$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: I0mrIswef6BYI7UywwiWumirOyaSKDyoJ6l1fc2Fi0E= Subject key identifier: 5B:D6:FF:6C:6A:B2:96:29:5E:EA:93:12:69:B6:6C:A9:1C:AA:27:2D Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 58 Signing time: Fri 17 May 2024 08:00:44 +0000 Manifest this update: Fri 17 May 2024 08:00:43 +0000 Manifest next update: Fri 24 May 2024 08:00:43 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: 5rH3Pj+OiThB+TrNNtw40BpuXezICyq/Pux7KxnEjj8=) 2: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: EEnR1VX+Mw+8hC1yLfu7i9ybBTq/4oZP2T1jK7dOqe8=) 3: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: ag36mdDEIjwDi99xgo2sfLP9oQrM2cMUqwqJVKR+tc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: May 17 08:00:43 2024 GMT Not After : May 24 08:00:43 2024 GMT Subject: CN=66470eac-00d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:d4:cd:e0:27:26:4d:c7:05:78:f7:b1:22: ac:1f:33:f1:d7:2e:a6:e9:2d:84:ad:0d:d5:76:ab: 46:a3:4c:72:35:28:48:b9:ea:80:bf:8a:03:c1:47: bf:57:10:f1:b0:7d:c8:44:b7:c6:10:e9:bf:f6:18: e0:49:83:2f:81:c4:99:bd:92:cd:23:7a:02:0b:f7: 41:55:a2:8b:9a:26:f6:47:ce:f7:64:da:87:58:13: cd:5e:8b:d8:b6:58:0e:35:98:dc:5d:b9:7f:9a:a2: 77:6b:44:00:14:bb:b3:65:6c:a3:6a:e0:67:1e:71: 50:0f:d3:ff:45:a3:5b:a1:7f:b9:5c:99:19:53:02: c4:7a:b4:e3:17:42:1e:a8:4b:f1:53:17:6c:83:47: 04:3a:78:39:40:09:1e:2b:da:e3:b1:93:d2:df:2e: 32:e4:76:8c:4a:61:90:43:1f:08:64:0a:1b:45:ec: 63:87:70:9e:05:5b:49:4a:c9:14:e3:00:21:c8:3a: bf:25:5b:21:ab:fe:ca:31:83:74:22:5e:ed:f0:b1: d5:5b:e4:ec:b0:bc:e7:8b:a9:83:57:d7:4d:aa:97: 0c:43:9b:d5:22:32:cf:ac:b4:0f:08:6f:e7:3e:45: a4:5d:16:0e:ff:db:9d:e7:09:da:1f:69:12:ec:fb: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D6:FF:6C:6A:B2:96:29:5E:EA:93:12:69:B6:6C:A9:1C:AA:27:2D X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:20:9a:cc:cc:9b:97:9a:28:dc:2f:22:a8:6f:e8:44:94:79: 4c:aa:05:d2:6c:dd:75:dd:58:cd:12:2f:7c:e9:74:57:b2:b4: 30:75:33:a3:fc:ed:a6:0b:64:63:0c:1d:3c:31:c8:75:0a:8f: e5:a5:0b:b0:5b:d9:78:6c:ca:81:b1:29:65:7f:d1:4d:a3:91: 95:9e:6d:37:c1:2e:55:da:76:47:5b:ef:3d:e0:58:e0:96:ad: 32:59:f7:fc:62:ba:df:fe:29:24:45:d5:2e:14:58:9c:c3:5d: 32:9c:9c:f9:c3:82:f3:b3:7b:06:18:c4:fe:e5:aa:9d:44:25: 8b:ec:f8:a9:2d:85:27:1c:66:e0:6e:17:9a:73:18:24:a9:6b: d8:75:d4:d2:3e:43:c2:99:a5:2f:08:98:19:96:ec:30:46:00: b3:b8:e1:77:9c:da:f4:76:67:14:91:bb:c5:0e:6a:e5:5a:1b: 15:da:28:56:46:55:da:7e:c9:85:02:89:76:1c:7c:6f:f0:b1: d5:e1:9e:33:62:05:eb:32:08:4b:b4:f7:f9:7d:f0:a7:d9:fd: 68:2a:78:40:af:ee:d3:ca:dd:69:df:77:e7:64:a0:f8:af:bd: 78:87:14:8d:6a:10:ba:01:4d:47:a7:c5:fd:ac:f3:47:fd:dc: 4a:5e:b7:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEMzMzExMC8GA1UEBRMoQUYyRUUwNDQxMjM1NkFCRkQ4RTE5QUUyQzFCMjJBNzM3 Q0RGNUU5RTAeFw0yNDA1MTcwODAwNDNaFw0yNDA1MjQwODAwNDNaMBgxFjAUBgNV BAMTDTY2NDcwZWFjLTAwZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVrNTN4CcmTccFePexIqwfM/HXLqbpLYStDdV2q0ajTHI1KEi56oC/igPBR79X EPGwfchEt8YQ6b/2GOBJgy+BxJm9ks0jegIL90FVoouaJvZHzvdk2odYE81ei9i2 WA41mNxduX+aondrRAAUu7NlbKNq4GcecVAP0/9Fo1uhf7lcmRlTAsR6tOMXQh6o S/FTF2yDRwQ6eDlACR4r2uOxk9LfLjLkdoxKYZBDHwhkChtF7GOHcJ4FW0lKyRTj ACHIOr8lWyGr/soxg3QiXu3wsdVb5OywvOeLqYNX102qlwxDm9UiMs+stA8Ib+c+ RaRdFg7/253nCdofaRLs+xXDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW9b/bGqy lile6pMSabZsqRyqJy0wHwYDVR0jBBgwFoAUry7gRBI1ar/Y4ZriwbIqc3zfXp4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4QzMzLzk1NkNCMDg2OTgx QjExRUVBQjBGQzkyMkM0RjlBRTAyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6Zlhw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnk3Z1JCSTFhcl9ZNFpyaXdiSXFjM3pmWHA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 QzMzLzk1NkNCMDg2OTgxQjExRUVBQjBGQzkyMkM0RjlBRTAyL3J5N2dSQkkxYXJf WTRacml3YklxYzN6ZlhwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHAgmszMm5eaKNwvIqhv6ESUeUyqBdJs3XXdWM0SL3zpdFeytDB1M6P8 7aYLZGMMHTwxyHUKj+WlC7Bb2XhsyoGxKWV/0U2jkZWebTfBLlXadkdb7z3gWOCW rTJZ9/xiut/+KSRF1S4UWJzDXTKcnPnDgvOzewYYxP7lqp1EJYvs+KkthSccZuBu F5pzGCSpa9h11NI+Q8KZpS8ImBmW7DBGALO44Xec2vR2ZxSRu8UOauVaGxXaKFZG Vdp+yYUCiXYcfG/wsdXhnjNiBesyCEu09/l98KfZ/WgqeECv7tPK3Wnfd+dkoPiv vXiHFI1qELoBTUenxf2s80f93Epet00= -----END CERTIFICATE-----Generated at Fri May 17 10:10:48 2024 by rpki-client on console-fra.rpki-client.org