$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json) Hash identifier: SNGORupptPHN0QKHuJ6ZeT9tdiwxIwi1B8QhZxT81IQ= Subject key identifier: 1D:14:29:B5:36:64:14:4A:B4:A6:45:89:DF:62:87:2D:FF:F6:AD:79 Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft Manifest number: 1DC0 Signing time: Sat 18 May 2024 16:29:01 +0000 Manifest this update: Sat 18 May 2024 16:29:01 +0000 Manifest next update: Sat 25 May 2024 16:29:01 +0000 Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: SaUaKLVlw9yVAhhFHowWR3Yzq7l8lp+j8qDKm+QXApg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Validity Not Before: May 18 16:29:01 2024 GMT Not After : May 25 16:29:01 2024 GMT Subject: CN=6648d74d-fc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:8b:c7:23:26:d8:f9:ac:83:3d:fe:bf:91: b7:81:45:e0:04:14:84:5d:c7:fd:84:4e:86:a0:d1: 15:87:9c:79:36:af:57:b4:84:fa:e8:8f:74:bf:13: 68:20:53:c9:3c:eb:4e:23:36:fb:81:a8:8c:53:22: 87:33:f7:63:42:c3:c7:43:b9:53:03:4d:83:69:c5: b0:bf:87:72:66:9e:1d:e4:3b:92:6f:f5:33:73:80: 75:a1:d7:98:b3:88:9d:8a:8c:51:bb:7a:4f:d1:54: 0b:1b:ec:12:4e:78:d5:cf:81:e5:a2:43:32:91:a0: e8:98:e3:e0:8d:fb:3b:54:f9:be:be:5c:40:a1:09: e7:eb:eb:a6:0c:d6:7b:d7:cb:87:64:cc:12:90:6f: 92:8f:b2:6d:df:05:46:37:ea:09:16:5f:f1:47:0c: d1:42:87:e7:24:71:3c:4d:ce:7c:a3:3e:97:8a:b8: a4:06:c9:ad:b2:23:0b:57:da:c1:bf:01:16:fa:35: 7d:44:d9:10:dd:ab:61:d5:84:4b:2c:2c:ea:a7:e6: c8:a6:6c:b2:c5:c4:3e:2a:ad:cb:c7:42:c0:50:03: db:f1:12:01:9f:43:0c:ad:e2:38:40:58:60:fa:9c: bd:97:f5:98:41:3a:e8:4b:b8:e5:19:b6:f9:f4:36: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:14:29:B5:36:64:14:4A:B4:A6:45:89:DF:62:87:2D:FF:F6:AD:79 X509v3 Authority Key Identifier: keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:1b:a9:f4:a7:0d:ea:35:bb:7c:b9:2f:2c:3f:26:07:0b:9c: 1a:d1:85:f7:78:d6:3f:d1:48:24:03:25:7a:06:45:79:50:40: d1:24:63:ac:dc:18:a7:ff:16:a5:bd:13:e4:91:16:f0:71:9d: 60:0c:a8:b5:96:77:d7:7f:9a:20:4c:20:1d:92:00:8d:10:d0: 68:8d:60:c1:bd:13:4c:c0:34:e2:38:ac:d7:6b:a7:15:02:5a: 07:4e:c6:e0:9e:e2:92:3f:7b:c8:49:bb:82:2b:6d:0f:d0:e9: bf:b6:32:16:83:86:8b:ce:15:3c:93:e7:e9:12:67:4a:a5:0a: 89:56:a7:78:0b:9a:0e:a2:9d:7d:eb:3e:c8:75:87:27:64:dd: d9:45:f8:fa:b5:84:5f:2a:7d:71:50:b6:50:1c:6d:4f:67:79: 41:53:40:b7:91:f8:bf:e6:e8:e0:6c:2c:35:fc:a7:0d:5d:b4: 50:4d:03:14:f2:d8:81:1d:ab:2d:d3:f2:65:f6:4a:55:c0:7c: 00:f0:49:da:bf:31:87:0f:62:04:a9:a2:7f:b0:cf:92:2d:bf: ea:a8:ac:72:1a:74:e6:55:4e:8e:a2:93:38:53:34:be:26:46: 0c:18:86:7d:ce:20:cd:64:0a:29:53:4a:dd:5c:21:8a:51:a1: c1:a0:7c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG OEI5RTAyMEUwHhcNMjQwNTE4MTYyOTAxWhcNMjQwNTI1MTYyOTAxWjAYMRYwFAYD VQQDEw02NjQ4ZDc0ZC1mYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7iLxyMm2Pmsgz3+v5G3gUXgBBSEXcf9hE6GoNEVh5x5Nq9XtIT66I90vxNo IFPJPOtOIzb7gaiMUyKHM/djQsPHQ7lTA02DacWwv4dyZp4d5DuSb/Uzc4B1odeY s4idioxRu3pP0VQLG+wSTnjVz4HlokMykaDomOPgjfs7VPm+vlxAoQnn6+umDNZ7 18uHZMwSkG+Sj7Jt3wVGN+oJFl/xRwzRQofnJHE8Tc58oz6XirikBsmtsiMLV9rB vwEW+jV9RNkQ3ath1YRLLCzqp+bIpmyyxcQ+Kq3Lx0LAUAPb8RIBn0MMreI4QFhg +py9l/WYQTroS7jlGbb59DajfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0UKbU2 ZBRKtKZFid9ihy3/9q15MB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaG6n0pw3qNbt8uS8sPyYHC5wa0YX3eNY/0UgkAyV6BkV5UEDRJGOs 3Bin/xalvRPkkRbwcZ1gDKi1lnfXf5ogTCAdkgCNENBojWDBvRNMwDTiOKzXa6cV AloHTsbgnuKSP3vISbuCK20P0Om/tjIWg4aLzhU8k+fpEmdKpQqJVqd4C5oOop19 6z7IdYcnZN3ZRfj6tYRfKn1xULZQHG1PZ3lBU0C3kfi/5ujgbCw1/KcNXbRQTQMU 8tiBHast0/Jl9kpVwHwA8EnavzGHD2IEqaJ/sM+SLb/qqKxyGnTmVU6OopM4UzS+ JkYMGIZ9ziDNZAopU0rdXCGKUaHBoHyx -----END CERTIFICATE-----Generated at Sat May 18 16:57:52 2024 by rpki-client on console-fra.rpki-client.org