$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: An6btzGeqgFn2EWNNNw2vmo+viiDhZy8UMVDCbeaX5E= Subject key identifier: 88:35:E7:9B:D8:B9:C6:6B:47:CF:BF:09:7A:7D:66:15:42:57:BB:56 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 028A Signing time: Sun 19 May 2024 03:41:32 +0000 Manifest this update: Sun 19 May 2024 03:41:31 +0000 Manifest next update: Sun 26 May 2024 03:41:31 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: fpeolhQLG5JTTp+rpwgRGA9UEeRpYZZSBFZtH7IbPNw=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: htlqSzG4jSkQm34TxJmguWL9gNyx3smdQuSmU4ScnH4=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: Kkj3qBW9Wp24vJ3Ekg42ms/3vIOl6ql8CuIT0eW6LEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: May 19 03:41:31 2024 GMT Not After : May 26 03:41:31 2024 GMT Subject: CN=664974ec-0de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:20:24:ba:b5:9f:74:d0:8f:49:68:e7:02: 76:1d:db:b9:65:68:bb:14:ab:dc:90:9c:f7:3e:ba: 43:99:f9:13:98:c7:f0:8b:d6:87:20:58:17:f0:c7: b1:b7:75:eb:8b:58:ac:68:77:e0:84:c6:df:63:40: 8d:89:6a:29:57:e7:ee:eb:7d:93:e5:1e:60:8d:f9: a9:e2:5b:1b:42:45:d0:63:0d:e6:36:5a:8c:2c:ff: 47:ef:32:04:fa:78:31:d2:6b:da:06:6b:9d:4a:5c: 8c:1b:6c:26:a2:35:27:8c:75:f4:10:b1:96:23:aa: 92:b2:a7:86:31:62:8a:fc:28:15:88:12:c3:70:f8: 5f:a2:a8:4b:14:1f:f1:e5:f3:46:33:39:20:1d:8b: 62:7f:a9:27:e0:c3:35:a7:bc:e8:ba:e0:a2:b8:f1: 5c:46:c8:82:52:aa:a5:0b:98:4a:35:39:41:13:1f: 53:fa:b7:fc:67:7e:b6:77:c6:43:c4:f0:73:06:fe: dd:8b:98:8d:86:95:0d:05:d6:e9:32:73:12:ed:07: 36:a4:75:56:28:c8:22:92:bf:3f:b9:d5:e0:ba:3f: 2f:a4:51:30:33:dd:ab:75:b7:c5:8a:61:79:24:8b: d1:88:be:5e:43:67:27:b5:00:34:57:f6:a2:d0:ef: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:35:E7:9B:D8:B9:C6:6B:47:CF:BF:09:7A:7D:66:15:42:57:BB:56 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c0:34:c8:5f:df:ff:cb:f4:07:96:e7:57:3a:b2:5c:16:73: 4e:d8:0f:ef:b5:71:cf:86:8b:e2:57:bf:8c:e1:55:38:f6:df: 7b:77:b8:6e:f9:76:e8:37:d2:cc:24:f5:fc:f5:1b:fb:2c:78: 8b:06:0f:b3:96:df:63:f6:17:8a:a1:db:c2:f5:6a:4a:0a:da: 26:c9:46:92:d4:80:bb:5e:e3:fb:55:87:71:57:06:6d:b3:c0: 0e:8d:60:8f:b0:31:00:10:ff:15:d1:90:9d:11:47:4a:a2:ea: 05:2c:55:aa:8a:1d:c8:ab:d7:3b:39:64:2f:f4:49:38:2d:08: 91:40:ec:04:af:25:2e:85:cc:82:73:47:93:f8:a7:c3:e4:bf: b1:6c:95:c5:0b:7a:95:cd:21:38:9f:49:86:86:ab:db:ce:3a: 9c:52:56:df:8b:86:ec:52:99:b7:d8:1e:67:d0:a6:da:ab:0c: 00:b3:8a:6a:a1:26:be:7e:71:cb:a0:e0:93:8a:36:c3:c3:f3: e1:b7:69:68:6b:fd:85:88:1c:2a:1d:ea:5c:40:9a:c5:b8:ec: bc:0a:8c:23:b7:1b:89:58:ca:db:21:ad:de:d4:18:35:02:f7: 90:ea:5e:ac:b9:f3:2e:b8:c9:0b:b7:b9:1c:f4:4f:11:13:d2: 8e:9b:15:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjQwNTE5MDM0MTMxWhcNMjQwNTI2MDM0MTMxWjAYMRYwFAYD VQQDEw02NjQ5NzRlYy0wZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3wgJLq1n3TQj0lo5wJ2Hdu5ZWi7FKvckJz3PrpDmfkTmMfwi9aHIFgX8Mex t3Xri1isaHfghMbfY0CNiWopV+fu632T5R5gjfmp4lsbQkXQYw3mNlqMLP9H7zIE +ngx0mvaBmudSlyMG2wmojUnjHX0ELGWI6qSsqeGMWKK/CgViBLDcPhfoqhLFB/x 5fNGMzkgHYtif6kn4MM1p7zouuCiuPFcRsiCUqqlC5hKNTlBEx9T+rf8Z362d8ZD xPBzBv7di5iNhpUNBdbpMnMS7Qc2pHVWKMgikr8/udXguj8vpFEwM92rdbfFimF5 JIvRiL5eQ2cntQA0V/ai0O+ljwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIg155vY ucZrR8+/CXp9ZhVCV7tWMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAwDTIX9//y/QHludXOrJcFnNO2A/vtXHPhoviV7+M4VU49t97d7hu +XboN9LMJPX89Rv7LHiLBg+zlt9j9heKodvC9WpKCtomyUaS1IC7XuP7VYdxVwZt s8AOjWCPsDEAEP8V0ZCdEUdKouoFLFWqih3Iq9c7OWQv9Ek4LQiRQOwEryUuhcyC c0eT+KfD5L+xbJXFC3qVzSE4n0mGhqvbzjqcUlbfi4bsUpm32B5n0KbaqwwAs4pq oSa+fnHLoOCTijbDw/Pht2loa/2FiBwqHepcQJrFuOy8CowjtxuJWMrbIa3e1Bg1 AveQ6l6sufMuuMkLt7kc9E8RE9KOmxXx -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org