$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft File: yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json) Hash identifier: KGhMVDP0dBJQTfmHnz63ho7LvVp9nwva8RrEB7uhL5M= Subject key identifier: F3:F8:B1:22:68:F7:7F:06:76:39:54:61:17:6B:97:B4:14:27:3E:23 Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB Certificate issuer: /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft Manifest number: A1 Signing time: Wed 15 May 2024 06:50:14 +0000 Manifest this update: Wed 15 May 2024 06:50:13 +0000 Manifest next update: Wed 22 May 2024 06:50:13 +0000 Files and hashes: 1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: 6erIxD6dVLp3OrR+GHIitwncqGZEnL93/lAeDP3Qwjg=) 2: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: dlg4JV1BlQo6XQbHKGjITkliJb83ZMcW7cf07akOYfE=) 3: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: fpAYAv1WBYpPGPa7yvhS4IbvnP2mX5KG1PsD9knDicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB Validity Not Before: May 15 06:50:13 2024 GMT Not After : May 22 06:50:13 2024 GMT Subject: CN=66445b25-b8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e2:99:2f:c6:8e:59:37:38:a7:72:02:dd:e3: 1b:62:53:4e:e1:35:46:15:8f:38:3e:21:04:6d:e5: ce:b3:5c:0d:d3:b9:5a:32:f5:b8:82:af:5a:34:62: 2a:89:cf:5f:ec:58:d1:ba:4e:a6:6f:ae:cc:e0:05: 9b:b0:e3:fa:91:43:ce:38:8a:70:e8:e9:38:e8:80: ca:7c:12:5b:2e:b8:55:ae:20:f4:c2:9b:38:03:10: f0:fd:b8:14:f7:31:7a:3d:29:37:6f:ed:7b:5d:43: 5b:f2:9c:ca:66:37:54:16:01:43:d0:dc:67:23:7d: 12:e5:81:40:9e:ec:e5:a7:04:90:19:99:0a:e8:14: 67:81:d3:25:71:0a:d9:07:8a:79:1f:24:da:50:34: d2:7a:53:d2:ca:3b:fe:3d:5f:14:ac:39:06:53:18: 71:a4:6d:20:ea:b9:ce:cd:ac:49:c2:3b:db:9b:b0: 21:21:0c:72:a7:7a:22:d1:ca:53:81:e0:48:04:f5: 75:98:76:18:8b:21:82:5d:b4:30:9a:4d:0d:a7:26: b4:b4:21:55:26:82:db:3d:96:64:bc:2f:3a:c5:df: 98:d6:bb:a7:dc:b2:f9:d6:b6:0f:1a:e3:d3:dd:a6: 0c:a3:25:50:9b:cb:4a:39:41:6f:85:84:3b:3a:5f: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F8:B1:22:68:F7:7F:06:76:39:54:61:17:6B:97:B4:14:27:3E:23 X509v3 Authority Key Identifier: keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:86:dd:fc:78:6e:a6:f6:8f:c9:12:7c:6c:e4:ed:e5:a1:85: f4:49:43:73:0c:e8:8e:95:9e:a8:c2:d7:4b:6c:b1:2b:95:e8: 3c:8a:a5:87:6d:b0:d8:8a:2b:89:d0:c0:b8:62:e0:b1:2f:fe: 48:5f:40:b4:c3:67:ab:1c:00:f9:d9:f4:5b:32:1c:86:6a:57: eb:5b:3d:14:0a:03:83:29:23:6e:fa:cb:ed:d0:1e:df:26:a8: 5d:e3:04:a7:6e:6b:17:91:68:97:f3:ad:95:66:28:9a:00:68: ff:ea:9d:86:98:b7:6e:5f:d9:f2:47:5c:a0:f4:6e:cc:ce:82: 42:be:99:56:a8:3b:76:61:9b:74:e2:6b:b6:8f:ba:f7:cc:d2: 58:de:1b:e6:17:20:fe:6e:36:60:22:8c:ed:45:27:aa:e6:18: 85:5d:1c:a0:2e:15:16:21:af:06:b8:5c:dd:d8:e8:0c:96:c6: e9:c7:3a:e0:d9:85:50:7a:c9:68:3a:56:c0:83:7d:2d:39:11: 62:a0:d4:a1:e2:55:53:cd:9e:03:a6:ab:42:47:b8:7b:1c:10: 3a:d4:cf:69:a3:12:53:95:a9:11:ef:e2:32:23:06:35:a7:60: 2f:b5:f6:c8:00:0a:7c:b7:c1:02:6c:1a:b9:d3:91:53:22:bd: 00:40:b3:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCOTYxMTAvBgNVBAUTKEM4MkI3QjM3OUQ2RkVEMkEzQzMwQzQ1MzdFMEY4N0ND QjYwODIyRUIwHhcNMjQwNTE1MDY1MDEzWhcNMjQwNTIyMDY1MDEzWjAYMRYwFAYD VQQDEw02NjQ0NWIyNS1iOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+KZL8aOWTc4p3IC3eMbYlNO4TVGFY84PiEEbeXOs1wN07laMvW4gq9aNGIq ic9f7FjRuk6mb67M4AWbsOP6kUPOOIpw6Ok46IDKfBJbLrhVriD0wps4AxDw/bgU 9zF6PSk3b+17XUNb8pzKZjdUFgFD0NxnI30S5YFAnuzlpwSQGZkK6BRngdMlcQrZ B4p5HyTaUDTSelPSyjv+PV8UrDkGUxhxpG0g6rnOzaxJwjvbm7AhIQxyp3oi0cpT geBIBPV1mHYYiyGCXbQwmk0Npya0tCFVJoLbPZZkvC86xd+Y1run3LL51rYPGuPT 3aYMoyVQm8tKOUFvhYQ7Ol/yhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPP4sSJo 938GdjlUYRdrl7QUJz4jMB8GA1UdIwQYMBaAFMgrezedb+0qPDDEU34Ph8y2CCLr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUI5Ni82NEQ2QkRDQzFD MjkxMUVFOUQwNkY5MEFDNEY5QUUwMi95Q3Q3TjUxdjdTbzhNTVJUZmctSHpMWUlJ dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDdDdONTF2N1NvOE1NUlRmZy1IekxZSUl1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUI5Ni82NEQ2QkRDQzFDMjkxMUVFOUQwNkY5MEFDNEY5QUUwMi95Q3Q3TjUxdjdT bzhNTVJUZmctSHpMWUlJdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjht38eG6m9o/JEnxs5O3loYX0SUNzDOiOlZ6owtdLbLErleg8iqWH bbDYiiuJ0MC4YuCxL/5IX0C0w2erHAD52fRbMhyGalfrWz0UCgODKSNu+svt0B7f Jqhd4wSnbmsXkWiX862VZiiaAGj/6p2GmLduX9nyR1yg9G7MzoJCvplWqDt2YZt0 4mu2j7r3zNJY3hvmFyD+bjZgIoztRSeq5hiFXRygLhUWIa8GuFzd2OgMlsbpxzrg 2YVQesloOlbAg30tORFioNSh4lVTzZ4DpqtCR7h7HBA61M9poxJTlakR7+IyIwY1 p2AvtfbIAAp8t8ECbBq505FTIr0AQLO4 -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org