$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: MkfNNQqzTdLD6bjh2RxMq4dDle6oluIpCiadW93AElk= Subject key identifier: C5:79:C9:78:A1:16:C7:F9:E9:99:A2:FC:55:62:90:F1:50:F4:D0:7B Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 28 Signing time: Fri 17 May 2024 08:49:00 +0000 Manifest this update: Fri 17 May 2024 08:48:59 +0000 Manifest next update: Fri 24 May 2024 08:48:59 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: 6LO/BnTNc+r1pFuaVUkPPpwhOzIuFPGLlELMPiFPQww=) 2: F44A5204EDBE11EE81831062C4F9AE02.roa (hash: rPIqN3g9M//pjM5GFM7nRYLtY525w98t/87GEsybN2o=) 3: F53A9AACEDBE11EE81831062C4F9AE02.roa (hash: YAP0qXi2Kuy/FazVI0jB6EFuZs4wd7rEO2VW8bRD9PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: May 17 08:48:59 2024 GMT Not After : May 24 08:48:59 2024 GMT Subject: CN=664719fc-5fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:5a:ff:5d:db:34:1e:3b:77:7c:07:5e:3e: b3:dd:b2:ce:5c:51:8e:2f:72:d5:4c:3c:70:b1:5f: a5:e4:3b:f9:70:d6:e8:b6:e0:54:2f:82:9a:db:43: 98:dd:18:9a:43:21:aa:aa:55:83:52:db:52:77:79: e8:da:f4:b0:4a:23:99:2a:57:91:e1:22:f7:f2:1f: 9b:d5:9a:ca:c4:8c:2d:41:30:4a:d2:60:58:d4:c5: fc:c3:da:89:2a:24:6b:3d:45:21:64:78:e6:43:a5: 8c:fd:92:7d:7e:08:8a:b4:e1:cd:b0:54:e5:84:1b: eb:30:c3:e7:11:0e:66:2d:18:1c:78:5c:8c:07:01: 76:e2:ad:bf:ac:ba:bd:4d:f9:80:27:49:d8:08:35: 76:76:7f:9c:d0:b8:5f:3e:31:61:a0:1f:62:56:85: 19:0f:73:d7:7e:19:f2:53:a5:7e:0c:a9:53:e5:c4: 1e:47:b0:31:4a:fa:7b:81:3a:28:5d:23:0a:c4:ac: 10:82:0f:41:f0:ee:83:58:72:8a:2c:0e:83:7a:b4: 99:f6:cc:73:65:b6:ce:cd:15:f7:04:f0:68:69:5d: 87:fa:1c:66:3f:65:dc:9f:73:a2:99:62:6f:0d:44: 95:e0:9e:c4:dc:a1:e3:87:0e:2c:66:91:25:e4:ba: d5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:79:C9:78:A1:16:C7:F9:E9:99:A2:FC:55:62:90:F1:50:F4:D0:7B X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:5c:7a:7d:f5:a6:74:2f:85:86:02:c4:a7:4b:bc:cb:d7:8f: c1:53:fb:d1:86:f6:e6:58:47:dc:b0:de:59:45:d6:99:ba:c8: 74:37:e1:b1:7a:c0:a4:6f:94:a7:6d:70:14:28:54:11:99:22: 54:53:5c:1b:18:cf:4e:a9:c8:85:f8:3f:18:1d:b8:ec:a6:1e: 75:04:9d:00:52:e1:5e:c4:37:a0:43:06:a5:d5:cf:6a:06:99: c4:0a:e9:d4:c4:ef:df:c4:f9:ce:ee:4c:27:81:5e:44:ad:8c: 41:72:64:d0:7b:90:b1:30:b3:02:ea:a7:30:bf:70:62:c2:f6: 76:65:e3:63:c5:20:ea:b3:89:9e:3a:13:c7:ca:4e:df:18:56: ea:bf:27:fc:60:63:5f:5f:95:c8:fa:d0:ea:8b:40:46:e2:d8: 77:23:3b:ce:79:4e:99:f6:69:6c:59:cf:ef:ce:c1:f4:88:5b: 73:66:25:a0:99:94:8f:3b:b6:74:b5:04:37:1f:1b:c7:9b:40: 5e:8f:5e:70:14:63:cf:fc:ce:6e:ec:4b:bb:41:7e:c0:31:88: fe:6b:57:e5:1f:e6:bd:fa:83:e5:ad:93:a1:b6:a2:fe:e6:c0: 19:c5:d1:30:52:4d:a2:b6:e3:d1:e9:b1:92:ca:aa:42:d0:80: 37:a9:13:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjlBODExMC8GA1UEBRMoODdCNjJDMzRFOERDNUQ0MDIzOEMwRjZCREU5MTE1NkU1 RDA2QTQ0QjAeFw0yNDA1MTcwODQ4NTlaFw0yNDA1MjQwODQ4NTlaMBgxFjAUBgNV BAMTDTY2NDcxOWZjLTVmYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC891r/Xds0Hjt3fAdePrPdss5cUY4vctVMPHCxX6XkO/lw1ui24FQvgprbQ5jd GJpDIaqqVYNS21J3eeja9LBKI5kqV5HhIvfyH5vVmsrEjC1BMErSYFjUxfzD2okq JGs9RSFkeOZDpYz9kn1+CIq04c2wVOWEG+sww+cRDmYtGBx4XIwHAXbirb+sur1N +YAnSdgINXZ2f5zQuF8+MWGgH2JWhRkPc9d+GfJTpX4MqVPlxB5HsDFK+nuBOihd IwrErBCCD0Hw7oNYcoosDoN6tJn2zHNlts7NFfcE8GhpXYf6HGY/Zdyfc6KZYm8N RJXgnsTcoeOHDixmkSXkutVDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxXnJeKEW x/npmaL8VWKQ8VD00HswHwYDVR0jBBgwFoAUh7YsNOjcXUAjjA9r3pEVbl0GpEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGOUE4L0I5MjMwNkZFRUI2 QTExRUU5QzAzQjcxMUM0RjlBRTAyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDdZc05PamNYVUFqakE5cjNwRVZibDBHcEVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG OUE4L0I5MjMwNkZFRUI2QTExRUU5QzAzQjcxMUM0RjlBRTAyL2g3WXNOT2pjWFVB ampBOXIzcEVWYmwwR3BFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKlcen31pnQvhYYCxKdLvMvXj8FT+9GG9uZYR9yw3llF1pm6yHQ34bF6 wKRvlKdtcBQoVBGZIlRTXBsYz06pyIX4PxgduOymHnUEnQBS4V7EN6BDBqXVz2oG mcQK6dTE79/E+c7uTCeBXkStjEFyZNB7kLEwswLqpzC/cGLC9nZl42PFIOqziZ46 E8fKTt8YVuq/J/xgY19flcj60OqLQEbi2HcjO855Tpn2aWxZz+/OwfSIW3NmJaCZ lI87tnS1BDcfG8ebQF6PXnAUY8/8zm7sS7tBfsAxiP5rV+Uf5r36g+Wtk6G2ov7m wBnF0TBSTaK249HpsZLKqkLQgDepEyQ= -----END CERTIFICATE-----Generated at Fri May 17 10:59:12 2024 by rpki-client on console-ams.rpki-client.org