$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json) Hash identifier: y7gL7MngHTtl9F3XUtES/c1Ct5b23zR9wizoMOZDR6Q= Subject key identifier: DF:10:38:A2:E7:2D:7A:00:5D:8A:95:F4:63:97:DB:8F:84:E6:95:3C Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Certificate serial: 3402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft Manifest number: 33DE Signing time: Thu 16 May 2024 15:34:44 +0000 Manifest this update: Thu 16 May 2024 15:34:44 +0000 Manifest next update: Thu 23 May 2024 15:34:44 +0000 Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: qwLUU1XYbBWywv6SO52jx6UC4oIZqFDUbDCQhXBmdbE=) 2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: b2M3JXjp9snURxRJazD7oQHEBOgr28kRzU7g+A3FfgY=) 3: CFC647301F7911EE9D65A148C4F9AE02.roa (hash: PNU6q/yz3U49CD+oZKbosRy5yu3vFlbV9oWCZ23Wmzw=) 4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: e6Egs/x2MrOpLmSTkV8bn9fKgYxAdbD5nf7EYufv/sU=) 5: 63C5D8AAA55411EE92D2882AC4F9AE02.roa (hash: Aols0J7an/0VOLmtb2phIXdiFNcH1bA5vPpQQO+rBSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13314 (0x3402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Validity Not Before: May 16 15:34:44 2024 GMT Not After : May 23 15:34:44 2024 GMT Subject: CN=66462794-f529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:8a:a1:71:cb:39:b6:2b:17:85:57:2e:8d: 49:f9:a6:03:37:28:b8:92:d7:4c:04:fd:9e:6b:62: ec:1d:fb:1e:4d:94:49:bc:12:cc:48:13:84:3f:f9: ed:5e:94:91:bf:1a:6c:34:7c:1d:90:e5:a4:59:2e: b9:f9:b4:bd:af:f1:80:6f:58:32:60:13:8f:dd:d5: 45:e0:33:44:ca:44:0e:a6:54:e6:3f:1f:43:85:bd: 88:3f:f2:83:e7:62:d3:5e:d7:b9:74:49:ea:fa:80: 2c:88:14:ac:02:72:49:1e:d4:46:af:98:d2:52:54: 22:75:4a:9a:c0:5b:14:02:f8:69:da:2f:16:c3:55: fb:d0:76:14:ff:a9:92:2b:4e:3e:1e:2a:cb:61:0c: c0:36:07:b8:ab:31:0f:62:1f:49:f8:ca:80:f0:87: 30:aa:a4:41:8b:d2:f8:41:a1:d1:98:f2:da:30:32: 56:a0:92:20:b7:46:8e:e6:f6:1d:28:b6:ca:c7:b2: 24:8c:84:cd:3d:18:08:b3:23:a2:47:aa:3e:a3:1c: 61:7a:b5:80:6a:04:42:34:6f:20:9f:5a:cb:a5:13: e0:55:4b:e4:a6:c8:ed:3c:c9:cf:ac:e6:7e:b6:b5: b9:aa:f3:9e:79:79:f5:59:51:29:36:5c:aa:3d:bf: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:10:38:A2:E7:2D:7A:00:5D:8A:95:F4:63:97:DB:8F:84:E6:95:3C X509v3 Authority Key Identifier: keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9b:e2:61:22:21:c9:9f:34:0a:f0:75:69:46:c9:96:e8:98: df:20:4e:86:51:f8:24:c8:61:15:c1:01:92:1f:3a:88:a0:91: ce:b6:81:0a:5c:62:a8:7d:31:07:9e:88:38:83:92:ae:26:fc: db:9c:3c:8f:00:3b:38:9d:4c:5c:ab:4b:2b:22:cc:54:b5:9d: 40:7a:93:05:27:93:c8:97:bc:39:36:58:65:16:e2:bd:c1:83: fc:2b:06:75:43:9c:67:d8:41:27:3b:c8:46:73:2c:02:df:7f: 05:e2:f7:1d:99:46:da:a9:33:94:b4:04:14:51:ab:3d:3b:5d: c5:ee:4d:25:05:be:cb:db:c1:b1:8b:ab:dd:a3:2f:63:49:9a: 54:21:c0:15:02:40:4f:e6:9f:69:9a:5e:16:0c:b6:d9:10:ce: a6:05:0c:15:bf:36:64:21:ad:0d:ba:27:43:f9:cb:9e:ad:a4: 3a:00:33:d2:31:2e:89:2b:94:e2:e9:8d:d2:aa:40:e6:3e:91: 15:5a:3a:5b:b8:dc:55:9b:a6:b4:fb:2b:3a:20:6b:21:81:60: a6:f0:26:b3:f0:6b:0f:29:55:c3:53:c0:1b:8e:fa:17:a7:54: 06:a1:50:35:58:ab:4d:c5:a2:14:ae:02:d3:c3:c3:8f:67:de: 4e:e0:1c:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4 RTA4Rjg1NkUwHhcNMjQwNTE2MTUzNDQ0WhcNMjQwNTIzMTUzNDQ0WjAYMRYwFAYD VQQDEw02NjQ2Mjc5NC1mNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlp6KoXHLObYrF4VXLo1J+aYDNyi4ktdMBP2ea2LsHfseTZRJvBLMSBOEP/nt XpSRvxpsNHwdkOWkWS65+bS9r/GAb1gyYBOP3dVF4DNEykQOplTmPx9Dhb2IP/KD 52LTXte5dEnq+oAsiBSsAnJJHtRGr5jSUlQidUqawFsUAvhp2i8Ww1X70HYU/6mS K04+HirLYQzANge4qzEPYh9J+MqA8IcwqqRBi9L4QaHRmPLaMDJWoJIgt0aO5vYd KLbKx7IkjITNPRgIsyOiR6o+oxxherWAagRCNG8gn1rLpRPgVUvkpsjtPMnPrOZ+ trW5qvOeeXn1WVEpNlyqPb9nzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8QOKLn LXoAXYqV9GOX24+E5pU8MB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx VVJCLW5FREM4UVdPQ1BoVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAm+JhIiHJnzQK8HVpRsmW6JjfIE6GUfgkyGEVwQGSHzqIoJHOtoEK XGKofTEHnog4g5KuJvzbnDyPADs4nUxcq0srIsxUtZ1AepMFJ5PIl7w5NlhlFuK9 wYP8KwZ1Q5xn2EEnO8hGcywC338F4vcdmUbaqTOUtAQUUas9O13F7k0lBb7L28Gx i6vdoy9jSZpUIcAVAkBP5p9pml4WDLbZEM6mBQwVvzZkIa0NuidD+cueraQ6ADPS MS6JK5Ti6Y3SqkDmPpEVWjpbuNxVm6a0+ys6IGshgWCm8Caz8GsPKVXDU8AbjvoX p1QGoVA1WKtNxaIUrgLTw8OPZ95O4Bwt -----END CERTIFICATE-----Generated at Thu May 16 17:51:21 2024 by rpki-client on console-ams.rpki-client.org