$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: JN3W+j4QehAMT9nyQeFXR1/8XEr4W+kTM2BUFqntCUQ= Subject key identifier: DA:B1:2B:29:A9:E9:43:68:7B:AA:0E:A2:E4:FE:C6:16:6F:20:89:E2 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 33CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 33C7 Signing time: Sat 18 May 2024 15:06:07 +0000 Manifest this update: Sat 18 May 2024 15:06:07 +0000 Manifest next update: Sat 25 May 2024 15:06:07 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: SWhHfplYyA2NP4ePE2SR61RSpaLmVml3GlFP0HiYg3k=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: zCjW74BNINc4Oe8jK6oFEsAHN/HQVGCYlLcNtLolElw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13260 (0x33cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: May 18 15:06:07 2024 GMT Not After : May 25 15:06:07 2024 GMT Subject: CN=6648c3df-4043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:c0:ce:3e:79:97:d4:f7:1a:1f:a4:c2:d5: 29:77:b2:51:aa:51:ac:bf:27:c7:a3:9d:e7:67:07: fc:5a:0d:17:8b:d0:49:38:db:f8:7f:2a:2f:4e:81: b9:80:c5:4f:1b:19:fe:bf:15:60:ac:9d:bc:4b:5f: 37:65:87:21:fb:7c:09:a3:37:cf:d3:d9:fb:6c:6c: 7d:b1:50:be:26:46:b3:ce:98:35:19:ac:b6:be:a6: 1e:b6:ea:c1:f7:89:35:a6:e0:27:3c:56:10:6e:3a: c2:d0:aa:7b:9f:33:e0:33:1b:64:46:bb:1a:d3:46: 8f:17:e7:90:17:10:3f:73:78:1e:f7:03:5d:2e:85: 73:20:cf:1a:50:4d:d8:23:48:e6:5e:18:c5:ee:ab: c0:a3:0f:f1:a2:44:99:73:5d:5f:41:67:c9:47:1a: ee:a3:ff:1d:54:ef:8c:28:38:ff:a5:ad:3e:d7:7d: 25:2d:1d:cc:e0:0a:4d:b4:37:7e:1b:fd:c1:88:9b: e5:e8:8e:6e:05:54:45:3f:c7:e5:c8:d5:ee:af:3f: da:c7:b2:cc:cd:01:62:3a:58:c8:f6:36:dc:49:2c: 13:e0:85:98:34:89:26:cb:a2:9a:c5:04:82:39:72: ae:16:4f:48:7e:30:d5:6e:76:5b:61:46:7c:18:82: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B1:2B:29:A9:E9:43:68:7B:AA:0E:A2:E4:FE:C6:16:6F:20:89:E2 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:52:aa:ff:fb:13:e0:c2:89:79:94:7f:30:4e:0f:f8:6e:b6: 1f:7d:15:35:7a:d8:d2:5b:b9:ed:39:7f:53:9e:5c:d9:f1:b6: e4:01:53:2a:d4:54:51:18:21:95:d6:45:cc:ac:67:23:c1:d8: 39:56:75:59:62:e7:27:4e:8f:5c:a5:7b:8d:5b:d0:f8:53:37: e2:7b:03:73:1c:b9:5e:a4:64:8e:d1:73:19:3a:53:57:63:49: 7a:41:37:ee:dc:a5:1a:fe:88:64:9e:57:ba:12:66:fa:8c:c5: c0:1b:14:39:40:d3:86:ce:8e:6b:be:80:c0:79:0e:1a:a8:27: 06:f9:c5:ec:4d:8b:e7:95:64:90:a9:7e:e8:bc:64:12:b3:03: e8:bb:08:93:2e:50:67:52:24:9e:d0:74:0c:0f:0f:30:3b:fb: b6:b7:e4:cd:cf:25:44:bf:68:80:c2:e9:39:d0:77:1a:42:51: cf:47:21:6c:7c:87:41:69:28:24:f9:0d:ee:1c:3f:ac:ae:a3: 34:eb:54:5b:14:06:d4:bb:d1:aa:4a:d2:a7:f9:fc:ca:f1:36: c7:f0:8b:5f:b4:4f:5f:84:ca:ec:7d:ef:40:a8:56:00:76:ec: 9f:f2:4f:20:32:8b:a8:7c:e3:b0:7e:53:5d:df:8f:c4:c8:8d: b8:8f:23:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjQwNTE4MTUwNjA3WhcNMjQwNTI1MTUwNjA3WjAYMRYwFAYD VQQDEw02NjQ4YzNkZi00MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8jAzj55l9T3Gh+kwtUpd7JRqlGsvyfHo53nZwf8Wg0Xi9BJONv4fyovToG5 gMVPGxn+vxVgrJ28S183ZYch+3wJozfP09n7bGx9sVC+Jkazzpg1Gay2vqYeturB 94k1puAnPFYQbjrC0Kp7nzPgMxtkRrsa00aPF+eQFxA/c3ge9wNdLoVzIM8aUE3Y I0jmXhjF7qvAow/xokSZc11fQWfJRxruo/8dVO+MKDj/pa0+130lLR3M4ApNtDd+ G/3BiJvl6I5uBVRFP8flyNXurz/ax7LMzQFiOljI9jbcSSwT4IWYNIkmy6KaxQSC OXKuFk9IfjDVbnZbYUZ8GIL5SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqxKymp 6UNoe6oOouT+xhZvIIniMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPUqr/+xPgwol5lH8wTg/4brYffRU1etjSW7ntOX9TnlzZ8bbkAVMq 1FRRGCGV1kXMrGcjwdg5VnVZYucnTo9cpXuNW9D4UzfiewNzHLlepGSO0XMZOlNX Y0l6QTfu3KUa/ohknle6Emb6jMXAGxQ5QNOGzo5rvoDAeQ4aqCcG+cXsTYvnlWSQ qX7ovGQSswPouwiTLlBnUiSe0HQMDw8wO/u2t+TNzyVEv2iAwuk50HcaQlHPRyFs fIdBaSgk+Q3uHD+srqM061RbFAbUu9GqStKn+fzK8TbH8ItftE9fhMrsfe9AqFYA duyf8k8gMouofOOwflNd34/EyI24jyPB -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org