$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json) Hash identifier: iSTDrR5s9vugg1IrHIgU03CPXCvAPM4pIp+NTb9RmwI= Subject key identifier: 43:27:95:2E:E3:96:B8:DD:11:12:C8:AE:61:21:23:87:26:A9:7E:92 Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 3408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft Manifest number: 33E2 Signing time: Sat 18 May 2024 15:32:32 +0000 Manifest this update: Sat 18 May 2024 15:32:32 +0000 Manifest next update: Sat 25 May 2024 15:32:32 +0000 Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: WZbmuL/VMWNQpBKzNkwaq2U6TuihFcBsN+BDbClbWC8=) 2: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: xPg5tlEwqINCeswuqDxeM0Vb5MPzPj34N6MZyvaeEys=) 3: 0767F34C845911EA8651FB1AC4F9AE02.roa (hash: 6pt5a2BaseUFsdGiT+V7JpEnHO1scmuyvolAexchnN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13320 (0x3408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: May 18 15:32:32 2024 GMT Not After : May 25 15:32:32 2024 GMT Subject: CN=6648ca10-b7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:1f:e8:a5:59:00:7a:50:52:e9:a3:d4:12: a7:34:3e:b8:90:61:06:f8:e8:b3:70:a2:38:17:5b: ff:63:6c:54:88:a0:49:70:65:da:6a:7c:81:4f:bb: 25:49:c0:9d:3e:c9:e0:85:8c:9c:64:75:50:c3:4c: 86:54:14:3a:17:15:3d:3b:44:6b:12:eb:5a:e9:c6: 24:4a:cb:99:cc:cb:a6:12:5c:da:2d:11:b7:3a:42: ca:9f:ba:b0:cf:3c:9b:33:f0:83:9c:b7:6a:7f:cd: ac:1d:c7:da:71:18:5b:ee:3c:b8:ea:86:5c:bc:ce: 63:80:0b:39:f5:ed:1d:e5:ff:31:2c:68:0a:05:89: 7a:e8:a6:79:42:82:8e:2b:a1:19:ad:13:2f:5f:e8: d4:ef:86:18:fe:d3:d1:58:3e:23:5b:08:6f:aa:3c: d2:82:48:2a:e9:c3:17:4c:80:fc:96:c3:f7:bc:12: b9:d4:41:6c:64:a7:20:fa:b2:36:9a:f3:c0:0a:53: a5:8a:6e:73:23:0c:c3:af:2c:8f:80:0c:65:36:ab: b6:6b:c4:16:96:d6:c5:15:69:8c:7a:8a:be:ae:14: 03:e6:0b:dd:1e:68:29:f6:e3:da:0f:28:bd:e1:64: c0:28:b3:d1:3a:84:03:ba:80:cc:4a:83:5e:75:78: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:27:95:2E:E3:96:B8:DD:11:12:C8:AE:61:21:23:87:26:A9:7E:92 X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c1:78:e9:54:1b:ac:54:e3:48:df:51:23:ff:6a:35:68:82: 25:ee:4b:62:d7:22:f3:f4:bb:50:e6:1e:74:b6:22:fd:5c:e6: 47:50:ca:73:33:02:ea:d9:d9:07:77:4b:ef:1c:f2:94:41:31: df:b6:44:86:f4:c5:80:37:6e:e7:71:09:aa:95:c9:cd:33:da: 79:42:26:96:bb:99:c2:e7:39:fa:f8:8f:06:10:28:e9:95:b7: 5b:33:ef:55:f6:d8:71:88:27:22:29:2a:d1:a2:2c:fc:e1:11: 2c:c6:59:7d:e9:8c:37:ec:1a:15:d8:2f:81:0a:33:ef:38:e1: f9:1f:1e:0b:98:d2:e0:14:0a:ec:21:1b:70:4c:d9:93:2c:3c: e2:8a:bc:16:d0:1a:33:a3:b1:86:03:05:62:8d:2f:ec:82:9d: 35:3e:f2:36:99:05:53:8a:4c:3f:99:4a:31:f7:08:62:a3:d0: 8c:26:5d:57:da:ac:b2:0d:40:7a:23:ba:29:91:85:0a:6c:30: 1a:5f:9f:d0:21:92:57:45:e9:73:06:b3:82:9f:38:41:d1:6b: 35:a9:1f:b7:16:ed:8e:12:ce:3b:76:6b:ca:2d:47:1a:e8:8a: e5:90:71:cc:ba:2a:c1:76:62:4f:cc:b9:10:4a:29:1e:0c:4d: d1:24:ef:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjQwNTE4MTUzMjMyWhcNMjQwNTI1MTUzMjMyWjAYMRYwFAYD VQQDEw02NjQ4Y2ExMC1iN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApB4f6KVZAHpQUumj1BKnND64kGEG+OizcKI4F1v/Y2xUiKBJcGXaanyBT7sl ScCdPsnghYycZHVQw0yGVBQ6FxU9O0RrEuta6cYkSsuZzMumElzaLRG3OkLKn7qw zzybM/CDnLdqf82sHcfacRhb7jy46oZcvM5jgAs59e0d5f8xLGgKBYl66KZ5QoKO K6EZrRMvX+jU74YY/tPRWD4jWwhvqjzSgkgq6cMXTID8lsP3vBK51EFsZKcg+rI2 mvPAClOlim5zIwzDryyPgAxlNqu2a8QWltbFFWmMeoq+rhQD5gvdHmgp9uPaDyi9 4WTAKLPROoQDuoDMSoNedXi5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMnlS7j lrjdERLIrmEhI4cmqX6SMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk0Ri9BMDI5QTUyNjFEQUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUt TzE2WGljWjhZNzdKSENmTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuwXjpVBusVONI31Ej/2o1aIIl7kti1yLz9LtQ5h50tiL9XOZHUMpz MwLq2dkHd0vvHPKUQTHftkSG9MWAN27ncQmqlcnNM9p5QiaWu5nC5zn6+I8GECjp lbdbM+9V9thxiCciKSrRoiz84REsxll96Yw37BoV2C+BCjPvOOH5Hx4LmNLgFArs IRtwTNmTLDziirwW0Bozo7GGAwVijS/sgp01PvI2mQVTikw/mUox9whio9CMJl1X 2qyyDUB6I7opkYUKbDAaX5/QIZJXRelzBrOCnzhB0Ws1qR+3Fu2OEs47dmvKLUca 6IrlkHHMuirBdmJPzLkQSikeDE3RJO9b -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org