$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: WkWitP5OyGWxYY19Xhg4TaJ107zvL2j2xmH4NKrFRac= Subject key identifier: 6A:3B:B8:68:90:01:11:B2:D1:8D:4D:C9:C0:09:B4:42:90:D4:BF:A2 Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 070C Signing time: Fri 26 Apr 2024 22:38:04 +0000 Manifest this update: Fri 26 Apr 2024 22:38:03 +0000 Manifest next update: Fri 03 May 2024 22:38:03 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: 3IZRM95iuni+Knk2g+DTiBrqm8X3mKKrTCwt07VnJIw=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: pug/gg3wGa6rjCyz4q0WrX2sTDGQJThGrNKA8Z6H8Rg=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: 5fkVp+IdKN1uTcIv4zREz2o3t33bYQj59xiklZh4RiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 22:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: Apr 26 22:38:03 2024 GMT Not After : May 3 22:38:03 2024 GMT Subject: CN=662c2ccb-66e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:47:3c:cc:cf:bb:c6:82:88:39:f2:7d:b7:c9: b1:75:a4:35:47:d1:52:64:11:95:78:a9:1e:c0:19: af:24:1c:31:b0:ee:00:08:27:ae:4b:e6:10:41:6c: af:8d:1d:f7:65:a3:51:f7:a2:76:1a:eb:d5:d6:7e: ef:31:87:33:5b:1b:e6:5d:b8:e5:8a:93:f4:81:e2: 49:f7:38:c0:0f:1f:1c:b6:75:ba:95:c3:f8:52:62: 38:7d:43:66:21:59:5c:9f:67:b0:4b:93:93:75:1c: 2f:08:38:37:74:be:b8:12:17:05:35:e0:a8:b5:72: 44:67:5b:49:b2:dd:9a:4f:be:2c:0d:f0:a4:1c:e3: 77:b0:26:03:0a:04:f7:91:cb:0c:46:35:1b:6d:85: b7:ec:8a:4f:34:65:3f:f5:72:fe:2c:93:f0:c2:77: 47:a5:df:7d:29:80:8f:d4:88:fc:95:41:da:5a:44: cf:e6:82:a5:c6:72:17:f8:bc:7d:b5:bd:04:31:88: 11:4f:ad:84:47:a0:80:03:0b:1f:3f:a7:c2:bc:22: c9:01:fb:19:9f:56:8b:d4:26:8d:cc:a1:b5:0b:d7: 65:73:99:31:28:97:8f:af:1f:87:ad:e1:6d:c1:cb: fa:3e:05:f3:52:e9:11:c6:ce:d9:a4:49:9d:a2:4b: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3B:B8:68:90:01:11:B2:D1:8D:4D:C9:C0:09:B4:42:90:D4:BF:A2 X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b4:b2:88:61:a3:50:12:7c:1d:98:56:f4:5d:64:9d:b5:81: 8d:4e:90:6f:4e:0b:81:56:ba:8f:25:92:06:bc:da:71:2b:76: 7c:18:df:38:09:c7:8a:bd:de:28:4a:c9:10:58:5d:6c:39:f9: ea:ff:4c:3b:9f:7b:6e:b5:a5:37:00:a0:7e:1a:a7:8f:0f:50: 01:af:19:40:e5:b0:0a:0b:ae:c6:92:bb:d3:7a:92:ba:05:af: 15:bf:28:43:72:72:63:dc:2c:4d:6e:a0:4f:40:06:b7:cb:12: ad:1e:fa:73:56:78:da:94:fd:c0:63:81:d6:a3:ba:e8:6c:05: ae:22:ee:fb:53:ce:ed:b0:3e:e6:3c:fa:5b:f3:4d:80:45:1c: f5:0e:82:6c:7a:69:80:0e:1a:29:11:da:a6:a8:e1:b7:fb:31: 04:df:d5:f1:51:62:8f:11:8b:08:ad:b1:bb:29:6f:95:9a:e0: f1:ce:c0:98:6e:b3:25:4a:85:26:3e:3e:91:91:65:31:09:9e: c6:9a:3b:fa:e3:b6:ba:9f:2d:5e:7a:14:b1:8c:63:10:87:97: d4:35:84:98:2d:b9:f6:c2:33:7c:6e:87:51:95:bc:ec:3a:7a: 3d:f2:5e:30:60:e8:e0:2e:a1:b6:3a:11:f4:89:3e:fe:af:f8: 6b:74:cf:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjQwNDI2MjIzODAzWhcNMjQwNTAzMjIzODAzWjAYMRYwFAYD VQQDEw02NjJjMmNjYi02NmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40c8zM+7xoKIOfJ9t8mxdaQ1R9FSZBGVeKkewBmvJBwxsO4ACCeuS+YQQWyv jR33ZaNR96J2GuvV1n7vMYczWxvmXbjlipP0geJJ9zjADx8ctnW6lcP4UmI4fUNm IVlcn2ewS5OTdRwvCDg3dL64EhcFNeCotXJEZ1tJst2aT74sDfCkHON3sCYDCgT3 kcsMRjUbbYW37IpPNGU/9XL+LJPwwndHpd99KYCP1Ij8lUHaWkTP5oKlxnIX+Lx9 tb0EMYgRT62ER6CAAwsfP6fCvCLJAfsZn1aL1CaNzKG1C9dlc5kxKJePrx+HreFt wcv6PgXzUukRxs7ZpEmdoksNHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo7uGiQ ARGy0Y1NycAJtEKQ1L+iMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqtLKIYaNQEnwdmFb0XWSdtYGNTpBvTguBVrqPJZIGvNpxK3Z8GN84 CceKvd4oSskQWF1sOfnq/0w7n3tutaU3AKB+GqePD1ABrxlA5bAKC67GkrvTepK6 Ba8VvyhDcnJj3CxNbqBPQAa3yxKtHvpzVnjalP3AY4HWo7robAWuIu77U87tsD7m PPpb802ARRz1DoJsemmADhopEdqmqOG3+zEE39XxUWKPEYsIrbG7KW+VmuDxzsCY brMlSoUmPj6RkWUxCZ7Gmjv647a6ny1eehSxjGMQh5fUNYSYLbn2wjN8bodRlbzs Ono98l4wYOjgLqG2OhH0iT7+r/hrdM/d -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:23 2024 by rpki-client on console-ams.rpki-client.org