$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: uKFxs69yQ78RyVG/bR+Mtg9G7b818E0CCeYnayDBh6s= Subject key identifier: 22:E9:A7:07:E4:C8:07:82:05:B8:61:E1:2F:8E:3A:74:9C:23:C2:12 Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 03F0 Signing time: Fri 03 May 2024 02:20:45 +0000 Manifest this update: Fri 03 May 2024 02:20:44 +0000 Manifest next update: Fri 10 May 2024 02:20:44 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: xpo/0rfYA0GuNJ/jNjut9bqNSZo4Bt5VMdk2OlHEiJA=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: kAAXrPn3h6fnDZKcj+NU7y43HflGR++IvUSQGCyuZuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Validity Not Before: May 3 02:20:44 2024 GMT Not After : May 10 02:20:44 2024 GMT Subject: CN=663449fd-c3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:a0:af:fb:52:1f:da:56:3a:76:86:a7:49: f0:00:7d:f9:77:70:6b:f0:dc:46:99:49:15:d7:ff: 74:6c:9d:35:5e:d5:92:fe:f9:17:17:bd:57:af:83: ca:57:4a:33:d6:22:04:e0:ed:dd:49:73:93:cd:5a: fd:58:1a:47:ff:ad:7b:98:54:e1:63:92:80:d1:7a: d0:9c:bc:e5:83:ea:1d:d6:87:d9:12:c8:90:56:6f: bd:e9:d7:d7:6f:07:80:fa:5f:be:a7:dd:72:16:0b: c2:2b:74:be:cd:19:48:c2:c9:a2:5e:fb:54:1e:e5: ba:1f:0c:a5:4e:41:0e:9a:ba:e6:fa:db:cd:7d:02: 0d:cf:b1:64:50:75:30:a1:32:b3:9e:d8:6f:86:7f: 1a:cd:24:10:91:ca:f8:0d:26:94:23:70:cb:a2:a7: e9:ec:bc:85:fd:5f:ba:1c:8b:ae:4c:ed:a9:e3:50: 38:a5:42:29:96:d7:12:e1:36:bb:16:26:2e:dc:b1: e1:2e:0f:91:c0:34:3f:5f:b4:c4:ed:8c:59:8e:5b: e8:72:ad:01:29:b2:d8:b9:cd:ed:a4:9e:63:7f:f4: 7a:df:c2:f2:dc:86:76:4e:78:8d:be:06:b8:2c:a7: 66:fb:a9:f3:9b:45:4c:9e:b9:35:3e:58:f9:d7:1a: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E9:A7:07:E4:C8:07:82:05:B8:61:E1:2F:8E:3A:74:9C:23:C2:12 X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:76:a0:aa:91:c1:48:cd:ca:52:db:26:1b:72:65:54:47:77: 5c:72:f1:23:36:b1:bd:a9:b5:71:b0:97:17:e8:49:e6:31:c9: ff:12:c8:de:30:c7:3e:87:77:38:f7:80:9b:6d:02:c2:c5:07: 22:6f:e2:bf:01:2d:0f:00:ad:f6:06:30:99:91:94:43:33:5c: bb:c6:b1:ef:6e:04:e1:0c:e4:28:52:7b:46:6f:b7:43:40:04: c7:88:8f:b9:50:88:93:57:1e:e9:4a:54:e7:e3:3a:a7:bd:ec: 37:18:d2:d4:58:7f:b2:67:36:a7:23:8d:ba:97:6d:7b:ff:86: 1a:11:06:0d:c9:40:82:f4:d2:d9:03:b3:7f:28:69:32:ac:97: 23:10:28:88:9b:4a:9a:7a:a5:55:4f:dd:6e:3a:92:65:91:8f: a5:02:01:56:aa:44:f5:6d:86:06:3d:21:9d:83:af:63:c5:ec: a1:c5:e7:18:e2:5c:1f:6f:b4:e6:b7:d5:b5:48:a8:8d:17:2b: 4c:a7:14:78:57:7e:28:e5:3d:5c:30:02:03:0b:58:57:31:ba: 67:71:24:61:60:a9:58:d4:96:f1:3b:4b:ff:22:bd:ce:c3:f0: 9a:c3:92:75:55:46:bb:7b:c2:3a:0a:4e:ae:82:75:39:b1:8b: f4:9e:cc:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjQwNTAzMDIyMDQ0WhcNMjQwNTEwMDIyMDQ0WjAYMRYwFAYD VQQDEw02NjM0NDlmZC1jM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuCgr/tSH9pWOnaGp0nwAH35d3Br8NxGmUkV1/90bJ01XtWS/vkXF71Xr4PK V0oz1iIE4O3dSXOTzVr9WBpH/617mFThY5KA0XrQnLzlg+od1ofZEsiQVm+96dfX bweA+l++p91yFgvCK3S+zRlIwsmiXvtUHuW6HwylTkEOmrrm+tvNfQINz7FkUHUw oTKznthvhn8azSQQkcr4DSaUI3DLoqfp7LyF/V+6HIuuTO2p41A4pUIpltcS4Ta7 FiYu3LHhLg+RwDQ/X7TE7YxZjlvocq0BKbLYuc3tpJ5jf/R638Ly3IZ2TniNvga4 LKdm+6nzm0VMnrk1Plj51xq/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLppwfk yAeCBbhh4S+OOnScI8ISMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZdqCqkcFIzcpS2yYbcmVUR3dccvEjNrG9qbVxsJcX6EnmMcn/Esje MMc+h3c494CbbQLCxQcib+K/AS0PAK32BjCZkZRDM1y7xrHvbgThDOQoUntGb7dD QATHiI+5UIiTVx7pSlTn4zqnvew3GNLUWH+yZzanI426l217/4YaEQYNyUCC9NLZ A7N/KGkyrJcjECiIm0qaeqVVT91uOpJlkY+lAgFWqkT1bYYGPSGdg69jxeyhxecY 4lwfb7Tmt9W1SKiNFytMpxR4V34o5T1cMAIDC1hXMbpncSRhYKlY1JbxO0v/Ir3O w/Caw5J1VUa7e8I6Ck6ugnU5sYv0nsx1 -----END CERTIFICATE-----Generated at Fri May 3 03:10:48 2024 by rpki-client on console-ams.rpki-client.org