$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: 4beITm/yAAg0cI48e0x5FdQy2po9OLWRcINd6S/50gE= Subject key identifier: 54:9B:61:BD:1F:D3:9E:88:5C:08:50:8A:15:82:D5:62:D0:7E:5E:AC Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 010A Signing time: Fri 03 May 2024 05:38:51 +0000 Manifest this update: Fri 03 May 2024 05:38:50 +0000 Manifest next update: Fri 10 May 2024 05:38:50 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: uIxVCms5GkGRk6jF27ebjumX3OtrsXqjIJ+KYSlUDzk=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: A4+/CvAq5mHbP+AOxvkMWdzg7e9oQgnalc06bQnNQUQ=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: pU/elbUoh0j8PH6/VL9mrY9wNAYpdaUxohsajY0Nvj0=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: JgPeqKU4xsklT076cCsBqaFdVoT5w8sKgLYiNf2MyxI=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 9yOQAKhFaTfuZqQNPZxR2Z+NGc7nsKwzw6QMxaKVE/0=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: ebvqHzeRlbm2q/dYQIXv+KTaJC9u2MXvSXJ+lCKaLew=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: pq/apOOz1IhPtAtHKhRZyj8F3MjedPS9nKhqg3OZNL4=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: G57w3BY+oamoZrS5obrZv6SV9BGixuS9Eocll81oryM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: May 3 05:38:50 2024 GMT Not After : May 10 05:38:50 2024 GMT Subject: CN=6634786a-467c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:7e:2e:f4:a5:11:61:e1:a9:12:30:47:e7: a7:98:01:f5:ad:ad:96:17:13:73:cd:81:54:f6:a6: a9:fd:df:c3:35:8a:df:cc:6f:87:20:31:6c:58:e0: 8e:57:dc:ef:d7:32:a5:32:e7:3a:a1:20:ac:69:3c: 28:97:5b:6b:d9:a2:0e:a4:9d:d1:f0:cd:34:f1:55: 6a:4f:ef:bd:53:6e:6d:94:82:7d:59:59:ab:f0:d9: 9a:f2:37:2f:fb:cb:d0:42:c0:01:29:ad:2f:52:59: 49:04:17:e2:02:a1:57:fe:85:c9:4a:66:eb:f6:2c: 16:05:8a:2a:a0:da:43:4d:34:2e:33:73:4e:52:72: 2c:6b:98:40:54:34:c9:e6:24:27:70:40:96:3c:dc: 91:b6:93:73:7c:a5:8f:d0:ea:f2:da:04:2c:26:31: e8:94:44:b6:e6:38:80:be:67:02:30:08:71:09:15: f9:cd:51:b2:68:c1:5e:e6:f0:f8:a9:97:32:1f:d7: 92:11:c6:19:fb:76:fd:e7:d0:77:c7:dc:00:53:a5: ed:8d:ce:03:c4:57:21:5b:3c:19:7f:35:1e:ee:a2: 90:21:d9:78:3a:ff:35:6a:a3:c4:3d:59:2d:8f:92: dc:80:ae:6a:8d:58:bd:c0:bd:ea:31:46:cb:4f:a1: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9B:61:BD:1F:D3:9E:88:5C:08:50:8A:15:82:D5:62:D0:7E:5E:AC X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:86:db:08:fb:0a:d3:c6:5e:90:48:78:95:23:32:71:4d: 14:d0:b7:92:c6:55:c8:5a:94:b1:10:e2:49:c0:39:87:77:17: 5b:b5:74:f6:a4:52:bb:11:ab:b6:1b:a3:69:94:08:2b:ab:95: 39:e8:d1:1f:4d:e4:21:22:17:63:59:d3:a3:bb:52:05:30:f8: 54:c6:e3:1e:75:b4:ca:ea:5c:60:53:6b:b4:76:a7:18:85:d8: 89:7c:42:a0:7a:cd:6b:a6:d2:75:7a:1b:99:f5:f0:76:a2:ff: ee:44:0f:d8:e2:9d:ac:b6:95:74:27:9a:27:0f:1b:a0:5a:54: 3c:b6:41:21:15:86:b6:44:8b:b3:3d:7a:92:7d:22:14:43:a1: e4:bc:de:44:dd:7d:e9:b1:71:3f:42:b1:ac:cb:29:54:7b:04: ca:b0:1d:73:f9:47:11:f5:ac:f7:2a:d1:e2:34:7c:0d:c8:dc: 85:c0:91:b5:f8:30:1b:b8:59:34:d0:2e:53:23:9a:36:a1:0d: dd:9c:5a:63:15:f1:6a:43:74:66:fe:4d:a1:59:d2:09:38:23: 21:6f:2f:c6:85:6d:df:58:08:a6:e2:c3:25:2b:6b:89:3e:24: ac:10:d5:ac:ff:f9:5f:c9:4d:03:d7:b0:61:e4:b2:ba:82:fd: 98:41:26:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjQwNTAzMDUzODUwWhcNMjQwNTEwMDUzODUwWjAYMRYwFAYD VQQDEw02NjM0Nzg2YS00NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMB+LvSlEWHhqRIwR+enmAH1ra2WFxNzzYFU9qap/d/DNYrfzG+HIDFsWOCO V9zv1zKlMuc6oSCsaTwol1tr2aIOpJ3R8M008VVqT++9U25tlIJ9WVmr8Nma8jcv +8vQQsABKa0vUllJBBfiAqFX/oXJSmbr9iwWBYoqoNpDTTQuM3NOUnIsa5hAVDTJ 5iQncECWPNyRtpNzfKWP0Ory2gQsJjHolES25jiAvmcCMAhxCRX5zVGyaMFe5vD4 qZcyH9eSEcYZ+3b959B3x9wAU6Xtjc4DxFchWzwZfzUe7qKQIdl4Ov81aqPEPVkt j5LcgK5qjVi9wL3qMUbLT6F/LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSbYb0f 056IXAhQihWC1WLQfl6sMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeAYbbCPsK08ZekEh4lSMycU0U0LeSxlXIWpSxEOJJwDmHdxdbtXT2 pFK7Eau2G6NplAgrq5U56NEfTeQhIhdjWdOju1IFMPhUxuMedbTK6lxgU2u0dqcY hdiJfEKges1rptJ1ehuZ9fB2ov/uRA/Y4p2stpV0J5onDxugWlQ8tkEhFYa2RIuz PXqSfSIUQ6HkvN5E3X3psXE/QrGsyylUewTKsB1z+UcR9az3KtHiNHwNyNyFwJG1 +DAbuFk00C5TI5o2oQ3dnFpjFfFqQ3Rm/k2hWdIJOCMhby/GhW3fWAim4sMlK2uJ PiSsENWs//lfyU0D17Bh5LK6gv2YQSYR -----END CERTIFICATE-----Generated at Fri May 3 06:28:36 2024 by rpki-client on console-fra.rpki-client.org