$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: MATD2pQI06mKEIWZV/N5MqJwC9jtoFIUXPa0e+sT/fk= Subject key identifier: 5D:A2:3A:0F:0F:24:92:4E:0A:17:AC:9B:14:69:44:D5:A4:67:47:6C Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0AA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0A9B Signing time: Sat 18 May 2024 20:11:34 +0000 Manifest this update: Sat 18 May 2024 20:11:33 +0000 Manifest next update: Sat 25 May 2024 20:11:33 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: 6eKpf65kwPko7+dU+Z2/t1JUi3i80KWTjVtEXZVeVnc=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: r3hCeoo/8rZ4yVlQzn0i2w+wVbmmd0oZgL7ngll8YYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2721 (0xaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: May 18 20:11:33 2024 GMT Not After : May 25 20:11:33 2024 GMT Subject: CN=66490b76-6229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:eb:d4:ba:6c:69:64:a7:5a:1d:be:08:b6: f8:c2:24:68:1d:f8:2d:98:be:d7:2a:da:2d:6d:08: 1d:8e:72:7f:93:39:d7:79:32:80:54:f7:27:b1:79: d8:d2:c5:5f:9e:40:8a:01:30:42:ce:7a:66:80:d4: 02:0f:e0:9b:3c:ae:ab:19:de:a9:c2:1b:cd:e9:ec: 87:8b:a2:40:05:2e:2e:1d:3f:1f:61:dd:f9:95:2a: 0e:4e:68:94:21:3b:1f:8b:13:13:69:28:e3:dd:09: 43:58:22:3f:1a:4c:21:bc:af:b3:24:45:69:77:47: 4f:21:e5:76:af:ce:77:be:32:af:95:3f:d2:0f:1c: a0:04:d5:54:11:8d:1d:96:20:ea:b0:12:ef:e8:97: 28:30:13:47:f8:be:f3:1e:44:53:e1:5c:19:b6:81: 80:da:fd:bf:be:24:38:71:7c:4e:cb:0b:d7:be:f4: c7:04:5e:a5:9f:1a:8c:98:23:55:26:55:64:bc:c4: 15:04:36:be:47:ad:9c:43:e9:8a:c2:68:c4:6c:56: 42:76:89:1c:91:b5:8d:18:2c:26:03:f7:63:26:9c: 44:6e:c4:de:02:2f:63:d2:b7:87:17:3f:e4:d4:35: 04:2c:8f:39:95:e6:c3:41:27:f7:20:e1:2d:ec:fd: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A2:3A:0F:0F:24:92:4E:0A:17:AC:9B:14:69:44:D5:A4:67:47:6C X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7b:42:aa:ff:3b:66:d9:0e:e8:5c:19:2f:ef:2b:ce:c5:17: dd:e3:30:6e:0e:c5:f4:1a:9b:99:b1:86:bd:c7:20:e6:34:b5: 02:07:3a:ca:d1:a3:8b:5d:3c:9a:45:17:25:05:db:50:b0:4e: 20:35:c0:33:5e:90:58:b2:58:f9:73:71:04:b3:62:eb:f6:11: 34:d3:9d:34:5a:4d:3e:23:0c:9f:ef:e1:0d:f8:bf:6e:45:45: ba:3a:ff:f8:fd:4d:8f:9d:57:11:81:ff:73:cf:05:bb:6c:92: 9d:e9:20:dc:1d:1a:a1:35:49:cf:18:01:9f:7a:6a:af:ad:e8: e1:ab:2f:03:3a:45:15:c2:b6:d6:bd:80:92:05:d5:cd:95:c5: 03:65:7e:bc:b0:65:df:56:80:57:d1:ef:a7:6a:ea:47:7d:6d: 18:b5:21:32:f7:58:8b:de:4a:5c:db:7b:28:0c:d9:29:e2:a6: f1:e6:5c:69:ad:4b:5a:97:07:4d:9a:f3:72:69:87:2b:bb:13: 7a:4d:53:e4:58:4e:56:5f:44:59:c0:46:42:c7:32:1c:0a:ab: 0a:81:39:69:e1:64:03:bd:fe:c8:16:5e:a3:ce:26:7d:16:85: 8e:e0:67:aa:82:84:ec:9f:fb:a2:96:01:3e:ed:cb:02:88:76: 84:d9:8b:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjQwNTE4MjAxMTMzWhcNMjQwNTI1MjAxMTMzWjAYMRYwFAYD VQQDEw02NjQ5MGI3Ni02MjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2br1LpsaWSnWh2+CLb4wiRoHfgtmL7XKtotbQgdjnJ/kznXeTKAVPcnsXnY 0sVfnkCKATBCznpmgNQCD+CbPK6rGd6pwhvN6eyHi6JABS4uHT8fYd35lSoOTmiU ITsfixMTaSjj3QlDWCI/GkwhvK+zJEVpd0dPIeV2r853vjKvlT/SDxygBNVUEY0d liDqsBLv6JcoMBNH+L7zHkRT4VwZtoGA2v2/viQ4cXxOywvXvvTHBF6lnxqMmCNV JlVkvMQVBDa+R62cQ+mKwmjEbFZCdokckbWNGCwmA/djJpxEbsTeAi9j0reHFz/k 1DUELI85lebDQSf3IOEt7P2utwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2iOg8P JJJOChesmxRpRNWkZ0dsMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAde0Kq/ztm2Q7oXBkv7yvOxRfd4zBuDsX0GpuZsYa9xyDmNLUCBzrK 0aOLXTyaRRclBdtQsE4gNcAzXpBYslj5c3EEs2Lr9hE00500Wk0+Iwyf7+EN+L9u RUW6Ov/4/U2PnVcRgf9zzwW7bJKd6SDcHRqhNUnPGAGfemqvrejhqy8DOkUVwrbW vYCSBdXNlcUDZX68sGXfVoBX0e+naupHfW0YtSEy91iL3kpc23soDNkp4qbx5lxp rUtalwdNmvNyaYcruxN6TVPkWE5WX0RZwEZCxzIcCqsKgTlp4WQDvf7IFl6jziZ9 FoWO4GeqgoTsn/uilgE+7csCiHaE2Yte -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org