$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json) Hash identifier: JSUORCwaL2y4PbyKvtg2Q589dDWJ41z5jRV1gbQw/3U= Subject key identifier: 63:F6:FA:B5:DE:4D:3D:34:F7:2A:FC:76:46:C9:0C:79:7B:FD:08:04 Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Certificate serial: 03B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft Manifest number: 03AE Signing time: Sun 19 May 2024 02:31:02 +0000 Manifest this update: Sun 19 May 2024 02:31:01 +0000 Manifest next update: Sun 26 May 2024 02:31:01 +0000 Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: mvy3cr+gCzpqcihkNApa/kgX54efaOix/vqnnML/yrI=) 2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: nAVVz7XCp8kb1Zn4B/S5gZqnI7fJ2efBd8meLTE0nao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Validity Not Before: May 19 02:31:01 2024 GMT Not After : May 26 02:31:01 2024 GMT Subject: CN=66496466-3d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:9c:25:00:83:07:ac:bb:83:aa:d7:93:11: c2:b1:d7:c7:61:01:ea:61:93:30:4c:4f:b1:64:57: 80:6d:bd:60:0d:32:85:02:fa:0d:f4:32:65:f1:c8: 32:01:65:be:a9:46:d7:ce:e7:e9:75:01:e7:0f:01: 01:cf:78:45:ee:15:d9:37:f2:04:48:61:25:20:48: 61:ad:19:2b:76:12:09:4f:eb:61:4f:b8:49:ee:fc: e5:10:17:5c:54:57:79:35:bf:66:0c:39:84:e8:1b: 20:1c:64:ce:04:cc:ca:2d:02:92:f8:9d:f2:6f:8c: f0:e3:9f:fa:32:2d:81:73:61:71:dc:a5:43:fb:c9: dc:43:4d:10:0b:17:e7:52:10:6c:5b:f2:68:e5:5b: 94:5f:9c:3f:33:48:41:af:e5:3b:b4:12:eb:4a:84: af:8d:83:4f:86:9c:8a:a3:14:48:91:c0:73:4d:c7: 06:5d:0f:62:75:03:a9:a8:c1:b6:ff:a8:60:8e:b7: 05:63:fb:3a:86:c5:f5:07:d5:3c:d9:1b:de:e3:7d: e4:33:db:49:3a:f3:00:01:0d:c0:91:e2:4d:10:85: 06:61:6c:1f:b6:6c:d0:ce:94:da:29:29:a9:7e:e7: d6:23:9d:95:56:4c:0d:c2:69:c4:9b:ec:66:c6:4b: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:FA:B5:DE:4D:3D:34:F7:2A:FC:76:46:C9:0C:79:7B:FD:08:04 X509v3 Authority Key Identifier: keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:97:2e:91:ce:a4:4d:73:37:08:ce:77:f1:9a:63:b1:10:bd: 5b:5e:36:72:f3:82:0c:98:f6:27:47:0d:73:52:4b:ae:12:5c: 40:5d:0b:d7:b5:bc:15:e4:15:ca:bd:76:bd:a1:6b:60:78:25: b1:b9:71:28:2e:d3:a5:ad:74:84:b5:9a:88:ab:c3:ea:a5:21: f9:72:c9:8d:1c:fe:ba:88:bd:7c:07:0f:33:d3:be:34:61:a1: d1:b1:00:96:79:ac:10:b1:08:8e:bb:d3:86:d9:5b:6c:82:c3: e8:e5:f7:b3:93:e8:1d:8a:65:0f:ab:f1:82:7f:89:3d:4b:0c: b5:9e:fa:59:77:33:6a:0b:c5:b8:69:cd:8c:00:37:ba:15:f0: 1e:a3:8b:a6:8b:20:04:42:41:5e:88:d6:37:82:f9:0a:13:af: 97:b5:f9:13:25:5b:2a:2a:0e:50:12:23:54:b2:26:56:0d:7c: 88:78:89:3c:31:f6:42:c4:2a:3a:ff:30:c8:21:7b:27:c0:c6: 1b:51:a1:5b:f3:8c:93:99:67:ad:10:f3:6f:41:6e:8c:52:07: f0:62:a1:a3:fd:e7:37:58:5e:d0:0a:9c:d5:45:7b:6f:94:76: c1:b6:6c:c3:7d:b2:ed:b3:33:d5:cf:10:0f:73:7a:d3:10:4e: 49:b1:30:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx Qzg5QzMxRkQwHhcNMjQwNTE5MDIzMTAxWhcNMjQwNTI2MDIzMTAxWjAYMRYwFAYD VQQDEw02NjQ5NjQ2Ni0zZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCWcJQCDB6y7g6rXkxHCsdfHYQHqYZMwTE+xZFeAbb1gDTKFAvoN9DJl8cgy AWW+qUbXzufpdQHnDwEBz3hF7hXZN/IESGElIEhhrRkrdhIJT+thT7hJ7vzlEBdc VFd5Nb9mDDmE6BsgHGTOBMzKLQKS+J3yb4zw45/6Mi2Bc2Fx3KVD+8ncQ00QCxfn UhBsW/Jo5VuUX5w/M0hBr+U7tBLrSoSvjYNPhpyKoxRIkcBzTccGXQ9idQOpqMG2 /6hgjrcFY/s6hsX1B9U82Rve433kM9tJOvMAAQ3AkeJNEIUGYWwftmzQzpTaKSmp fufWI52VVkwNwmnEm+xmxkt7iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP2+rXe TT009yr8dkbJDHl7/QgEMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4 MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW aW15cXR3ZTNsVlVjaWNNZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIly6RzqRNczcIznfxmmOxEL1bXjZy84IMmPYnRw1zUkuuElxAXQvX tbwV5BXKvXa9oWtgeCWxuXEoLtOlrXSEtZqIq8PqpSH5csmNHP66iL18Bw8z0740 YaHRsQCWeawQsQiOu9OG2VtsgsPo5fezk+gdimUPq/GCf4k9Swy1nvpZdzNqC8W4 ac2MADe6FfAeo4umiyAEQkFeiNY3gvkKE6+XtfkTJVsqKg5QEiNUsiZWDXyIeIk8 MfZCxCo6/zDIIXsnwMYbUaFb84yTmWetEPNvQW6MUgfwYqGj/ec3WF7QCpzVRXtv lHbBtmzDfbLtszPVzxAPc3rTEE5JsTCL -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org