$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft File: pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json) Hash identifier: kwThfQiI/p3FgHt4sc+4DAxzQ6LlJTt2ih3OiLJqGRw= Subject key identifier: C5:A5:12:D5:0E:4E:95:A0:10:E6:97:24:85:CA:E1:C8:E7:BA:F1:AD Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5 Certificate issuer: /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5 Certificate serial: 13C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft Manifest number: 13BB Signing time: Sat 04 May 2024 17:36:39 +0000 Manifest this update: Sat 04 May 2024 17:36:39 +0000 Manifest next update: Sat 11 May 2024 17:36:39 +0000 Files and hashes: 1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: 5IzQCn7PA1V5oW5a7wn7ogtYr6I5TERi6Y0BbPmbeeU=) 2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: c2VkZk/hkd5VMNsXVjPwdPvb5rT2P+YAQ+KRDvYsv9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5062 (0x13c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5 Validity Not Before: May 4 17:36:39 2024 GMT Not After : May 11 17:36:39 2024 GMT Subject: CN=66367227-2ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:85:fc:b3:3b:fa:3e:4c:34:91:b2:bb:ba: ce:1b:a0:f1:55:73:a4:13:09:ab:0e:78:72:d9:cb: 74:94:46:41:aa:dd:fb:5b:75:52:82:79:3c:cc:dd: 3a:54:ce:81:a1:13:47:c6:82:02:88:7c:68:0a:06: a0:52:4a:da:60:1f:1a:44:54:a9:37:7f:ea:bd:98: ba:80:0f:01:6e:3d:5d:9c:0d:b7:9b:3f:3b:08:1e: 57:5e:9e:de:b3:3c:ae:e6:28:f9:94:51:6c:11:fe: ef:24:3b:32:1b:e5:07:e3:bc:13:74:2b:65:34:08: c1:5e:9a:7c:29:6d:9f:df:1d:4c:c9:48:95:4c:59: 5c:6d:ca:71:84:ab:c7:3d:b6:7f:94:0d:23:02:a6: a5:d5:32:04:e2:4c:15:bb:1b:66:10:fa:a6:44:26: e8:72:5b:fa:32:f2:19:d3:88:a0:a8:7e:5c:11:d5: 4a:9b:22:a4:bb:26:de:29:29:19:42:e9:86:60:db: 3d:8b:f4:43:12:0b:e5:45:92:97:06:0d:5b:87:a9: 94:42:69:6d:09:b2:dd:35:17:af:b0:d5:03:0b:c9: 11:12:84:0f:51:b0:55:41:c0:ea:64:e3:f0:85:8e: fc:bb:ab:fb:d8:ba:f9:9e:a3:29:09:5b:30:2d:9a: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A5:12:D5:0E:4E:95:A0:10:E6:97:24:85:CA:E1:C8:E7:BA:F1:AD X509v3 Authority Key Identifier: keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ae:a8:e3:02:c8:f8:33:06:4c:5d:dc:6d:a5:ee:4c:eb:1e: fb:fa:01:51:74:26:89:6d:6b:d2:4b:d0:eb:9e:94:5d:cc:d6: e6:1f:85:57:c4:3a:62:6f:20:78:5b:7d:6b:fb:82:ab:14:0a: 5d:b2:01:f8:66:cb:16:5b:97:86:58:5c:a2:cd:c3:a6:b5:7e: 53:dc:05:35:53:42:60:db:09:f4:8a:4f:72:65:0e:ec:54:47: 1e:df:e4:51:6d:7a:04:6f:f6:e6:cc:fc:a0:f6:ce:cf:38:42: d9:26:b9:e8:92:ea:2c:f9:12:99:db:51:0a:ca:e7:05:68:84: 67:b2:e4:2f:0c:96:53:42:97:1c:57:81:01:6a:ab:67:b1:f2: 51:28:6d:df:ff:ef:d2:1f:ca:e6:01:fc:5e:0a:ce:24:fc:37: f7:da:0a:1a:01:a5:df:f2:dd:36:24:e0:46:4e:98:2d:9a:e9: 44:65:27:37:80:d4:5c:76:9e:dd:6e:47:a8:5b:db:0b:1d:c2: eb:7c:b0:ce:86:38:61:bc:ad:2a:4f:e8:f6:6d:d0:57:64:f6: ea:da:d6:94:c3:c3:03:55:da:62:a1:7c:36:7d:ed:e0:73:59: 94:7b:96:9c:33:b8:3f:6e:78:86:02:d7:f3:68:5f:02:b4:7b: 0a:be:f7:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzMkYxMTAvBgNVBAUTKEE3MjdGNTlCMjRCMTE0QTI1MUZERjc3RjUzQkZBMEVD NjkxRTI1QTUwHhcNMjQwNTA0MTczNjM5WhcNMjQwNTExMTczNjM5WjAYMRYwFAYD VQQDEw02NjM2NzIyNy0yYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA036F/LM7+j5MNJGyu7rOG6DxVXOkEwmrDnhy2ct0lEZBqt37W3VSgnk8zN06 VM6BoRNHxoICiHxoCgagUkraYB8aRFSpN3/qvZi6gA8Bbj1dnA23mz87CB5XXp7e szyu5ij5lFFsEf7vJDsyG+UH47wTdCtlNAjBXpp8KW2f3x1MyUiVTFlcbcpxhKvH PbZ/lA0jAqal1TIE4kwVuxtmEPqmRCboclv6MvIZ04igqH5cEdVKmyKkuybeKSkZ QumGYNs9i/RDEgvlRZKXBg1bh6mUQmltCbLdNRevsNUDC8kREoQPUbBVQcDqZOPw hY78u6v72Lr5nqMpCVswLZo1jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWlEtUO TpWgEOaXJIXK4cjnuvGtMB8GA1UdIwQYMBaAFKcn9ZsksRSiUf33f1O/oOxpHiWl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMyRi8zMzQ1QzRDNjY2 NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZLSlJfZmRfVTctZzdHa2VK YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B5ZjFteVN4RktKUl9mZF9VNy1nN0drZUphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjMyRi8zMzQ1QzRDNjY2NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZL SlJfZmRfVTctZzdHa2VKYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAArqjjAsj4MwZMXdxtpe5M6x77+gFRdCaJbWvSS9DrnpRdzNbmH4VX xDpibyB4W31r+4KrFApdsgH4ZssWW5eGWFyizcOmtX5T3AU1U0Jg2wn0ik9yZQ7s VEce3+RRbXoEb/bmzPyg9s7POELZJrnokuos+RKZ21EKyucFaIRnsuQvDJZTQpcc V4EBaqtnsfJRKG3f/+/SH8rmAfxeCs4k/Df32goaAaXf8t02JOBGTpgtmulEZSc3 gNRcdp7dbkeoW9sLHcLrfLDOhjhhvK0qT+j2bdBXZPbq2taUw8MDVdpioXw2fe3g c1mUe5acM7g/bniGAtfzaF8CtHsKvvfh -----END CERTIFICATE-----Generated at Sat May 4 19:58:40 2024 by rpki-client on console-ams.rpki-client.org