$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft File: yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft (raw, json) Hash identifier: bmAR61N4FaBx48LfFW9SjT8/2SzgcE6nJ6uYs/lKYt8= Subject key identifier: 7A:DB:69:51:D3:E5:48:A2:E9:BA:58:BB:B8:A1:D5:92:60:19:FE:2B Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E Certificate issuer: /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft Manifest number: 01C1 Signing time: Sun 19 May 2024 04:29:26 +0000 Manifest this update: Sun 19 May 2024 04:29:26 +0000 Manifest next update: Sun 26 May 2024 04:29:26 +0000 Files and hashes: 1: yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl (hash: 1UOeTctGTdjX8BI59h9FCsyOSzEVcAJLfcQqG5ztfzA=) 2: 80C08414A45B11EDA610F30BC4F9AE02.roa (hash: VCgMkg4Ox4m/ZshHKSjtyp/yMgP96NKJYH3w9nkS+04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E Validity Not Before: May 19 04:29:26 2024 GMT Not After : May 26 04:29:26 2024 GMT Subject: CN=66498026-2d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:c9:1e:f2:aa:75:d2:03:24:79:5d:44:17: 0c:36:25:8c:50:75:2e:d4:ab:a3:f0:1f:ad:e2:70: 20:8f:0f:58:57:27:fe:73:91:01:76:41:92:f8:a8: 97:19:93:9f:a4:79:e4:76:ee:df:81:87:5f:8c:61: 8b:52:10:55:e4:a6:0f:a6:3a:af:ea:e2:f3:c5:a9: dd:e4:20:f1:dd:cb:9a:0b:9e:8b:52:55:fb:fc:3e: 33:b4:d5:29:e1:de:47:81:5c:ff:4a:9a:5b:21:12: e4:86:c7:86:22:70:2a:84:1a:cd:ea:82:9c:35:72: 01:fd:7f:c3:22:82:cc:89:10:5c:f8:e8:3d:53:02: cc:80:b2:2e:9a:9f:18:3d:e7:51:b9:c9:8b:b5:d9: 00:f7:fe:a1:21:27:6f:10:57:f2:61:f3:d2:a4:fc: 7d:bf:90:72:45:ab:41:2b:3e:bc:1f:e3:f9:28:bb: 09:b3:27:7f:cf:dc:7c:5e:06:db:68:44:89:f2:c9: 5f:0a:48:f0:f8:4b:8a:34:9d:4f:9d:b5:6a:f2:ae: 25:d2:d7:c0:32:8b:3a:6c:0a:83:b7:d9:06:f6:b4: 1b:3b:20:08:c0:5a:12:56:58:14:89:0a:8d:f9:fb: 37:11:3f:82:88:59:27:7f:20:e5:e3:7c:d1:29:d5: 57:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DB:69:51:D3:E5:48:A2:E9:BA:58:BB:B8:A1:D5:92:60:19:FE:2B X509v3 Authority Key Identifier: keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c5:f3:c2:a3:9b:6f:6d:34:6c:87:8c:43:44:25:0a:60:15: 3e:5d:ba:de:5e:c3:5c:56:79:99:82:20:52:a9:ac:cb:31:36: cf:2c:6a:a7:27:95:c0:2f:4a:6b:bb:fe:3b:77:40:f3:38:62: a8:b7:c0:fd:16:4b:07:c1:93:8e:71:88:32:fb:b7:94:1c:bb: 0f:1a:ae:a3:28:71:fe:96:a6:b6:80:36:e8:f1:a0:85:47:59: dd:32:fe:de:39:e1:0c:dd:3a:d7:83:ba:fe:2f:45:3c:45:49: f2:f9:79:80:0b:32:e6:78:61:98:99:9e:64:76:0a:07:4b:b3: 65:6e:08:ae:c6:45:6a:bd:72:24:d0:7a:47:74:4b:9f:11:7e: 04:ff:fe:30:00:7c:4f:de:8e:f5:35:07:62:98:cc:db:df:5c: e7:b6:be:44:4c:65:f2:73:a9:85:61:bb:4d:98:79:2e:73:6a: 86:45:70:12:12:19:22:25:4b:12:24:5c:55:2b:20:ef:eb:10: 5f:ab:88:0e:7d:e3:ef:60:71:71:6d:a1:74:ab:b9:16:e6:9c: f1:96:5b:41:eb:1b:2c:b0:ae:23:44:e9:08:a7:d7:ec:f5:3f: 70:3d:1e:f2:b8:a9:9e:92:c2:e2:44:6b:bf:fa:65:72:5d:cb: 30:6f:5f:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0N0MxMTAvBgNVBAUTKEM5MzYwRUM5MUVFQzE0QjA3RUQ3OTJGRDNCMEZCQUI3 RkY5RjY0MkUwHhcNMjQwNTE5MDQyOTI2WhcNMjQwNTI2MDQyOTI2WjAYMRYwFAYD VQQDEw02NjQ5ODAyNi0yZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7XJHvKqddIDJHldRBcMNiWMUHUu1Kuj8B+t4nAgjw9YVyf+c5EBdkGS+KiX GZOfpHnkdu7fgYdfjGGLUhBV5KYPpjqv6uLzxand5CDx3cuaC56LUlX7/D4ztNUp 4d5HgVz/SppbIRLkhseGInAqhBrN6oKcNXIB/X/DIoLMiRBc+Og9UwLMgLIump8Y PedRucmLtdkA9/6hISdvEFfyYfPSpPx9v5ByRatBKz68H+P5KLsJsyd/z9x8Xgbb aESJ8slfCkjw+EuKNJ1PnbVq8q4l0tfAMos6bAqDt9kG9rQbOyAIwFoSVlgUiQqN +fs3ET+CiFknfyDl43zRKdVXNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrbaVHT 5Uii6bpYu7ih1ZJgGf4rMB8GA1UdIwQYMBaAFMk2Dske7BSwfteS/TsPurf/n2Qu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ3Qy81NzZDQ0QyQTBD NTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZMQi0xNUw5T3ctNnRfLWZa QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUWU95UjdzRkxCLTE1TDlPdy02dF8tZlpDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ3Qy81NzZDQ0QyQTBDNTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZM Qi0xNUw5T3ctNnRfLWZaQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwxfPCo5tvbTRsh4xDRCUKYBU+XbreXsNcVnmZgiBSqazLMTbPLGqn J5XAL0pru/47d0DzOGKot8D9FksHwZOOcYgy+7eUHLsPGq6jKHH+lqa2gDbo8aCF R1ndMv7eOeEM3TrXg7r+L0U8RUny+XmACzLmeGGYmZ5kdgoHS7NlbgiuxkVqvXIk 0HpHdEufEX4E//4wAHxP3o71NQdimMzb31zntr5ETGXyc6mFYbtNmHkuc2qGRXAS EhkiJUsSJFxVKyDv6xBfq4gOfePvYHFxbaF0q7kW5pzxlltB6xsssK4jROkIp9fs 9T9wPR7yuKmeksLiRGu/+mVyXcswb19O -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org