$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: y6s3qMMq/QIv8PVTqShw1mxxECAVhjrgbaQEv0jci+g= Subject key identifier: C3:A2:DD:F7:5C:94:17:FF:10:8B:01:92:DD:0D:70:D1:13:6E:25:97 Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 06DA Signing time: Thu 02 May 2024 23:02:05 +0000 Manifest this update: Thu 02 May 2024 23:02:05 +0000 Manifest next update: Thu 09 May 2024 23:02:05 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: iOUV3QHRczkjmeS+zXw9JW+OCj2BZvwFdATyNxSTVQI=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: uBwfryVcsP8uTX6hhh9pLgUCTBG63TRSnG/7me0KeQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: May 2 23:02:05 2024 GMT Not After : May 9 23:02:05 2024 GMT Subject: CN=66341b6d-f64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:a0:4c:22:ab:cd:f6:c3:5e:fc:60:d4:6b: 5c:8f:e5:1f:01:37:59:2c:b7:14:65:26:e0:3e:02: 07:59:f8:a2:e0:e3:e6:52:07:f2:6a:86:a0:49:64: 73:9d:08:23:75:cb:f9:4b:c9:70:22:d8:6d:42:ae: 3b:60:12:19:7b:0e:48:d9:85:57:71:95:d1:fc:aa: 08:73:7d:02:35:bf:7c:8d:6c:a3:55:91:f4:e5:7b: f7:d9:cd:f2:ee:28:38:a8:2d:e1:a5:b5:75:03:ea: 38:13:67:ae:0e:0c:27:b9:91:3c:d9:43:28:f4:8c: 52:90:e6:3b:c5:3f:9a:dc:92:e3:0d:76:dd:a7:a7: 50:12:07:9c:6d:8b:ff:60:a5:52:24:53:c9:e1:0c: ed:e0:48:33:bd:fe:16:76:99:31:ad:b9:0b:72:22: 0e:8c:21:cf:6c:24:f9:4e:30:99:51:14:cd:c7:e1: 97:6d:41:0e:14:59:90:23:db:eb:17:67:f4:44:65: c3:f1:c6:fd:18:34:55:1d:f6:b2:85:59:a9:4b:b9: a4:f4:d0:a6:08:1e:08:b8:d4:16:9d:c6:03:ea:a6: c2:18:8a:a6:78:6e:11:ac:69:40:58:0c:fa:f1:4a: 14:7e:93:6d:d7:ef:54:6e:82:01:ff:f0:7c:b0:c3: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A2:DD:F7:5C:94:17:FF:10:8B:01:92:DD:0D:70:D1:13:6E:25:97 X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d6:06:37:e8:84:7d:66:70:91:2f:c6:56:55:d2:dc:66:02: ef:e2:ce:28:29:96:7a:de:7f:52:fc:6f:96:f6:f9:a0:6d:bd: 8a:a6:12:3c:45:59:76:d0:fa:e8:c5:5d:e3:d1:b4:31:49:86: 96:bb:82:33:6d:d8:77:01:0f:74:bd:8d:f6:6e:6b:7b:d3:d9: 65:e1:00:fb:74:6d:76:ff:35:60:0d:4b:74:e4:8f:15:d0:3f: 14:80:6d:38:dc:96:18:ef:cc:2a:17:39:80:d3:e2:00:81:c6: d1:31:63:d7:ae:90:bc:f4:21:5e:e4:08:ef:17:0c:21:23:99: 5b:ab:31:16:3b:52:13:92:a7:a5:a8:d2:a3:32:64:ec:ba:eb: d5:77:77:20:45:c6:27:84:0d:3c:69:29:31:7d:86:bd:76:7a: f2:f0:4b:88:4d:b0:1a:a0:93:00:4a:7f:a0:b8:e4:39:30:27: 50:cb:1b:21:1a:80:af:a5:dd:0d:64:78:11:1f:f2:23:e5:aa: eb:fd:da:bf:0b:18:4e:3c:0d:be:09:d0:6c:c5:ce:55:84:a4: 29:61:81:de:68:54:a2:93:60:69:dd:36:58:0e:6b:52:52:38: be:42:82:1d:fe:77:f7:55:09:8a:fb:43:96:83:33:ad:7a:f8: 04:fc:02:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjQwNTAyMjMwMjA1WhcNMjQwNTA5MjMwMjA1WjAYMRYwFAYD VQQDEw02NjM0MWI2ZC1mNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvmgTCKrzfbDXvxg1Gtcj+UfATdZLLcUZSbgPgIHWfii4OPmUgfyaoagSWRz nQgjdcv5S8lwIthtQq47YBIZew5I2YVXcZXR/KoIc30CNb98jWyjVZH05Xv32c3y 7ig4qC3hpbV1A+o4E2euDgwnuZE82UMo9IxSkOY7xT+a3JLjDXbdp6dQEgecbYv/ YKVSJFPJ4Qzt4Egzvf4WdpkxrbkLciIOjCHPbCT5TjCZURTNx+GXbUEOFFmQI9vr F2f0RGXD8cb9GDRVHfayhVmpS7mk9NCmCB4IuNQWncYD6qbCGIqmeG4RrGlAWAz6 8UoUfpNt1+9UboIB//B8sMMDHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOi3fdc lBf/EIsBkt0NcNETbiWXMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU1gY36IR9ZnCRL8ZWVdLcZgLv4s4oKZZ63n9S/G+W9vmgbb2KphI8 RVl20ProxV3j0bQxSYaWu4Izbdh3AQ90vY32bmt709ll4QD7dG12/zVgDUt05I8V 0D8UgG043JYY78wqFzmA0+IAgcbRMWPXrpC89CFe5AjvFwwhI5lbqzEWO1ITkqel qNKjMmTsuuvVd3cgRcYnhA08aSkxfYa9dnry8EuITbAaoJMASn+guOQ5MCdQyxsh GoCvpd0NZHgRH/Ij5arr/dq/CxhOPA2+CdBsxc5VhKQpYYHeaFSik2Bp3TZYDmtS Uji+QoId/nf3VQmK+0OWgzOtevgE/AJj -----END CERTIFICATE-----Generated at Thu May 2 23:48:42 2024 by rpki-client on console-fra.rpki-client.org