$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json) Hash identifier: mrGmwAgd/GUwDX9Kdu7Jbonqqk3V/Pq+x62F4MFdqDg= Subject key identifier: 26:38:11:B6:78:C1:28:86:F2:04:0A:02:80:9C:93:A1:1E:15:2D:71 Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft Manifest number: 085F Signing time: Sat 18 May 2024 21:53:16 +0000 Manifest this update: Sat 18 May 2024 21:53:15 +0000 Manifest next update: Sat 25 May 2024 21:53:15 +0000 Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: Uje3q3RVpXdmxrKEbz7yuStPbryBPD9Om9CjtV/99mk=) 2: 6821943494DD11EE8738E129C4F9AE02.roa (hash: NeGmXSmJ8FZsImn7BM1fWu+LANVykndU60MHqipvsuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Validity Not Before: May 18 21:53:15 2024 GMT Not After : May 25 21:53:15 2024 GMT Subject: CN=6649234c-8985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:12:b5:49:0a:8a:e4:37:f0:9d:d0:93:00: f0:0f:f1:9d:43:bc:ed:4f:b5:1d:a5:5c:d3:2b:71: f2:69:34:ac:d9:5d:86:a4:56:4d:66:4b:d7:0a:d8: 53:0e:1b:dd:d1:5b:0c:ef:8e:c2:4d:d3:64:91:46: a3:e5:66:26:7f:9a:7e:df:27:38:17:32:bf:8e:8d: 6a:0a:8e:73:04:37:74:30:24:bd:a9:76:0c:25:a9: 51:5f:c3:06:b4:3b:f1:97:ca:06:57:ab:3f:32:82: 51:35:49:a7:7a:fa:b5:45:c0:9b:9b:68:97:86:0d: 30:f3:fe:39:20:b5:45:89:05:3a:b2:0a:e1:67:50: c4:8c:bf:47:b2:9b:f5:8c:49:4d:d7:68:5c:ef:92: b6:2a:5a:30:ca:74:cc:4a:71:61:28:b0:ab:2a:19: 2f:8c:53:c2:19:08:0a:6d:18:de:fa:cf:9a:40:aa: 8b:51:48:5e:a3:2a:72:27:a1:31:b0:b5:de:74:54: 2e:84:b0:fa:a0:2c:26:27:12:75:19:a9:19:db:43: e1:60:96:73:72:8d:a3:cc:a5:8c:90:8e:97:f5:a7: 22:65:cc:b2:0c:b0:8a:11:9f:f2:65:c1:ed:97:97: fe:03:b0:1d:48:dd:a4:c9:f1:41:f2:7b:2b:17:04: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:38:11:B6:78:C1:28:86:F2:04:0A:02:80:9C:93:A1:1E:15:2D:71 X509v3 Authority Key Identifier: keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9a:8d:45:39:9d:9c:78:66:cc:07:9a:5e:b1:ab:9c:71:58: 13:f5:8c:b9:de:12:6d:3d:64:59:94:4b:88:ab:86:9d:43:95: 63:d4:de:06:0b:b4:90:e6:00:a7:e1:98:23:11:d2:bf:f3:89: b0:46:a5:b3:33:74:fd:92:7e:90:b5:65:2a:69:c8:9f:ab:81: 8b:67:36:cc:c4:13:f9:06:04:20:26:80:05:24:a1:0c:0a:79: 02:64:5a:44:1b:73:7e:db:de:c5:13:1d:ba:a5:e3:9c:fc:5f: 99:ec:1b:fe:27:96:d8:1a:c1:52:fd:13:5c:86:0e:8b:23:75: b1:1b:0e:8e:26:7e:b1:4f:20:d0:cc:a3:5d:84:d0:05:03:f9: 51:8d:2d:47:1f:1b:b8:44:33:2e:81:a4:5c:45:cb:a2:91:e0: 38:a9:ae:3c:ab:f2:6c:da:59:ce:98:28:96:03:52:a9:29:53: e1:9c:38:e0:40:44:2a:b6:bc:cc:c7:05:30:46:0c:c7:21:93: 99:d2:2c:68:b5:b2:fa:c3:66:7f:7b:74:c0:be:31:81:31:4e: 13:5c:02:d4:56:17:27:3e:02:95:f8:f7:a2:4f:d2:d7:0b:60: 36:85:40:32:68:01:97:e1:8c:1b:c4:8a:bf:54:a7:15:16:f7: 3a:ed:dc:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTdFNjExMC8GA1UEBRMoNjA3NjI4QkU0NTVFRjM3OUJFNjZBRjlENkNBOUJBOEVD REVEM0YwNDAeFw0yNDA1MTgyMTUzMTVaFw0yNDA1MjUyMTUzMTVaMBgxFjAUBgNV BAMTDTY2NDkyMzRjLTg5ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3gxK1SQqK5DfwndCTAPAP8Z1DvO1PtR2lXNMrcfJpNKzZXYakVk1mS9cK2FMO G93RWwzvjsJN02SRRqPlZiZ/mn7fJzgXMr+OjWoKjnMEN3QwJL2pdgwlqVFfwwa0 O/GXygZXqz8yglE1Sad6+rVFwJubaJeGDTDz/jkgtUWJBTqyCuFnUMSMv0eym/WM SU3XaFzvkrYqWjDKdMxKcWEosKsqGS+MU8IZCAptGN76z5pAqotRSF6jKnInoTGw td50VC6EsPqgLCYnEnUZqRnbQ+FglnNyjaPMpYyQjpf1pyJlzLIMsIoRn/Jlwe2X l/4DsB1I3aTJ8UHyeysXBDUjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJjgRtnjB KIbyBAoCgJyToR4VLXEwHwYDVR0jBBgwFoAUYHYovkVe83m+Zq+dbKm6js3tPwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxN0U2LzU1NzQwRTcwQjNC MzExRUFCMTk4Q0UwREM0RjlBRTAyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUhZb3ZrVmU4M20tWnEtZGJLbTZqczN0UHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx N0U2LzU1NzQwRTcwQjNCMzExRUFCMTk4Q0UwREM0RjlBRTAyL1lIWW92a1ZlODNt LVpxLWRiS202anMzdFB3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIWajUU5nZx4ZswHml6xq5xxWBP1jLneEm09ZFmUS4irhp1DlWPU3gYL tJDmAKfhmCMR0r/zibBGpbMzdP2SfpC1ZSppyJ+rgYtnNszEE/kGBCAmgAUkoQwK eQJkWkQbc37b3sUTHbql45z8X5nsG/4nltgawVL9E1yGDosjdbEbDo4mfrFPINDM o12E0AUD+VGNLUcfG7hEMy6BpFxFy6KR4Diprjyr8mzaWc6YKJYDUqkpU+GcOOBA RCq2vMzHBTBGDMchk5nSLGi1svrDZn97dMC+MYExThNcAtRWFyc+ApX496JP0tcL YDaFQDJoAZfhjBvEir9UpxUW9zrt3LA= -----END CERTIFICATE-----Generated at Sat May 18 22:27:56 2024 by rpki-client on console-ams.rpki-client.org