$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: pXEssCgV1zmCJRgLHugBdBZLkHM5ax37W7iomUXjl2c= Subject key identifier: E3:47:C8:41:EE:04:98:B8:0F:B1:B0:BA:FE:F4:49:03:F7:17:EB:4A Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 06E1 Signing time: Sat 18 May 2024 22:51:46 +0000 Manifest this update: Sat 18 May 2024 22:51:45 +0000 Manifest next update: Sat 25 May 2024 22:51:45 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: 7CTHIHWN0mj8HFB1oKIm97bjVSZ+sS9eSi/SplKzhH8=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: uBwfryVcsP8uTX6hhh9pLgUCTBG63TRSnG/7me0KeQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: May 18 22:51:45 2024 GMT Not After : May 25 22:51:45 2024 GMT Subject: CN=66493101-9a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:98:07:5d:65:e6:d8:6e:2f:b6:99:a3:ab: 48:c5:97:11:90:93:1b:07:2d:a9:6b:20:a0:ca:cd: 59:e2:48:a8:c1:39:f0:ca:e9:5e:83:85:fb:f4:13: f7:c3:99:83:08:d7:26:2a:e0:ee:99:74:49:c0:69: 33:a4:86:52:e5:31:90:9e:dd:2d:b1:bb:45:ff:c8: 6d:c1:f2:c2:9a:e2:4c:e0:df:a3:ec:46:51:12:ab: f9:5b:e2:54:a4:ea:ae:5b:01:43:25:14:d4:bc:5d: 39:75:e9:aa:96:84:d0:d7:b4:e9:8c:40:67:58:b6: b7:cd:34:6c:2a:c4:ee:c8:a7:2d:d8:45:f9:1a:e0: ee:31:65:97:69:47:20:fe:86:64:3d:24:88:68:d1: b1:1c:0a:53:b5:24:75:8f:48:59:c6:c0:05:25:8e: 05:00:ef:f9:75:5e:5a:0e:dc:9e:7a:f0:54:df:cc: d8:d5:ee:e1:0a:97:e5:70:8b:28:d7:76:fb:2a:2e: 3e:fd:ad:f5:84:c7:99:c0:bb:6f:e3:6d:b3:50:76: ed:fa:ee:a8:1c:7f:d2:e2:2b:93:be:0c:9b:ce:02: cd:92:73:19:c3:06:4e:f3:0b:c8:20:ee:8d:84:c0: 3b:d6:65:92:d9:f1:f4:66:20:88:8d:2a:0e:50:f1: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:47:C8:41:EE:04:98:B8:0F:B1:B0:BA:FE:F4:49:03:F7:17:EB:4A X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ac:15:2d:f7:91:cf:eb:32:6a:6c:5c:2d:bd:6f:bb:a0:04: 68:5c:80:e4:1a:14:24:2c:79:77:cd:63:1e:d9:1e:7f:30:37: d4:75:1d:78:5d:38:df:ec:8f:46:02:3d:05:26:17:b0:74:16: 19:c8:44:c8:9d:23:5d:88:c5:60:82:ca:1a:57:94:5e:cf:05: c0:b1:4d:b5:5b:ca:2b:27:62:35:4f:a3:b7:63:b0:80:40:1f: d2:8c:0f:b1:f4:c4:41:b3:51:68:dc:4c:44:3a:9c:36:d5:86: 2d:32:51:ee:cf:b7:1d:55:d8:08:cb:7d:4a:2e:d2:59:80:7a: 84:c1:d5:53:3f:67:96:1c:3a:1b:20:13:53:f1:d1:ab:20:ca: 91:cb:bb:77:36:f0:ad:3a:01:59:5a:ae:19:24:67:2c:8c:42: 1d:29:e4:26:e9:f9:af:0e:12:cb:5f:ea:60:d3:40:23:90:8d: c2:a5:24:43:44:43:63:a7:d7:e4:e0:e9:b5:3e:36:4f:c3:d2: 55:20:36:80:f8:f7:56:60:6f:f2:22:5c:37:b3:e8:a8:d4:2c: 8d:64:e7:a4:c6:8b:53:8d:8e:2c:66:de:70:c0:ea:68:2f:8d: fd:47:19:c4:52:d4:52:a8:80:04:0c:d6:7b:18:10:cf:d8:8d: 66:7a:2d:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjQwNTE4MjI1MTQ1WhcNMjQwNTI1MjI1MTQ1WjAYMRYwFAYD VQQDEw02NjQ5MzEwMS05YTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14mYB11l5thuL7aZo6tIxZcRkJMbBy2payCgys1Z4kiowTnwyuleg4X79BP3 w5mDCNcmKuDumXRJwGkzpIZS5TGQnt0tsbtF/8htwfLCmuJM4N+j7EZREqv5W+JU pOquWwFDJRTUvF05demqloTQ17TpjEBnWLa3zTRsKsTuyKct2EX5GuDuMWWXaUcg /oZkPSSIaNGxHApTtSR1j0hZxsAFJY4FAO/5dV5aDtyeevBU38zY1e7hCpflcIso 13b7Ki4+/a31hMeZwLtv422zUHbt+u6oHH/S4iuTvgybzgLNknMZwwZO8wvIIO6N hMA71mWS2fH0ZiCIjSoOUPFaUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONHyEHu BJi4D7Gwuv70SQP3F+tKMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjrBUt95HP6zJqbFwtvW+7oARoXIDkGhQkLHl3zWMe2R5/MDfUdR14 XTjf7I9GAj0FJhewdBYZyETInSNdiMVggsoaV5RezwXAsU21W8orJ2I1T6O3Y7CA QB/SjA+x9MRBs1Fo3ExEOpw21YYtMlHuz7cdVdgIy31KLtJZgHqEwdVTP2eWHDob IBNT8dGrIMqRy7t3NvCtOgFZWq4ZJGcsjEIdKeQm6fmvDhLLX+pg00AjkI3CpSRD RENjp9fk4Om1PjZPw9JVIDaA+PdWYG/yIlw3s+io1CyNZOekxotTjY4sZt5wwOpo L439RxnEUtRSqIAEDNZ7GBDP2I1mei0j -----END CERTIFICATE-----Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org