$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: PAQL6kNQ41Wg4gg89s75S6HosL+2cAnICKqavgkqlNY= Subject key identifier: 78:0B:06:8E:0E:66:D0:91:4F:CC:1C:E5:1A:61:F4:98:7F:21:FB:AB Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: 3E Signing time: Sun 19 May 2024 08:10:56 +0000 Manifest this update: Sun 19 May 2024 08:10:56 +0000 Manifest next update: Sun 26 May 2024 08:10:56 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: EPq9+e1pnUYLJmMFdQjcIC16T/80C1gjh2qronIGlJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: May 19 08:10:56 2024 GMT Not After : May 26 08:10:56 2024 GMT Subject: CN=6649b410-265c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:06:19:18:a5:a4:54:86:f9:80:8b:44:27: 1c:0a:11:6a:d6:04:78:fa:5a:b4:b2:bd:6e:00:aa: 52:23:a7:02:32:91:23:47:4a:83:9a:0a:91:83:b7: 3f:64:92:3a:81:54:37:94:75:c2:79:aa:cd:60:7f: b7:21:2c:a1:9e:25:d7:05:2d:b3:3d:30:39:97:c6: 10:04:cb:4a:5b:86:58:91:37:29:c2:57:61:5e:e8: 8c:4a:db:35:c9:c5:aa:e3:88:67:66:2d:59:3f:56: de:27:fc:b5:5f:38:2c:4d:99:0a:1f:d9:54:83:97: 56:a0:81:fd:1f:fd:e8:9c:07:0b:17:7f:83:04:4e: 40:8b:73:b7:ba:2a:43:b6:14:69:2f:e3:93:64:58: 3e:4a:38:c0:ea:04:8a:c9:e8:58:94:83:82:cc:4b: 0e:fa:12:55:92:ae:3f:81:de:c1:a0:c5:cb:75:2b: af:60:9f:44:74:66:83:76:b1:64:8f:12:81:01:2c: c3:75:91:13:b9:73:65:c1:46:32:db:6c:1c:d4:ac: 99:7a:7e:69:31:9c:fc:0f:60:09:19:1e:5a:24:7c: a4:da:32:06:ae:f1:82:bd:39:3c:29:93:15:7d:95: 49:5c:29:47:91:da:ba:53:6c:e3:ca:8d:a6:29:cb: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:06:8E:0E:66:D0:91:4F:CC:1C:E5:1A:61:F4:98:7F:21:FB:AB X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d6:04:6b:da:e8:a7:ec:ad:4d:f5:19:53:ad:43:d9:38:21: 66:52:43:de:d5:ee:75:93:cc:c0:3b:6e:c0:77:fe:55:32:59: e4:f6:0a:e1:49:e9:5e:47:d1:d3:b2:ab:e7:e4:ef:cc:56:1f: 4e:1e:ab:4e:36:5b:81:7e:76:2c:22:17:e7:69:33:92:7b:f7: a0:a1:67:a8:38:78:2f:64:78:2f:c6:01:26:71:c8:e3:8d:fb: 67:40:76:24:4a:44:f9:44:cd:91:4c:54:24:84:12:6c:fa:d4: 35:80:9c:05:6d:e0:8a:8b:08:0e:49:b2:e4:f2:03:35:22:ea: 19:b5:f2:3e:38:66:65:9c:18:16:6f:ca:d1:1e:a8:3d:84:1a: 16:72:6f:ec:45:f5:cf:08:f0:a6:d9:31:2c:fd:68:bb:6c:7f: 58:75:f8:27:bb:a5:a8:b3:c5:f4:73:a4:75:4f:56:00:5d:4e: bd:8b:cc:d2:0f:b2:4b:a8:18:16:ca:3c:85:3f:e4:ea:a7:eb: 19:4d:c1:ed:96:c5:b4:08:1e:cf:1b:a1:f6:45:40:42:13:e9: 3b:d7:04:ce:0e:d1:d7:90:c7:6c:d5:c9:63:8a:fc:e6:1a:a9: bb:ed:e2:00:01:df:dd:db:f3:3e:5b:bf:93:bd:50:37:51:cd: ba:cc:98:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODhFMDExMC8GA1UEBRMoNjFCQkNCNkRCOERDMTMzN0MxQjgyOThGNzBDMUZGMkE1 MDE2RUQ2RTAeFw0yNDA1MTkwODEwNTZaFw0yNDA1MjYwODEwNTZaMBgxFjAUBgNV BAMTDTY2NDliNDEwLTI2NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxhwYZGKWkVIb5gItEJxwKEWrWBHj6WrSyvW4AqlIjpwIykSNHSoOaCpGDtz9k kjqBVDeUdcJ5qs1gf7chLKGeJdcFLbM9MDmXxhAEy0pbhliRNynCV2Fe6IxK2zXJ xarjiGdmLVk/Vt4n/LVfOCxNmQof2VSDl1aggf0f/eicBwsXf4METkCLc7e6KkO2 FGkv45NkWD5KOMDqBIrJ6FiUg4LMSw76ElWSrj+B3sGgxct1K69gn0R0ZoN2sWSP EoEBLMN1kRO5c2XBRjLbbBzUrJl6fmkxnPwPYAkZHlokfKTaMgau8YK9OTwpkxV9 lUlcKUeR2rpTbOPKjaYpy3VdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeAsGjg5m 0JFPzBzlGmH0mH8h+6swHwYDVR0jBBgwFoAUYbvLbbjcEzfBuCmPcMH/KlAW7W4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OEUwLzU1RTM5MkZDQjg1 MjExRUU4QUNBQTk2QUM0RjlBRTAyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdX NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWJ2TGJiamNFemZCdUNtUGNNSF9LbEFXN1c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OEUwLzU1RTM5MkZDQjg1MjExRUU4QUNBQTk2QUM0RjlBRTAyL1lidkxiYmpjRXpm QnVDbVBjTUhfS2xBVzdXNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHrWBGva6KfsrU31GVOtQ9k4IWZSQ97V7nWTzMA7bsB3/lUyWeT2CuFJ 6V5H0dOyq+fk78xWH04eq042W4F+diwiF+dpM5J796ChZ6g4eC9keC/GASZxyOON +2dAdiRKRPlEzZFMVCSEEmz61DWAnAVt4IqLCA5JsuTyAzUi6hm18j44ZmWcGBZv ytEeqD2EGhZyb+xF9c8I8KbZMSz9aLtsf1h1+Ce7paizxfRzpHVPVgBdTr2LzNIP skuoGBbKPIU/5Oqn6xlNwe2WxbQIHs8bofZFQEIT6TvXBM4O0deQx2zVyWOK/OYa qbvt4gAB393b8z5bv5O9UDdRzbrMmMI= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org