$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft File: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json) Hash identifier: H9rAQdsQ7sbcE/InkvkvrTTrZd4fU46H3WRgphouaN0= Subject key identifier: 03:10:42:58:A8:0C:A9:F4:63:BD:03:48:4D:AC:AF:B4:DE:3B:84:B1 Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 Certificate issuer: /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft Manifest number: 02D4 Signing time: Sun 19 May 2024 03:23:27 +0000 Manifest this update: Sun 19 May 2024 03:23:27 +0000 Manifest next update: Sun 26 May 2024 03:23:27 +0000 Files and hashes: 1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: Is18+JRdyNH29Bn3D8Pdb2IEcD292hOIMCKXLecEjbw=) 2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: brqvD0nhUd1opPdVSG+VpZIcp0CeDJNJnNKorIsgs0I=) 3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: 9zn7pbPKQ2T1L+hAV4OH1u9xUWLZPh4RSl4GJG1GgQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Validity Not Before: May 19 03:23:27 2024 GMT Not After : May 26 03:23:27 2024 GMT Subject: CN=664970af-92b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:ee:26:a0:46:b0:3a:da:85:7c:1a:cd:5a: 2e:ee:70:bf:ce:cd:1a:c9:2b:ea:de:0f:5e:38:6b: 84:9a:05:44:62:4a:ee:0c:67:e4:cd:c7:47:c5:f2: 32:0e:9e:99:5a:48:68:07:62:83:30:4e:36:93:db: dd:c1:61:bb:31:60:dd:59:b4:31:7e:55:01:10:76: bd:18:47:89:e2:28:60:4d:c1:54:ff:da:bd:ce:a2: 28:8e:e8:ac:e2:95:84:5f:c5:c5:35:1c:16:84:ce: 87:d8:5a:cf:45:14:5f:e5:73:79:80:51:e1:83:f4: 47:1d:76:5a:9d:b9:c3:82:ac:5a:21:68:aa:26:4f: b5:15:4c:20:2d:27:f4:13:38:61:7d:d8:ef:1a:84: 38:e6:51:2c:9b:7a:0d:b7:63:d9:91:0f:61:cc:96: c5:c1:ba:a1:ba:aa:e5:0d:72:db:27:3a:b9:f0:f5: 1c:df:8d:17:fc:78:fb:7b:03:ee:21:99:3a:5c:80: 07:7d:0f:4d:60:fc:db:ea:ac:dc:e7:e6:e6:d0:3d: 97:b9:4f:89:53:b4:b2:64:de:e7:7b:3d:e0:b9:2a: e0:64:89:77:17:d8:dd:51:13:a4:4a:0d:71:89:c8: af:ae:04:0d:cc:39:f5:22:43:dc:a7:22:53:74:5f: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:10:42:58:A8:0C:A9:F4:63:BD:03:48:4D:AC:AF:B4:DE:3B:84:B1 X509v3 Authority Key Identifier: keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:18:58:66:8f:7e:2f:cb:f1:96:c9:2b:29:d0:87:8b:15:d5: 4f:2c:96:6a:80:2a:68:04:8e:fa:fa:e9:3a:c6:75:8d:1a:97: dc:42:2e:51:9f:82:69:b0:10:6c:e1:35:80:78:4d:89:e8:24: d8:b9:90:d7:58:b9:40:be:cc:2a:3b:4d:ee:40:da:05:5e:d2: a7:9b:34:d8:1c:82:54:2a:58:55:90:4e:80:08:cf:e1:c6:a8: 49:6b:dd:0b:90:4c:35:57:9c:00:70:b9:4b:16:9d:89:d5:fa: 82:40:2e:cc:5e:f5:dc:c1:60:d5:4d:69:4e:41:a3:64:5e:75: 70:fe:1d:1f:d1:06:89:88:b1:8e:60:dd:5d:21:19:89:43:54: 89:fc:33:a1:af:ea:85:a9:c6:cb:8f:b9:81:4f:68:8d:a4:da: 9c:66:44:8d:65:39:2f:69:67:93:f0:fd:69:1a:c4:b6:95:c0: fc:e1:ab:a9:b5:c6:3b:3d:d4:c0:55:37:da:1d:be:67:db:25: 45:9e:70:e3:5e:06:c4:9b:25:07:4a:ac:1a:d6:0d:79:b5:22: 1d:1a:ef:f2:3a:ba:39:36:50:8e:2d:d2:bd:2b:90:f4:3e:57: 96:82:4d:5b:a3:84:ca:25:3c:7d:09:18:e2:f0:6b:a3:c4:cf: e9:30:1d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw NkQxOTc0NzMwHhcNMjQwNTE5MDMyMzI3WhcNMjQwNTI2MDMyMzI3WjAYMRYwFAYD VQQDEw02NjQ5NzBhZi05MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYHuJqBGsDrahXwazVou7nC/zs0aySvq3g9eOGuEmgVEYkruDGfkzcdHxfIy Dp6ZWkhoB2KDME42k9vdwWG7MWDdWbQxflUBEHa9GEeJ4ihgTcFU/9q9zqIojuis 4pWEX8XFNRwWhM6H2FrPRRRf5XN5gFHhg/RHHXZanbnDgqxaIWiqJk+1FUwgLSf0 EzhhfdjvGoQ45lEsm3oNt2PZkQ9hzJbFwbqhuqrlDXLbJzq58PUc340X/Hj7ewPu IZk6XIAHfQ9NYPzb6qzc5+bm0D2XuU+JU7SyZN7nez3guSrgZIl3F9jdUROkSg1x icivrgQNzDn1IkPcpyJTdF+7iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMQQlio DKn0Y70DSE2sr7TeO4SxMB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjE4MC8xMDJCQTE5RTlFNDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdo QTZpRFYzYWVGMk1HMFpkSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCGFhmj34vy/GWySsp0IeLFdVPLJZqgCpoBI76+uk6xnWNGpfcQi5R n4JpsBBs4TWAeE2J6CTYuZDXWLlAvswqO03uQNoFXtKnmzTYHIJUKlhVkE6ACM/h xqhJa90LkEw1V5wAcLlLFp2J1fqCQC7MXvXcwWDVTWlOQaNkXnVw/h0f0QaJiLGO YN1dIRmJQ1SJ/DOhr+qFqcbLj7mBT2iNpNqcZkSNZTkvaWeT8P1pGsS2lcD84aup tcY7PdTAVTfaHb5n2yVFnnDjXgbEmyUHSqwa1g15tSIdGu/yOro5NlCOLdK9K5D0 PleWgk1bo4TKJTx9CRji8GujxM/pMB2y -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org