$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: DzBBrvnR92+AIh+ExoJ7bko/oEOYy9lxw0rdZPE/u5c= Subject key identifier: 8C:15:DC:A8:08:69:90:71:3D:64:3F:7A:6E:9C:D0:0F:ED:79:B4:3D Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: 28 Signing time: Sun 19 May 2024 08:29:38 +0000 Manifest this update: Sun 19 May 2024 08:29:37 +0000 Manifest next update: Sun 26 May 2024 08:29:37 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: WFK7EtjBLxz8zpy6FQ0TGUQGUlpjm5cBcD7MSenYKQM=) 2: 0F8D82DCD9FD11EEA4312983C4F9AE02.roa (hash: o70V3rgTm8yRRylFlCudRELCYk4ehTX4M2+Mtzto8oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: May 19 08:29:37 2024 GMT Not After : May 26 08:29:37 2024 GMT Subject: CN=6649b872-53fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:94:ba:0d:c7:71:cf:30:f0:d0:bd:57:33:aa: 70:1c:cc:87:81:4c:e3:94:36:b7:7c:3c:77:a0:79: d9:50:7d:8e:aa:e3:fb:2f:c6:99:c9:3c:60:97:1b: 52:25:22:73:71:8a:eb:80:55:a2:28:39:e1:06:f8: 08:f3:2c:3d:d6:e1:ed:e8:3d:fb:b3:00:ce:89:03: b7:57:19:e3:83:73:e0:e6:f6:d5:09:88:47:79:d6: 88:75:11:37:bd:72:77:45:37:14:fa:6f:95:10:8c: 78:19:10:3a:40:9e:b0:7d:9f:79:6f:43:f3:3f:47: bd:f8:e8:e1:7a:b0:33:76:f1:63:c2:73:2f:f2:2f: 7d:cc:af:0a:d3:08:a9:69:ed:2b:92:ff:21:75:c5: 39:4b:c6:ff:00:e4:b7:5f:6a:ad:2c:8d:44:69:11: 1b:66:7a:0c:b3:b1:5a:e8:21:cd:80:a7:6e:3e:b0: fe:5a:9e:a8:88:c8:c6:b2:6d:aa:2b:1b:c6:c9:0f: 9b:7a:a9:f1:2d:37:aa:8c:b9:d2:ff:5e:4b:c8:9a: 79:63:00:d4:a3:26:d2:f5:32:ed:05:fd:7e:52:05: 6a:eb:21:10:9a:8e:03:c5:bf:c6:8b:f7:da:4d:5b: 19:9d:51:05:29:76:cf:88:2f:d1:74:e2:08:f7:6c: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:15:DC:A8:08:69:90:71:3D:64:3F:7A:6E:9C:D0:0F:ED:79:B4:3D X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cb:cf:fe:ab:c2:a2:a2:b5:14:cb:d2:15:bf:b4:93:45:45: 72:25:9d:96:5d:5d:cd:9c:09:25:b9:2e:57:76:93:b6:cc:5e: ef:c6:0d:e2:f7:64:6a:4e:fc:27:89:a3:37:73:6d:97:60:84: 86:0c:35:0d:2d:e1:9a:45:f1:c4:c6:b8:18:48:fa:0e:97:e9: 26:df:2f:51:e6:6c:4f:d8:f2:cd:7d:9c:fe:8b:84:66:f0:51: 73:4e:2b:a7:5e:a4:5f:f0:3b:20:04:58:fe:c8:e1:94:b4:18: 02:d2:56:0b:43:98:f9:d4:2c:b0:de:f5:91:54:07:46:8d:4c: e7:1c:d8:5c:c0:24:a5:1a:82:7f:f0:3a:cd:f0:1a:43:f5:ca: 4c:f8:db:09:08:f4:23:db:43:71:7d:6d:b2:65:0a:c7:b8:93: 4a:ca:24:1e:13:1a:79:43:46:dd:be:2b:15:b9:2a:8d:bb:dc: d4:ae:61:d6:b1:0e:d6:5c:da:c6:e6:11:f6:05:a6:d9:52:27: 48:86:21:9c:4d:9b:88:10:9f:52:81:57:b8:54:0e:a5:c7:fe: df:b8:b5:87:b2:f4:c8:40:d0:64:26:1a:1d:8b:47:74:3b:8f: ea:40:01:de:45:56:63:cd:03:fe:22:5c:35:28:98:43:a6:3d: ba:fb:0a:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjRGNTExMC8GA1UEBRMoNjE2M0E5NTU0QzMzMDY3OUY3RUExNjY3OEIxMDhEOTY0 RUMxQzgwMjAeFw0yNDA1MTkwODI5MzdaFw0yNDA1MjYwODI5MzdaMBgxFjAUBgNV BAMTDTY2NDliODcyLTUzZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWlLoNx3HPMPDQvVczqnAczIeBTOOUNrd8PHegedlQfY6q4/svxpnJPGCXG1Il InNxiuuAVaIoOeEG+AjzLD3W4e3oPfuzAM6JA7dXGeODc+Dm9tUJiEd51oh1ETe9 cndFNxT6b5UQjHgZEDpAnrB9n3lvQ/M/R7346OF6sDN28WPCcy/yL33MrwrTCKlp 7SuS/yF1xTlLxv8A5Ldfaq0sjURpERtmegyzsVroIc2Ap24+sP5anqiIyMaybaor G8bJD5t6qfEtN6qMudL/XkvImnljANSjJtL1Mu0F/X5SBWrrIRCajgPFv8aL99pN WxmdUQUpds+IL9F04gj3bO8/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjBXcqAhp kHE9ZD96bpzQD+15tD0wHwYDVR0jBBgwFoAUYWOpVUwzBnn36hZnixCNlk7ByAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NEY1LzVCNUI5M0VDRDlG OTExRUU5RUFFNUQ3REM0RjlBRTAyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVdPcFZVd3pCbm4zNmhabml4Q05sazdCeUFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NEY1LzVCNUI5M0VDRDlGOTExRUU5RUFFNUQ3REM0RjlBRTAyL1lXT3BWVXd6Qm5u MzZoWm5peENObGs3QnlBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFzLz/6rwqKitRTL0hW/tJNFRXIlnZZdXc2cCSW5Lld2k7bMXu/GDeL3 ZGpO/CeJozdzbZdghIYMNQ0t4ZpF8cTGuBhI+g6X6SbfL1HmbE/Y8s19nP6LhGbw UXNOK6depF/wOyAEWP7I4ZS0GALSVgtDmPnULLDe9ZFUB0aNTOcc2FzAJKUagn/w Os3wGkP1ykz42wkI9CPbQ3F9bbJlCse4k0rKJB4TGnlDRt2+KxW5Ko273NSuYdax DtZc2sbmEfYFptlSJ0iGIZxNm4gQn1KBV7hUDqXH/t+4tYey9MhA0GQmGh2LR3Q7 j+pAAd5FVmPNA/4iXDUomEOmPbr7Cg4= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org