$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: Ca3PKrOC7b2oqELE+OorGMYFbLPUn513KTDmNSg4TPs= Subject key identifier: 26:92:0A:05:D5:5A:C7:7C:C8:D2:9C:6A:81:8B:C5:11:49:7D:FC:9F Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 0341 Signing time: Wed 01 May 2024 03:15:58 +0000 Manifest this update: Wed 01 May 2024 03:15:57 +0000 Manifest next update: Wed 08 May 2024 03:15:57 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: irkTgklTH86WpME2fYCi8WZIbvBgDL3DwtMar4zcnH0=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: Z9M2BTILWpi1zrWrtTIZdVPHhfVkCZzh9YzYElbGzh4=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Pf5KnCT9Yqm3ZhGKRmydd6Ca2CU4m9+AK0ym0MYtdss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: May 1 03:15:57 2024 GMT Not After : May 8 03:15:57 2024 GMT Subject: CN=6631b3ee-b57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:67:92:c4:28:a5:90:f3:c2:a7:45:dd:2d: 7e:64:3e:26:2f:24:ce:83:82:6c:7a:df:a5:a7:f9: 3f:da:07:06:d4:8c:ea:e0:a3:62:26:4c:45:eb:7f: a8:b4:0f:79:2c:2c:ce:cf:8b:66:eb:96:27:46:89: 5c:ec:59:e9:e9:99:2f:ef:14:43:2a:02:4e:7f:61: c1:85:72:40:96:0f:14:25:25:3c:4c:52:a1:93:36: d7:97:3b:b3:f5:e8:df:63:8e:da:e0:ca:0b:8d:06: 80:89:52:f4:f6:3c:58:9e:0f:6a:74:64:6e:7e:20: 34:b8:3a:a5:85:3d:1d:1e:a6:0b:01:48:d8:b7:ae: c0:26:2f:25:39:af:47:36:34:e4:88:5b:2c:f7:6c: 74:ae:45:40:c8:56:30:ab:80:8b:a7:f4:da:45:c3: 94:31:23:8d:51:31:60:6d:d1:96:72:d1:11:d1:9a: f6:ae:e5:c4:2b:9c:29:b6:93:cf:72:fc:85:fa:60: 22:df:ee:66:70:7c:c8:5e:7d:21:17:ff:72:af:15: 08:6c:90:8c:14:2c:de:3a:b7:f3:06:ef:4a:4a:0a: 5e:33:40:0e:90:93:fc:16:f7:3a:ba:13:5c:b2:38: e5:6b:da:54:9f:40:d6:b6:6f:ac:d1:0f:89:30:76: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:92:0A:05:D5:5A:C7:7C:C8:D2:9C:6A:81:8B:C5:11:49:7D:FC:9F X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4a:61:e2:93:9e:23:ef:94:38:51:54:51:0f:02:42:19:f7: 6c:ef:53:e7:ba:e4:bc:0c:29:05:21:d2:e0:04:22:a2:a2:85: bd:23:49:e3:97:3a:d7:76:45:90:24:4e:15:d7:b2:da:a9:d0: cc:e0:f4:cd:11:88:64:0f:f2:d1:43:79:bf:dc:d3:89:b6:e4: 9c:5b:32:7a:3e:f0:52:b0:10:fd:31:cd:ac:f5:f8:ec:2a:0c: ef:03:eb:8a:bd:48:65:75:0d:65:97:51:ee:31:51:0e:ca:5a: ba:40:fb:4d:14:7c:db:e4:cd:bd:c1:41:4f:02:6f:67:e7:ba: 8a:c7:83:d6:0e:8d:0b:92:58:98:e0:05:5b:38:c7:f1:20:63: 66:01:58:fd:7b:7b:9f:13:17:59:cd:3e:a0:b6:eb:99:a0:12: a3:c9:b4:ed:e6:77:0b:54:8d:db:da:2d:44:db:9d:9b:89:2e: 0f:a4:9f:c1:6b:7e:34:76:a9:31:a7:02:c5:52:59:88:ae:e5: 62:e7:1e:72:3a:66:97:14:60:ab:bd:db:b0:86:49:bd:3e:f5: 2e:0d:d4:05:f2:06:85:07:4d:d6:d9:a9:ec:83:40:bc:3b:9a: 1d:a4:e8:33:55:16:67:a3:7c:cc:03:7b:fa:91:37:30:8a:45: a1:7e:2f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjQwNTAxMDMxNTU3WhcNMjQwNTA4MDMxNTU3WjAYMRYwFAYD VQQDEw02NjMxYjNlZS1iNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kdnksQopZDzwqdF3S1+ZD4mLyTOg4Jset+lp/k/2gcG1Izq4KNiJkxF63+o tA95LCzOz4tm65YnRolc7Fnp6Zkv7xRDKgJOf2HBhXJAlg8UJSU8TFKhkzbXlzuz 9ejfY47a4MoLjQaAiVL09jxYng9qdGRufiA0uDqlhT0dHqYLAUjYt67AJi8lOa9H NjTkiFss92x0rkVAyFYwq4CLp/TaRcOUMSONUTFgbdGWctER0Zr2ruXEK5wptpPP cvyF+mAi3+5mcHzIXn0hF/9yrxUIbJCMFCzeOrfzBu9KSgpeM0AOkJP8Fvc6uhNc sjjla9pUn0DWtm+s0Q+JMHb4zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaSCgXV Wsd8yNKcaoGLxRFJffyfMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfSmHik54j75Q4UVRRDwJCGfds71PnuuS8DCkFIdLgBCKiooW9I0nj lzrXdkWQJE4V17LaqdDM4PTNEYhkD/LRQ3m/3NOJtuScWzJ6PvBSsBD9Mc2s9fjs KgzvA+uKvUhldQ1ll1HuMVEOylq6QPtNFHzb5M29wUFPAm9n57qKx4PWDo0LkliY 4AVbOMfxIGNmAVj9e3ufExdZzT6gtuuZoBKjybTt5ncLVI3b2i1E252biS4PpJ/B a340dqkxpwLFUlmIruVi5x5yOmaXFGCrvduwhkm9PvUuDdQF8gaFB03W2ansg0C8 O5odpOgzVRZno3zMA3v6kTcwikWhfi98 -----END CERTIFICATE-----Generated at Wed May 1 04:49:20 2024 by rpki-client on console-ams.rpki-client.org