$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: kUczzBF8C5Vk145vHpTFKOD+y40HHMKxF317IWx/lvo= Subject key identifier: 0E:54:80:79:05:A3:CD:0B:FF:51:47:E1:4B:C0:2C:75:5A:E7:7B:6A Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 5B Signing time: Wed 15 May 2024 07:52:59 +0000 Manifest this update: Wed 15 May 2024 07:52:59 +0000 Manifest next update: Wed 22 May 2024 07:52:59 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: tkyxdLF5ODfjExO7VcLDNc6G9xMyOC70j1xR+XrYAZU=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: 49qG7BFVPNE9bNN/jvF/27Y+s2Ba+y3F+GFqB2uVXOE=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: 0Ob44GOJBXWRNVBDtlP4tdYlgSIbc4d/O98ayNaqbHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: May 15 07:52:59 2024 GMT Not After : May 22 07:52:59 2024 GMT Subject: CN=664469db-4436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:1a:ad:11:50:5f:f5:0a:35:79:bb:d9:71: 39:21:f7:09:77:04:e4:40:9d:b4:49:aa:f2:27:b1: 5a:db:e0:60:55:40:b4:d2:b0:79:ee:c8:05:07:af: c8:21:20:de:47:a6:e6:06:eb:fa:77:1f:fd:3f:86: 8b:d7:9c:45:af:f5:a3:78:0e:ea:24:0b:5e:e1:f6: 14:f6:e2:83:9e:cc:bc:9b:b6:16:90:89:f4:a8:e0: 02:ef:de:f8:fa:17:da:9b:74:6a:42:94:dd:82:9e: 53:a4:56:0a:e2:1d:a8:7a:00:f6:4d:90:89:05:b6: f6:20:10:87:a2:cb:4f:8f:8f:21:aa:3d:6b:53:49: c1:25:b1:4b:3b:0b:cd:a4:16:fe:7a:06:f2:7d:9c: b0:e0:3d:15:48:d9:f7:22:26:85:64:96:60:c9:22: 4d:6f:fb:6f:c4:93:32:5b:45:e5:16:d5:7e:aa:b7: ff:c5:2a:6e:90:c7:14:06:71:22:df:f3:c2:46:a6: a8:28:40:54:34:37:29:90:5d:7d:52:5b:75:cb:bd: 91:f5:cd:e8:d6:8c:2e:68:9d:13:1e:0e:0e:cb:3a: 22:ed:af:c4:18:ed:e4:50:50:96:e5:1e:86:e9:61: f4:0d:76:a7:9c:9a:20:88:52:d6:5c:6f:32:25:99: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:80:79:05:A3:CD:0B:FF:51:47:E1:4B:C0:2C:75:5A:E7:7B:6A X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:77:04:db:33:d8:5e:2a:45:43:a7:00:d7:74:b2:d0:c0:5f: 05:35:3a:49:9a:11:3d:b1:6e:f2:f8:9f:e4:54:29:0e:34:5d: 3d:24:f6:cf:6d:ff:1e:59:de:47:e2:9d:6d:86:e4:98:a2:ad: 82:32:3e:de:e1:5e:6d:8b:24:50:4b:2e:eb:f1:fe:12:a0:b6: 46:96:72:83:7b:9e:26:6f:78:bd:20:2a:8a:5b:56:64:34:86: 01:76:18:c5:1f:7f:20:09:aa:c4:72:80:b8:61:05:e3:0d:bc: 39:84:b3:81:30:d6:a1:49:cd:55:e4:cd:37:77:73:37:4f:98: 27:21:8d:b0:f3:1c:aa:3e:f3:88:b0:b2:3f:67:ef:0c:e3:b5: c1:5d:25:91:12:4d:29:d3:33:e3:e7:f4:f3:1b:98:c7:67:20: 0b:80:87:7e:ce:92:1c:c3:38:54:4e:42:b4:46:01:47:5a:a2: 33:19:00:ce:ae:f7:c0:35:b9:30:50:55:1d:a8:6e:81:4f:44: 61:eb:c9:35:05:d6:f8:a0:7f:25:2d:42:f4:c9:68:89:da:c4: 0c:30:16:f4:d3:4f:38:ad:29:04:af:7c:e9:3f:60:fc:c6:11: e3:cb:bc:ab:2a:69:e1:4b:b1:f6:5a:bc:2a:2a:a3:31:77:06: b3:3f:9b:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdDMjExMC8GA1UEBRMoRkYyRURFOTREMzA3QkMyMzg5QTRCNzM5NTkyQTY1N0Y3 MTYxQ0NBMjAeFw0yNDA1MTUwNzUyNTlaFw0yNDA1MjIwNzUyNTlaMBgxFjAUBgNV BAMTDTY2NDQ2OWRiLTQ0MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUhRqtEVBf9Qo1ebvZcTkh9wl3BORAnbRJqvInsVrb4GBVQLTSsHnuyAUHr8gh IN5HpuYG6/p3H/0/hovXnEWv9aN4DuokC17h9hT24oOezLybthaQifSo4ALv3vj6 F9qbdGpClN2CnlOkVgriHah6APZNkIkFtvYgEIeiy0+PjyGqPWtTScElsUs7C82k Fv56BvJ9nLDgPRVI2fciJoVklmDJIk1v+2/EkzJbReUW1X6qt//FKm6QxxQGcSLf 88JGpqgoQFQ0NymQXX1SW3XLvZH1zejWjC5onRMeDg7LOiLtr8QY7eRQUJblHobp YfQNdqecmiCIUtZcbzIlmSYDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDlSAeQWj zQv/UUfhS8AsdVrne2owHwYDVR0jBBgwFoAU/y7elNMHvCOJpLc5WSplf3FhzKIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0MyLzdBQjg1MDg4OEU4 OTExRUVBNkE1RTM1N0M0RjlBRTAyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpL SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3k3ZWxOTUh2Q09KcExjNVdTcGxmM0ZoektJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0MyLzdBQjg1MDg4OEU4OTExRUVBNkE1RTM1N0M0RjlBRTAyL195N2VsTk1IdkNP SnBMYzVXU3BsZjNGaHpLSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABV3BNsz2F4qRUOnANd0stDAXwU1OkmaET2xbvL4n+RUKQ40XT0k9s9t /x5Z3kfinW2G5JiirYIyPt7hXm2LJFBLLuvx/hKgtkaWcoN7niZveL0gKopbVmQ0 hgF2GMUffyAJqsRygLhhBeMNvDmEs4Ew1qFJzVXkzTd3czdPmCchjbDzHKo+84iw sj9n7wzjtcFdJZESTSnTM+Pn9PMbmMdnIAuAh37OkhzDOFROQrRGAUdaojMZAM6u 98A1uTBQVR2oboFPRGHryTUF1vigfyUtQvTJaInaxAwwFvTTTzitKQSvfOk/YPzG EePLvKsqaeFLsfZavCoqozF3BrM/m6Y= -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org