$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json) Hash identifier: LWxB7Ry17VGogWHPQwrO7Ysn9HvHPhjYXtWOz2lG6E0= Subject key identifier: 5C:9F:41:15:01:D8:88:DF:3B:6D:38:6B:56:08:3F:55:55:16:1E:51 Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft Manifest number: 01BD Signing time: Sun 19 May 2024 04:50:12 +0000 Manifest this update: Sun 19 May 2024 04:50:12 +0000 Manifest next update: Sun 26 May 2024 04:50:12 +0000 Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: IwqVJc2/UW8siUk1IF6YQhqoAZdqkckuC2auDOPwwEI=) 2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: B/zgiN9MS0iQF43gYmMn2kejnWQniViVlNn30/WInIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Validity Not Before: May 19 04:50:12 2024 GMT Not After : May 26 04:50:12 2024 GMT Subject: CN=66498504-729d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:31:8f:ee:19:9d:17:3f:4a:be:2d:e5:6c: bd:24:30:95:55:51:ca:01:8b:f3:9b:36:71:13:5b: 5a:82:08:2b:be:0c:e7:fa:62:2a:77:1d:f6:dd:78: 30:d4:58:c4:f1:b4:e2:02:21:90:ae:23:a8:1d:a0: 5c:fa:44:10:90:0b:a8:de:4f:9f:32:e8:28:d1:97: c9:f0:4c:44:b3:93:fa:77:90:94:b8:dd:ce:95:ff: 86:4a:6d:69:0c:f2:25:9b:d8:21:e9:35:9d:da:2e: 48:06:18:e0:e1:50:97:a2:4a:ca:43:62:3e:cf:ec: fb:9f:03:d2:51:a8:20:88:72:b8:b2:7c:71:69:b3: b7:ae:22:e8:55:8c:72:dd:da:53:a8:c4:49:a0:e6: 2a:92:39:6c:db:14:ab:af:76:bb:21:e2:fc:c9:c6: 74:00:d6:80:0d:7c:38:9f:a8:b1:fd:bd:db:fa:be: ef:49:cf:85:68:80:0c:56:8f:b8:30:00:00:6c:2a: 9c:d8:81:d9:1e:ca:b6:3b:c9:24:df:59:42:33:59: 3b:c9:ae:d8:1c:71:f1:43:cb:db:0a:19:73:47:97: ec:ca:97:2d:e9:19:69:c4:d2:f0:4b:d0:2e:5b:61: 3f:7c:1d:dc:d3:89:6d:1e:f7:1e:b2:6b:4c:91:24: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9F:41:15:01:D8:88:DF:3B:6D:38:6B:56:08:3F:55:55:16:1E:51 X509v3 Authority Key Identifier: keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1b:10:7b:00:3c:b4:ca:3e:65:5e:77:8b:42:ee:53:2a:70: fb:26:89:4d:f3:88:06:ee:e9:ca:d0:ea:67:3a:44:8c:77:db: 10:11:80:e2:27:66:50:00:a9:21:0f:4d:6e:13:8a:92:19:cb: 13:dd:26:2c:f6:e0:13:80:63:ac:1b:f3:db:88:88:eb:a9:5c: 1b:08:fd:9f:bf:33:46:8f:ee:6f:f2:06:43:c8:a2:cf:08:a0: ab:f2:04:40:74:01:ca:de:39:70:8a:59:2d:c8:29:8d:c1:8e: e3:4c:ab:01:59:fb:70:da:56:a2:ee:4b:96:39:00:7f:8d:29: 83:85:f8:77:a9:7e:eb:b0:9b:6b:ad:f4:02:c7:e0:f1:be:52: 79:50:8e:42:10:f8:45:34:71:ae:8a:57:56:60:e4:44:3c:35: 17:38:ff:34:a2:2a:c4:e0:fb:9c:5a:15:1e:87:5e:b9:59:f7: c2:c6:9d:23:81:4c:97:89:f1:c2:58:ef:50:e1:30:33:17:b0: 2c:0c:76:d3:bc:f0:50:e0:c0:bf:52:c1:85:70:00:8c:51:5a: 2e:f0:28:e9:cc:cf:41:31:77:38:80:58:7f:b6:7f:d9:c4:e8: 00:f3:bd:eb:67:d0:8b:b1:cf:d5:0e:a1:35:51:0d:8b:17:8f: 3b:db:23:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MENGMzExMC8GA1UEBRMoQjQ4Q0IxODA4MjYyQjgwOTlCODcyNzJBNTc2RkZFREMx OUEzOTZCRDAeFw0yNDA1MTkwNDUwMTJaFw0yNDA1MjYwNDUwMTJaMBgxFjAUBgNV BAMTDTY2NDk4NTA0LTcyOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtWDGP7hmdFz9Kvi3lbL0kMJVVUcoBi/ObNnETW1qCCCu+DOf6Yip3HfbdeDDU WMTxtOICIZCuI6gdoFz6RBCQC6jeT58y6CjRl8nwTESzk/p3kJS43c6V/4ZKbWkM 8iWb2CHpNZ3aLkgGGODhUJeiSspDYj7P7PufA9JRqCCIcriyfHFps7euIuhVjHLd 2lOoxEmg5iqSOWzbFKuvdrsh4vzJxnQA1oANfDifqLH9vdv6vu9Jz4VogAxWj7gw AABsKpzYgdkeyrY7ySTfWUIzWTvJrtgccfFDy9sKGXNHl+zKly3pGWnE0vBL0C5b YT98HdzTiW0e9x6ya0yRJNNBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXJ9BFQHY iN87bThrVgg/VVUWHlEwHwYDVR0jBBgwFoAUtIyxgIJiuAmbhycqV2/+3Bmjlr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwQ0YzLzAyOEY5RUZFMkU4 NjExRUQ5RDJFREM0REM0RjlBRTAyL3RJeXhnSUppdUFtYmh5Y3FWMl8tM0Jtamxy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEl5eGdJSml1QW1iaHljcVYyXy0zQm1qbHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw Q0YzLzAyOEY5RUZFMkU4NjExRUQ5RDJFREM0REM0RjlBRTAyL3RJeXhnSUppdUFt Ymh5Y3FWMl8tM0JtamxyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGgbEHsAPLTKPmVed4tC7lMqcPsmiU3ziAbu6crQ6mc6RIx32xARgOIn ZlAAqSEPTW4TipIZyxPdJiz24BOAY6wb89uIiOupXBsI/Z+/M0aP7m/yBkPIos8I oKvyBEB0AcreOXCKWS3IKY3BjuNMqwFZ+3DaVqLuS5Y5AH+NKYOF+Hepfuuwm2ut 9ALH4PG+UnlQjkIQ+EU0ca6KV1Zg5EQ8NRc4/zSiKsTg+5xaFR6HXrlZ98LGnSOB TJeJ8cJY71DhMDMXsCwMdtO88FDgwL9SwYVwAIxRWi7wKOnMz0ExdziAWH+2f9nE 6ADzvetn0Iuxz9UOoTVRDYsXjzvbI9M= -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org