$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft File: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json) Hash identifier: Mj4uS8Z0pnw9y3wOVl3m75hVFkbk2L36Ug8zVeu4ct0= Subject key identifier: 33:FA:C5:F6:2F:1B:AA:1D:EA:32:3C:C0:F9:13:89:57:F2:9F:D3:DF Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft Manifest number: 032B Signing time: Sun 19 May 2024 03:00:45 +0000 Manifest this update: Sun 19 May 2024 03:00:44 +0000 Manifest next update: Sun 26 May 2024 03:00:44 +0000 Files and hashes: 1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: 5zVH0+e1DkzNyrdJWHZ5pke1AItdj1qqwDkb/et0SDI=) 2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: rK8LNE70vEcEXQqVgfhb/qql1fI8LntfPvWUogqa3lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Validity Not Before: May 19 03:00:44 2024 GMT Not After : May 26 03:00:44 2024 GMT Subject: CN=66496b5d-04ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:e0:42:95:a7:f9:28:a8:23:88:99:f6:0c: 79:26:67:8c:54:49:e1:36:bc:ac:0a:d6:c7:43:5f: 73:91:ad:2b:f4:90:4b:f3:29:11:22:5c:6e:2a:65: 4d:65:62:e6:2e:70:cf:c0:b1:e1:e0:e3:94:16:ad: b8:03:ef:36:5a:6b:76:be:92:3f:ef:0a:bf:53:5c: ef:6c:3d:f4:9e:84:a7:54:06:7f:85:3b:8c:3c:82: 85:80:49:88:ca:92:84:ea:f6:a6:b5:69:59:c4:05: d1:5f:1e:0a:6f:2f:1c:83:d7:5b:8e:6d:16:67:bb: ae:2e:d4:bf:89:81:76:ed:bf:bb:11:7b:a9:74:e5: d1:c9:56:2e:16:e0:66:17:b9:cf:6d:cc:9e:d5:f2: 3b:20:d7:54:fb:93:5d:12:96:8d:98:45:32:05:1c: 39:92:cc:ab:77:92:fb:9c:13:d3:5c:bd:70:13:c8: d7:2a:b6:98:c3:69:a2:6f:3c:6f:6f:f4:bb:46:6c: 57:7c:82:ee:54:9e:38:70:a1:b9:46:bd:c5:fb:c5: a6:73:2c:ba:6e:75:f0:c8:ac:7a:cd:6d:b2:30:2a: 76:46:6e:93:f2:b5:b2:83:e3:88:cc:a8:ec:c6:0f: d6:89:17:09:e3:56:36:a9:07:67:8d:4d:b1:85:8c: a4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FA:C5:F6:2F:1B:AA:1D:EA:32:3C:C0:F9:13:89:57:F2:9F:D3:DF X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d0:05:6a:c7:5d:31:54:9d:a1:b7:26:72:8e:a7:51:b2:30: d7:35:e1:a0:6f:e4:b3:30:c1:2a:6c:7e:a2:0a:e1:14:0e:2e: f0:ca:7a:20:ae:7a:9f:38:4a:b0:91:b3:fc:8d:97:54:57:d3: 48:b2:e4:ec:1c:5e:3e:d9:d6:cf:a4:9f:94:f0:55:47:eb:9d: 58:a1:2b:fa:11:88:dd:ef:b6:da:83:06:c1:ac:29:eb:17:9c: 0c:a6:0b:e1:5d:28:b5:90:f8:1f:ca:e7:03:f7:99:10:26:4e: 9b:77:0e:53:3b:d0:7c:8e:d9:ed:5b:38:f0:36:23:6d:e9:7c: 65:32:a2:bb:92:5c:72:6d:fd:2a:9f:0b:c3:0e:10:3a:c2:a9: 1e:77:bc:45:5e:88:f4:06:ac:fe:39:be:43:1f:5a:f0:67:28: 96:ed:f8:e5:6a:7b:5a:18:09:02:54:ff:ad:35:28:e7:cc:0d: e9:3e:f9:3d:6d:34:51:d6:a3:db:6f:32:eb:f8:27:83:ef:30: f2:1e:b5:6e:a1:fc:93:2b:79:fb:fb:f5:38:43:b2:92:7c:0f: 61:ad:fb:1a:c7:2a:45:e0:b0:b7:3d:16:ec:5b:56:21:1f:01: 7a:b8:47:38:02:75:88:3f:eb:2a:3c:83:78:ee:74:34:fd:60: b7:db:fe:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjQwNTE5MDMwMDQ0WhcNMjQwNTI2MDMwMDQ0WjAYMRYwFAYD VQQDEw02NjQ5NmI1ZC0wNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zXgQpWn+SioI4iZ9gx5JmeMVEnhNrysCtbHQ19zka0r9JBL8ykRIlxuKmVN ZWLmLnDPwLHh4OOUFq24A+82Wmt2vpI/7wq/U1zvbD30noSnVAZ/hTuMPIKFgEmI ypKE6vamtWlZxAXRXx4Kby8cg9dbjm0WZ7uuLtS/iYF27b+7EXupdOXRyVYuFuBm F7nPbcye1fI7INdU+5NdEpaNmEUyBRw5ksyrd5L7nBPTXL1wE8jXKraYw2mibzxv b/S7RmxXfILuVJ44cKG5Rr3F+8Wmcyy6bnXwyKx6zW2yMCp2Rm6T8rWyg+OIzKjs xg/WiRcJ41Y2qQdnjU2xhYyk5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP6xfYv G6od6jI8wPkTiVfyn9PfMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDA2Qi9ENjM4MjdBRTdDMjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4 dDdJU1MyX0QtWnpEWWctRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE0AVqx10xVJ2htyZyjqdRsjDXNeGgb+SzMMEqbH6iCuEUDi7wynog rnqfOEqwkbP8jZdUV9NIsuTsHF4+2dbPpJ+U8FVH651YoSv6EYjd77bagwbBrCnr F5wMpgvhXSi1kPgfyucD95kQJk6bdw5TO9B8jtntWzjwNiNt6XxlMqK7klxybf0q nwvDDhA6wqked7xFXoj0Bqz+Ob5DH1rwZyiW7fjlantaGAkCVP+tNSjnzA3pPvk9 bTRR1qPbbzLr+CeD7zDyHrVuofyTK3n7+/U4Q7KSfA9hrfsaxypF4LC3PRbsW1Yh HwF6uEc4AnWIP+sqPIN47nQ0/WC32/4M -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org