$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json) Hash identifier: xbLMLgx5+c7QpAR4tuK9ypiJyavjFv1LPJP1uyKXI4Y= Subject key identifier: E9:82:86:03:4C:74:7C:C3:31:27:F7:B3:68:86:97:00:FE:8B:55:9D Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft Manifest number: 03D0 Signing time: Sun 19 May 2024 02:23:01 +0000 Manifest this update: Sun 19 May 2024 02:23:00 +0000 Manifest next update: Sun 26 May 2024 02:23:00 +0000 Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: rBa7lgComja7F8REOM/Ibaz2gHCLR8JO6FctBC55Taw=) 2: C808B8703B0F11ECA663EE27C4F9AE02.roa (hash: FqX6AE+VnnByUv0jyunOT7O43mtfuwPpLu3tqWZi8fM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Validity Not Before: May 19 02:23:00 2024 GMT Not After : May 26 02:23:00 2024 GMT Subject: CN=66496284-8227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:51:53:0f:2a:fc:4c:8c:24:08:71:d3:37: a2:88:17:7c:ac:76:39:95:88:00:7e:29:54:5e:cc: 8d:08:63:78:a3:7e:33:62:40:40:ba:37:2f:1c:19: 49:52:48:dd:c2:1e:a6:ab:93:19:e2:8f:f0:34:50: 4a:e0:db:aa:b7:65:92:c5:e6:7f:66:15:6e:ba:70: 8d:98:2c:f1:2c:fa:27:ab:9a:0c:d8:f1:45:cb:fb: 74:73:51:69:51:96:aa:ed:8f:36:76:da:b0:0a:cb: f4:fe:53:79:c5:e7:6b:e4:c2:9d:ba:cc:49:45:c2: 2b:36:f2:d7:53:37:d1:76:34:1e:8f:4d:a9:dc:b3: 23:ec:ea:ba:9b:0b:71:52:18:21:c3:4b:de:66:3a: 91:19:62:ba:e5:6c:13:d7:cb:5b:92:9f:65:ef:f3: cf:12:49:1a:74:c2:17:f4:2e:68:13:44:57:7d:c5: 72:bf:76:48:d0:ca:4e:c6:7a:db:5f:dc:60:97:38: 99:55:b3:01:3d:98:4a:6e:ca:e2:64:25:34:73:e2: 9a:f1:43:a4:a2:87:63:3b:dd:dd:ee:8b:71:4e:3d: 45:51:98:27:e1:e1:40:df:ca:ab:f1:be:22:14:6e: 97:38:0f:7a:f2:91:f0:24:99:79:de:3e:b1:bc:bb: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:82:86:03:4C:74:7C:C3:31:27:F7:B3:68:86:97:00:FE:8B:55:9D X509v3 Authority Key Identifier: keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:1c:d7:6b:4d:23:55:10:e2:78:5c:03:8a:fc:d2:85:da:45: 51:ac:dc:38:fa:51:2f:68:dd:0d:52:a8:eb:c4:15:81:54:64: 13:2c:a4:0c:df:f3:b7:7a:f3:20:6f:d0:5b:5e:59:52:51:ee: af:14:17:27:33:1f:16:02:07:81:f3:4b:01:ae:b2:70:be:57: 9d:53:46:90:50:6b:36:b2:eb:42:b2:8d:ff:a4:01:39:1e:88: 9c:72:60:ee:85:0f:99:fd:6e:36:3b:4e:bc:95:b5:be:51:a4: 60:fa:49:25:9a:4e:c0:4c:66:81:2e:51:2e:70:dc:a0:97:f4: e6:ec:9f:d7:ca:68:86:a7:c5:3c:04:2e:3d:78:de:cf:a0:0d: 86:3a:1b:32:f6:3a:1c:b9:76:9b:fa:91:01:70:48:78:29:47: 9a:18:98:53:06:b4:d8:6d:0e:81:7e:c5:a3:6a:fe:1b:14:51: 3f:92:da:d5:6b:2d:14:07:2f:47:7c:3a:fa:11:e9:1b:30:61: a0:f2:42:fa:45:6d:80:07:89:e9:e6:5c:ed:ac:d0:0d:86:73: 58:d3:b8:3b:1a:8c:9b:3e:39:1f:3c:1d:2a:d8:86:2a:51:c5: d9:a2:73:d9:8c:28:a3:81:84:e0:d5:82:5f:e6:ec:95:70:c8: 36:01:d6:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4 QjBDMkNBMjIwHhcNMjQwNTE5MDIyMzAwWhcNMjQwNTI2MDIyMzAwWjAYMRYwFAYD VQQDEw02NjQ5NjI4NC04MjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts9RUw8q/EyMJAhx0zeiiBd8rHY5lYgAfilUXsyNCGN4o34zYkBAujcvHBlJ Ukjdwh6mq5MZ4o/wNFBK4Nuqt2WSxeZ/ZhVuunCNmCzxLPonq5oM2PFFy/t0c1Fp UZaq7Y82dtqwCsv0/lN5xedr5MKdusxJRcIrNvLXUzfRdjQej02p3LMj7Oq6mwtx Uhghw0veZjqRGWK65WwT18tbkp9l7/PPEkkadMIX9C5oE0RXfcVyv3ZI0MpOxnrb X9xglziZVbMBPZhKbsriZCU0c+Ka8UOkoodjO93d7otxTj1FUZgn4eFA38qr8b4i FG6XOA968pHwJJl53j6xvLvvuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmChgNM dHzDMSf3s2iGlwD+i1WdMB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4 VHNxZW9Zc2JWQjJMREN5aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5HNdrTSNVEOJ4XAOK/NKF2kVRrNw4+lEvaN0NUqjrxBWBVGQTLKQM 3/O3evMgb9BbXllSUe6vFBcnMx8WAgeB80sBrrJwvledU0aQUGs2sutCso3/pAE5 HoiccmDuhQ+Z/W42O068lbW+UaRg+kklmk7ATGaBLlEucNygl/Tm7J/XymiGp8U8 BC49eN7PoA2GOhsy9jocuXab+pEBcEh4KUeaGJhTBrTYbQ6BfsWjav4bFFE/ktrV ay0UBy9HfDr6EekbMGGg8kL6RW2AB4np5lztrNANhnNY07g7GoybPjkfPB0q2IYq UcXZonPZjCijgYTg1YJf5uyVcMg2AdZs -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org