$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: NK2j20CHQ3rMZe0m9WbZn/M9fhRscYaqyHHPLy6IN98= Subject key identifier: 45:D1:26:33:51:43:68:0E:2E:48:A2:5B:05:4F:DD:87:C2:66:EE:F5 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0D72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 1DFB Signing time: Sat 18 May 2024 17:55:02 +0000 Manifest this update: Sat 18 May 2024 17:55:01 +0000 Manifest next update: Sat 25 May 2024 17:55:01 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: U5pgRhGHlt5EqV9o1sbvx0AhsgAGFK4YtJ+5blLa5Co=) 2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: xPQadE04npUnqYnM7fwo9/dno/2PvI183Yb0K4hPxZQ=) 3: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: fzOQaTP5H3VIkhoR/i/DSmr4ZxxwK1UkfdQUyTzkYN0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: QS2TrHl9taohr57yZSTKCTq9uLIbkOtoAL2fYPZKHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3442 (0xd72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: May 18 17:55:01 2024 GMT Not After : May 25 17:55:01 2024 GMT Subject: CN=6648eb75-3c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:ef:bf:88:65:d1:55:5e:2e:80:91:4f:44: e3:54:7c:70:29:5a:bc:69:59:5a:c7:9a:95:85:92: 84:21:ca:df:7c:1b:98:90:80:16:fd:ab:62:6a:4d: 0c:e2:34:60:85:81:23:dd:ff:24:7f:f0:e8:70:62: 67:96:79:32:d6:07:2a:e2:46:7e:24:71:1d:c8:8f: c5:ed:03:5c:98:6a:32:06:54:7d:d6:31:bb:96:0b: f9:e4:55:37:34:1a:24:19:64:75:2e:7f:7a:87:4b: 21:f9:34:88:3d:fa:47:2d:2e:ef:f7:a9:aa:ab:2e: 74:8a:9a:45:53:44:05:35:ce:5c:79:da:cb:5e:21: 77:81:18:98:6a:9a:35:d8:e6:bd:ae:52:6d:54:26: 6c:b2:a4:f5:4c:00:99:0d:97:86:b4:aa:2b:66:9c: 86:a9:d3:aa:b3:19:0f:e1:cc:2a:4d:8f:72:a4:17: 28:b6:26:5d:5c:b1:61:f9:08:dd:10:7a:c2:50:d0: a0:81:8c:71:c8:71:1d:30:62:ae:a2:3d:fc:4b:ca: dd:51:bc:6c:19:22:54:5e:66:87:63:3b:88:c8:94: 0d:94:1e:ea:73:25:f8:5b:22:f1:09:ff:b0:ff:01: fc:53:5d:f3:ed:cf:9a:bb:90:9a:00:65:10:a8:15: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D1:26:33:51:43:68:0E:2E:48:A2:5B:05:4F:DD:87:C2:66:EE:F5 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0c:22:27:e2:ad:41:c2:9c:36:d0:96:55:6b:e9:ed:25:1c: 29:5f:2f:d0:20:f5:45:34:1e:c9:d1:e9:0d:a0:f4:cd:52:d4: e3:8b:04:2f:86:45:26:a0:16:79:25:f2:1b:dc:1b:08:25:1c: 28:f9:e2:05:d9:11:71:7f:16:df:13:9b:94:c7:57:c9:0a:ac: d9:74:00:90:73:9a:40:68:a2:98:08:f1:8b:a7:53:a9:15:82: 25:50:84:11:41:06:74:7b:e8:8b:bb:53:7d:ff:2f:40:99:ec: 3b:09:fd:17:bc:90:bd:92:6e:57:00:79:13:50:fc:60:57:ee: 6a:5c:46:05:41:7c:a3:d5:9f:c7:1a:31:0a:9d:f8:3c:38:57: 74:e6:ca:50:e7:7d:01:f3:38:73:43:04:1b:22:f3:b5:08:26: 90:b8:88:d2:49:a3:36:35:e1:c6:85:53:87:aa:50:69:2b:5e: 40:ad:fb:86:79:3c:cc:89:4c:4c:33:f8:d5:f2:c3:a6:8a:69: 2e:91:b0:05:c5:8c:1b:f6:d9:b7:62:65:52:a4:41:06:dc:67: 08:3a:1a:a8:33:bc:34:54:1c:c4:93:17:c5:50:12:d6:d2:b3: 3b:29:6a:03:2f:b2:59:9b:f0:74:87:1c:7f:35:cc:c7:9a:12: 52:82:6c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjQwNTE4MTc1NTAxWhcNMjQwNTI1MTc1NTAxWjAYMRYwFAYD VQQDEw02NjQ4ZWI3NS0zYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKrvv4hl0VVeLoCRT0TjVHxwKVq8aVlax5qVhZKEIcrffBuYkIAW/atiak0M 4jRghYEj3f8kf/DocGJnlnky1gcq4kZ+JHEdyI/F7QNcmGoyBlR91jG7lgv55FU3 NBokGWR1Ln96h0sh+TSIPfpHLS7v96mqqy50ippFU0QFNc5cedrLXiF3gRiYapo1 2Oa9rlJtVCZssqT1TACZDZeGtKorZpyGqdOqsxkP4cwqTY9ypBcotiZdXLFh+Qjd EHrCUNCggYxxyHEdMGKuoj38S8rdUbxsGSJUXmaHYzuIyJQNlB7qcyX4WyLxCf+w /wH8U13z7c+au5CaAGUQqBXulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXRJjNR Q2gOLkiiWwVP3YfCZu71MB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNDCIn4q1Bwpw20JZVa+ntJRwpXy/QIPVFNB7J0ekNoPTNUtTjiwQv hkUmoBZ5JfIb3BsIJRwo+eIF2RFxfxbfE5uUx1fJCqzZdACQc5pAaKKYCPGLp1Op FYIlUIQRQQZ0e+iLu1N9/y9Amew7Cf0XvJC9km5XAHkTUPxgV+5qXEYFQXyj1Z/H GjEKnfg8OFd05spQ530B8zhzQwQbIvO1CCaQuIjSSaM2NeHGhVOHqlBpK15ArfuG eTzMiUxMM/jV8sOmimkukbAFxYwb9tm3YmVSpEEG3GcIOhqoM7w0VBzEkxfFUBLW 0rM7KWoDL7JZm/B0hxx/NczHmhJSgmz6 -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org