$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: rquubzDbxvyStHzEDNAkuC2iV4fqr1R6yqa8hIQfwO4= Subject key identifier: 37:4C:9E:C1:E3:FD:9F:FA:D8:3D:BD:8E:08:64:B5:21:26:C7:E8:08 Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 02C1 Signing time: Sun 19 May 2024 03:32:56 +0000 Manifest this update: Sun 19 May 2024 03:32:56 +0000 Manifest next update: Sun 26 May 2024 03:32:56 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: wO5wdvehPU97D22uG9n/LiJJC/YeAVbOjml6YBtdKLc=) 2: DED376FAC0B211EEBAD8C90CC4F9AE02.roa (hash: 55JHX4ew0160t2EeeFzUdAANCqPk1wqNfiUZNAUhc9g=) 3: DD058EDAC0B211EEBAD8C90CC4F9AE02.roa (hash: mxN3e88k7fubkVX0grtmJ23AfKb/8VxSvKoITefqqmc=) 4: DDF31C5EC0B211EEBAD8C90CC4F9AE02.roa (hash: 4nJdqfAbv7yNLVKtomee0puKp1DxSseTMZJCnJsI1S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: May 19 03:32:56 2024 GMT Not After : May 26 03:32:56 2024 GMT Subject: CN=664972e8-b9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:6f:ed:a5:2a:a8:6b:3b:02:d0:1b:2c:b0: 94:25:88:3c:f4:73:70:bf:8f:21:c3:42:70:c7:47: cb:50:0e:69:d1:19:01:a5:b8:e2:43:57:70:f2:72: ab:ea:30:e9:d1:1b:13:4a:5f:84:15:bc:e5:49:60: 6d:25:cd:1b:7c:87:83:c5:4d:15:94:ad:7c:c4:5c: 71:ea:1e:71:81:56:d4:2b:0b:cb:27:ae:4a:2d:63: 4a:89:e1:d3:ac:88:d1:23:d3:af:cc:35:13:9d:4d: 6b:8f:58:d6:83:6a:6a:cf:ae:02:be:af:42:33:70: 5a:64:df:fd:f6:19:f1:f8:f4:4a:76:4f:94:0a:8a: ef:6b:15:22:14:0c:08:72:d8:af:7b:a5:93:a6:8c: f6:68:b4:0a:28:75:a0:8f:da:32:72:25:58:9a:be: f4:7b:fa:ed:26:c8:13:14:f9:0e:de:5c:e2:c9:66: 58:eb:bd:6c:06:7a:5a:dd:86:eb:e6:f1:e1:ae:da: 09:d4:9f:76:08:c3:cc:ae:fa:b1:f6:1e:f2:d7:3f: 22:64:97:40:e5:33:59:f9:d9:6f:54:4e:05:1d:dc: 59:d6:20:80:18:0b:9e:84:fe:38:d6:ec:3e:47:d4: db:81:d7:2c:ab:c8:3b:7a:a8:63:6d:7d:b3:50:96: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4C:9E:C1:E3:FD:9F:FA:D8:3D:BD:8E:08:64:B5:21:26:C7:E8:08 X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:af:c7:59:d0:c3:24:b4:93:f5:9a:ae:ed:a7:d2:82:8b:57: db:a3:66:e7:87:c2:9f:c8:11:78:ad:0e:6a:e5:8d:ca:7c:fb: df:69:03:5a:11:88:43:1e:86:30:ba:d3:ee:dd:cc:d7:7d:57: ba:ad:f6:8e:f8:15:27:e9:24:b7:9f:b7:fd:eb:7c:f8:ef:f4: 09:65:23:b2:76:f4:5d:39:c1:a2:93:b0:fd:66:e9:3b:e0:16: 39:e9:6e:5b:01:df:22:be:b6:c9:98:d9:34:34:89:83:bf:73: 2b:62:04:44:3b:c2:df:f7:f2:a4:d2:48:f0:fb:58:41:32:64: 52:c4:6c:f9:cb:a1:dd:7a:1c:bb:45:20:b7:90:b9:2d:56:f0: 1a:2c:25:eb:dd:a9:98:9a:de:5e:4a:fa:e6:87:03:d1:1e:0d: d4:3c:58:eb:b9:92:fc:ae:cc:6c:6d:ea:fd:3e:61:05:ca:ff: 84:f3:11:81:76:a4:c4:8a:15:30:51:ee:ae:c3:d7:60:14:32: 73:7c:13:8c:34:f2:36:dc:91:94:12:a8:d2:a8:1c:fb:5b:9f: f9:a1:2a:a8:12:f0:80:f7:65:34:c3:b2:11:5f:3a:e9:94:7d: 42:6e:c3:37:dc:bb:b6:31:2f:6a:fc:ce:a8:c7:41:1d:70:da: ba:f9:59:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjQwNTE5MDMzMjU2WhcNMjQwNTI2MDMzMjU2WjAYMRYwFAYD VQQDEw02NjQ5NzJlOC1iOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq1v7aUqqGs7AtAbLLCUJYg89HNwv48hw0Jwx0fLUA5p0RkBpbjiQ1dw8nKr 6jDp0RsTSl+EFbzlSWBtJc0bfIeDxU0VlK18xFxx6h5xgVbUKwvLJ65KLWNKieHT rIjRI9OvzDUTnU1rj1jWg2pqz64Cvq9CM3BaZN/99hnx+PRKdk+UCorvaxUiFAwI ctive6WTpoz2aLQKKHWgj9oyciVYmr70e/rtJsgTFPkO3lziyWZY671sBnpa3Ybr 5vHhrtoJ1J92CMPMrvqx9h7y1z8iZJdA5TNZ+dlvVE4FHdxZ1iCAGAuehP441uw+ R9Tbgdcsq8g7eqhjbX2zUJZB4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdMnsHj /Z/62D29jghktSEmx+gIMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPr8dZ0MMktJP1mq7tp9KCi1fbo2bnh8KfyBF4rQ5q5Y3KfPvfaQNa EYhDHoYwutPu3czXfVe6rfaO+BUn6SS3n7f963z47/QJZSOydvRdOcGik7D9Zuk7 4BY56W5bAd8ivrbJmNk0NImDv3MrYgREO8Lf9/Kk0kjw+1hBMmRSxGz5y6Hdehy7 RSC3kLktVvAaLCXr3amYmt5eSvrmhwPRHg3UPFjruZL8rsxsber9PmEFyv+E8xGB dqTEihUwUe6uw9dgFDJzfBOMNPI23JGUEqjSqBz7W5/5oSqoEvCA92U0w7IRXzrp lH1CbsM33Lu2MS9q/M6ox0EdcNq6+VlZ -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org