$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: pRwp2iCrtp88KFfxMPmJCalAhKEBIn5rd+ZdmM2ztpE= Subject key identifier: 06:BC:5D:94:42:C1:F1:74:E9:AE:E0:91:4E:FA:F2:98:8A:C0:B9:30 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 06EC Signing time: Wed 24 Apr 2024 22:46:06 +0000 Manifest this update: Wed 24 Apr 2024 22:46:06 +0000 Manifest next update: Wed 01 May 2024 22:46:06 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: HclhIUjSAOJC9oTVQcBq/VKZFoqVPtq4UxGFLFoRM4U=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: bG+lV0OxSOPuUHb6cBWsx9ElIiq2Ryk8p3PuLrci1fo=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: FSGFYq/FM29ednTCGI0w6R23/jTqJwV/y/rWe+xcclo=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: 6HPhe6Mqcy8zvn3PyYr+WXYOKr+HZQdXUKUmMkUnV5E=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: n7GugqZc6lCW1P+9Zs/i+8alh8fvUnkW70Vuh3B/7tA=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 6GB8K/lOWgJs/6qhla423ID97Z9RqGK6qMHMbSObdZM=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: MhRNjHvfHkDdTF4mYIY2vad5f1WIFlSdZXcRlCQ+d58=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: xDIcHShdwoZDTNrQIz/TpvtSpZFRPeZd6r7ws3r0B7Y=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: Ky6cRIIBW8pUzZxQNFdPjL5PJsGzyzEFO5GU0FDagn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Apr 24 22:46:06 2024 GMT Not After : May 1 22:46:06 2024 GMT Subject: CN=66298bae-730f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:cc:b9:41:bd:f5:5e:a8:7d:85:82:f9:e2: 8e:82:ca:07:a4:60:f2:39:fe:e7:19:2b:04:3f:7d: b5:59:7c:f4:41:81:98:72:a7:bf:9a:da:5e:cd:e1: 44:d7:67:97:a0:b1:13:0c:81:c2:57:b7:b7:90:96: cb:9d:9a:d7:21:1e:95:27:74:dc:12:a7:16:5c:9d: e7:b4:e8:ce:de:b0:52:05:1e:7b:eb:67:ac:d7:fb: ab:49:bc:08:68:01:1b:86:8e:c0:49:1f:22:c7:08: 10:52:85:91:0f:2c:e3:04:80:89:06:bb:ef:45:e5: 57:84:44:5c:35:43:98:fa:d6:2c:55:b9:3a:fb:cd: 00:62:20:7e:86:f1:2c:14:46:7a:e5:2a:4d:c2:d3: 25:75:3e:a9:30:d4:50:23:3b:a5:02:6f:af:e9:15: 25:db:8b:43:d0:26:73:17:71:e8:bf:e2:0e:3a:d7: 1c:ca:f3:9a:6a:2b:7a:57:7c:3a:59:dc:ed:e6:0b: e1:88:98:e7:59:58:c0:b8:bc:17:88:57:e5:61:b0: 62:74:84:05:25:38:79:5b:0e:9b:a2:7d:c1:77:6c: 52:3c:4a:39:ba:a5:54:f7:fc:5b:7a:a0:10:0d:1c: 74:d2:98:6e:51:1e:d0:25:d2:8f:0d:23:fd:37:db: 3d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BC:5D:94:42:C1:F1:74:E9:AE:E0:91:4E:FA:F2:98:8A:C0:B9:30 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:47:1f:72:08:04:67:d1:82:33:8c:b9:e6:d7:a3:a4:8c:9e: af:df:aa:d1:51:ba:3e:57:da:14:fd:63:b2:45:3a:f6:54:12: fd:7c:3c:2f:09:9f:cc:a8:b3:c8:39:f9:dd:20:8d:cf:dc:43: 52:7f:14:72:e8:15:ca:e7:ca:bd:dc:e8:81:0b:92:81:ee:9c: 2f:77:87:f9:2c:71:08:6c:a2:a6:2c:56:44:27:33:20:74:14: 71:e7:7f:db:e4:1a:01:cc:20:13:85:57:eb:c9:4e:2a:be:56: 41:a6:1a:f6:e2:41:b3:6f:c8:8c:01:71:d4:14:c6:f2:36:33: f5:55:a3:03:3f:47:ff:14:fc:0f:ac:4a:8a:3b:ca:9b:28:02: 32:19:5e:af:06:10:53:e2:8b:1a:19:4d:49:dd:01:6f:96:d4: 0a:bb:8f:64:75:e6:5c:f3:17:01:52:b0:59:58:a8:d1:0b:cd: b7:0d:93:72:97:37:ba:d5:55:b0:91:f8:e7:bf:97:e6:46:a1: 55:fe:f4:53:55:44:2a:02:79:a5:6c:2f:ca:d8:7a:1d:10:14: e2:22:94:d5:72:75:72:66:27:b2:3d:60:75:25:08:34:21:a5: 5e:6d:78:00:c8:b8:4c:b3:55:ab:32:6a:5f:77:ae:71:2e:ba: 9f:93:11:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjQwNDI0MjI0NjA2WhcNMjQwNTAxMjI0NjA2WjAYMRYwFAYD VQQDEw02NjI5OGJhZS03MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/nMuUG99V6ofYWC+eKOgsoHpGDyOf7nGSsEP321WXz0QYGYcqe/mtpezeFE 12eXoLETDIHCV7e3kJbLnZrXIR6VJ3TcEqcWXJ3ntOjO3rBSBR5762es1/urSbwI aAEbho7ASR8ixwgQUoWRDyzjBICJBrvvReVXhERcNUOY+tYsVbk6+80AYiB+hvEs FEZ65SpNwtMldT6pMNRQIzulAm+v6RUl24tD0CZzF3Hov+IOOtccyvOaait6V3w6 Wdzt5gvhiJjnWVjAuLwXiFflYbBidIQFJTh5Ww6bon3Bd2xSPEo5uqVU9/xbeqAQ DRx00phuUR7QJdKPDSP9N9s9xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa8XZRC wfF06a7gkU768piKwLkwMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmRx9yCARn0YIzjLnm16OkjJ6v36rRUbo+V9oU/WOyRTr2VBL9fDwv CZ/MqLPIOfndII3P3ENSfxRy6BXK58q93OiBC5KB7pwvd4f5LHEIbKKmLFZEJzMg dBRx53/b5BoBzCAThVfryU4qvlZBphr24kGzb8iMAXHUFMbyNjP1VaMDP0f/FPwP rEqKO8qbKAIyGV6vBhBT4osaGU1J3QFvltQKu49kdeZc8xcBUrBZWKjRC823DZNy lze61VWwkfjnv5fmRqFV/vRTVUQqAnmlbC/K2HodEBTiIpTVcnVyZieyPWB1JQg0 IaVebXgAyLhMs1WrMmpfd65xLrqfkxHi -----END CERTIFICATE-----Generated at Wed Apr 24 23:34:25 2024 by rpki-client on console-ams.rpki-client.org