$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: XA22WN2Fd8WjVPrn/LpYuztfe3IFMJMRidUWYraZKxI= Subject key identifier: 5E:9F:4A:35:D0:7A:92:A8:4F:E6:AA:51:14:FE:66:D7:4C:E8:A8:54 Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 03FF Signing time: Sat 01 Jun 2024 03:15:19 +0000 Manifest this update: Sat 01 Jun 2024 03:15:18 +0000 Manifest next update: Sat 08 Jun 2024 03:15:18 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: Vc0KMY8/46f5IdzfvtblCIzxVzgEUq01DehcVMzKPF8=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: kAAXrPn3h6fnDZKcj+NU7y43HflGR++IvUSQGCyuZuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Validity Not Before: Jun 1 03:15:18 2024 GMT Not After : Jun 8 03:15:18 2024 GMT Subject: CN=665a9247-57df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7c:6a:d5:2b:cc:f6:b7:c5:34:70:d1:1b:26: 49:f1:64:e9:79:87:98:1c:3f:b2:4b:4d:2c:94:d2: 7c:ae:1e:44:28:b2:21:8a:40:e2:0b:0e:d9:d4:0a: a8:b8:a4:36:f8:af:3a:22:51:24:71:21:5f:c1:f1: 5d:f7:c2:11:90:13:42:41:09:4d:e1:55:d1:bd:9b: 0b:d6:5d:ec:ca:2e:39:7c:1b:38:90:88:65:c1:c6: 87:6b:59:28:c4:0c:ee:c3:dc:02:48:f7:54:01:c9: 12:61:10:81:9a:0a:b2:af:e6:5c:ad:e7:71:45:d3: 3d:c0:fd:c8:17:dc:a9:ca:b5:1a:9a:80:8d:13:59: 59:11:06:c9:73:e8:eb:be:e0:5f:37:13:4a:56:d0: 73:4b:81:b0:b8:fb:07:2d:4a:ce:b6:b7:ef:bf:49: 51:cc:c5:d5:01:8b:7d:fe:3e:3f:eb:d2:bc:3b:f2: 98:7f:17:a0:27:98:33:1f:e7:40:02:2c:ad:f1:fd: bd:1f:37:e1:c8:51:31:2e:2a:6a:b7:4a:40:c8:b1: 68:18:d2:18:4d:91:5a:51:36:b8:d5:3e:47:87:26: b0:e8:33:8b:5a:a3:2a:6f:bb:c9:90:cd:f4:54:73: 6e:74:d4:85:f7:7e:f4:94:93:82:35:5c:8c:d2:3f: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9F:4A:35:D0:7A:92:A8:4F:E6:AA:51:14:FE:66:D7:4C:E8:A8:54 X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:56:1f:28:a9:db:99:de:50:45:0c:17:f4:90:65:73:00:93: 61:79:56:03:64:9f:51:2a:f3:29:84:f1:5a:b2:63:a5:67:f6: c3:a6:f8:58:9d:28:58:89:b9:b2:a9:72:57:13:a5:a3:ab:34: ae:e1:4c:a9:fd:b0:9e:3e:4c:a6:6f:70:05:04:d5:f8:d7:ad: fd:95:e8:2b:b9:d6:6c:f9:8f:cb:5c:c9:d4:47:06:a1:2f:65: 35:ba:eb:76:9b:ba:40:b9:64:7d:27:25:85:dc:10:4d:47:cb: ec:ba:96:f2:6f:c1:d3:d0:83:09:df:ea:fa:66:10:d1:42:a7: 37:5e:47:3e:14:37:e5:24:3c:1a:51:c4:fd:f8:20:fe:69:a0: 3c:3d:f1:c1:80:3f:23:cc:ca:b0:f8:27:ad:14:dd:ef:26:e9: 87:78:60:42:8a:00:0f:1f:91:67:25:83:56:a6:b3:39:ed:8a: 4f:b0:31:14:c4:e5:c5:e3:9d:86:8b:70:42:b2:8d:2f:02:92: ce:88:2e:ec:19:3a:6f:cd:31:36:53:d7:57:c9:22:24:da:59: cb:ea:88:32:6e:71:46:16:6e:08:86:fb:13:74:32:5e:bf:f5: af:27:38:b0:02:2e:87:60:77:4f:0e:22:b9:93:c1:39:0d:cc: bd:60:9a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjQwNjAxMDMxNTE4WhcNMjQwNjA4MDMxNTE4WjAYMRYwFAYD VQQDEw02NjVhOTI0Ny01N2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nxq1SvM9rfFNHDRGyZJ8WTpeYeYHD+yS00slNJ8rh5EKLIhikDiCw7Z1Aqo uKQ2+K86IlEkcSFfwfFd98IRkBNCQQlN4VXRvZsL1l3syi45fBs4kIhlwcaHa1ko xAzuw9wCSPdUAckSYRCBmgqyr+ZcredxRdM9wP3IF9ypyrUamoCNE1lZEQbJc+jr vuBfNxNKVtBzS4GwuPsHLUrOtrfvv0lRzMXVAYt9/j4/69K8O/KYfxegJ5gzH+dA Aiyt8f29HzfhyFExLipqt0pAyLFoGNIYTZFaUTa41T5Hhyaw6DOLWqMqb7vJkM30 VHNudNSF9370lJOCNVyM0j/s/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6fSjXQ epKoT+aqURT+ZtdM6KhUMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Vh8oqduZ3lBFDBf0kGVzAJNheVYDZJ9RKvMphPFasmOlZ/bDpvhY nShYibmyqXJXE6WjqzSu4Uyp/bCePkymb3AFBNX41639legrudZs+Y/LXMnURwah L2U1uut2m7pAuWR9JyWF3BBNR8vsupbyb8HT0IMJ3+r6ZhDRQqc3Xkc+FDflJDwa UcT9+CD+aaA8PfHBgD8jzMqw+CetFN3vJumHeGBCigAPH5FnJYNWprM57YpPsDEU xOXF452Gi3BCso0vApLOiC7sGTpvzTE2U9dXySIk2lnL6ogybnFGFm4IhvsTdDJe v/WvJziwAi6HYHdPDiK5k8E5Dcy9YJoT -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:02 2024 by rpki-client on console-fra.rpki-client.org