$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: mi9CH9lu3h6cONfP07RpJ00xHtAToF7qrySZZgWSTYU= Subject key identifier: 79:68:EE:B1:B1:70:19:FF:CD:AF:D4:BF:BE:5C:39:0F:B9:CB:DC:67 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 01B6 Signing time: Sun 19 May 2024 04:39:47 +0000 Manifest this update: Sun 19 May 2024 04:39:46 +0000 Manifest next update: Sun 26 May 2024 04:39:46 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: tyAZYHf7jxtcFeQLdMGg135xoMnz3pdeWcDJp8xNcQk=) 2: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: rFO46GYscxwwtDgi0BfU6cPl0G3bTppvMjDr7alnCuA=) 3: D1CEC6A2088E11EF9EF9890BC4F9AE02.roa (hash: q5mQKqFlyG5VNCAfAFTiKZdzfHxg2vttRTN+D3g5P2Y=) 4: 7D104712085211EFA7992934C4F9AE02.roa (hash: Aqe/U++88po7rga2niTM+HUamaL9EmJ7o/ewgDRaQ0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: May 19 04:39:46 2024 GMT Not After : May 26 04:39:46 2024 GMT Subject: CN=66498292-328d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:b8:91:1b:e8:49:07:1a:70:16:3a:01:94: 84:54:5c:56:d3:04:dc:22:19:91:aa:33:a5:d4:0f: 44:57:86:71:01:67:64:85:7e:c0:2c:77:db:38:94: fb:88:fa:dd:ea:b9:c5:92:9f:51:41:70:9b:b0:52: 0d:8c:aa:89:8f:a1:58:15:b0:a4:68:67:cf:49:8f: 70:1d:4f:2c:8d:fc:e3:7c:af:cc:5f:15:a4:7f:6d: dc:90:e4:25:46:c8:c5:2e:f6:ea:19:96:18:9f:42: 98:f8:69:30:0c:3e:44:80:c4:0a:57:1d:47:35:85: 90:25:71:7d:62:56:9b:a1:fb:fd:d3:b8:0e:5a:31: 58:0b:be:04:83:b4:e5:74:3a:04:3e:7d:e8:6d:81: 9f:17:7f:65:1d:8e:af:4e:58:da:36:f7:f9:2c:5c: 33:85:20:ea:96:c2:a7:71:93:7f:34:a1:15:f7:ef: e9:d2:78:33:6a:f9:a1:2f:be:41:0a:ac:d7:6f:e8: e8:b1:01:df:6b:94:19:83:f2:8a:0b:7e:4e:19:f4: fb:13:2e:b4:e7:89:d7:ea:12:2e:c3:1a:50:c3:5f: 06:0a:df:b0:d3:e3:e2:f7:4b:9f:80:4b:9e:3e:14: a0:ea:61:94:d0:80:3b:2e:1b:be:92:7a:48:da:ec: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:68:EE:B1:B1:70:19:FF:CD:AF:D4:BF:BE:5C:39:0F:B9:CB:DC:67 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:15:11:99:e2:59:a8:ed:a4:3e:d8:ae:ff:83:22:5e:48:c5: 88:5e:45:1f:4c:67:2f:fb:26:a2:1b:5e:72:92:44:d2:66:16: 0e:0c:fc:01:fc:ff:94:1f:59:0f:99:75:13:83:f7:a4:4c:29: 1c:df:be:99:4f:36:87:49:73:b8:c8:50:be:ad:6e:ab:d8:70: f7:86:b6:19:f0:2a:22:35:35:26:80:5c:ac:d9:c0:65:c8:9c: d9:8d:ee:16:14:67:10:28:95:89:fb:a1:6b:d3:2e:17:17:27: 6a:83:69:3a:5d:ec:3e:0c:80:86:33:71:c7:81:8f:6b:f5:0b: 9c:68:eb:ba:0d:7d:6a:61:88:57:33:ad:4e:41:02:13:02:59: 87:2a:b7:2b:a8:d9:d6:18:59:e4:97:b9:c0:a4:2c:8d:14:26: bd:27:a3:3f:86:87:32:44:9b:62:dc:00:3c:01:aa:67:55:e1: 2d:c7:b1:70:77:1f:52:58:ab:1a:d3:48:84:47:b6:5c:86:71: d4:c3:a9:d9:ca:3f:12:74:3e:c3:c6:7a:53:37:cc:14:6a:87: 16:a3:d5:99:39:9d:a6:09:7e:18:7d:5c:85:15:b8:ec:d9:23: 20:69:03:5d:d4:b3:09:59:b9:d4:ae:8f:21:7b:81:0b:aa:f2: 88:36:17:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjQwNTE5MDQzOTQ2WhcNMjQwNTI2MDQzOTQ2WjAYMRYwFAYD VQQDEw02NjQ5ODI5Mi0zMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucK4kRvoSQcacBY6AZSEVFxW0wTcIhmRqjOl1A9EV4ZxAWdkhX7ALHfbOJT7 iPrd6rnFkp9RQXCbsFINjKqJj6FYFbCkaGfPSY9wHU8sjfzjfK/MXxWkf23ckOQl RsjFLvbqGZYYn0KY+GkwDD5EgMQKVx1HNYWQJXF9Ylabofv907gOWjFYC74Eg7Tl dDoEPn3obYGfF39lHY6vTljaNvf5LFwzhSDqlsKncZN/NKEV9+/p0ngzavmhL75B CqzXb+josQHfa5QZg/KKC35OGfT7Ey6054nX6hIuwxpQw18GCt+w0+Pi90ufgEue PhSg6mGU0IA7Lhu+knpI2uw/AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlo7rGx cBn/za/Uv75cOQ+5y9xnMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnFRGZ4lmo7aQ+2K7/gyJeSMWIXkUfTGcv+yaiG15ykkTSZhYODPwB /P+UH1kPmXUTg/ekTCkc376ZTzaHSXO4yFC+rW6r2HD3hrYZ8CoiNTUmgFys2cBl yJzZje4WFGcQKJWJ+6Fr0y4XFydqg2k6Xew+DICGM3HHgY9r9QucaOu6DX1qYYhX M61OQQITAlmHKrcrqNnWGFnkl7nApCyNFCa9J6M/hocyRJti3AA8AapnVeEtx7Fw dx9SWKsa00iER7ZchnHUw6nZyj8SdD7DxnpTN8wUaocWo9WZOZ2mCX4YfVyFFbjs 2SMgaQNd1LMJWbnUro8he4ELqvKINhcP -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org