$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: czLbvICphm3x1XfP0RW9LWGSbvY4EY3B7sSqfgDRJBk= Subject key identifier: 79:DF:43:F2:EE:50:0D:B7:12:67:3A:2E:4B:4B:69:D8:21:2D:94:91 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 1DEF Signing time: Mon 06 May 2024 18:00:32 +0000 Manifest this update: Mon 06 May 2024 18:00:32 +0000 Manifest next update: Mon 13 May 2024 18:00:32 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: 99oZACgGOGRhRKaldT5j2mQGknGfui3PqnVtu4KGkyI=) 2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: xPQadE04npUnqYnM7fwo9/dno/2PvI183Yb0K4hPxZQ=) 3: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: fzOQaTP5H3VIkhoR/i/DSmr4ZxxwK1UkfdQUyTzkYN0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: QS2TrHl9taohr57yZSTKCTq9uLIbkOtoAL2fYPZKHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3436 (0xd6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: May 6 18:00:32 2024 GMT Not After : May 13 18:00:32 2024 GMT Subject: CN=66391ac0-b732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:19:cf:22:a3:8c:4f:cd:5a:9f:1f:d4:0b: fe:c2:e3:1f:1a:a9:21:b3:01:a0:8a:5e:18:db:d6: c7:21:47:ae:c7:37:fb:e4:b8:03:63:a5:9e:53:d1: fa:10:25:22:64:78:1b:f0:ec:2f:c7:95:6f:2d:7e: 00:c0:e2:67:0c:27:cc:2e:b4:9c:c8:d7:41:d0:0a: c9:75:40:c5:24:99:f3:d1:d4:1e:72:98:b6:8d:b5: 06:54:c1:d9:8e:f2:c1:76:a7:b0:3b:09:3e:7c:73: 67:ec:3e:fc:37:1a:5b:be:26:2a:e3:e8:3d:2b:c8: 61:ab:5c:3a:ef:4e:81:1a:3d:d3:04:da:0f:4a:29: 79:cc:07:0d:8a:92:3f:9f:c1:ad:16:c0:67:c5:a0: 00:02:ea:47:d9:c5:3b:ab:71:c0:90:56:fe:4d:aa: 56:42:4b:97:4d:1f:48:14:3e:4e:08:c2:e1:2b:6b: ba:45:80:c8:8a:06:98:a3:db:6a:ce:c0:b8:fb:63: b8:0a:a2:9b:33:26:98:38:7b:a4:74:a2:35:88:b0: 6f:b9:a0:d7:7f:84:ee:a5:f7:f7:59:4c:dd:f2:fc: f3:fc:5d:a6:99:0d:52:62:40:f1:81:c1:2d:a8:28: 7e:e7:17:8e:12:8d:6f:ab:b0:17:60:58:a6:ca:9e: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:43:F2:EE:50:0D:B7:12:67:3A:2E:4B:4B:69:D8:21:2D:94:91 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:37:79:11:6d:53:6a:f4:f3:48:3d:e2:54:bc:d8:4b:5e:da: d5:f5:69:7e:9c:65:76:b2:ce:1e:ad:56:6f:0f:76:f2:a9:ab: 83:bf:54:33:e3:fd:ca:67:d5:e0:1d:ec:f9:a5:e3:ec:54:6d: 6a:ee:78:d6:40:fb:99:92:d5:91:95:44:02:31:c8:86:a3:82: c0:36:e7:9f:39:11:29:0c:e5:8b:08:37:c5:20:da:12:cb:29: db:8f:c7:36:ed:d7:9b:ec:c9:d4:9f:5a:a3:c3:64:ef:b9:5d: 01:e7:d5:76:8e:e1:dd:8e:e5:80:b2:f2:8f:5d:6a:57:69:e4: 2c:c6:9a:cf:ac:29:95:32:fb:b5:21:10:37:11:84:be:d0:89: 48:f5:d6:56:32:e0:ba:49:0d:cf:37:c6:41:d9:44:51:cf:cf: a6:52:11:bb:fa:af:cf:35:3c:16:20:78:53:91:58:0d:da:96: 28:0f:8d:56:bf:70:e0:7f:c9:23:3d:6b:35:81:44:01:af:5f: b4:96:b9:b8:b0:b2:0f:44:39:77:c1:56:7d:ec:b1:d6:23:b5: 92:e7:43:22:c0:6e:4a:5f:a6:12:bd:f0:b3:1f:b4:45:2f:2c: 18:71:a4:58:75:fd:7f:51:2a:eb:03:5b:49:a3:19:f4:c0:39: 73:38:98:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjQwNTA2MTgwMDMyWhcNMjQwNTEzMTgwMDMyWjAYMRYwFAYD VQQDEw02NjM5MWFjMC1iNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mkZzyKjjE/NWp8f1Av+wuMfGqkhswGgil4Y29bHIUeuxzf75LgDY6WeU9H6 ECUiZHgb8Owvx5VvLX4AwOJnDCfMLrScyNdB0ArJdUDFJJnz0dQecpi2jbUGVMHZ jvLBdqewOwk+fHNn7D78NxpbviYq4+g9K8hhq1w6706BGj3TBNoPSil5zAcNipI/ n8GtFsBnxaAAAupH2cU7q3HAkFb+TapWQkuXTR9IFD5OCMLhK2u6RYDIigaYo9tq zsC4+2O4CqKbMyaYOHukdKI1iLBvuaDXf4Tupff3WUzd8vzz/F2mmQ1SYkDxgcEt qCh+5xeOEo1vq7AXYFimyp6xCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnfQ/Lu UA23Emc6LktLadghLZSRMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsN3kRbVNq9PNIPeJUvNhLXtrV9Wl+nGV2ss4erVZvD3byqauDv1Qz 4/3KZ9XgHez5pePsVG1q7njWQPuZktWRlUQCMciGo4LANuefOREpDOWLCDfFINoS yynbj8c27deb7MnUn1qjw2TvuV0B59V2juHdjuWAsvKPXWpXaeQsxprPrCmVMvu1 IRA3EYS+0IlI9dZWMuC6SQ3PN8ZB2URRz8+mUhG7+q/PNTwWIHhTkVgN2pYoD41W v3Dgf8kjPWs1gUQBr1+0lrm4sLIPRDl3wVZ97LHWI7WS50MiwG5KX6YSvfCzH7RF LywYcaRYdf1/USrrA1tJoxn0wDlzOJgp -----END CERTIFICATE-----Generated at Mon May 6 20:19:42 2024 by rpki-client on console-ams.rpki-client.org