$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: Ueb43Njw4AATUaReW7BHwCJZ2mSPBMyd+ocSlHWL8ns= Subject key identifier: C9:2B:0D:F2:47:D5:CC:83:E5:02:CE:6C:97:E4:A8:8C:61:51:A5:F1 Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: E7 Signing time: Wed 29 May 2024 06:29:39 +0000 Manifest this update: Wed 29 May 2024 06:29:38 +0000 Manifest next update: Wed 05 Jun 2024 06:29:38 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: 4/qyqbUjBpPZqQ9MqGgYHvg0EN9tc1qrp2nsw36ZuZA=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: qbMXYGmGBXCQU/LDnYPVYWq6qwCJyfwTqXecOU2YUsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: May 29 06:29:38 2024 GMT Not After : Jun 5 06:29:38 2024 GMT Subject: CN=6656cb52-7900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:ed:2f:4b:a6:83:7f:d1:d6:23:ac:8a:e1: 9d:fa:1b:cc:5b:c1:f9:44:2a:cb:8b:14:08:73:ff: 48:b6:15:ad:30:dc:53:3f:13:6f:c8:3e:bd:8f:89: b1:8f:58:e4:3c:5b:cd:8e:52:57:e6:75:a2:e8:6d: cb:72:ed:46:f8:14:c9:04:e0:16:f6:51:41:49:a9: 27:c9:6e:a9:92:25:a3:6c:c6:9a:fc:29:a2:27:42: 1e:ca:d1:df:38:24:2f:02:28:e9:8a:ae:bf:6f:1a: 82:1b:78:8b:b6:7f:88:7f:ab:50:54:41:37:ad:18: 96:9e:0f:9a:f0:a3:56:59:da:11:c6:94:f0:cc:9b: e2:ff:92:98:78:04:af:27:ba:33:e5:d7:06:2d:51: 72:62:66:48:d4:f4:bb:68:fb:e9:dd:0a:f6:41:d5: 99:48:da:34:b7:6b:eb:eb:97:b7:94:2e:fe:c7:b9: a9:fa:80:6d:03:19:76:ee:82:22:cb:7d:bb:45:46: 44:04:c4:fd:a1:52:c2:4a:1c:21:02:15:9e:96:59: 2b:fe:51:0d:c5:c8:4b:18:5e:38:46:43:ae:25:1d: 75:53:02:b5:c6:2d:ee:95:49:d7:55:6d:ac:cc:57: 47:62:16:03:d8:6d:6f:35:f3:fd:1e:c9:f6:9c:b7: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:0D:F2:47:D5:CC:83:E5:02:CE:6C:97:E4:A8:8C:61:51:A5:F1 X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bc:af:60:d6:aa:38:df:b3:26:29:1f:99:82:ae:f9:a1:96: 01:6b:23:eb:d2:b2:d4:a7:dc:76:fa:3b:35:43:5a:fc:55:c8: 95:da:7a:88:ca:b7:70:b2:16:ce:18:f7:ab:b3:e7:a3:91:4a: 16:c3:ac:ec:e7:d0:2f:63:2e:b4:04:27:28:f0:6d:76:0e:d8: b1:28:c0:f3:79:18:81:d3:23:7e:29:d3:a7:91:3b:a4:c9:2c: 10:34:a8:2d:62:8f:2f:50:ed:e8:26:0d:88:15:a8:b5:40:aa: 83:25:98:94:ad:8b:ec:60:1f:0a:29:56:f2:7c:33:65:f5:ea: e9:f4:13:63:45:8b:7e:14:30:e1:78:68:e8:df:3b:67:b0:86: 99:4d:c2:ad:0a:bb:d7:80:9e:b6:a6:ba:3b:c1:45:4d:02:d8: 10:f5:de:bd:46:58:f5:9a:c6:a8:88:1b:d1:16:a8:d7:bd:bc: d2:f9:63:9c:5c:00:31:2e:93:e1:b0:21:61:fc:6c:60:c1:2b: 01:8c:ff:84:f9:cb:78:a3:78:e8:14:d8:30:0c:1e:8b:bb:e2: 2c:96:ed:4d:23:a9:d6:91:ad:d7:18:9e:d3:75:89:da:68:e1: c2:1a:1f:b9:79:03:4a:47:a1:56:66:40:e3:c8:02:c2:b3:9b: e6:14:3a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjQwNTI5MDYyOTM4WhcNMjQwNjA1MDYyOTM4WjAYMRYwFAYD VQQDEw02NjU2Y2I1Mi03OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX7tL0umg3/R1iOsiuGd+hvMW8H5RCrLixQIc/9IthWtMNxTPxNvyD69j4mx j1jkPFvNjlJX5nWi6G3Lcu1G+BTJBOAW9lFBSaknyW6pkiWjbMaa/CmiJ0IeytHf OCQvAijpiq6/bxqCG3iLtn+If6tQVEE3rRiWng+a8KNWWdoRxpTwzJvi/5KYeASv J7oz5dcGLVFyYmZI1PS7aPvp3Qr2QdWZSNo0t2vr65e3lC7+x7mp+oBtAxl27oIi y327RUZEBMT9oVLCShwhAhWellkr/lENxchLGF44RkOuJR11UwK1xi3ulUnXVW2s zFdHYhYD2G1vNfP9Hsn2nLcotQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkrDfJH 1cyD5QLObJfkqIxhUaXxMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKvK9g1qo437MmKR+Zgq75oZYBayPr0rLUp9x2+js1Q1r8VciV2nqI yrdwshbOGPers+ejkUoWw6zs59AvYy60BCco8G12DtixKMDzeRiB0yN+KdOnkTuk ySwQNKgtYo8vUO3oJg2IFai1QKqDJZiUrYvsYB8KKVbyfDNl9erp9BNjRYt+FDDh eGjo3ztnsIaZTcKtCrvXgJ62pro7wUVNAtgQ9d69Rlj1msaoiBvRFqjXvbzS+WOc XAAxLpPhsCFh/GxgwSsBjP+E+ct4o3joFNgwDB6Lu+Islu1NI6nWka3XGJ7TdYna aOHCGh+5eQNKR6FWZkDjyALCs5vmFDo0 -----END CERTIFICATE-----Generated at Wed May 29 09:16:51 2024 by rpki-client on console-fra.rpki-client.org