$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: nE4Ke+IxjZcdriDo3KTsrhbvo7L+FBksVEfOjgpcnlc= Subject key identifier: E6:48:BE:19:17:52:2D:BD:62:A7:6A:09:FF:09:0F:63:25:51:A2:1C Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: AC Signing time: Sun 19 May 2024 07:03:45 +0000 Manifest this update: Sun 19 May 2024 07:03:44 +0000 Manifest next update: Sun 26 May 2024 07:03:44 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: fIv2AX23y3YyIwsvTegRVDHDBPDTdHpRbVUj+GHoKFk=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: n+UG6V5XV7UFganlBH1N62nTVgBD1jdXRIOHq8v8JMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: May 19 07:03:44 2024 GMT Not After : May 26 07:03:44 2024 GMT Subject: CN=6649a451-076c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:40:2c:18:a6:8e:74:af:80:26:0b:f9:13: d1:e0:08:ae:97:77:ef:e7:fe:fb:b8:42:5a:95:fb: db:d5:51:86:0e:2e:19:37:7b:90:72:7b:09:a1:3e: 94:8f:86:11:d1:45:9d:61:68:f5:d2:df:e0:0a:b9: 17:e0:38:7b:46:3a:0b:9f:aa:23:eb:04:4d:e8:c7: 61:f6:20:b4:d0:46:76:1d:44:15:8c:56:55:45:4f: e4:95:33:78:9c:b2:ef:a7:cb:53:ea:97:85:9c:23: 32:7e:4e:77:37:4f:ca:16:ba:e0:72:69:6e:a9:b0: ec:d2:a5:2e:38:5e:a9:83:37:ec:0c:39:68:7e:71: 8b:ad:02:77:b1:16:73:79:99:4f:e6:12:a3:f2:c8: e2:4d:36:92:a0:b6:12:6f:13:90:89:3a:0c:36:c7: 13:48:80:f4:d8:87:8d:cd:29:97:a7:0f:11:b2:ce: 97:d7:f7:41:fa:8e:70:9d:6b:b0:15:a1:a3:a0:f7: 5f:f8:b9:b9:d3:e0:02:71:76:1f:f6:24:88:b8:62: 3c:b0:1c:4e:d3:66:41:86:1d:3c:af:e6:e5:81:d1: cc:ff:0b:60:f1:cf:1c:f6:9c:a7:a0:02:e8:a8:3c: 3f:51:ae:7e:85:69:35:29:3c:94:bb:3c:7f:03:66: 5f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:48:BE:19:17:52:2D:BD:62:A7:6A:09:FF:09:0F:63:25:51:A2:1C X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:4c:35:02:c7:0b:1c:38:37:6b:f8:2b:22:8c:3a:69:7a:6c: 6a:70:88:6b:7b:62:d6:f1:bb:20:74:4c:a6:ec:65:c6:70:a7: bf:c0:71:c1:9f:c7:c0:42:0e:80:ff:d3:dc:f2:52:3e:a2:d7: 90:39:78:98:eb:2a:49:38:80:32:c8:64:a8:52:87:bf:0a:3b: 0d:a9:af:c7:03:93:74:3b:7a:ce:d3:f3:77:50:38:ce:95:a3: 83:24:b0:d4:e7:1f:b7:e1:08:4a:af:a5:10:b0:2e:55:4d:db: 7a:e9:b6:41:99:7d:a6:79:d0:51:b3:10:3e:12:9b:48:43:d0: 71:78:39:94:59:c8:0a:16:91:40:8c:48:bb:20:d9:8f:6f:88: 35:d9:80:40:70:0d:4f:15:11:39:a1:6b:c2:cc:2d:17:b7:56: 65:1f:e6:43:c6:df:8b:73:00:e3:4b:d5:ce:61:af:69:94:19: c1:6c:0c:0a:25:9a:fa:c8:4e:8b:ab:92:03:e0:96:8c:b3:12: ea:0e:f3:1d:da:e1:98:fa:7d:44:2f:29:f5:55:1d:9f:3c:07: 41:4e:06:76:27:5d:01:f9:f9:17:92:1e:99:52:01:da:4b:5e: 39:5d:d0:a5:3a:de:97:93:19:4e:63:f0:11:ff:4f:98:42:a3: 4a:aa:37:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjQwNTE5MDcwMzQ0WhcNMjQwNTI2MDcwMzQ0WjAYMRYwFAYD VQQDEw02NjQ5YTQ1MS0wNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C5ALBimjnSvgCYL+RPR4Aiul3fv5/77uEJalfvb1VGGDi4ZN3uQcnsJoT6U j4YR0UWdYWj10t/gCrkX4Dh7RjoLn6oj6wRN6Mdh9iC00EZ2HUQVjFZVRU/klTN4 nLLvp8tT6peFnCMyfk53N0/KFrrgcmluqbDs0qUuOF6pgzfsDDlofnGLrQJ3sRZz eZlP5hKj8sjiTTaSoLYSbxOQiToMNscTSID02IeNzSmXpw8Rss6X1/dB+o5wnWuw FaGjoPdf+Lm50+ACcXYf9iSIuGI8sBxO02ZBhh08r+blgdHM/wtg8c8c9pynoALo qDw/Ua5+hWk1KTyUuzx/A2ZfPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZIvhkX Ui29YqdqCf8JD2MlUaIcMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiTDUCxwscODdr+CsijDppemxqcIhre2LW8bsgdEym7GXGcKe/wHHB n8fAQg6A/9Pc8lI+oteQOXiY6ypJOIAyyGSoUoe/CjsNqa/HA5N0O3rO0/N3UDjO laODJLDU5x+34QhKr6UQsC5VTdt66bZBmX2medBRsxA+EptIQ9BxeDmUWcgKFpFA jEi7INmPb4g12YBAcA1PFRE5oWvCzC0Xt1ZlH+ZDxt+LcwDjS9XOYa9plBnBbAwK JZr6yE6Lq5ID4JaMsxLqDvMd2uGY+n1ELyn1VR2fPAdBTgZ2J10B+fkXkh6ZUgHa S145XdClOt6XkxlOY/AR/0+YQqNKqjcO -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org