$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: TjMg1ohLiR8XBKI/wRYa14e/2R4v2flAcBLsBHgXzoc= Subject key identifier: CC:04:3B:23:4F:C6:33:89:75:36:54:33:72:A6:F9:DC:28:09:B8:CC Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1A95 Signing time: Mon 06 May 2024 16:49:05 +0000 Manifest this update: Mon 06 May 2024 16:49:04 +0000 Manifest next update: Mon 13 May 2024 16:49:04 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: j383wibcHFK93hNxFWtV5lFIk/aDZQkb/0W8caPZERY=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: vUCWQOdb7qjvOhdcg4SHMXTM8oTjFBVRvGp114pmqGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6814 (0x1a9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: May 6 16:49:04 2024 GMT Not After : May 13 16:49:04 2024 GMT Subject: CN=66390a00-8b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:74:6e:12:6a:32:5a:17:f5:50:af:99:ff: 9d:9f:53:48:c8:45:9a:b1:c3:f3:4a:ae:c0:b6:6b: 8e:47:62:90:c2:07:c5:39:16:29:8d:1f:56:87:ae: 9a:e4:e5:7a:70:b9:84:27:7d:1a:24:45:63:a0:15: 2f:c7:64:e6:01:3d:15:c4:d0:49:2b:12:f2:8b:2d: 83:cc:18:87:09:01:9a:0c:47:8e:b0:a7:41:92:94: fa:d2:e7:ba:05:08:85:42:e8:09:d1:55:b0:1a:76: 9a:de:52:8a:6d:2c:ab:a2:8c:e7:38:84:aa:5e:2c: a7:c2:17:e7:e3:ab:20:fe:14:a8:3e:41:22:bc:7c: bf:77:37:19:89:b1:c8:19:d6:88:86:58:3e:d2:4f: 4a:8c:c4:ef:78:1a:dd:ac:be:6f:50:3a:35:9e:63: ee:ad:45:7e:cc:32:f6:a8:3c:3f:93:03:40:4a:70: 83:71:b0:fb:af:4d:d8:fa:0e:f3:0c:45:29:16:56: b3:0c:de:d5:50:81:d5:ca:20:6c:46:e3:75:2b:a6: 64:d6:35:d0:f0:ab:ce:3a:84:49:4d:3c:3d:b9:0d: d0:62:ef:42:47:cf:ea:33:57:1f:ca:aa:a8:1b:bd: 60:bf:08:84:46:4b:de:11:7c:9b:a1:f6:61:6f:81: 05:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:04:3B:23:4F:C6:33:89:75:36:54:33:72:A6:F9:DC:28:09:B8:CC X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d3:8e:39:e1:15:c5:68:dc:d5:4d:54:21:11:04:67:cd:ca: b4:5e:f8:39:6e:86:2e:46:5d:c4:dc:da:03:63:db:5b:ae:0c: ca:e3:75:e2:b6:bc:bf:9a:a5:11:8d:6f:e4:60:b9:88:9b:c1: 5f:64:cd:26:ee:cc:87:0a:61:fa:54:a6:9e:79:15:95:52:33: 63:06:72:d5:79:66:8d:10:79:6a:94:00:29:db:5e:ee:ad:7b: b8:76:a1:e1:d3:01:5f:c6:64:16:a5:4b:32:31:1c:c2:af:44: c2:a9:5d:e6:c3:dc:bc:00:ca:a6:e1:f0:8f:70:a8:4a:09:a5: 5f:bf:4e:33:22:43:03:7f:ed:52:0b:5f:7d:d9:4d:07:4b:6b: 65:a9:b0:0e:ac:21:88:98:db:fc:85:be:5c:ab:ea:d2:d1:c0: cb:0d:3c:d8:e9:f9:b9:61:a2:33:3a:80:71:d0:40:f4:bb:3c: 62:b3:41:e3:4d:14:70:a9:85:d7:74:54:7d:9c:28:40:2b:a7: 3b:bf:3b:14:2b:87:95:8f:87:41:fe:9b:3f:94:cf:f3:9c:54: e1:87:7f:be:3c:42:ab:31:8c:e4:1a:2e:2a:52:49:c8:09:87: bb:13:8f:e1:f2:70:e9:4c:a4:ea:72:af:ef:3b:f1:33:f3:cc: de:45:25:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjQwNTA2MTY0OTA0WhcNMjQwNTEzMTY0OTA0WjAYMRYwFAYD VQQDEw02NjM5MGEwMC04YjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC50bhJqMloX9VCvmf+dn1NIyEWascPzSq7AtmuOR2KQwgfFORYpjR9Wh66a 5OV6cLmEJ30aJEVjoBUvx2TmAT0VxNBJKxLyiy2DzBiHCQGaDEeOsKdBkpT60ue6 BQiFQugJ0VWwGnaa3lKKbSyrooznOISqXiynwhfn46sg/hSoPkEivHy/dzcZibHI GdaIhlg+0k9KjMTveBrdrL5vUDo1nmPurUV+zDL2qDw/kwNASnCDcbD7r03Y+g7z DEUpFlazDN7VUIHVyiBsRuN1K6Zk1jXQ8KvOOoRJTTw9uQ3QYu9CR8/qM1cfyqqo G71gvwiERkveEXybofZhb4EFiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwEOyNP xjOJdTZUM3Km+dwoCbjMMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu04454RXFaNzVTVQhEQRnzcq0Xvg5boYuRl3E3NoDY9tbrgzK43Xi try/mqURjW/kYLmIm8FfZM0m7syHCmH6VKaeeRWVUjNjBnLVeWaNEHlqlAAp217u rXu4dqHh0wFfxmQWpUsyMRzCr0TCqV3mw9y8AMqm4fCPcKhKCaVfv04zIkMDf+1S C1992U0HS2tlqbAOrCGImNv8hb5cq+rS0cDLDTzY6fm5YaIzOoBx0ED0uzxis0Hj TRRwqYXXdFR9nChAK6c7vzsUK4eVj4dB/ps/lM/znFThh3++PEKrMYzkGi4qUknI CYe7E4/h8nDpTKTqcq/vO/Ez88zeRSX1 -----END CERTIFICATE-----Generated at Mon May 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org