$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json) Hash identifier: SQRp4TQ5u0e+LG3s1HJDjeS1lwBmirOGG6Bdi2nMjw4= Subject key identifier: E0:7C:60:B7:AA:DB:C3:1C:41:C9:77:B5:FA:81:9C:AF:3B:11:F5:74 Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft Manifest number: 0625 Signing time: Sat 18 May 2024 23:55:33 +0000 Manifest this update: Sat 18 May 2024 23:55:32 +0000 Manifest next update: Sat 25 May 2024 23:55:32 +0000 Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: M3AKeY4DXuhaXMNaA9i1FowK7OOzyqWd+MPXutcm140=) 2: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: 6x2ixsBSMwiLEmIA6O0wGTbXHcweHfzX1rid15t/l5o=) 3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: Y1TPcrGEzpM0bIqILQ4C9ALw9AKgLR1RhSk1o0bH0yw=) 4: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: 8p4i+8lGsQJuWyTH+iuKQaYP20JlNN4z3S9SLB6427s=) 5: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 1s2d1lIxE1Al4H+SZIxvtOih3sTW4LAs63WiK1XPzmk=) 6: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 4ZqRPuB82tD4GgkAjxWzsofF8rVT1GZ2GlbAnR98YcY=) 7: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: ONWVqoqGDAvASJUxrEuLj1WiRORy7FeX/hp3qOHxxIM=) 8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: MLnnPRhSxrBAPO2PRy6L51ZnNG94AxrfvPay2pP4DPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: May 18 23:55:32 2024 GMT Not After : May 25 23:55:32 2024 GMT Subject: CN=66493ff5-01a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:85:be:a0:14:10:e3:61:d4:e3:03:98:c6: 5b:86:af:73:cb:2d:e8:ba:82:37:26:67:b5:37:7e: 76:0f:11:db:1e:37:af:4a:a2:36:a4:8d:1e:ae:6c: c6:f8:7a:a3:d7:70:ec:d2:ff:44:7a:d9:11:11:de: 6f:03:b5:d2:ba:ed:26:30:41:57:02:ec:8e:4f:3a: 83:c8:85:a5:e7:97:be:c0:30:f4:4a:88:c0:2d:eb: 6e:d8:fb:de:fd:24:37:29:a6:4b:e2:e6:d1:0d:7d: 06:a8:79:5a:4f:83:02:c0:89:7c:a5:1c:9d:c6:80: 33:6a:72:2f:c3:9d:e1:72:b9:d2:85:b0:80:0e:63: 08:fb:b2:53:10:cd:a9:fc:0f:5f:56:30:0d:cb:fb: 82:0e:79:12:60:48:6a:9b:40:cd:34:e3:be:a1:2d: dd:a5:33:9d:26:6d:8e:71:5a:3f:9a:04:c3:00:6d: 4e:bd:51:04:19:67:b9:85:45:97:9d:0b:33:74:d0: 5e:ce:57:5c:fa:67:38:4c:b1:fc:23:16:15:06:05: 55:4a:26:54:9b:46:d2:f5:cb:ef:cb:45:b2:ee:f8: 90:ac:dd:cb:ca:1e:91:b3:6e:9f:3f:85:2c:26:f6: c3:1f:9c:9f:cd:bd:39:ab:80:c5:2b:a9:b8:d3:3c: f0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7C:60:B7:AA:DB:C3:1C:41:C9:77:B5:FA:81:9C:AF:3B:11:F5:74 X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8c:15:59:40:7e:08:ee:23:a6:e6:f1:13:b7:cf:6f:ce:43: 3f:c7:35:ee:01:61:ce:0a:1a:88:3b:64:57:ed:bd:c8:60:84: 36:9f:04:26:a4:d2:44:61:26:58:a1:77:1d:17:70:84:23:36: 8a:03:1b:78:2d:75:d2:9f:6d:98:0e:7f:a9:d6:8b:67:83:3f: 4a:06:b0:56:0d:5a:ce:6d:89:3b:f7:6a:e9:f4:b8:d2:91:5d: 2c:ce:32:a9:29:44:7d:ea:74:fb:ac:61:e2:e8:6c:e8:68:d0: d0:81:a2:ea:1e:4c:39:b1:60:2c:23:18:aa:33:37:28:65:d8: 0b:b9:a4:6d:e2:ef:d0:c6:81:1c:24:95:8e:7b:26:e1:da:6f: 07:14:99:5e:c3:31:d0:11:48:54:8a:7b:67:aa:c5:d7:06:65: da:4e:09:40:25:36:f5:e4:a6:75:ee:e4:25:04:b1:01:35:12: fe:a7:9f:c9:74:db:4b:50:0a:0b:4d:3b:91:ec:c2:d9:53:a4: ea:2b:70:9c:8f:72:ef:63:11:c2:4d:3f:a3:a0:00:27:7e:ad: 9c:ad:2e:27:8f:be:eb:cf:68:36:91:79:ac:c4:6e:4d:a2:45: fe:92:02:bd:9e:e4:18:6c:34:e0:4e:13:73:ba:ef:87:95:33: cd:77:4f:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjQwNTE4MjM1NTMyWhcNMjQwNTI1MjM1NTMyWjAYMRYwFAYD VQQDEw02NjQ5M2ZmNS0wMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPCFvqAUEONh1OMDmMZbhq9zyy3ouoI3Jme1N352DxHbHjevSqI2pI0ermzG +Hqj13Ds0v9EetkREd5vA7XSuu0mMEFXAuyOTzqDyIWl55e+wDD0SojALetu2Pve /SQ3KaZL4ubRDX0GqHlaT4MCwIl8pRydxoAzanIvw53hcrnShbCADmMI+7JTEM2p /A9fVjANy/uCDnkSYEhqm0DNNOO+oS3dpTOdJm2OcVo/mgTDAG1OvVEEGWe5hUWX nQszdNBezldc+mc4TLH8IxYVBgVVSiZUm0bS9cvvy0Wy7viQrN3Lyh6Rs26fP4Us JvbDH5yfzb05q4DFK6m40zzwWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB8YLeq 28McQcl3tfqBnK87EfV0MB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB NXFnTndTN2tJdjZMYmpZX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHjBVZQH4I7iOm5vETt89vzkM/xzXuAWHOChqIO2RX7b3IYIQ2nwQm pNJEYSZYoXcdF3CEIzaKAxt4LXXSn22YDn+p1otngz9KBrBWDVrObYk792rp9LjS kV0szjKpKUR96nT7rGHi6GzoaNDQgaLqHkw5sWAsIxiqMzcoZdgLuaRt4u/QxoEc JJWOeybh2m8HFJlewzHQEUhUintnqsXXBmXaTglAJTb15KZ17uQlBLEBNRL+p5/J dNtLUAoLTTuR7MLZU6TqK3Ccj3LvYxHCTT+joAAnfq2crS4nj77rz2g2kXmsxG5N okX+kgK9nuQYbDTgThNzuu+HlTPNd0/C -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org