$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: dXlUOY9fP6dGwFyTzASiY99/HGlOZA0Bh+Iot3KGaQA= Subject key identifier: CB:A9:49:71:85:5B:C7:2F:A3:A2:C0:7B:58:BC:34:46:B0:13:49:12 Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: CD Signing time: Tue 07 May 2024 06:13:05 +0000 Manifest this update: Tue 07 May 2024 06:13:05 +0000 Manifest next update: Tue 14 May 2024 06:13:05 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: He09OO+1SgFIJSnUByPjLfspL9yKA1Ndhj6TA+aQutQ=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: PPDLVXPQl6XurgAduiHqWzb+gvCQg2TVIT5HxoU2C6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: May 7 06:13:05 2024 GMT Not After : May 14 06:13:05 2024 GMT Subject: CN=6639c671-37c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:46:61:fc:3f:e4:49:eb:44:ad:ec:ef:dd: 40:de:cb:73:30:f7:62:7e:86:08:19:6e:60:08:0c: 68:e9:e3:87:26:30:e9:69:fd:ee:4b:40:f0:2a:23: 5c:ae:35:ef:27:57:23:dd:6e:36:c1:fb:48:20:64: e2:e0:ef:2f:cd:ad:4d:a6:9f:41:d3:3d:f8:57:fe: 8a:f8:2e:cb:c1:6b:d0:2b:1f:a7:85:3a:6d:cc:df: d7:55:03:3d:63:7f:e2:af:76:c4:52:51:b0:3d:64: 3a:42:9f:90:0f:28:14:a6:37:34:67:47:0e:40:51: 1b:6b:27:0d:32:1d:b6:0e:10:8d:fb:fd:cd:16:62: 36:23:fd:89:59:20:91:82:10:25:cc:5b:4c:04:9a: 45:8f:b9:33:c9:0d:d4:32:00:4d:ce:06:01:cf:70: 6f:c2:cb:33:a2:6f:39:f5:8a:ae:ed:0b:7b:a6:a6: b8:ee:b8:65:d4:2d:56:c9:07:aa:23:a5:4f:22:f1: 7a:b0:ec:7e:d7:d9:8c:b5:ae:96:2f:bf:a7:da:67: f8:c4:06:24:8d:30:44:8c:51:99:c6:99:46:c8:ac: 5d:39:af:42:1b:61:44:dd:ec:10:c2:e3:d0:77:1c: 9d:ca:bd:05:31:60:03:bd:b3:16:33:b0:19:8c:73: 93:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A9:49:71:85:5B:C7:2F:A3:A2:C0:7B:58:BC:34:46:B0:13:49:12 X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:00:67:cb:a7:a9:ca:08:1a:3d:8e:11:f0:9e:11:24:be:31: af:28:fa:5d:67:73:f8:0b:e8:43:7e:e5:f3:b5:5f:92:69:8d: 1f:94:3e:00:fd:d0:bb:3a:35:c0:dc:d4:d6:2f:69:61:98:39: ac:a1:22:a3:e6:69:3a:e5:28:80:e7:c1:78:4c:3a:44:7c:f3: 7f:09:39:68:74:91:ed:cd:c7:77:b5:d7:31:c5:0a:c2:64:40: 15:9a:17:d9:00:b7:3f:79:ad:c4:83:8a:46:07:b2:d6:98:a5: de:a0:35:b2:c4:e7:80:e9:8d:5a:47:67:77:14:5f:88:ee:ed: 34:b7:31:0a:66:3a:2e:e7:8a:d1:e9:b5:9a:20:5f:2b:dd:2b: c4:9b:d4:07:e8:13:fc:c6:4a:d7:55:e7:8b:a8:f1:56:b9:5f: 34:97:55:42:65:63:0c:93:e1:e2:e0:9f:c8:a4:96:02:43:d6: 8f:7b:66:3f:30:4b:55:55:cc:e3:a9:71:a7:ef:24:6e:08:74: 8d:07:4b:80:d5:6a:5e:70:1f:d4:83:3e:59:a8:24:54:ab:85: 5c:ea:3f:2e:3e:bc:ec:36:59:81:69:6e:45:34:9e:b7:cf:c5: 13:60:25:39:fa:8a:8a:68:ec:d8:ac:a8:2c:0e:5a:c9:f2:f9: 15:52:e4:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjQwNTA3MDYxMzA1WhcNMjQwNTE0MDYxMzA1WjAYMRYwFAYD VQQDEw02NjM5YzY3MS0zN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5FGYfw/5EnrRK3s791A3stzMPdifoYIGW5gCAxo6eOHJjDpaf3uS0DwKiNc rjXvJ1cj3W42wftIIGTi4O8vza1Npp9B0z34V/6K+C7LwWvQKx+nhTptzN/XVQM9 Y3/ir3bEUlGwPWQ6Qp+QDygUpjc0Z0cOQFEbaycNMh22DhCN+/3NFmI2I/2JWSCR ghAlzFtMBJpFj7kzyQ3UMgBNzgYBz3Bvwsszom859Yqu7Qt7pqa47rhl1C1WyQeq I6VPIvF6sOx+19mMta6WL7+n2mf4xAYkjTBEjFGZxplGyKxdOa9CG2FE3ewQwuPQ dxydyr0FMWADvbMWM7AZjHOT5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMupSXGF W8cvo6LAe1i8NEawE0kSMB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1AGfLp6nKCBo9jhHwnhEkvjGvKPpdZ3P4C+hDfuXztV+SaY0flD4A /dC7OjXA3NTWL2lhmDmsoSKj5mk65SiA58F4TDpEfPN/CTlodJHtzcd3tdcxxQrC ZEAVmhfZALc/ea3Eg4pGB7LWmKXeoDWyxOeA6Y1aR2d3FF+I7u00tzEKZjou54rR 6bWaIF8r3SvEm9QH6BP8xkrXVeeLqPFWuV80l1VCZWMMk+Hi4J/IpJYCQ9aPe2Y/ MEtVVczjqXGn7yRuCHSNB0uA1WpecB/Ugz5ZqCRUq4Vc6j8uPrzsNlmBaW5FNJ63 z8UTYCU5+oqKaOzYrKgsDlrJ8vkVUuQj -----END CERTIFICATE-----Generated at Tue May 7 07:13:00 2024 by rpki-client on console-ams.rpki-client.org