$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json) Hash identifier: Was0Da/r+xm7HO2d7/0hfdMA6G/Na31kSl08mJXrjiI= Subject key identifier: 1C:F4:78:BF:DC:5A:11:EC:99:FE:D8:22:FC:18:F0:3C:83:D0:16:B9 Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft Manifest number: 9F Signing time: Sun 19 May 2024 06:46:28 +0000 Manifest this update: Sun 19 May 2024 06:46:27 +0000 Manifest next update: Sun 26 May 2024 06:46:27 +0000 Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: tE1uNK1WcDyDJ2UMXzhxtmMFn/cd7BZHfNhdD3T015A=) 2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: Gz73AQE1WQcZFjenkIXiJPuPD5y7/pLx/nT1EEjHgkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Validity Not Before: May 19 06:46:27 2024 GMT Not After : May 26 06:46:27 2024 GMT Subject: CN=6649a043-f95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:38:be:5b:cb:73:41:32:39:41:52:f9:c7: 0f:1b:21:35:3a:7f:bc:05:1a:a8:02:42:0b:1f:0b: 5e:f2:2c:00:7d:81:8f:0e:07:4d:cb:62:55:a0:6d: 8a:8c:a3:ff:2b:d9:76:e9:3c:29:a2:25:8c:75:9b: 77:ba:3e:31:c1:50:0d:ad:3e:f7:48:76:71:e0:b4: 31:7b:e2:52:d4:68:63:1c:0e:21:65:74:b1:eb:69: 50:b1:20:29:8d:ca:df:d8:40:86:b6:66:b3:3d:a9: 9c:f8:f7:a4:28:81:13:f3:a4:b4:b7:01:b8:9b:44: 82:60:dc:53:29:d1:4d:5e:2e:49:29:da:46:99:44: f8:94:71:85:c1:4e:06:89:35:0c:25:21:c4:2c:c5: ec:88:5a:27:16:26:b6:29:0a:be:13:99:c7:af:9a: 16:64:10:83:83:e2:c0:22:16:45:9f:7e:8c:16:f7: 31:1b:d0:74:cc:80:b8:c6:11:40:a3:44:54:bf:45: 0c:48:2a:c5:f3:8d:bb:fe:f1:51:b7:eb:86:e0:62: 59:21:05:89:3e:ce:1e:ae:78:8b:2e:a7:1a:22:04: 57:0e:c3:71:04:be:39:cc:a2:1c:63:c8:9a:ee:b5: 1d:cb:12:3c:81:65:21:95:97:52:fd:a4:86:d4:7c: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F4:78:BF:DC:5A:11:EC:99:FE:D8:22:FC:18:F0:3C:83:D0:16:B9 X509v3 Authority Key Identifier: keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:12:5e:c8:fc:93:38:c4:d8:58:26:68:91:6b:9e:4c:7a:37: 2a:09:02:df:6f:f2:cb:06:83:22:5c:7f:a4:6c:6b:62:10:13: fb:2d:e1:df:78:32:89:9e:08:3f:2e:b3:89:c0:fe:f9:92:f8: 33:c2:14:cb:89:e1:c5:b0:e3:b7:bf:84:2c:70:eb:9c:c7:43: 08:9c:0f:6c:b8:2b:a1:cd:7e:c6:ca:bf:6d:9d:b1:05:48:6f: 61:3c:f0:60:79:01:66:cc:1c:e8:aa:b9:af:b6:fa:71:0a:2b: 22:2a:d6:8e:84:8b:65:82:23:ad:f4:69:10:be:43:01:b0:81: 21:a7:e3:d5:a3:b2:bf:3d:1e:34:a8:69:61:b7:fe:bf:54:b7: b7:74:93:64:4d:9e:91:60:3e:dd:74:32:5d:16:83:fc:7a:f6: 36:ad:14:ff:ef:c0:2d:f2:9e:57:d6:1c:fd:0c:cc:3b:cf:78: 42:6f:31:f8:27:f4:8c:ca:b0:24:1f:14:3c:45:f7:57:f8:27: bf:d9:af:81:f5:f2:6a:7e:d1:06:ad:b3:7e:16:5c:d1:b9:5d: fb:44:27:f2:7e:2e:78:c5:d6:0e:b5:37:07:dc:47:a7:7f:87: 91:c9:23:07:39:0a:94:ff:e7:67:51:24:ec:80:8d:89:f4:3f: 7c:27:ad:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5REVGMEM5RkFE ODg1Qzc4MjIwHhcNMjQwNTE5MDY0NjI3WhcNMjQwNTI2MDY0NjI3WjAYMRYwFAYD VQQDEw02NjQ5YTA0My1mOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA84vlvLc0EyOUFS+ccPGyE1On+8BRqoAkILHwte8iwAfYGPDgdNy2JVoG2K jKP/K9l26TwpoiWMdZt3uj4xwVANrT73SHZx4LQxe+JS1GhjHA4hZXSx62lQsSAp jcrf2ECGtmazPamc+PekKIET86S0twG4m0SCYNxTKdFNXi5JKdpGmUT4lHGFwU4G iTUMJSHELMXsiFonFia2KQq+E5nHr5oWZBCDg+LAIhZFn36MFvcxG9B0zIC4xhFA o0RUv0UMSCrF8427/vFRt+uG4GJZIQWJPs4erniLLqcaIgRXDsNxBL45zKIcY8ia 7rUdyxI8gWUhlZdS/aSG1HzsnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz0eL/c WhHsmf7YIvwY8DyD0Ba5MB8GA1UdIwQYMBaAFMt01WE9c0LPubf3ne8Mn62IXHgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQ1Qi85NzM2OUI0NjIx NzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFzLTV0X2VkN3d5ZnJZaGNl Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzVFZZVDF6UXMtNXRfZWQ3d3lmclloY2VDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQ1Qi85NzM2OUI0NjIxNzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFz LTV0X2VkN3d5ZnJZaGNlQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsEl7I/JM4xNhYJmiRa55MejcqCQLfb/LLBoMiXH+kbGtiEBP7LeHf eDKJngg/LrOJwP75kvgzwhTLieHFsOO3v4QscOucx0MInA9suCuhzX7Gyr9tnbEF SG9hPPBgeQFmzBzoqrmvtvpxCisiKtaOhItlgiOt9GkQvkMBsIEhp+PVo7K/PR40 qGlht/6/VLe3dJNkTZ6RYD7ddDJdFoP8evY2rRT/78At8p5X1hz9DMw7z3hCbzH4 J/SMyrAkHxQ8RfdX+Ce/2a+B9fJqftEGrbN+FlzRuV37RCfyfi54xdYOtTcH3Een f4eRySMHOQqU/+dnUSTsgI2J9D98J62m -----END CERTIFICATE-----Generated at Sun May 19 08:25:02 2024 by rpki-client on console-ams.rpki-client.org