$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: PhExKIvwJyxi1Fzj2rwEcTe5OmaT+DVbp4MlvK6zsz8= Subject key identifier: 5A:51:C7:BC:0A:7A:90:2D:E2:17:4A:A3:7F:F2:E6:52:93:B0:E3:BA Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 5F Signing time: Fri 31 May 2024 08:45:28 +0000 Manifest this update: Fri 31 May 2024 08:45:27 +0000 Manifest next update: Fri 07 Jun 2024 08:45:27 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: EK8HqiaTexfGATuNjklNvEUvO8GcpgivorC1gKZKcNs=) 2: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: EEnR1VX+Mw+8hC1yLfu7i9ybBTq/4oZP2T1jK7dOqe8=) 3: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: ag36mdDEIjwDi99xgo2sfLP9oQrM2cMUqwqJVKR+tc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: May 31 08:45:27 2024 GMT Not After : Jun 7 08:45:27 2024 GMT Subject: CN=66598e28-b010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:53:e0:db:0f:67:82:7f:7c:fa:45:3a:be: 71:cd:b9:40:8d:97:90:31:19:c8:9e:6f:e2:35:06: 91:02:99:41:47:c8:94:d7:bb:25:b3:ee:de:ac:44: 07:d8:0f:7c:0d:81:99:37:cf:aa:00:f5:cd:7a:97: 7a:98:fd:1d:44:9c:d3:73:05:a0:28:ac:5f:60:19: 6a:a6:ad:f4:c2:f6:b1:5d:db:2c:b5:d5:12:a2:fe: 0b:17:08:db:39:64:ba:d7:90:76:02:d4:27:72:23: 1e:81:c2:d9:75:69:2c:6e:e0:b6:1d:ca:ed:5a:74: 96:20:28:e9:83:bf:8f:ad:c0:56:ae:7b:6e:10:52: e8:62:36:e5:9d:f4:ee:52:92:0a:c6:cd:ec:2c:1d: 36:ae:90:70:4a:a1:b5:8a:5a:7f:be:9f:1b:91:4b: 1f:65:43:bf:e2:9b:e1:e7:3a:e3:99:63:c1:62:0f: 46:d6:1f:ce:f0:42:43:4f:39:8d:17:95:a8:5d:03: 21:aa:ee:10:95:15:f9:f7:ad:6d:cf:00:fa:7d:e9: f4:c4:8d:77:e0:ef:70:2b:e5:40:d3:e7:64:ca:bc: 29:05:55:c9:03:d6:3a:60:9c:0f:02:e5:76:1e:ea: cf:07:ec:d8:6f:8d:8b:5c:f0:58:0f:25:c3:8e:36: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:51:C7:BC:0A:7A:90:2D:E2:17:4A:A3:7F:F2:E6:52:93:B0:E3:BA X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:bb:cf:72:6b:9f:f6:8e:ed:6d:ea:2e:80:97:99:ab:79:ef: 62:03:8a:5d:7f:a9:d5:e3:dc:d3:1c:4e:3d:31:c6:f3:16:06: 3e:72:18:29:c5:ce:19:a2:3a:72:88:01:4d:0c:c8:01:dd:79: fa:11:2b:78:d8:98:b5:da:ce:d5:36:55:8e:8a:17:b2:af:f8: 3d:55:25:13:b2:37:db:22:75:da:06:2c:f3:0c:10:09:de:54: 45:d7:a1:88:d5:9e:dc:90:e3:71:a9:55:60:4d:1a:2f:e4:58: 2c:ed:aa:de:cf:20:64:e6:91:9e:09:9f:a1:96:8d:e0:23:39: db:da:a8:29:70:8d:e2:8e:cc:cf:b7:14:ff:4f:c9:b9:70:96: bf:15:58:1a:c3:4c:2d:ec:2c:27:ae:13:30:5a:28:53:38:39: 5c:64:bf:e4:33:2d:6c:85:bc:2f:1f:ff:b2:4e:a8:e4:09:28: cf:a0:61:9e:f6:29:95:5a:72:af:b8:af:5c:dc:0c:1c:e2:02: b4:02:ec:91:16:bb:0e:e9:2f:eb:82:b7:74:80:76:1a:4f:8f: 5b:c7:28:ff:cd:50:00:83:24:7c:0e:93:d4:90:94:a0:36:11: 37:57:60:5c:b5:e0:66:fa:5a:7b:0b:d9:0f:a4:8d:b5:3d:73: 72:1a:b7:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEMzMzExMC8GA1UEBRMoQUYyRUUwNDQxMjM1NkFCRkQ4RTE5QUUyQzFCMjJBNzM3 Q0RGNUU5RTAeFw0yNDA1MzEwODQ1MjdaFw0yNDA2MDcwODQ1MjdaMBgxFjAUBgNV BAMTDTY2NTk4ZTI4LWIwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzPVPg2w9ngn98+kU6vnHNuUCNl5AxGcieb+I1BpECmUFHyJTXuyWz7t6sRAfY D3wNgZk3z6oA9c16l3qY/R1EnNNzBaAorF9gGWqmrfTC9rFd2yy11RKi/gsXCNs5 ZLrXkHYC1CdyIx6Bwtl1aSxu4LYdyu1adJYgKOmDv4+twFaue24QUuhiNuWd9O5S kgrGzewsHTaukHBKobWKWn++nxuRSx9lQ7/im+HnOuOZY8FiD0bWH87wQkNPOY0X lahdAyGq7hCVFfn3rW3PAPp96fTEjXfg73Ar5UDT52TKvCkFVckD1jpgnA8C5XYe 6s8H7NhvjYtc8FgPJcOONi/LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWlHHvAp6 kC3iF0qjf/LmUpOw47owHwYDVR0jBBgwFoAUry7gRBI1ar/Y4ZriwbIqc3zfXp4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4QzMzLzk1NkNCMDg2OTgx QjExRUVBQjBGQzkyMkM0RjlBRTAyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6Zlhw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnk3Z1JCSTFhcl9ZNFpyaXdiSXFjM3pmWHA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 QzMzLzk1NkNCMDg2OTgxQjExRUVBQjBGQzkyMkM0RjlBRTAyL3J5N2dSQkkxYXJf WTRacml3YklxYzN6ZlhwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEO7z3Jrn/aO7W3qLoCXmat572IDil1/qdXj3NMcTj0xxvMWBj5yGCnF zhmiOnKIAU0MyAHdefoRK3jYmLXaztU2VY6KF7Kv+D1VJROyN9siddoGLPMMEAne VEXXoYjVntyQ43GpVWBNGi/kWCztqt7PIGTmkZ4Jn6GWjeAjOdvaqClwjeKOzM+3 FP9Pyblwlr8VWBrDTC3sLCeuEzBaKFM4OVxkv+QzLWyFvC8f/7JOqOQJKM+gYZ72 KZVacq+4r1zcDBziArQC7JEWuw7pL+uCt3SAdhpPj1vHKP/NUACDJHwOk9SQlKA2 ETdXYFy14Gb6WnsL2Q+kjbU9c3Iat0w= -----END CERTIFICATE-----Generated at Fri May 31 10:01:38 2024 by rpki-client on console-ams.rpki-client.org