$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: Y9xb+l2jGuS8HVRFxJMr6dW7Yk23gynLNEUrEl8oI5I= Subject key identifier: 0D:6B:EB:6F:4B:84:F1:D7:83:4D:17:BE:BB:D2:1F:0E:DF:FB:A2:5D Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 03A2 Signing time: Sun 19 May 2024 02:33:25 +0000 Manifest this update: Sun 19 May 2024 02:33:25 +0000 Manifest next update: Sun 26 May 2024 02:33:25 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: 2MLFiPzkrQIKU9RwqypyMz6jZUKKizmrMGQrY6xMlZo=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: +bj/ZNSY6hTVTCkm8LSZ4yEUy24oCPBrauh+B0YBifE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: May 19 02:33:25 2024 GMT Not After : May 26 02:33:25 2024 GMT Subject: CN=664964f5-18cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:d7:35:81:f4:e2:9f:80:23:c7:38:45:ea: a8:d7:cc:2e:a8:e4:18:41:6e:b1:01:a2:13:d5:6b: e6:80:8f:c9:02:e7:c2:ac:5f:dd:79:cb:91:b6:2d: fe:07:d0:45:e3:b5:bc:88:b6:b5:a1:07:00:8d:db: 02:b3:84:92:2d:59:ca:54:f1:3a:29:f0:83:da:1e: cc:1e:7b:5f:06:e0:96:a5:93:61:4a:b9:62:56:96: e0:16:20:ae:ac:74:30:7b:00:c4:47:c3:24:c6:e9: e3:5e:c2:bc:e3:b3:33:23:1b:8b:d0:48:5f:e5:a2: a1:da:44:2c:d1:a2:90:6d:5f:a2:eb:02:0e:3e:33: f4:e5:ee:02:cc:58:f7:c0:b5:d1:5b:15:0b:3d:e0: db:8e:32:6b:e3:ae:43:f3:58:ca:81:9b:c8:2f:62: 5b:15:02:76:df:f9:a4:76:51:06:a9:28:1a:30:ac: 13:9f:e9:e2:27:7c:4f:e3:84:6e:0a:ae:2c:c3:c0: af:8b:0c:69:40:d0:25:d0:04:ca:dd:1a:13:5c:b6: e4:3c:b6:da:6d:39:c1:d5:84:ca:90:c3:b3:e1:22: a8:38:9e:53:d0:a9:c9:16:86:f2:68:de:d1:45:d4: 79:4b:ed:96:54:4f:58:01:a5:98:98:85:e8:08:6d: ac:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6B:EB:6F:4B:84:F1:D7:83:4D:17:BE:BB:D2:1F:0E:DF:FB:A2:5D X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d0:49:6d:8a:40:8c:84:07:25:1f:04:f9:36:52:83:8d:c9: ae:6f:b6:e3:f3:29:7b:11:29:6c:80:76:03:b5:ef:46:5f:ba: 6a:31:cd:7a:fb:fb:d2:13:ec:8f:d4:83:53:a6:23:5b:f2:db: 6e:01:d4:fb:53:27:43:a8:dd:6f:3b:33:bf:d4:e1:35:94:98: ae:fc:f7:28:5c:80:d6:9a:b7:dd:f8:7f:f3:63:44:7d:15:fb: 61:77:5e:e8:df:2f:0f:70:5e:d7:6c:de:9e:63:d2:8f:19:5a: 31:9b:1d:35:02:58:10:6f:46:13:fd:bd:20:81:60:88:7b:fd: 06:40:55:8b:6e:cb:0e:0a:c0:3e:dc:13:14:8d:61:3d:1d:12: 19:34:09:bd:93:b7:2a:40:78:a4:e1:cf:f2:5c:2a:3d:c3:b3: da:ce:dd:88:42:e5:9f:df:62:aa:1a:b7:ae:5d:ec:d0:ba:53: 71:b8:4b:86:cb:f4:60:fd:b0:07:7a:8d:dc:e6:89:52:8b:8e: 7e:75:aa:1f:ac:e3:59:b3:57:63:05:ec:13:4f:f8:94:a7:52: 61:8e:0b:92:c9:9b:96:2f:37:e5:27:cd:df:fe:99:35:e0:df: a0:0c:a6:26:3d:de:8d:b4:96:b1:8f:93:a6:fd:e7:47:5c:28: bb:e0:e0:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjQwNTE5MDIzMzI1WhcNMjQwNTI2MDIzMzI1WjAYMRYwFAYD VQQDEw02NjQ5NjRmNS0xOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvo7XNYH04p+AI8c4Reqo18wuqOQYQW6xAaIT1WvmgI/JAufCrF/decuRti3+ B9BF47W8iLa1oQcAjdsCs4SSLVnKVPE6KfCD2h7MHntfBuCWpZNhSrliVpbgFiCu rHQwewDER8MkxunjXsK847MzIxuL0Ehf5aKh2kQs0aKQbV+i6wIOPjP05e4CzFj3 wLXRWxULPeDbjjJr465D81jKgZvIL2JbFQJ23/mkdlEGqSgaMKwTn+niJ3xP44Ru Cq4sw8CviwxpQNAl0ATK3RoTXLbkPLbabTnB1YTKkMOz4SKoOJ5T0KnJFobyaN7R RdR5S+2WVE9YAaWYmIXoCG2scwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1r629L hPHXg00XvrvSHw7f+6JdMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL0EltikCMhAclHwT5NlKDjcmub7bj8yl7ESlsgHYDte9GX7pqMc16 +/vSE+yP1INTpiNb8ttuAdT7UydDqN1vOzO/1OE1lJiu/PcoXIDWmrfd+H/zY0R9 Ffthd17o3y8PcF7XbN6eY9KPGVoxmx01AlgQb0YT/b0ggWCIe/0GQFWLbssOCsA+ 3BMUjWE9HRIZNAm9k7cqQHik4c/yXCo9w7Pazt2IQuWf32KqGreuXezQulNxuEuG y/Rg/bAHeo3c5olSi45+daofrONZs1djBewTT/iUp1JhjguSyZuWLzflJ83f/pk1 4N+gDKYmPd6NtJaxj5Om/edHXCi74OD+ -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org