$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft File: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json) Hash identifier: vpsgf+xnHH9qe0/GjP7Wuby+X1L2S01Y4DligjpzMyE= Subject key identifier: 88:43:DB:32:80:C3:F6:EB:91:1A:87:82:64:CD:83:09:37:B9:17:F9 Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 Certificate issuer: /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft Manifest number: 02CD Signing time: Fri 03 May 2024 03:30:08 +0000 Manifest this update: Fri 03 May 2024 03:30:08 +0000 Manifest next update: Fri 10 May 2024 03:30:08 +0000 Files and hashes: 1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: Hq21tJPcVECGvrdw0IPfTvYLk/1wpA6+A5Yp1qn049M=) 2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: brqvD0nhUd1opPdVSG+VpZIcp0CeDJNJnNKorIsgs0I=) 3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: 9zn7pbPKQ2T1L+hAV4OH1u9xUWLZPh4RSl4GJG1GgQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Validity Not Before: May 3 03:30:08 2024 GMT Not After : May 10 03:30:08 2024 GMT Subject: CN=66345a40-6587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:80:40:fe:76:0f:bc:04:34:f1:77:19:ed: 60:b0:da:aa:f9:b1:33:d6:0e:db:cf:f7:71:ab:d4: 69:b3:24:83:ff:c1:3d:10:f3:45:42:53:84:61:fb: a1:9e:6d:92:01:18:b9:99:0f:15:75:08:2d:16:5f: ae:e7:9a:18:24:fc:dd:f1:74:f7:91:0e:09:ad:53: 63:63:38:5a:fb:d8:e7:65:5b:82:e0:f1:aa:87:7a: 71:ad:7f:df:d0:9c:2c:60:d9:89:c3:f7:7e:09:66: 5d:80:7a:39:cc:e3:d2:b7:10:a1:15:84:3c:41:4b: 7b:d1:71:fb:48:12:72:b6:25:d0:65:21:52:5e:e4: e6:35:20:b8:41:a1:18:50:94:11:9c:bd:d9:32:2a: 86:ec:9b:ca:e2:6d:94:83:2a:d7:01:01:63:87:1c: 02:fd:4a:6c:43:6b:46:10:70:a1:f4:dc:b3:e9:c2: 57:6e:d3:67:6d:57:af:86:83:0c:fd:a1:fd:2d:79: b2:07:51:75:f0:f7:c4:82:73:df:09:f6:d2:9c:71: 45:a5:ae:d6:1d:08:98:08:4f:92:5a:0f:40:49:1f: a7:38:ac:a7:b6:08:cc:42:89:8a:c9:3d:20:c8:c6: e1:4c:66:b4:fe:26:8e:a8:4f:59:6d:b4:22:55:45: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:43:DB:32:80:C3:F6:EB:91:1A:87:82:64:CD:83:09:37:B9:17:F9 X509v3 Authority Key Identifier: keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:85:13:63:d1:aa:ee:0c:db:86:21:c8:ec:f7:cb:33:e7:1d: e1:e4:ec:bc:1b:d3:49:0e:cc:7d:17:69:2c:d5:3a:ce:e5:e9: 09:5b:a8:5a:13:a9:2a:ef:fc:d0:e4:41:d1:69:08:b3:d5:d3: d9:4b:0a:e4:06:42:c0:d1:40:9a:af:15:14:dc:1c:4c:63:64: ee:88:b5:0e:d7:19:79:c9:03:ca:89:17:96:1d:5c:31:c9:41: 62:69:8b:37:7e:99:49:4c:de:5e:ef:d6:b1:11:08:d3:d8:45: c2:b7:91:69:da:6d:68:f1:66:c1:40:b8:d3:05:ab:b7:e5:a9: f4:44:49:2c:0d:4a:7d:76:bc:cd:f3:45:e0:23:58:bf:e6:74: 69:e1:d3:b7:3e:51:f5:44:3d:e0:0d:b0:6e:b6:1d:78:b1:ed: 5c:9e:e5:e9:0a:9e:0c:23:e3:22:44:05:ed:4f:53:00:70:ef: dd:c2:cd:32:54:af:f5:a3:1f:12:1a:97:03:26:87:ad:61:3f: 5a:19:5c:68:13:df:85:d0:44:44:40:51:5f:e0:de:3b:b6:8d: 3b:54:01:ae:ca:92:a6:cc:85:6e:ef:34:4f:c4:64:9a:84:3c: 0a:6d:1b:6a:17:14:83:19:e8:29:c9:4c:6b:f5:04:89:44:6b: 9f:f9:38:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw NkQxOTc0NzMwHhcNMjQwNTAzMDMzMDA4WhcNMjQwNTEwMDMzMDA4WjAYMRYwFAYD VQQDEw02NjM0NWE0MC02NTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMqAQP52D7wENPF3Ge1gsNqq+bEz1g7bz/dxq9RpsySD/8E9EPNFQlOEYfuh nm2SARi5mQ8VdQgtFl+u55oYJPzd8XT3kQ4JrVNjYzha+9jnZVuC4PGqh3pxrX/f 0JwsYNmJw/d+CWZdgHo5zOPStxChFYQ8QUt70XH7SBJytiXQZSFSXuTmNSC4QaEY UJQRnL3ZMiqG7JvK4m2UgyrXAQFjhxwC/UpsQ2tGEHCh9Nyz6cJXbtNnbVevhoMM /aH9LXmyB1F18PfEgnPfCfbSnHFFpa7WHQiYCE+SWg9ASR+nOKyntgjMQomKyT0g yMbhTGa0/iaOqE9ZbbQiVUWj6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhD2zKA w/brkRqHgmTNgwk3uRf5MB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjE4MC8xMDJCQTE5RTlFNDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdo QTZpRFYzYWVGMk1HMFpkSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlhRNj0aruDNuGIcjs98sz5x3h5Oy8G9NJDsx9F2ks1TrO5ekJW6ha E6kq7/zQ5EHRaQiz1dPZSwrkBkLA0UCarxUU3BxMY2TuiLUO1xl5yQPKiReWHVwx yUFiaYs3fplJTN5e79axEQjT2EXCt5Fp2m1o8WbBQLjTBau35an0REksDUp9drzN 80XgI1i/5nRp4dO3PlH1RD3gDbButh14se1cnuXpCp4MI+MiRAXtT1MAcO/dws0y VK/1ox8SGpcDJoetYT9aGVxoE9+F0EREQFFf4N47to07VAGuypKmzIVu7zRPxGSa hDwKbRtqFxSDGegpyUxr9QSJRGuf+Tjc -----END CERTIFICATE-----Generated at Fri May 3 04:36:52 2024 by rpki-client on console-ams.rpki-client.org