$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft File: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json) Hash identifier: lwT59TS39prBGmSeYtLpEun1nSaZ4pBEb3k00cS8Tuc= Subject key identifier: 4B:98:23:9D:8D:DF:31:3C:FB:29:2A:1C:C1:B0:AC:68:5E:DB:E0:ED Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 Certificate issuer: /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft Manifest number: 02D5 Signing time: Fri 31 May 2024 04:01:24 +0000 Manifest this update: Fri 31 May 2024 04:01:23 +0000 Manifest next update: Fri 07 Jun 2024 04:01:23 +0000 Files and hashes: 1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: ShScUkZsulsBflNruT2vvnFi/5d0YVLh0OLc12hPSAI=) 2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: J1ZxobCjySr29I83EXKEIEZFXwKH71fahhCDu8nIit4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Validity Not Before: May 31 04:01:23 2024 GMT Not After : Jun 7 04:01:23 2024 GMT Subject: CN=66594b93-9ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:17:13:6d:86:a6:80:8b:35:eb:b0:6e:ae: 40:22:2c:c3:2b:25:d6:1b:a8:4c:02:a0:57:9d:26: 0e:88:49:f2:1c:55:48:5d:ab:c1:3b:ee:c1:61:37: d2:10:db:3f:ac:5b:26:f9:8b:b7:03:1d:7f:17:c6: 48:06:ee:66:e4:de:b9:01:67:1d:db:1e:7c:8e:62: 1a:80:0f:4f:07:31:a4:f6:01:fe:65:e8:d3:a0:7e: 40:35:eb:15:07:25:6a:62:f5:bb:e5:d4:eb:c0:44: 76:1e:ed:a2:4a:18:79:4d:20:23:53:71:9d:c3:87: 57:85:f8:6d:56:53:84:95:c2:91:0a:f9:af:7f:5f: 70:af:cb:77:21:92:fa:4f:02:25:1d:7f:94:37:ec: 6e:e3:7a:f3:7c:11:13:1e:77:8a:00:fd:f1:70:fe: 4e:55:4b:fc:65:9d:e5:b5:f9:d9:7a:c9:a8:b5:47: 11:12:f6:40:b2:a7:d6:ff:5e:8e:d3:f3:39:98:33: 7c:33:e0:0c:a2:2b:c2:e0:0f:47:c8:17:37:50:a0: 40:14:63:05:fa:99:0c:d9:aa:0c:e5:3e:1e:2d:3f: 45:d8:8d:dd:af:3b:ab:b3:6f:81:77:48:ed:ee:0f: 01:f2:a7:c5:cd:a7:71:d1:63:a5:00:09:48:10:e2: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:98:23:9D:8D:DF:31:3C:FB:29:2A:1C:C1:B0:AC:68:5E:DB:E0:ED X509v3 Authority Key Identifier: keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:54:f1:e3:8f:61:d2:6a:a6:83:31:d0:7f:43:cf:16:5d:05: 29:b4:47:48:36:44:9e:c9:85:0a:e8:6a:aa:7b:83:6c:27:01: f2:a1:f5:00:a5:86:29:a0:6e:f6:36:21:d7:13:11:ca:29:be: b7:cf:44:2d:e2:fe:ad:8a:4b:bb:24:bd:ed:27:ee:05:da:45: cd:cc:bd:bf:34:36:00:e4:34:d3:80:fa:13:b9:91:89:b4:8a: 3a:9a:2b:62:dc:d4:49:43:0e:db:55:63:4c:60:35:44:43:c8: 9a:a3:f7:33:23:16:2e:a9:ca:aa:c4:48:3d:ab:e5:f7:f4:13: 68:b0:51:09:30:84:f0:60:e0:69:da:ff:3f:46:ae:45:b7:9b: 67:34:e4:a4:c2:a7:29:21:f8:1a:2f:fe:a0:96:37:7c:fa:c8: 57:80:ac:1d:07:f2:2e:1c:b2:7a:3d:4e:1b:43:9e:60:7d:25: 1b:5a:28:0b:4e:5c:38:4a:63:d0:6f:5b:8d:50:3d:7c:61:7f: 3b:c5:c7:62:6e:db:56:82:f3:80:ea:1b:24:95:db:f0:75:b8: 1f:71:0f:ae:64:ee:ea:52:b4:a4:78:72:c9:e4:cc:bc:ae:67: 1b:85:ec:9e:21:90:7d:d9:52:a6:c1:bf:66:0b:aa:e2:95:b1: f7:da:04:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1MzMxMTAvBgNVBAUTKEU1OEY5OEUzQzYxNDIxNDY1NDUzQUM0MjU1RjBBRkIw QUQ5NUQyNDYwHhcNMjQwNTMxMDQwMTIzWhcNMjQwNjA3MDQwMTIzWjAYMRYwFAYD VQQDEw02NjU5NGI5My05ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRYXE22GpoCLNeuwbq5AIizDKyXWG6hMAqBXnSYOiEnyHFVIXavBO+7BYTfS ENs/rFsm+Yu3Ax1/F8ZIBu5m5N65AWcd2x58jmIagA9PBzGk9gH+ZejToH5ANesV ByVqYvW75dTrwER2Hu2iShh5TSAjU3Gdw4dXhfhtVlOElcKRCvmvf19wr8t3IZL6 TwIlHX+UN+xu43rzfBETHneKAP3xcP5OVUv8ZZ3ltfnZesmotUcREvZAsqfW/16O 0/M5mDN8M+AMoivC4A9HyBc3UKBAFGMF+pkM2aoM5T4eLT9F2I3drzurs2+Bd0jt 7g8B8qfFzadx0WOlAAlIEOI5dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuYI52N 3zE8+ykqHMGwrGhe2+DtMB8GA1UdIwQYMBaAFOWPmOPGFCFGVFOsQlXwr7CtldJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDUzMy8yMkVEMkM5QTlG ODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlVWlVVNnhDVmZDdnNLMlYw a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZLVk0OFlVSVVaVVU2eENWZkN2c0syVjBrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDUzMy8yMkVEMkM5QTlGODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlV WlVVNnhDVmZDdnNLMlYwa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChVPHjj2HSaqaDMdB/Q88WXQUptEdINkSeyYUK6Gqqe4NsJwHyofUA pYYpoG72NiHXExHKKb63z0Qt4v6tiku7JL3tJ+4F2kXNzL2/NDYA5DTTgPoTuZGJ tIo6miti3NRJQw7bVWNMYDVEQ8iao/czIxYuqcqqxEg9q+X39BNosFEJMITwYOBp 2v8/Rq5Ft5tnNOSkwqcpIfgaL/6gljd8+shXgKwdB/IuHLJ6PU4bQ55gfSUbWigL Tlw4SmPQb1uNUD18YX87xcdibttWgvOA6hskldvwdbgfcQ+uZO7qUrSkeHLJ5My8 rmcbheyeIZB92VKmwb9mC6rilbH32gSL -----END CERTIFICATE-----Generated at Fri May 31 06:49:15 2024 by rpki-client on console-ams.rpki-client.org