$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: eXvnBacejKz/qWPKGifKFOq4tHdtc1v3B9PIHMe+uZs= Subject key identifier: EB:A3:E4:8C:BE:D8:9B:6B:94:CA:0C:A4:D6:45:38:17:EA:0F:98:75 Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1AA1 Signing time: Thu 30 May 2024 17:00:51 +0000 Manifest this update: Thu 30 May 2024 17:00:50 +0000 Manifest next update: Thu 06 Jun 2024 17:00:50 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: WztjUiRRM5MDW/9wGVkeik4CO1ejytnx+pWnPB8LoVc=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: vUCWQOdb7qjvOhdcg4SHMXTM8oTjFBVRvGp114pmqGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6826 (0x1aaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: May 30 17:00:50 2024 GMT Not After : Jun 6 17:00:50 2024 GMT Subject: CN=6658b0c2-1503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:6e:78:0f:dd:95:14:cb:7a:89:d3:4d:c6: 4b:aa:a0:c5:8c:84:c9:59:02:49:e8:9c:30:83:03: e9:82:c4:05:5b:e0:e7:6b:9c:51:4b:e2:11:75:e8: 0b:ca:86:5e:a3:79:5c:ee:e4:39:be:57:ed:4e:f0: 29:c0:90:04:47:50:f9:e1:06:7b:aa:a1:2c:eb:00: 7b:47:9c:91:c8:12:58:bd:be:c4:b9:50:9b:7c:dd: 2f:43:ca:4b:e7:08:5d:3e:d4:a7:f9:0f:cc:64:fb: dd:5b:92:30:da:3e:0d:7c:b4:b8:c6:79:66:7b:2a: b1:d8:b2:75:69:60:dd:31:2c:33:49:11:37:df:9a: 7c:40:f7:ad:6d:64:45:eb:17:9f:0e:3a:c5:18:68: 93:9b:d6:64:b3:cb:5c:02:55:8d:0f:d9:83:c4:1a: 70:d8:70:56:56:7e:9c:98:75:26:2d:4a:2e:db:d6: e6:a0:28:3f:d3:e9:dd:ef:0f:b6:94:a0:a4:42:e6: b4:43:a5:f3:01:76:5c:df:86:fa:76:10:5e:b4:5b: 60:da:34:bd:9b:d0:59:8a:8f:44:0b:f7:86:77:75: 3d:8f:51:e8:73:42:4f:9b:90:bd:fd:2b:64:0a:9f: 0b:2e:9a:97:33:47:2d:5f:5e:0f:ea:4e:95:56:e2: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A3:E4:8C:BE:D8:9B:6B:94:CA:0C:A4:D6:45:38:17:EA:0F:98:75 X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f6:d0:c7:54:c4:9e:fb:74:a1:6a:0e:b4:7d:ad:bb:9e:65: b8:42:75:6c:61:80:19:a0:bf:18:03:29:b9:39:85:f1:65:50: 6a:22:12:6b:97:8b:b6:b5:6c:69:8c:79:bf:64:af:be:c3:50: 1b:be:da:25:ea:e0:af:ef:ec:41:60:d4:8b:f2:26:f9:c0:bb: 2d:3a:f9:03:dd:71:3d:4b:2e:5b:c9:b4:5b:c3:0a:95:fd:2e: b6:1b:19:3a:36:de:cf:00:c1:37:74:79:9e:89:db:31:f3:58: 85:9b:56:0c:3c:8d:b9:c4:e9:2b:56:08:44:df:f2:e9:51:49: 11:5f:52:25:a7:6e:4e:3d:54:3f:7d:3b:96:e4:03:7e:07:5c: 42:25:90:2b:e2:da:eb:01:a2:56:f2:a5:b3:ab:5a:88:17:10: be:95:9d:e2:88:08:3e:88:f7:88:64:42:57:c1:dc:4c:fd:c9: 12:c6:79:5a:1a:20:f1:6f:4f:b3:1d:25:c0:f5:8d:83:73:fd: 7c:c1:14:d3:a9:a0:40:43:46:2c:4e:61:35:74:77:2d:93:bc: c5:56:c6:dd:75:a3:05:5a:b3:3b:a0:25:bf:db:9b:e9:4e:a3: 73:5e:b2:bd:12:3e:7e:83:18:45:28:e5:42:95:97:21:ee:2d: e3:7c:f4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjQwNTMwMTcwMDUwWhcNMjQwNjA2MTcwMDUwWjAYMRYwFAYD VQQDEw02NjU4YjBjMi0xNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmBueA/dlRTLeonTTcZLqqDFjITJWQJJ6JwwgwPpgsQFW+Dna5xRS+IRdegL yoZeo3lc7uQ5vlftTvApwJAER1D54QZ7qqEs6wB7R5yRyBJYvb7EuVCbfN0vQ8pL 5whdPtSn+Q/MZPvdW5Iw2j4NfLS4xnlmeyqx2LJ1aWDdMSwzSRE335p8QPetbWRF 6xefDjrFGGiTm9Zks8tcAlWND9mDxBpw2HBWVn6cmHUmLUou29bmoCg/0+nd7w+2 lKCkQua0Q6XzAXZc34b6dhBetFtg2jS9m9BZio9EC/eGd3U9j1Hoc0JPm5C9/Stk Cp8LLpqXM0ctX14P6k6VVuKkHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuj5Iy+ 2JtrlMoMpNZFOBfqD5h1MB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB79tDHVMSe+3Shag60fa27nmW4QnVsYYAZoL8YAym5OYXxZVBqIhJr l4u2tWxpjHm/ZK++w1Abvtol6uCv7+xBYNSL8ib5wLstOvkD3XE9Sy5bybRbwwqV /S62Gxk6Nt7PAME3dHmeidsx81iFm1YMPI25xOkrVghE3/LpUUkRX1Ilp25OPVQ/ fTuW5AN+B1xCJZAr4trrAaJW8qWzq1qIFxC+lZ3iiAg+iPeIZEJXwdxM/ckSxnla GiDxb0+zHSXA9Y2Dc/18wRTTqaBAQ0YsTmE1dHctk7zFVsbddaMFWrM7oCW/25vp TqNzXrK9Ej5+gxhFKOVClZch7i3jfPQq -----END CERTIFICATE-----Generated at Thu May 30 18:33:09 2024 by rpki-client on console-fra.rpki-client.org