$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: 7J+65oxnA6F18Bp58aoXWLDiJR+S8rRRYMVJype9uCQ= Subject key identifier: A2:14:49:74:0D:73:26:0A:88:3C:D0:3D:65:07:7F:01:37:C4:F4:EF Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 028D Signing time: Sun 19 May 2024 03:39:33 +0000 Manifest this update: Sun 19 May 2024 03:39:32 +0000 Manifest next update: Sun 26 May 2024 03:39:32 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: Ef42MYv9aB7si2uBkeZqJwT9x2TRojWMIVvXFGPEhp8=) 2: A38BA6BEB9AF11ECAC4BC97EC4F9AE02.roa (hash: y99qHJ9OVc/A/XAEYnRHaQqgSfNvTYhESyHYrQgVW9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: May 19 03:39:32 2024 GMT Not After : May 26 03:39:32 2024 GMT Subject: CN=66497474-5538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:32:38:6d:f0:9d:17:6c:10:f8:28:79:dd:f7: 0a:9a:a0:f4:3d:33:02:37:df:b1:d6:e7:3b:e9:7e: a8:c2:ad:3f:a6:1e:81:8e:e1:95:0a:61:9c:bc:7d: e3:1b:64:b3:0e:a9:d9:ec:b7:46:5c:5f:e9:ec:13: 80:ef:c2:c2:c2:43:30:a7:e1:71:aa:49:00:5f:06: 05:70:bf:a0:00:e1:02:ae:85:90:ea:8e:98:3c:25: 82:9a:f5:63:ae:b2:46:47:b9:66:43:f6:c0:2f:db: 12:97:57:ea:60:d7:fb:82:1f:47:d7:1c:38:12:47: f2:ca:6b:80:00:d4:09:b7:5c:ef:6a:39:c6:8d:e6: 06:55:38:96:47:ec:18:ef:ec:e4:d8:d3:96:4c:e4: c3:ef:e8:ea:cc:6b:38:67:a1:b9:1c:15:3a:f7:34: 4e:60:e9:a4:61:bc:41:65:4d:df:6b:0a:cd:05:01: e0:3a:09:c4:1f:3e:d0:79:3a:2f:c2:23:70:26:70: df:a4:c6:b1:35:d6:53:2e:73:13:a0:34:4d:af:39: 9d:a8:a0:d8:36:a9:ff:3c:0b:c1:9d:8f:77:25:15: bc:7f:f3:48:31:0e:19:6d:38:95:57:b9:0d:38:81: 08:76:75:da:9f:36:77:0c:c1:7c:ef:c4:28:fd:2f: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:14:49:74:0D:73:26:0A:88:3C:D0:3D:65:07:7F:01:37:C4:F4:EF X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:24:03:b2:35:a7:95:c7:87:b1:2c:9c:90:f1:b5:11:13:9c: d7:b7:8f:17:da:4d:f5:c6:d6:53:51:a3:08:e2:b2:53:e7:9d: 53:22:28:f7:fa:3b:2f:d0:65:07:09:00:09:41:0d:da:eb:31: 1a:3a:38:13:24:b2:76:3f:70:74:cf:db:4e:16:21:bb:d1:01: a6:7b:3d:1c:3c:3b:ac:a5:d2:49:e2:27:3a:08:c2:91:85:a1: e0:ba:25:7f:f3:f6:2f:55:e2:30:ae:2d:2f:16:0d:d4:46:90: 88:b1:fe:ec:6e:c6:e0:aa:d7:c2:3a:b4:c1:9d:66:41:0a:79: f9:5d:b6:c1:b9:af:b9:e5:e7:b8:5c:6a:c4:f4:dc:2a:80:70: a1:5a:98:2d:85:e8:9b:a9:c5:79:7b:0c:bd:4f:5c:21:7a:9b: a5:f9:d8:27:36:12:26:ad:f1:15:65:57:12:64:92:20:99:5d: 9b:c8:9a:16:bd:d2:a5:e5:d8:28:7c:6c:d0:46:ce:9b:6c:79: 7d:d4:a0:7d:79:26:de:76:6f:44:21:57:0d:50:0d:72:ca:c1: 84:5b:1d:82:5e:52:35:e6:a2:a0:4c:4b:ea:3e:3d:52:25:06: 7d:84:3e:8c:ae:8f:ce:49:41:16:2b:41:d4:5e:5b:24:eb:d5: 95:34:eb:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjQwNTE5MDMzOTMyWhcNMjQwNTI2MDMzOTMyWjAYMRYwFAYD VQQDEw02NjQ5NzQ3NC01NTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zI4bfCdF2wQ+Ch53fcKmqD0PTMCN9+x1uc76X6owq0/ph6BjuGVCmGcvH3j G2SzDqnZ7LdGXF/p7BOA78LCwkMwp+FxqkkAXwYFcL+gAOECroWQ6o6YPCWCmvVj rrJGR7lmQ/bAL9sSl1fqYNf7gh9H1xw4EkfyymuAANQJt1zvajnGjeYGVTiWR+wY 7+zk2NOWTOTD7+jqzGs4Z6G5HBU69zROYOmkYbxBZU3fawrNBQHgOgnEHz7QeTov wiNwJnDfpMaxNdZTLnMToDRNrzmdqKDYNqn/PAvBnY93JRW8f/NIMQ4ZbTiVV7kN OIEIdnXanzZ3DMF878Qo/S9llwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIUSXQN cyYKiDzQPWUHfwE3xPTvMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0JAOyNaeVx4exLJyQ8bURE5zXt48X2k31xtZTUaMI4rJT551TIij3 +jsv0GUHCQAJQQ3a6zEaOjgTJLJ2P3B0z9tOFiG70QGmez0cPDuspdJJ4ic6CMKR haHguiV/8/YvVeIwri0vFg3URpCIsf7sbsbgqtfCOrTBnWZBCnn5XbbBua+55ee4 XGrE9NwqgHChWpgtheibqcV5ewy9T1whepul+dgnNhImrfEVZVcSZJIgmV2byJoW vdKl5dgofGzQRs6bbHl91KB9eSbedm9EIVcNUA1yysGEWx2CXlI15qKgTEvqPj1S JQZ9hD6Mro/OSUEWK0HUXlsk69WVNOt1 -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org