$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: N/1MmGK/GWA2VVqE8BX6vIfec+D7TU1boe1lFLn+cyA= Subject key identifier: B9:1E:D8:00:ED:C7:94:91:AC:37:96:11:E3:54:3E:D3:1B:BA:84:7C Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0284 Signing time: Sun 05 May 2024 03:50:36 +0000 Manifest this update: Sun 05 May 2024 03:50:36 +0000 Manifest next update: Sun 12 May 2024 03:50:36 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: PxyKKEok3lWugh9AkuZE3e69AhC/EnWKalJef+zQdXA=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: htlqSzG4jSkQm34TxJmguWL9gNyx3smdQuSmU4ScnH4=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: Kkj3qBW9Wp24vJ3Ekg42ms/3vIOl6ql8CuIT0eW6LEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: May 5 03:50:36 2024 GMT Not After : May 12 03:50:36 2024 GMT Subject: CN=6637020c-d82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:0c:42:b7:5b:b8:7a:3a:09:57:e7:37:05: 2a:69:b7:0a:b8:d5:e3:66:68:78:22:fe:55:6b:9a: d1:0f:ae:fb:a6:40:1a:b6:e4:5d:b1:d2:0a:b1:e9: b3:e3:05:66:9c:47:e7:c9:9a:b7:0c:80:7d:fe:fa: 7d:cf:b7:d0:00:26:ec:8a:50:c1:96:da:5a:2e:67: 71:be:a7:70:00:f7:cb:b2:a1:fd:d7:45:de:36:e6: ed:e7:c1:f5:ce:8b:7f:ec:43:28:de:5a:36:9a:b8: 86:33:f3:e7:41:ef:d3:61:8f:d3:99:df:1a:03:00: fa:70:c4:7e:a3:7e:81:cf:e0:19:0c:79:ce:09:46: 73:f1:9f:f2:ad:4e:a3:64:69:a6:68:d9:4e:42:63: 45:fd:57:42:71:e7:6c:f7:34:98:9c:5b:0e:e3:92: 5e:46:4f:e6:67:42:94:64:ee:78:71:45:aa:d8:64: b9:33:ec:d3:76:16:7b:0f:b9:1e:2a:bc:85:a8:27: f5:53:d9:6f:b9:35:90:32:9f:82:1e:d1:0f:2c:0e: 11:c7:ee:c8:1c:d2:88:7c:07:c3:b2:85:e4:a8:a0: ae:ed:d8:93:68:5d:05:d6:0e:0b:80:00:29:fe:c3: ca:ae:85:f8:31:f7:99:7b:cd:49:5a:ed:e5:c2:16: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1E:D8:00:ED:C7:94:91:AC:37:96:11:E3:54:3E:D3:1B:BA:84:7C X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7f:bc:8a:6e:8c:b5:ce:56:42:10:e7:6f:59:ec:1e:3a:45: d7:27:fe:bd:2b:53:b5:98:a0:bb:a8:43:ab:bb:c9:2a:ef:09: 4e:41:25:96:bb:f6:36:07:a2:a3:4e:99:15:bd:dd:59:5e:de: 53:8b:36:cc:e8:db:ef:cf:c9:3f:2d:51:be:65:3c:7b:5f:7a: 0e:f3:85:22:c4:d9:18:ea:62:02:2a:04:92:07:1d:c1:59:f8: 0b:1d:02:66:00:ad:22:ba:cc:8c:30:2e:8e:af:ba:3c:0f:f2: 6b:bf:11:6e:44:15:f1:4e:f0:3a:a1:aa:52:90:5e:42:c5:b4: f0:14:50:58:f1:cc:55:2e:fd:cd:28:1e:d3:b3:cc:dd:bd:20: b5:90:8e:3b:79:7b:e8:b4:f1:81:d5:66:bc:b5:d8:57:c3:97: a5:03:a3:8f:64:71:17:97:2a:d8:eb:5a:2b:58:9b:f9:8e:d8: a1:2d:ea:d1:42:62:b9:ba:f6:93:f3:15:3d:eb:3e:4b:2f:c1: 9b:54:95:ac:26:f0:93:64:98:9d:fc:53:9c:21:14:b1:95:4d: 51:c9:b0:0b:dd:3f:40:47:10:49:3b:f4:81:5f:b3:55:75:75: 94:0f:65:17:a5:7b:78:52:e4:dc:07:91:03:57:32:e7:6f:a7: 76:be:1a:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjQwNTA1MDM1MDM2WhcNMjQwNTEyMDM1MDM2WjAYMRYwFAYD VQQDEw02NjM3MDIwYy1kODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlYMQrdbuHo6CVfnNwUqabcKuNXjZmh4Iv5Va5rRD677pkAatuRdsdIKsemz 4wVmnEfnyZq3DIB9/vp9z7fQACbsilDBltpaLmdxvqdwAPfLsqH910XeNubt58H1 zot/7EMo3lo2mriGM/PnQe/TYY/Tmd8aAwD6cMR+o36Bz+AZDHnOCUZz8Z/yrU6j ZGmmaNlOQmNF/VdCceds9zSYnFsO45JeRk/mZ0KUZO54cUWq2GS5M+zTdhZ7D7ke KryFqCf1U9lvuTWQMp+CHtEPLA4Rx+7IHNKIfAfDsoXkqKCu7diTaF0F1g4LgAAp /sPKroX4MfeZe81JWu3lwhZQPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLke2ADt x5SRrDeWEeNUPtMbuoR8MB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcf7yKboy1zlZCEOdvWeweOkXXJ/69K1O1mKC7qEOru8kq7wlOQSWW u/Y2B6KjTpkVvd1ZXt5TizbM6Nvvz8k/LVG+ZTx7X3oO84UixNkY6mICKgSSBx3B WfgLHQJmAK0iusyMMC6Or7o8D/JrvxFuRBXxTvA6oapSkF5CxbTwFFBY8cxVLv3N KB7Ts8zdvSC1kI47eXvotPGB1Wa8tdhXw5elA6OPZHEXlyrY61orWJv5jtihLerR QmK5uvaT8xU96z5LL8GbVJWsJvCTZJid/FOcIRSxlU1RybAL3T9ARxBJO/SBX7NV dXWUD2UXpXt4UuTcB5EDVzLnb6d2vho+ -----END CERTIFICATE-----Generated at Sun May 5 04:39:59 2024 by rpki-client on console-ams.rpki-client.org