$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft File: RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json) Hash identifier: rtXP2p+Y9qx2X9QyTBAh6oQaiPM9i+cP1oPo5R5LDGs= Subject key identifier: 7C:7A:01:7D:FE:3E:18:D0:9E:E5:5E:93:0A:05:D0:E4:CF:B9:F3:3E Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft Manifest number: 7B Signing time: Wed 15 May 2024 07:27:40 +0000 Manifest this update: Wed 15 May 2024 07:27:40 +0000 Manifest next update: Wed 22 May 2024 07:27:40 +0000 Files and hashes: 1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: EfmxiqsnBGQVC+WpPHR5mR31QXgGWwkVc0qz+AEL5ng=) 2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: jGLgl+s+EXh85DiPzfOmONprvM0A0uRoqJDk3lKU0CI=) 3: A4554AD6A1C111EE96BE4110C4F9AE02.roa (hash: IV3AFx57AEI82GlUItOgpmo+qhlmSYNe7T4ACgV2Owo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: May 15 07:27:40 2024 GMT Not After : May 22 07:27:40 2024 GMT Subject: CN=664463ec-d2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:cd:4e:be:45:59:60:99:f6:b0:f6:a5:a3: 65:b1:58:83:87:13:dd:d8:2e:1a:6b:b7:d2:15:81: da:54:61:03:6e:0b:ab:2b:d9:7b:44:8a:b1:58:ec: d0:5b:3c:cf:66:d5:61:0c:4b:5f:9b:16:71:a6:ce: 7a:e6:92:f7:ca:d9:2f:a6:bd:fb:62:73:db:2d:a4: e0:b8:04:79:58:39:ec:73:28:47:78:04:2e:bb:e8: 53:cd:b9:a1:d5:62:5c:bb:d7:7a:fa:d9:54:e6:a2: 1f:37:ea:fe:65:3a:63:dc:83:c7:b3:36:85:8c:be: 73:b9:88:f8:65:c8:4b:a0:46:fb:ad:11:dc:d6:50: de:88:92:78:b0:a2:21:74:71:7d:9d:e1:46:75:68: 74:d6:e2:9a:ef:ec:1e:8f:f1:c0:fc:c8:9d:2f:61: 3e:96:04:24:09:8a:af:ac:2b:76:60:9a:f4:7d:be: 38:fe:40:80:fb:bc:fa:67:1e:32:1f:f7:a7:cc:9e: 89:40:47:a3:d5:6e:00:a9:27:99:b5:9a:4f:f7:7f: be:63:19:1e:6a:f0:8a:ae:b7:ed:5e:51:f9:6f:48: ea:6d:5e:d9:ec:05:ba:31:5d:52:44:84:c7:f5:7b: 2a:29:2f:e0:eb:2d:c0:c7:b1:df:fe:6a:a9:a2:9f: 9f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:01:7D:FE:3E:18:D0:9E:E5:5E:93:0A:05:D0:E4:CF:B9:F3:3E X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d7:7c:00:18:45:99:70:3d:bf:90:eb:1f:09:41:04:51:62: 8e:42:60:44:1f:dd:5b:0a:fe:d8:2f:31:91:a8:31:00:e4:79: d9:ae:96:9e:3f:42:02:02:89:39:ee:91:36:b2:12:0e:f5:7e: c0:a0:09:3d:f6:e2:7c:24:bf:63:90:99:fb:c9:18:42:f1:ed: b1:eb:6e:ef:9e:ee:93:11:98:b8:fc:86:20:6b:1e:37:b6:bb: c3:dd:b1:be:f8:fd:58:c7:56:72:93:1f:5f:4e:4e:f9:43:38: 65:a2:48:de:46:67:70:68:b1:2a:0c:0f:bf:1a:57:5e:75:dc: 8b:c8:52:41:13:4e:c9:6b:67:4f:85:48:18:a6:e0:34:7a:99: 99:bc:9a:d3:e1:35:3f:b6:88:bd:79:fd:4c:23:b0:58:28:05: 56:e7:5b:90:34:0d:0f:8c:7f:3d:28:4c:84:a4:c9:db:04:63: 28:9f:cd:1a:da:57:ee:53:8d:43:82:c1:99:30:31:c8:2c:b5: 3c:4a:b8:16:c4:be:a0:4f:79:48:d7:0c:ef:aa:27:e8:d4:a0: ba:62:f8:bc:3b:af:b1:88:96:1f:11:5b:07:ff:f4:f2:3a:82: b5:f4:02:37:5e:4e:9f:22:6d:36:22:53:a9:04:af:6f:cc:5a: 79:d2:8f:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3 N0ZDREQyMzQwHhcNMjQwNTE1MDcyNzQwWhcNMjQwNTIyMDcyNzQwWjAYMRYwFAYD VQQDEw02NjQ0NjNlYy1kMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IPNTr5FWWCZ9rD2paNlsViDhxPd2C4aa7fSFYHaVGEDbgurK9l7RIqxWOzQ WzzPZtVhDEtfmxZxps565pL3ytkvpr37YnPbLaTguAR5WDnscyhHeAQuu+hTzbmh 1WJcu9d6+tlU5qIfN+r+ZTpj3IPHszaFjL5zuYj4ZchLoEb7rRHc1lDeiJJ4sKIh dHF9neFGdWh01uKa7+wej/HA/MidL2E+lgQkCYqvrCt2YJr0fb44/kCA+7z6Zx4y H/enzJ6JQEej1W4AqSeZtZpP93++YxkeavCKrrftXlH5b0jqbV7Z7AW6MV1SRITH 9XsqKS/g6y3Ax7Hf/mqpop+f4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx6AX3+ PhjQnuVekwoF0OTPufM+MB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRr eWRHaU5KSlNpNmQzX04walEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm13wAGEWZcD2/kOsfCUEEUWKOQmBEH91bCv7YLzGRqDEA5HnZrpae P0ICAok57pE2shIO9X7AoAk99uJ8JL9jkJn7yRhC8e2x627vnu6TEZi4/IYgax43 trvD3bG++P1Yx1Zykx9fTk75QzhlokjeRmdwaLEqDA+/GldeddyLyFJBE07Ja2dP hUgYpuA0epmZvJrT4TU/toi9ef1MI7BYKAVW51uQNA0PjH89KEyEpMnbBGMon80a 2lfuU41DgsGZMDHILLU8SrgWxL6gT3lI1wzvqifo1KC6Yvi8O6+xiJYfEVsH//Ty OoK19AI3Xk6fIm02IlOpBK9vzFp50o9C -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org