e7:d8:69:aa:9f:f2:bb:82:74:9e:fb:61:f0:2e:6e: 5b:26:d1:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjQwNTA1MDAzMDQ0WhcNMjQwNTEyMDAzMDQ0WjAYMRYwFAYD VQQDEw02NjM2ZDMzNS0wNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFWoR1hxfk9hZXPc3d0naYF+UcKzo1e0YjUGGcekNaJ/Aw45ciF7tZveKa9E sxJtB0in1Q8I4lDPw4O42RaW5O2h4M72QQDbppxd9m+FXh7yhPtde+37t1YiQjS3 YoXBvbIMJbFjO1a4rLzrnTL+eUuAHd4LZCIkCew+d1j6i3D8aGW3Ltbp9CCy35NZ j7ijq74GCNsVzT1s1+BY7gaAJRdF1eeMkNAdpylZ/E1cJF9d5V/Ym1g/EJIdIr3/ KH12BUMNd87spaFhSUxUnTSl3VgG3aDKssS51+QjaAUrhRNJCJas+5hIt1lKszdr IMVHle97+lI2qIfCthi7uesVvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfZbvP6 dZ60Gvvhrob/9CyM54HBMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3lbHXEcwylZa5F9CTMZkxaK9hNyz8Yb1912LL1xEG2jSCVR8vk/6u 8kBMAHcdEvS0xi1sw0OmWvbL/Q+AeGzPplJ/i0M5Yog4ozQES52p0+p8RgtGybSB 3WYtpbvQwl2+KjADQviDgNKOHe/lKNCDvx75sKdzAaYEq1BdtDfwqGWqmOnaJQ+x KwlCl87o5cnLlglGc4SMIlGvaNfHE5zcJW2rkKhAsq5VltDKVRjAJ09aNPfd75O0 zCfziSgchROSdAMILgLasbhrIzFoZ/+IhxJBlsQRA6Tb5rsMSSYeTva2J8RwBSe1 jaC8ZwLn2Gmqn/K7gnSe+2HwLm5bJtGG -----END CERTIFICATE-----Generated at Sun May 5 01:22:26 2024 by rpki-client on console-fra.rpki-client.org