$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft File: f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json) Hash identifier: y6VDsezSS/IwVlMxIFlQMNrhjtkaQc2WwO4Q/1OB4pM= Subject key identifier: C7:F6:36:26:8B:78:CA:27:FF:5D:FF:2D:CE:41:D7:FC:95:B1:41:AA Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 Certificate issuer: /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Certificate serial: 0B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft Manifest number: 0B0A Signing time: Sat 18 May 2024 19:53:27 +0000 Manifest this update: Sat 18 May 2024 19:53:27 +0000 Manifest next update: Sat 25 May 2024 19:53:27 +0000 Files and hashes: 1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: SuJvjaAxQx5B7LM+JNERkYhJd3rD8IbWdH8cmBSrcYs=) 2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: hq+WCeu57GK7QwPLCZIIEFuAz033VUg/q65IqyekInE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2832 (0xb10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Validity Not Before: May 18 19:53:27 2024 GMT Not After : May 25 19:53:27 2024 GMT Subject: CN=66490737-824d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a0:6d:73:a3:27:2b:3b:5e:0f:df:5c:b7:51: 25:8b:ba:bc:ac:07:c8:c5:eb:66:aa:e3:0d:75:a1: 88:5d:3b:16:ad:f6:4f:c0:32:f8:32:1f:b5:5a:cb: 1c:2a:fe:6a:1f:7d:2c:bb:88:79:2a:53:f0:37:6e: f4:cb:f4:9b:eb:ff:cb:04:90:6b:eb:b2:44:13:f5: 47:38:09:dc:12:3a:ed:cf:d0:e0:2b:de:b9:0f:00: 83:b3:06:3e:1a:1e:e0:8d:a6:fe:50:ac:11:2e:64: 57:64:99:e0:33:91:8c:90:e0:47:2e:1d:81:22:c7: d5:0d:63:1b:88:ce:b7:82:8b:00:9d:4a:3f:0f:3e: 8a:c2:31:d4:aa:a2:bc:94:1b:e6:a9:73:cf:f3:10: 45:44:76:60:3e:fa:0b:f0:bf:b7:99:58:dc:03:84: 8e:ea:0c:f1:8b:04:3e:32:3a:95:6c:2a:d6:05:72: 7a:22:73:2c:eb:64:49:8c:fc:b8:37:c4:fe:ff:be: ec:78:6a:ac:56:80:2a:b9:98:53:89:4e:e0:5f:9a: 5d:79:f9:67:c0:b7:c3:48:fa:78:f8:1b:c4:72:63: 15:f2:a2:59:86:3a:69:fb:85:22:48:8e:4b:ae:e4: 57:83:d2:0b:5f:96:3b:57:af:34:f0:4c:62:c2:89: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F6:36:26:8B:78:CA:27:FF:5D:FF:2D:CE:41:D7:FC:95:B1:41:AA X509v3 Authority Key Identifier: keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:b6:f3:75:2d:9c:f5:67:73:bc:27:73:20:b8:09:ba:12: 36:a9:c2:5f:b3:0d:99:51:bc:9e:81:ee:d4:a4:b8:f0:aa:10: 98:d9:f7:f4:05:94:60:ea:4b:6e:4b:93:09:f3:3d:d9:32:28: 8c:c9:e3:33:22:7f:06:6e:48:cb:28:76:47:9c:95:2a:71:8a: 61:c2:6b:1c:7d:c8:a0:6d:20:ce:d2:2c:0f:a4:01:c2:67:6d: ca:cf:c4:ca:a6:ca:0c:e3:5e:31:ac:91:52:48:a0:9f:9c:a7: f7:23:c6:69:e0:81:3f:09:d3:63:88:89:bd:7f:84:89:0b:f8: 8e:3f:16:f5:4a:a3:38:d2:17:d8:40:e9:cb:3e:cc:c9:2c:36: 70:69:9e:3c:9e:cf:8b:cf:bb:58:27:72:6e:0b:dd:ec:b8:15: 27:4b:26:cc:72:b0:ef:a5:e9:5c:1c:f7:34:4a:4e:9c:b1:f6: 9c:aa:8b:56:26:3b:7b:4e:9c:ae:59:6f:47:ca:c5:db:8c:e1: 39:fa:43:89:50:8e:98:04:8a:70:ae:88:9f:c6:65:d1:ea:3d: 66:e1:ba:0b:a2:0a:08:8b:1d:ad:ea:92:ad:f9:9f:6e:d9:1a: 2e:f0:31:ab:77:ab:1d:d7:7d:6e:ae:25:00:72:97:95:92:52: 29:70:db:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3N0IxMTAvBgNVBAUTKDdGN0QzMjBGMkEwN0U0MzNEREJERkUyODU3RjVEMzE5 MzU0NTE3QjkwHhcNMjQwNTE4MTk1MzI3WhcNMjQwNTI1MTk1MzI3WjAYMRYwFAYD VQQDEw02NjQ5MDczNy04MjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aBtc6MnKzteD99ct1Eli7q8rAfIxetmquMNdaGIXTsWrfZPwDL4Mh+1Wssc Kv5qH30su4h5KlPwN270y/Sb6//LBJBr67JEE/VHOAncEjrtz9DgK965DwCDswY+ Gh7gjab+UKwRLmRXZJngM5GMkOBHLh2BIsfVDWMbiM63gosAnUo/Dz6KwjHUqqK8 lBvmqXPP8xBFRHZgPvoL8L+3mVjcA4SO6gzxiwQ+MjqVbCrWBXJ6InMs62RJjPy4 N8T+/77seGqsVoAquZhTiU7gX5pdeflnwLfDSPp4+BvEcmMV8qJZhjpp+4UiSI5L ruRXg9ILX5Y7V6808Exiwoml8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf2NiaL eMon/13/Lc5B1/yVsUGqMB8GA1UdIwQYMBaAFH99Mg8qB+Qz3b3+KFf10xk1RRe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODc3Qi8yNTkxMDExRTFC RDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVEUGR2ZjRvVl9YVEdUVkZG N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMHlEeW9INURQZHZmNG9WX1hUR1RWRkY3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODc3Qi8yNTkxMDExRTFCRDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVE UGR2ZjRvVl9YVEdUVkZGN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/87bzdS2c9WdzvCdzILgJuhI2qcJfsw2ZUbyege7UpLjwqhCY2ff0 BZRg6ktuS5MJ8z3ZMiiMyeMzIn8GbkjLKHZHnJUqcYphwmscfcigbSDO0iwPpAHC Z23Kz8TKpsoM414xrJFSSKCfnKf3I8Zp4IE/CdNjiIm9f4SJC/iOPxb1SqM40hfY QOnLPszJLDZwaZ48ns+Lz7tYJ3JuC93suBUnSybMcrDvpelcHPc0Sk6csfacqotW Jjt7TpyuWW9HysXbjOE5+kOJUI6YBIpwroifxmXR6j1m4boLogoIix2t6pKt+Z9u 2Rou8DGrd6sd131uriUAcpeVklIpcNvY -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org