$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: t++CHry5yRM8gK/ii0y4T4XYr3K0UTEcET8jqRwANjQ= Subject key identifier: 5F:5E:D2:C0:16:53:41:59:1A:07:F5:33:28:5B:FC:D6:4D:FA:DE:D6 Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 63 Signing time: Fri 31 May 2024 08:36:46 +0000 Manifest this update: Fri 31 May 2024 08:36:45 +0000 Manifest next update: Fri 07 Jun 2024 08:36:45 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: 5qDczy+VnmkNeIX5+mKkeTilbu7BGyTTltqbo2U6fMs=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: 49qG7BFVPNE9bNN/jvF/27Y+s2Ba+y3F+GFqB2uVXOE=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: 0Ob44GOJBXWRNVBDtlP4tdYlgSIbc4d/O98ayNaqbHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: May 31 08:36:45 2024 GMT Not After : Jun 7 08:36:45 2024 GMT Subject: CN=66598c1e-9268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:16:74:ab:64:42:d0:5b:57:ae:9e:a2:f6: 73:4b:63:ce:3a:2b:92:11:c5:f3:77:dd:72:e2:14: 32:0c:1e:62:dd:1b:a2:c7:54:66:63:91:34:53:81: 1a:31:c3:0e:ee:c6:78:d2:6d:e7:b1:f7:ae:f8:a3: 10:1e:d9:49:57:15:75:a4:00:ef:57:e3:43:10:04: 70:59:5a:63:cd:73:8f:d9:5b:fd:49:23:e8:54:da: 3e:bc:4c:2c:e0:58:12:cd:a0:d5:e2:26:fd:c8:d8: d3:ba:00:3b:74:79:68:e6:4b:76:04:02:9e:d4:25: d2:48:10:82:21:1f:ac:dd:27:b4:74:2c:6c:0f:38: d3:91:ce:0b:fb:55:3b:c1:20:1d:e9:51:cf:63:4f: fe:b8:ad:f6:92:0d:6b:7f:6a:b6:95:39:b9:b4:0a: 7a:ce:14:04:e8:e1:00:a7:c2:8c:da:9d:10:46:d1: f0:ee:2a:8d:35:57:4f:0d:c1:ee:9a:d3:d4:dd:a0: 47:a2:d5:85:85:a7:94:9b:fe:4d:9e:ea:b9:34:9e: eb:28:e8:73:9c:ce:d2:43:f9:16:7d:6a:c2:04:8d: d2:5f:94:52:bd:91:4e:d0:ed:bf:05:53:ec:df:bf: e5:df:89:b7:15:75:7e:e1:09:ed:f9:c9:f6:01:48: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5E:D2:C0:16:53:41:59:1A:07:F5:33:28:5B:FC:D6:4D:FA:DE:D6 X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:57:27:10:8d:ae:93:86:21:46:21:4a:63:e0:13:5d:63:ac: 91:b2:ee:00:79:86:56:fc:c5:a8:1c:7a:f4:bb:d9:f4:29:0f: b3:ee:86:01:01:e6:ed:63:2a:6a:f2:a9:8d:f8:41:8e:87:31: 42:51:8e:5f:95:8f:e9:92:3d:10:40:4d:81:c7:e2:12:c6:44: 1b:bd:a1:45:a4:e4:64:f8:1c:63:a1:f5:d4:2b:20:0f:99:43: dd:cc:4a:77:f6:7e:af:c1:8e:d0:33:73:9a:55:6c:b4:8a:a3: 63:8f:fd:a8:f5:a3:f9:92:53:d0:0f:f2:55:49:96:88:aa:ca: 7f:29:0c:fa:8e:fb:83:76:ac:1f:a8:85:50:39:5a:a1:b4:07: 98:3e:58:2e:ee:4b:ca:2f:c0:de:3c:9c:f5:41:9e:52:c3:b4: 3c:0d:c5:48:91:e8:90:e4:00:21:e7:64:f7:3c:44:4d:de:f4: 3d:22:50:60:d0:76:d2:c4:f8:50:5a:37:a2:d6:cf:ed:4a:e6: c7:7a:1d:2a:20:09:55:50:ea:39:8a:90:c4:e2:86:86:0c:27: 86:11:f8:70:61:0e:68:b8:d5:e7:b8:7e:3c:9c:8d:61:f6:64: 9b:a1:f3:9b:5e:0f:40:e1:48:02:cf:5b:b2:e8:0c:82:d8:1f: 71:8e:1a:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdDMjExMC8GA1UEBRMoRkYyRURFOTREMzA3QkMyMzg5QTRCNzM5NTkyQTY1N0Y3 MTYxQ0NBMjAeFw0yNDA1MzEwODM2NDVaFw0yNDA2MDcwODM2NDVaMBgxFjAUBgNV BAMTDTY2NTk4YzFlLTkyNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4YxZ0q2RC0FtXrp6i9nNLY846K5IRxfN33XLiFDIMHmLdG6LHVGZjkTRTgRox ww7uxnjSbeex9674oxAe2UlXFXWkAO9X40MQBHBZWmPNc4/ZW/1JI+hU2j68TCzg WBLNoNXiJv3I2NO6ADt0eWjmS3YEAp7UJdJIEIIhH6zdJ7R0LGwPONORzgv7VTvB IB3pUc9jT/64rfaSDWt/araVObm0CnrOFATo4QCnwozanRBG0fDuKo01V08Nwe6a 09TdoEei1YWFp5Sb/k2e6rk0nuso6HOcztJD+RZ9asIEjdJflFK9kU7Q7b8FU+zf v+XfibcVdX7hCe35yfYBSFKlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX17SwBZT QVkaB/UzKFv81k363tYwHwYDVR0jBBgwFoAU/y7elNMHvCOJpLc5WSplf3FhzKIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0MyLzdBQjg1MDg4OEU4 OTExRUVBNkE1RTM1N0M0RjlBRTAyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpL SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3k3ZWxOTUh2Q09KcExjNVdTcGxmM0ZoektJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0MyLzdBQjg1MDg4OEU4OTExRUVBNkE1RTM1N0M0RjlBRTAyL195N2VsTk1IdkNP SnBMYzVXU3BsZjNGaHpLSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBXJxCNrpOGIUYhSmPgE11jrJGy7gB5hlb8xagcevS72fQpD7PuhgEB 5u1jKmryqY34QY6HMUJRjl+Vj+mSPRBATYHH4hLGRBu9oUWk5GT4HGOh9dQrIA+Z Q93MSnf2fq/BjtAzc5pVbLSKo2OP/aj1o/mSU9AP8lVJloiqyn8pDPqO+4N2rB+o hVA5WqG0B5g+WC7uS8ovwN48nPVBnlLDtDwNxUiR6JDkACHnZPc8RE3e9D0iUGDQ dtLE+FBaN6LWz+1K5sd6HSogCVVQ6jmKkMTihoYMJ4YR+HBhDmi41ee4fjycjWH2 ZJuh85teD0DhSALPW7LoDILYH3GOGvU= -----END CERTIFICATE-----Generated at Fri May 31 10:42:19 2024 by rpki-client on console-fra.rpki-client.org