$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: f6nE5sbgVdLGaF1pIks+I0fejybLQX4bBslo53qxcRQ= Subject key identifier: EB:C0:26:61:34:9B:7D:7A:21:D5:29:19:E7:4D:B5:7A:87:E5:E0:E8 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 0122 Signing time: Wed 01 May 2024 05:28:12 +0000 Manifest this update: Wed 01 May 2024 05:28:12 +0000 Manifest next update: Wed 08 May 2024 05:28:12 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: Mya4MG5UeAtoGT8lc7aSG3/hRkWBrkMJGUmmT9KEUCs=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: nNolV6pGC+51y0HfDWOeN167s3LmxvmNsiZckSYAvXg=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: i7wRWkvg7vS6wr4a7kGEzT/c0WRahwhqZQnRfyjAoJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: May 1 05:28:12 2024 GMT Not After : May 8 05:28:12 2024 GMT Subject: CN=6631d2ec-8717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:89:d2:f4:44:58:fa:60:29:f4:b2:2b:d8: d8:b4:19:13:4b:29:39:a5:84:9a:5f:da:92:5b:d9: ec:91:3f:fe:27:56:99:6f:98:5e:91:97:70:9b:71: 9a:16:4d:c1:57:de:e6:3c:6c:50:76:b8:f5:94:7b: 81:ce:4c:bd:47:45:ce:1c:86:da:88:bd:ed:05:fb: 9d:84:d3:71:6e:8a:fa:97:50:ed:71:e3:90:76:3b: 3a:f6:6c:4d:94:9c:ab:9d:25:a9:eb:21:cb:e4:8b: a5:9d:4c:d6:38:ef:9f:aa:b2:93:93:d7:5d:88:1c: 38:d7:7b:f4:2a:fd:7f:4a:24:83:7e:fd:93:0b:d0: 26:01:e3:79:68:1b:c6:ce:56:43:e4:e0:50:23:ce: da:b7:98:ac:7b:9c:ed:0c:7a:84:ec:6a:f0:ba:63: 65:00:1e:ff:f9:9b:78:37:9a:38:3d:b5:07:b3:af: db:61:d1:0c:57:63:37:13:14:96:7a:96:ab:a2:51: 39:01:e7:8e:60:ae:b2:7e:de:2f:37:1d:f9:3d:de: 08:ab:e1:dd:ed:fd:37:e6:20:65:1f:e0:37:65:dc: c7:a7:47:0e:f4:57:c1:94:cd:bf:18:4d:ac:33:96: 15:1e:16:19:1b:09:df:4f:de:30:95:7c:b2:01:21: 2f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C0:26:61:34:9B:7D:7A:21:D5:29:19:E7:4D:B5:7A:87:E5:E0:E8 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:ba:61:56:5d:88:ca:11:4b:22:98:96:74:3a:33:60:34: ff:61:aa:7a:e7:26:12:8a:48:97:e1:25:cf:bc:9c:6e:89:99: 68:dd:7a:b6:87:4d:ad:aa:88:45:c2:b3:20:12:b4:fe:2c:f2: d4:8a:a0:83:5b:48:e9:26:42:fb:74:dc:5f:3b:b8:4e:7e:fb: e1:34:a4:78:de:39:73:68:71:af:54:15:07:6a:3e:44:9c:da: 0b:b7:ac:21:a9:cb:1e:0b:dd:6d:26:9a:f4:1d:71:e7:b3:37: 3e:c3:1f:26:bc:5d:b7:fd:96:03:38:c2:2e:0b:d3:ca:f3:16: 3a:8a:80:90:11:29:82:78:2f:2f:72:a5:d2:03:d2:ea:d5:15: 94:44:e3:1f:0e:b9:03:36:ae:3c:ee:ef:da:f5:32:ab:b3:84: 52:93:69:a9:2e:1e:be:9d:39:65:17:f2:35:3e:cc:8f:bd:97: 3b:36:43:10:54:80:5d:95:a4:aa:b6:4a:1c:60:e8:56:c2:34: 02:ca:a5:25:24:f2:88:54:62:1b:c6:e7:b3:53:29:81:df:73: 35:ee:27:e4:1e:0e:85:5d:d2:be:34:ed:16:f1:b1:08:6a:d7: 89:6d:d0:bf:25:75:e0:b4:36:6a:3e:59:e5:a3:ac:3c:7d:8b: a8:b8:d4:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjQwNTAxMDUyODEyWhcNMjQwNTA4MDUyODEyWjAYMRYwFAYD VQQDEw02NjMxZDJlYy04NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq+J0vREWPpgKfSyK9jYtBkTSyk5pYSaX9qSW9nskT/+J1aZb5hekZdwm3Ga Fk3BV97mPGxQdrj1lHuBzky9R0XOHIbaiL3tBfudhNNxbor6l1DtceOQdjs69mxN lJyrnSWp6yHL5IulnUzWOO+fqrKTk9ddiBw413v0Kv1/SiSDfv2TC9AmAeN5aBvG zlZD5OBQI87at5ise5ztDHqE7GrwumNlAB7/+Zt4N5o4PbUHs6/bYdEMV2M3ExSW eparolE5AeeOYK6yft4vNx35Pd4Iq+Hd7f035iBlH+A3ZdzHp0cO9FfBlM2/GE2s M5YVHhYZGwnfT94wlXyyASEvUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvAJmE0 m316IdUpGedNtXqH5eDoMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQIrphVl2IyhFLIpiWdDozYDT/Yap65yYSikiX4SXPvJxuiZlo3Xq2 h02tqohFwrMgErT+LPLUiqCDW0jpJkL7dNxfO7hOfvvhNKR43jlzaHGvVBUHaj5E nNoLt6whqcseC91tJpr0HXHnszc+wx8mvF23/ZYDOMIuC9PK8xY6ioCQESmCeC8v cqXSA9Lq1RWUROMfDrkDNq487u/a9TKrs4RSk2mpLh6+nTllF/I1PsyPvZc7NkMQ VIBdlaSqtkocYOhWwjQCyqUlJPKIVGIbxuezUymB33M17ifkHg6FXdK+NO0W8bEI ateJbdC/JXXgtDZqPlnlo6w8fYuouNQ+ -----END CERTIFICATE-----Generated at Wed May 1 06:34:03 2024 by rpki-client on console-ams.rpki-client.org