$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: wJoJq1mYxDwd/oB31GpdO6ueTBD+0enmPAn8MSg9kfg= Subject key identifier: 1D:C1:A1:D0:C2:61:C5:C7:7D:BB:53:A4:8F:07:5A:12:20:3F:C7:78 Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 0349 Signing time: Sun 19 May 2024 02:56:18 +0000 Manifest this update: Sun 19 May 2024 02:56:17 +0000 Manifest next update: Sun 26 May 2024 02:56:17 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: 43j6ghteLUIEBnYZu27jSD3WGTFow0a3IqPAYaSTZA4=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: Z9M2BTILWpi1zrWrtTIZdVPHhfVkCZzh9YzYElbGzh4=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Pf5KnCT9Yqm3ZhGKRmydd6Ca2CU4m9+AK0ym0MYtdss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: May 19 02:56:17 2024 GMT Not After : May 26 02:56:17 2024 GMT Subject: CN=66496a52-3a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:9b:8e:b5:8b:1b:c2:ef:87:f9:ad:86:78: d6:1a:3b:b1:66:fa:f3:b1:cb:31:a6:d4:70:71:f1: b3:3a:6b:95:8b:f3:8e:7f:6f:2a:35:c2:5e:08:49: 0a:2a:3d:b7:65:6f:b4:45:a2:34:3e:29:0a:20:ff: 87:87:e9:f8:3f:7a:8f:06:27:c4:ba:8c:63:1d:98: ce:72:07:03:80:e4:73:37:71:98:01:35:9c:b5:2f: b7:fb:a7:00:a0:42:2a:de:ab:1a:ce:d6:66:c4:3f: 2a:79:a2:66:bb:a8:a7:7e:a5:8e:2d:af:48:1c:06: c9:bd:3e:14:32:88:50:f0:40:1c:58:a4:67:82:06: 3d:7e:b3:d7:4e:bb:4f:a9:00:f0:f3:e5:2a:f4:b9: d4:ca:04:5a:46:d5:91:bf:50:88:ab:6b:a8:b4:c0: 16:42:62:86:97:13:ed:d3:ad:16:b6:40:2c:ca:8c: 7c:16:8f:2a:9a:90:63:56:11:c5:e7:4b:ff:4a:b6: 11:99:57:b1:4c:34:2b:7c:b6:41:0f:94:15:df:2f: c0:8a:8c:5f:52:80:ea:d5:dd:ad:45:d8:15:89:25: b1:1b:cc:92:e7:ce:a3:15:6c:5a:f9:fb:9e:5a:55: e0:b1:16:a3:41:e1:f5:04:66:96:f4:2e:12:1b:4a: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C1:A1:D0:C2:61:C5:C7:7D:BB:53:A4:8F:07:5A:12:20:3F:C7:78 X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ae:cb:c2:15:51:58:51:e2:14:1e:4c:99:72:5f:05:a4:15: f0:fa:e7:5d:ce:fd:33:d3:fb:97:0b:18:0d:fb:60:66:2a:eb: 6d:11:51:75:14:69:bb:15:b7:81:75:d8:c9:bc:10:11:f2:e4: ec:2a:34:c9:ef:ee:ba:06:4b:21:96:4d:9c:c6:b5:cf:e0:b1: 64:21:d8:62:ea:55:7d:17:29:cc:6c:bb:b9:cd:27:a5:ed:80: aa:8e:27:8f:18:39:a0:85:5c:e2:58:9e:97:bf:e2:e6:79:84: b6:27:2d:e7:d9:61:d9:9f:34:f0:91:1e:0d:1a:e4:66:b3:2e: 55:69:80:27:a1:b8:52:18:31:f8:db:ac:cc:ca:46:1d:e5:75: 82:dd:f9:62:8e:ff:91:65:db:14:c2:c1:79:9b:a5:eb:50:77: 49:90:1f:92:6e:d3:1c:62:20:85:ca:e9:9a:f7:3c:b6:3d:99: e0:53:6c:82:22:aa:69:d7:93:91:e3:e4:d8:30:ca:53:30:94: 21:ca:3a:e2:cd:28:b8:90:c4:e7:11:9b:60:2b:15:6b:39:95: b0:40:61:1a:72:04:c1:09:8f:09:5b:6a:20:e3:b7:80:bf:1f: 5f:a6:d3:c3:11:e6:67:b1:32:b6:6d:e0:66:00:86:3d:3f:26: 05:ed:67:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjQwNTE5MDI1NjE3WhcNMjQwNTI2MDI1NjE3WjAYMRYwFAYD VQQDEw02NjQ5NmE1Mi0zYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj+bjrWLG8Lvh/mthnjWGjuxZvrzscsxptRwcfGzOmuVi/OOf28qNcJeCEkK Kj23ZW+0RaI0PikKIP+Hh+n4P3qPBifEuoxjHZjOcgcDgORzN3GYATWctS+3+6cA oEIq3qsaztZmxD8qeaJmu6infqWOLa9IHAbJvT4UMohQ8EAcWKRnggY9frPXTrtP qQDw8+Uq9LnUygRaRtWRv1CIq2uotMAWQmKGlxPt060WtkAsyox8Fo8qmpBjVhHF 50v/SrYRmVexTDQrfLZBD5QV3y/AioxfUoDq1d2tRdgViSWxG8yS586jFWxa+fue WlXgsRajQeH1BGaW9C4SG0oVtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3BodDC YcXHfbtTpI8HWhIgP8d4MB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUrsvCFVFYUeIUHkyZcl8FpBXw+uddzv0z0/uXCxgN+2BmKuttEVF1 FGm7FbeBddjJvBAR8uTsKjTJ7+66Bkshlk2cxrXP4LFkIdhi6lV9FynMbLu5zSel 7YCqjiePGDmghVziWJ6Xv+LmeYS2Jy3n2WHZnzTwkR4NGuRmsy5VaYAnobhSGDH4 26zMykYd5XWC3flijv+RZdsUwsF5m6XrUHdJkB+SbtMcYiCFyuma9zy2PZngU2yC Iqpp15OR4+TYMMpTMJQhyjrizSi4kMTnEZtgKxVrOZWwQGEacgTBCY8JW2og47eA vx9fptPDEeZnsTK2beBmAIY9PyYF7WfM -----END CERTIFICATE-----Generated at Sun May 19 03:38:13 2024 by rpki-client on console-ams.rpki-client.org