$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json) Hash identifier: r9/PisXAaVtIn+vQBBXdpShxCL9UnVjyHS5BQOg3VxM= Subject key identifier: 3E:3A:E1:E5:12:EF:57:CB:31:26:9D:91:BE:AF:24:5D:AB:2C:62:F4 Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft Manifest number: 21D3 Signing time: Thu 02 May 2024 16:15:44 +0000 Manifest this update: Thu 02 May 2024 16:15:44 +0000 Manifest next update: Thu 09 May 2024 16:15:44 +0000 Files and hashes: 1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: K+U11uyuuqLSYudOOA6I6bBHl69jOGVXT3+guuEILvk=) 2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: /fhtNcmyrQNnPwOcUtGVdfswzaZcrcFxrWX1S+M7JVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Validity Not Before: May 2 16:15:44 2024 GMT Not After : May 9 16:15:44 2024 GMT Subject: CN=6633bc30-9073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:50:d9:0f:39:1a:b5:7f:0d:84:03:6c:a4: 1f:d5:77:bd:12:a4:f4:a0:da:a7:74:9e:68:e2:3e: 7a:6a:de:fd:f2:b3:c5:da:1b:d4:55:d2:35:56:4e: 06:28:65:32:fd:d4:a2:da:7a:2a:6e:bd:93:42:93: e6:69:d4:4c:dc:24:7a:aa:af:d2:5f:2d:b8:84:85: 9d:7e:aa:d3:6c:b7:33:a9:b8:eb:e7:fe:11:2c:7e: 3f:7e:1c:bb:28:57:86:1f:3e:46:c9:c6:98:fc:51: 81:49:de:5f:d5:d9:f1:6d:14:4d:dd:66:9e:9c:1a: 5b:f7:b8:29:1e:71:02:45:2e:79:d8:e9:41:53:3b: f4:18:23:b5:b8:89:e1:66:55:f3:3c:9d:8c:b2:f1: 54:d4:12:5a:31:ce:6f:4c:e8:35:14:db:12:aa:3c: d5:d8:9f:2c:6d:36:c8:c7:09:81:42:13:b1:d6:78: 05:34:42:0a:16:f5:66:0d:d0:fd:32:c3:70:c0:7b: 45:e2:d4:a5:88:b5:80:cf:f6:f0:73:29:a7:08:aa: 90:11:a6:a7:a5:ea:e8:04:c3:b8:d4:da:2a:68:5d: 87:98:31:a8:15:ee:43:7a:01:49:18:18:38:c7:26: fe:c5:69:e2:19:a3:52:d7:ef:ee:bf:86:97:83:80: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3A:E1:E5:12:EF:57:CB:31:26:9D:91:BE:AF:24:5D:AB:2C:62:F4 X509v3 Authority Key Identifier: keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:05:d6:4e:85:e2:ee:22:4a:91:10:74:62:4a:2b:77:4f:4a: a7:77:13:c5:d0:c7:c4:af:f1:f5:30:08:e6:de:1f:e6:cd:33: 06:f4:00:19:01:7f:eb:0a:76:11:c8:20:41:76:82:21:9f:7d: 54:3c:63:e7:fd:b5:d9:25:83:7e:20:42:f4:6e:06:30:de:f8: f3:45:80:fe:16:57:b2:cd:25:2e:c1:aa:4b:bc:19:32:b3:54: 5c:0d:36:ea:72:99:c2:79:fc:2a:16:34:1e:b8:f8:b5:0e:a1: 69:42:c1:b1:c6:9c:72:bd:36:2d:ec:5b:3a:c8:61:91:fc:ed: 70:60:04:54:0d:88:a6:1b:4a:05:83:c0:94:34:4a:38:64:59: bb:bc:51:9f:3e:d2:5f:ad:08:ab:4c:45:75:b6:0f:08:d8:61: a8:b4:32:0b:d1:38:43:50:a6:b2:f6:d2:22:71:54:c6:8b:c8: 84:24:61:0d:8a:bc:e4:f6:17:f9:a6:46:03:d4:7a:94:5c:a4: ee:3f:af:66:b2:62:04:38:3c:1e:e4:57:3c:e7:5d:a3:ff:c2: 04:ab:84:c0:17:92:b0:50:bc:34:f6:e7:34:e5:56:64:b5:9a: b9:7c:ae:e6:f9:5f:a4:31:40:df:6f:04:f9:3a:e3:64:d7:34: e2:6c:be:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBRjAxMTAvBgNVBAUTKDUxMjYxOURFMEMxRDFCQjNFNTc3OTk0RUUwQzVGRjMw RDQ5MUNEMEUwHhcNMjQwNTAyMTYxNTQ0WhcNMjQwNTA5MTYxNTQ0WjAYMRYwFAYD VQQDEw02NjMzYmMzMC05MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJdQ2Q85GrV/DYQDbKQf1Xe9EqT0oNqndJ5o4j56at798rPF2hvUVdI1Vk4G KGUy/dSi2noqbr2TQpPmadRM3CR6qq/SXy24hIWdfqrTbLczqbjr5/4RLH4/fhy7 KFeGHz5GycaY/FGBSd5f1dnxbRRN3WaenBpb97gpHnECRS552OlBUzv0GCO1uInh ZlXzPJ2MsvFU1BJaMc5vTOg1FNsSqjzV2J8sbTbIxwmBQhOx1ngFNEIKFvVmDdD9 MsNwwHtF4tSliLWAz/bwcymnCKqQEaanperoBMO41NoqaF2HmDGoFe5DegFJGBg4 xyb+xWniGaNS1+/uv4aXg4BZqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD464eUS 71fLMSadkb6vJF2rLGL0MB8GA1UdIwQYMBaAFFEmGd4MHRuz5XeZTuDF/zDUkc0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFGMC9GMTYyREE0RTlG OTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3UGxkNWxPNE1YX01OU1J6 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTWVozZ3dkRzdQbGQ1bE80TVhfTU5TUnpRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFGMC9GMTYyREE0RTlGOTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3 UGxkNWxPNE1YX01OU1J6UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1BdZOheLuIkqREHRiSit3T0qndxPF0MfEr/H1MAjm3h/mzTMG9AAZ AX/rCnYRyCBBdoIhn31UPGPn/bXZJYN+IEL0bgYw3vjzRYD+FleyzSUuwapLvBky s1RcDTbqcpnCefwqFjQeuPi1DqFpQsGxxpxyvTYt7Fs6yGGR/O1wYARUDYimG0oF g8CUNEo4ZFm7vFGfPtJfrQirTEV1tg8I2GGotDIL0ThDUKay9tIicVTGi8iEJGEN irzk9hf5pkYD1HqUXKTuP69msmIEODwe5Fc8512j/8IEq4TAF5KwULw09uc05VZk tZq5fK7m+V+kMUDfbwT5OuNk1zTibL61 -----END CERTIFICATE-----Generated at Thu May 2 17:18:56 2024 by rpki-client on console-ams.rpki-client.org