$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json) Hash identifier: bKMFAlX9aTK7mc5HuXR92X79CCOybsYJ6gJ59H2cSrA= Subject key identifier: B7:2D:79:BD:A3:0B:C5:8E:1B:7B:8B:F2:CC:44:40:B1:CB:1C:37:02 Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft Manifest number: 03B7 Signing time: Sun 19 May 2024 02:29:05 +0000 Manifest this update: Sun 19 May 2024 02:29:04 +0000 Manifest next update: Sun 26 May 2024 02:29:04 +0000 Files and hashes: 1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: FUwwNpfZamZZl8A1sUOueRZLR+Dne7hxle3JrN/8tF8=) 2: CA888654D0E011EC9E5ACC1CC4F9AE02.roa (hash: betDDbeXOnYNscx7FdIZNi0kV6efDf1qXna22XtHg74=) 3: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: IAzgo9+pKej315oJ75vMX2pf5my9/tSTBhhc4Qasw+g=) 4: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: RaP7msz1kW/YAYAo/0oBq3yYISTDQ+ePYkHx0T8Jrfw=) 5: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: 5ik2V3fpyHLxOTIDTs4AqmZY+YmJCIitGt1+b7bH5fU=) 6: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: FQ+fRqR/UsaUvYzEF/0X3CUOi1fWkGBVnjU3jp4LUsY=) 7: 346A2B4045AE11ECB857890EC4F9AE02.roa (hash: kz1MrkZk8NcbY7byvwJtyN+an+xnb/IWd+chkZEyI8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A Validity Not Before: May 19 02:29:04 2024 GMT Not After : May 26 02:29:04 2024 GMT Subject: CN=664963f0-3f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:70:00:95:15:34:bb:dd:42:44:65:d6:d8: c6:2f:c2:66:95:39:db:79:cc:19:c3:0c:46:6a:b4: 81:98:53:c7:85:c0:e3:f7:0f:c5:3a:b3:cf:a9:14: 78:f7:8d:70:96:1c:b7:53:90:74:7b:76:f0:96:a3: 1d:de:dc:55:3d:2e:5d:b5:f9:df:73:b9:4f:75:93: e0:7d:fa:ce:34:c2:3a:88:2d:e8:b2:86:f3:59:7f: 3f:81:4d:9b:87:2e:d1:c2:97:96:ab:d3:0f:87:27: 93:99:75:20:40:ad:ad:e7:54:43:24:26:45:ca:e0: 44:09:a8:87:f9:a8:7a:15:10:30:4c:89:1b:d3:03: 2f:9e:f0:82:c7:d4:65:69:d2:d0:c7:bb:9b:89:42: f3:23:47:f2:50:63:2f:9d:d8:f3:b3:dd:da:1a:0d: a2:63:7a:7e:e3:15:8c:de:15:a2:c8:cb:b7:7e:f0: ba:64:23:2b:fb:22:2a:eb:e6:c8:1b:00:8a:13:63: 58:3e:c1:f9:39:8d:37:3d:4d:b2:71:e9:a0:90:2a: 2b:c4:de:47:04:ea:32:09:35:15:26:ce:bc:d4:e8: 81:07:e5:9b:72:2a:74:ba:fe:14:bb:8f:d9:9a:5c: 53:f8:ab:91:3d:b3:f6:43:65:27:60:01:8e:31:0c: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2D:79:BD:A3:0B:C5:8E:1B:7B:8B:F2:CC:44:40:B1:CB:1C:37:02 X509v3 Authority Key Identifier: keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:9f:c4:2e:a8:80:72:99:04:3c:ea:db:52:12:c7:b9:bb:92: be:d1:b9:02:da:b4:c9:cd:a6:46:d7:82:5a:dc:86:90:ec:f5: 88:a3:5b:e4:e0:07:85:36:28:8d:5f:41:0c:10:34:25:5a:42: 1e:59:32:a2:75:9d:a7:ab:24:a6:74:c3:b9:a4:8d:b3:7a:46: aa:c2:4e:ae:af:c9:33:83:2b:7d:a9:94:ce:a2:04:19:6d:25: b4:bc:76:ad:9a:c7:8c:cd:ab:78:67:dc:14:d4:00:99:0d:99: 14:3f:13:73:36:fc:6b:08:f4:5b:22:6d:84:b4:54:d9:a8:c2: 38:c1:02:30:02:10:3b:44:dc:94:fa:df:73:22:3a:d3:60:d2: bd:30:02:89:e8:05:90:1c:05:3a:10:0d:68:52:45:3a:d5:52: 35:7a:34:87:f9:c6:ed:43:55:0e:3d:92:ab:5a:65:6c:4a:81: d9:93:91:26:82:bc:a0:22:5a:dd:ac:18:f9:a6:d8:e6:18:5a: 59:af:eb:76:b1:36:3c:b5:93:97:56:77:c6:a7:10:dc:57:d5: f4:78:c8:1e:e1:44:5a:44:31:e0:d9:1b:70:41:e5:ec:24:96: 88:3f:c4:11:66:39:e6:16:7d:15:f3:c0:81:2b:7c:26:ce:58: 33:3d:c9:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzNTcxMTAvBgNVBAUTKENCMTY1NjgxMUQwODQ1Nzk5M0U4RDgxQjlGOTc5OERB RDYxNjk3MUEwHhcNMjQwNTE5MDIyOTA0WhcNMjQwNTI2MDIyOTA0WjAYMRYwFAYD VQQDEw02NjQ5NjNmMC0zZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKJwAJUVNLvdQkRl1tjGL8JmlTnbecwZwwxGarSBmFPHhcDj9w/FOrPPqRR4 941wlhy3U5B0e3bwlqMd3txVPS5dtfnfc7lPdZPgffrONMI6iC3osobzWX8/gU2b hy7RwpeWq9MPhyeTmXUgQK2t51RDJCZFyuBECaiH+ah6FRAwTIkb0wMvnvCCx9Rl adLQx7ubiULzI0fyUGMvndjzs93aGg2iY3p+4xWM3hWiyMu3fvC6ZCMr+yIq6+bI GwCKE2NYPsH5OY03PU2ycemgkCorxN5HBOoyCTUVJs681OiBB+Wbcip0uv4Uu4/Z mlxT+KuRPbP2Q2UnYAGOMQz4iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcteb2j C8WOG3uL8sxEQLHLHDcCMB8GA1UdIwQYMBaAFMsWVoEdCEV5k+jYG5+XmNrWFpca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDM1Ny9CODRCMTBFQzQ1 QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJYbVQ2TmdibjVlWTJ0WVds eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4WldnUjBJUlhtVDZOZ2JuNWVZMnRZV2x4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDM1Ny9CODRCMTBFQzQ1QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJY bVQ2TmdibjVlWTJ0WVdseG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWn8QuqIBymQQ86ttSEse5u5K+0bkC2rTJzaZG14Ja3IaQ7PWIo1vk 4AeFNiiNX0EMEDQlWkIeWTKidZ2nqySmdMO5pI2zekaqwk6ur8kzgyt9qZTOogQZ bSW0vHatmseMzat4Z9wU1ACZDZkUPxNzNvxrCPRbIm2EtFTZqMI4wQIwAhA7RNyU +t9zIjrTYNK9MAKJ6AWQHAU6EA1oUkU61VI1ejSH+cbtQ1UOPZKrWmVsSoHZk5Em grygIlrdrBj5ptjmGFpZr+t2sTY8tZOXVnfGpxDcV9X0eMge4URaRDHg2RtwQeXs JJaIP8QRZjnmFn0V88CBK3wmzlgzPckB -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org