$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: pIpYNkZu5zqlIvA5VCYCqpb6cgMurZyamJoKCNc7lUc= Subject key identifier: E6:03:22:9B:6F:F3:F7:7D:26:A3:EB:19:F3:98:C3:C2:D7:02:80:C0 Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 0697 Signing time: Sat 18 May 2024 23:21:14 +0000 Manifest this update: Sat 18 May 2024 23:21:14 +0000 Manifest next update: Sat 25 May 2024 23:21:14 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: e0AFYdDGuZID8b+Plua9+X9DyLwEu6OV9mQPD6L9LGg=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: sQ4xQdkKUpU+0+qXrtQjpiuCOyP0QcObH62lq38LzWU=) 3: DEBA0696C12C11EEB6FEFB23C4F9AE02.roa (hash: GVpypGXyQ7kBr/6SfKOTfh1lIt3ZzFWGaH0+LRJhSk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: May 18 23:21:14 2024 GMT Not After : May 25 23:21:14 2024 GMT Subject: CN=664937ea-4c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:85:96:f6:e2:79:64:c7:2f:7b:07:e3:4a: e7:28:12:4a:ec:a2:9a:fd:de:97:e5:c4:f4:8d:f0: 6c:d1:6e:9c:fd:c2:6e:fa:8c:af:bc:e3:4b:88:da: 88:8e:a4:0d:3c:9d:a5:d9:d7:db:e9:7d:f1:49:4b: 78:50:0e:91:f1:e8:34:1d:be:45:0a:fb:6b:d6:93: 1a:5b:5e:d2:37:fc:19:ae:1d:be:c0:da:c5:3b:2d: 2f:84:9d:be:dd:be:3f:06:5c:4f:2f:d4:75:e5:c8: 99:60:8d:94:8a:44:c2:b2:61:6c:86:bc:57:31:10: 9a:0d:c9:c6:86:4f:98:4a:cd:37:56:ee:d3:83:ed: a3:19:2c:91:3b:ad:83:ae:ac:2b:7c:7d:90:34:ba: a2:07:9e:c2:f8:e9:af:79:37:50:88:f3:2e:d0:30: 96:44:98:5a:90:34:89:c3:f3:13:69:a4:30:08:f4: 71:4c:0e:92:83:80:32:f4:32:61:d7:ed:6a:f4:c3: 15:42:5e:24:72:bb:9f:87:9b:90:1a:4a:3f:0b:85: c9:96:0c:ce:c0:ad:a3:a4:08:3c:4f:31:61:9e:2b: a9:07:1c:60:09:52:a3:99:22:12:3a:09:bc:0e:d1: 23:40:c3:28:b6:d0:16:8d:a0:b0:e4:de:51:58:b3: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:03:22:9B:6F:F3:F7:7D:26:A3:EB:19:F3:98:C3:C2:D7:02:80:C0 X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:44:f7:3a:7a:75:b4:8c:fa:d8:00:e9:49:06:de:7c:ae:3b: 7c:7d:dc:35:6d:c7:c7:b7:03:5f:47:88:f2:af:b3:5c:60:b8: dd:7c:db:13:d5:1a:ca:a8:b3:80:1d:b6:2a:e7:09:f2:8b:75: 71:ee:fc:d7:9f:90:2c:00:a0:6a:56:0c:46:db:7b:6c:0b:b6: f1:4a:68:6a:37:8e:63:c6:b8:29:f4:ca:46:b5:b6:10:65:5e: c0:1a:76:00:73:3f:3a:0c:8b:fb:14:40:37:01:a2:2e:b5:96: cd:ed:1b:63:2b:91:c7:a3:0a:c4:97:30:fd:0c:0f:7c:58:07: 35:ca:33:34:76:1d:d1:50:85:dc:27:74:51:31:a4:ad:c3:82: 9f:52:c6:81:be:cf:50:93:f3:7f:3d:09:36:34:2b:ee:be:11: 74:66:41:88:14:b5:5e:d4:96:93:77:65:c0:1e:94:80:e1:b6: 76:f7:b0:ee:96:93:4d:ca:e0:dc:08:5a:63:f9:a0:7a:8d:f3: e4:4a:9d:c5:82:0b:6d:5e:ad:19:86:fa:c7:0c:c3:6d:1c:99: a3:d2:69:f2:71:bb:c7:4a:ff:81:4a:48:55:f8:ee:be:55:29: 6a:97:10:65:5b:6c:6b:2f:37:b0:8b:84:5a:ef:e7:62:d0:0c: d5:a5:c6:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjQwNTE4MjMyMTE0WhcNMjQwNTI1MjMyMTE0WjAYMRYwFAYD VQQDEw02NjQ5MzdlYS00YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWKFlvbieWTHL3sH40rnKBJK7KKa/d6X5cT0jfBs0W6c/cJu+oyvvONLiNqI jqQNPJ2l2dfb6X3xSUt4UA6R8eg0Hb5FCvtr1pMaW17SN/wZrh2+wNrFOy0vhJ2+ 3b4/BlxPL9R15ciZYI2UikTCsmFshrxXMRCaDcnGhk+YSs03Vu7Tg+2jGSyRO62D rqwrfH2QNLqiB57C+OmveTdQiPMu0DCWRJhakDSJw/MTaaQwCPRxTA6Sg4Ay9DJh 1+1q9MMVQl4kcrufh5uQGko/C4XJlgzOwK2jpAg8TzFhniupBxxgCVKjmSISOgm8 DtEjQMMottAWjaCw5N5RWLPihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYDIptv 8/d9JqPrGfOYw8LXAoDAMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASRPc6enW0jPrYAOlJBt58rjt8fdw1bcfHtwNfR4jyr7NcYLjdfNsT 1RrKqLOAHbYq5wnyi3Vx7vzXn5AsAKBqVgxG23tsC7bxSmhqN45jxrgp9MpGtbYQ ZV7AGnYAcz86DIv7FEA3AaIutZbN7RtjK5HHowrElzD9DA98WAc1yjM0dh3RUIXc J3RRMaStw4KfUsaBvs9Qk/N/PQk2NCvuvhF0ZkGIFLVe1JaTd2XAHpSA4bZ297Du lpNNyuDcCFpj+aB6jfPkSp3FggttXq0ZhvrHDMNtHJmj0mnycbvHSv+BSkhV+O6+ VSlqlxBlW2xrLzewi4Ra7+di0AzVpcbq -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org