$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: 6w8hJ03z5yNRBib1TmXfK+7FIjgHJhe1xsYxO00fNHM= Subject key identifier: 42:56:4A:AD:8C:54:A5:78:F5:8D:07:73:37:99:28:21:54:41:95:0F Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 06E8 Signing time: Sat 18 May 2024 22:48:10 +0000 Manifest this update: Sat 18 May 2024 22:48:10 +0000 Manifest next update: Sat 25 May 2024 22:48:10 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: vybkHEKhVQTv6A9n6oT/3+6KUp8qzgwE9bHPvR8AfCc=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: l64K4tplog0G07T/3YojgoGRLHdEu1r1sBnnM1yfpLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: May 18 22:48:10 2024 GMT Not After : May 25 22:48:10 2024 GMT Subject: CN=6649302a-e45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a7:ec:6d:51:ca:e8:3e:33:be:68:07:17:97: 61:9c:df:b1:96:f9:75:fb:d9:7f:74:84:91:c5:e0: 4c:17:97:47:ad:2a:f3:05:c6:9b:8d:6c:f6:a3:10: 20:b7:82:28:a5:0a:74:4b:0d:64:ec:a8:9d:8a:c7: e2:1c:3f:83:c2:11:ad:3e:b9:0a:dd:81:c0:c8:c3: af:90:22:ae:a6:cd:c3:f4:db:f9:2e:fd:af:fa:30: 44:84:68:af:6d:ff:3e:17:a0:05:e7:43:37:cd:20: d9:e5:04:a0:89:85:0a:bb:2f:8f:8e:82:1b:da:41: 62:e8:c8:23:c1:78:6e:60:41:11:b8:c0:c7:8b:03: f2:0a:b2:df:d7:ae:24:2c:c6:67:e5:db:be:5b:ae: a5:f8:49:56:f4:e9:be:1a:02:6e:2b:fc:cc:f1:dd: 53:5a:c5:14:73:fa:d8:75:dc:e3:21:7e:76:73:e0: ed:82:03:70:f1:25:91:14:70:db:c9:df:37:1b:77: b0:09:6a:bf:9e:fd:6d:48:aa:83:6a:97:32:3d:d2: 16:29:cf:48:a5:fe:f4:ac:a8:ec:ef:89:2b:5d:54: ce:02:dd:1c:ab:b7:bd:5f:df:93:66:9e:16:7a:6c: 1e:1c:2a:36:ab:94:d0:85:11:1f:1a:5a:56:4b:56: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:4A:AD:8C:54:A5:78:F5:8D:07:73:37:99:28:21:54:41:95:0F X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3a:71:9c:ae:42:41:52:30:05:00:0a:46:34:df:58:c7:ef: 6c:56:11:6e:f5:16:f3:2c:01:7d:65:9a:8e:27:2d:2e:7d:03: b8:45:24:10:c6:71:42:3d:81:69:8b:26:60:89:27:69:30:40: 5e:5e:7b:c5:48:07:9e:41:2f:c1:1e:1c:a0:b7:cf:97:98:fd: 8e:0d:9d:d1:7e:15:e0:cc:1c:53:bc:d4:2e:af:d9:02:6f:aa: 36:65:87:c6:0e:fa:eb:57:c1:e1:be:97:03:3c:06:71:62:3b: fe:68:f7:bb:4a:7b:3f:b0:ee:c1:0e:12:aa:c5:29:a8:ad:89: 11:9a:80:0e:27:96:c3:73:a2:33:37:b6:f7:a2:10:42:5a:25: 2e:3f:08:cb:82:90:d8:2e:84:3e:67:b0:9b:78:d2:f1:a9:1b: 35:5b:a9:e0:e8:2d:90:44:21:19:2e:21:60:55:ae:97:a8:07: 8d:ea:70:ec:8c:25:5b:2c:c3:26:1a:fc:e3:5b:8f:eb:0c:27: c3:56:6d:5a:00:69:05:a9:14:06:0b:d3:84:8a:cc:b5:86:79: 6d:1a:4b:70:b8:61:1a:02:e6:9e:f6:c9:49:40:43:3a:b5:54: e6:a4:ba:a4:0b:b1:0c:00:60:85:6d:00:da:1e:36:52:81:d9: 82:52:93:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjQwNTE4MjI0ODEwWhcNMjQwNTI1MjI0ODEwWjAYMRYwFAYD VQQDEw02NjQ5MzAyYS1lNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36fsbVHK6D4zvmgHF5dhnN+xlvl1+9l/dISRxeBMF5dHrSrzBcabjWz2oxAg t4IopQp0Sw1k7KidisfiHD+DwhGtPrkK3YHAyMOvkCKups3D9Nv5Lv2v+jBEhGiv bf8+F6AF50M3zSDZ5QSgiYUKuy+PjoIb2kFi6MgjwXhuYEERuMDHiwPyCrLf164k LMZn5du+W66l+ElW9Om+GgJuK/zM8d1TWsUUc/rYddzjIX52c+DtggNw8SWRFHDb yd83G3ewCWq/nv1tSKqDapcyPdIWKc9Ipf70rKjs74krXVTOAt0cq7e9X9+TZp4W emweHCo2q5TQhREfGlpWS1YoPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJWSq2M VKV49Y0HczeZKCFUQZUPMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBROnGcrkJBUjAFAApGNN9Yx+9sVhFu9RbzLAF9ZZqOJy0ufQO4RSQQ xnFCPYFpiyZgiSdpMEBeXnvFSAeeQS/BHhygt8+XmP2ODZ3RfhXgzBxTvNQur9kC b6o2ZYfGDvrrV8HhvpcDPAZxYjv+aPe7Sns/sO7BDhKqxSmorYkRmoAOJ5bDc6Iz N7b3ohBCWiUuPwjLgpDYLoQ+Z7CbeNLxqRs1W6ng6C2QRCEZLiFgVa6XqAeN6nDs jCVbLMMmGvzjW4/rDCfDVm1aAGkFqRQGC9OEisy1hnltGktwuGEaAuae9slJQEM6 tVTmpLqkC7EMAGCFbQDaHjZSgdmCUpMV -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org