$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: 1tS+nrn3B20d0D5Xc/QDEh0mCgPsyyON5L8ZI4W5xRo= Subject key identifier: 09:69:1F:CF:58:99:A5:41:80:C4:61:44:25:9F:A5:DF:0B:EA:8D:E4 Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: D0 Signing time: Sat 27 Apr 2024 06:02:55 +0000 Manifest this update: Sat 27 Apr 2024 06:02:54 +0000 Manifest next update: Sat 04 May 2024 06:02:54 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: KPWqgm95w7xCwtu0GDT9zOKn2fWNoOIr9kjSxGhjRpw=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: kU6fsRIP10rXpeTdFL72qzNk8DJAVh671AdmFJV9slI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: Apr 27 06:02:54 2024 GMT Not After : May 4 06:02:54 2024 GMT Subject: CN=662c950f-2a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:bd:52:99:e4:f5:34:75:08:73:27:09:44: d6:10:68:98:f5:a9:91:f0:4f:96:2f:78:8e:bc:b2: 11:11:bc:6c:e7:31:ec:4a:e8:b0:fb:6f:03:e2:59: 5e:e3:0b:63:6f:9b:91:19:ec:fe:8e:57:80:23:6f: 33:c9:cc:0e:cf:85:cb:b5:8a:fd:b9:f4:a5:9c:18: 08:66:0d:36:73:89:0c:d8:b9:90:c3:b5:f3:40:44: 1e:51:86:34:e8:4c:99:1b:fa:79:0b:07:86:8f:ff: 1c:65:6d:02:a4:8d:ec:13:5e:15:3d:da:27:f3:1a: 6b:3f:ef:ef:7b:08:76:f4:80:b0:2f:ab:45:5b:4d: 5d:c0:09:c1:f2:aa:ab:b0:74:be:7c:04:ee:fb:62: ec:13:3f:5a:54:b3:05:51:e7:91:06:d0:01:57:5f: 65:19:de:2a:57:ed:eb:65:c6:da:9d:86:b8:1b:36: e3:2d:9a:b4:ab:0e:9f:15:95:0e:6a:83:5b:d4:dc: ee:88:03:81:ba:43:65:fb:ed:f4:d7:b0:12:ef:69: 3c:28:40:11:e4:ee:d3:b6:43:68:63:ef:5b:45:5c: 26:20:8d:a0:38:da:2d:c4:ae:a2:ec:8d:ac:7b:fc: ac:a7:8e:6b:d4:51:23:61:db:ad:1d:45:aa:70:e4: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:69:1F:CF:58:99:A5:41:80:C4:61:44:25:9F:A5:DF:0B:EA:8D:E4 X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ed:92:c7:69:81:10:bd:ca:a3:66:d2:89:d0:74:ee:4d:99: 96:b1:3c:27:57:8c:ed:76:03:ad:25:09:78:b0:14:64:63:a8: 03:6a:b3:fb:71:39:8b:7d:0d:91:fd:a3:21:f0:13:f7:8e:3f: 12:bf:0c:69:f4:60:ea:65:f1:c4:9c:50:20:c3:a7:26:9f:f1: 8e:f8:db:5b:22:67:6c:bf:b7:71:df:00:91:eb:16:15:0f:2d: 16:31:f6:10:a1:69:6e:47:c3:0b:e7:d8:46:0d:fb:80:24:aa: 22:a3:2c:1a:3b:40:f3:89:79:40:54:aa:8a:0c:f2:aa:97:92: c5:ce:6f:f6:62:f9:c0:3e:6c:66:ff:38:e0:e3:4d:35:d0:98: 9c:0b:6e:39:da:17:d6:7c:45:64:d5:30:e6:d5:44:df:09:20: b5:95:9d:43:a5:8c:09:8a:22:01:a0:64:80:74:82:74:de:0a: 02:a8:a4:4b:5c:71:4f:60:53:f9:24:34:d0:68:72:d3:80:2a: 02:e4:dd:cd:cf:e2:f3:c8:1f:cb:9a:2b:b5:f6:0c:0a:c8:46: 36:bd:fc:ff:8f:f2:79:39:8a:9c:91:7d:2c:98:91:a3:ff:d8: 24:46:e1:99:9b:50:b0:78:c8:d5:b0:67:03:8e:4e:86:c4:a4: 1a:04:5a:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjQwNDI3MDYwMjU0WhcNMjQwNTA0MDYwMjU0WjAYMRYwFAYD VQQDEw02NjJjOTUwZi0yYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJW9Upnk9TR1CHMnCUTWEGiY9amR8E+WL3iOvLIREbxs5zHsSuiw+28D4lle 4wtjb5uRGez+jleAI28zycwOz4XLtYr9ufSlnBgIZg02c4kM2LmQw7XzQEQeUYY0 6EyZG/p5CweGj/8cZW0CpI3sE14VPdon8xprP+/vewh29ICwL6tFW01dwAnB8qqr sHS+fATu+2LsEz9aVLMFUeeRBtABV19lGd4qV+3rZcbanYa4GzbjLZq0qw6fFZUO aoNb1NzuiAOBukNl++3017AS72k8KEAR5O7TtkNoY+9bRVwmII2gONotxK6i7I2s e/ysp45r1FEjYdutHUWqcORrzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlpH89Y maVBgMRhRCWfpd8L6o3kMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY7ZLHaYEQvcqjZtKJ0HTuTZmWsTwnV4ztdgOtJQl4sBRkY6gDarP7 cTmLfQ2R/aMh8BP3jj8Svwxp9GDqZfHEnFAgw6cmn/GO+NtbImdsv7dx3wCR6xYV Dy0WMfYQoWluR8ML59hGDfuAJKoioywaO0DziXlAVKqKDPKql5LFzm/2YvnAPmxm /zjg40010JicC2452hfWfEVk1TDm1UTfCSC1lZ1DpYwJiiIBoGSAdIJ03goCqKRL XHFPYFP5JDTQaHLTgCoC5N3Nz+LzyB/Lmiu19gwKyEY2vfz/j/J5OYqckX0smJGj /9gkRuGZm1CweMjVsGcDjk6GxKQaBFpz -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:04 2024 by rpki-client on console-ams.rpki-client.org