$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json) Hash identifier: XwhhxYmujZC2oHIPmMd5hRAfeUs9JzUvNE7U/cKcfFM= Subject key identifier: 4D:E5:55:6B:CC:EE:75:EB:2D:C9:0F:4B:98:E7:87:25:A3:CF:50:68 Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Certificate serial: 19A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft Manifest number: 1996 Signing time: Sat 18 May 2024 16:48:58 +0000 Manifest this update: Sat 18 May 2024 16:48:58 +0000 Manifest next update: Sat 25 May 2024 16:48:58 +0000 Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: 6UwzGyWJS0I76DVus3LH7H5cbb3nFVMYGLUeJFrOlVM=) 2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bo/SZs4FQGVCgHbfJ/qOcN+amQtsXWeV9LBgPktlbik=) 3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: XfRW9hpvnBY9LTBMASrvKe5ewyj8spWmKtOVyqPmD0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6563 (0x19a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Validity Not Before: May 18 16:48:58 2024 GMT Not After : May 25 16:48:58 2024 GMT Subject: CN=6648dbfa-f2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:12:ac:6e:cd:3d:d9:c1:40:86:fc:4a:f4:1f: 17:a8:67:32:cb:02:15:4a:4d:95:aa:d0:a3:71:ff: fa:41:ee:5a:9d:b3:05:46:4f:64:21:0d:57:6e:40: a2:88:31:a0:e7:ed:cb:a1:2a:63:5f:a1:18:d0:39: ab:c6:7e:10:7e:d6:46:f1:9e:f6:70:5d:dd:f3:e8: ac:00:91:0f:d7:c5:49:c2:e1:f8:c1:bf:5f:46:05: 34:c3:33:b0:b8:7e:cc:6f:42:48:1f:ce:f8:43:18: 2b:fe:25:cf:2e:5c:ee:3e:77:e8:63:0e:c2:fb:23: 8b:22:03:71:3a:49:3c:51:7a:42:b8:c2:b6:c4:9f: 42:65:9c:cf:fd:10:22:cd:a4:b0:0d:fc:29:09:25: 5a:dd:eb:b6:ef:7a:93:ea:55:03:97:62:9c:32:c9: 46:1d:5e:38:01:b6:e8:b3:f6:f4:82:0c:30:96:51: 5e:bf:64:d4:97:92:21:29:22:80:56:34:c3:c4:ee: 87:91:40:44:0f:fa:ae:00:99:f1:36:04:5c:70:33: a4:98:0a:78:fa:c2:f8:24:51:61:5f:4c:2d:1b:2c: c2:49:6f:2e:7a:0a:a3:2a:04:76:5a:65:11:de:3e: ca:e6:de:0d:3b:ae:e7:e8:4e:64:dc:a9:54:d9:20: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E5:55:6B:CC:EE:75:EB:2D:C9:0F:4B:98:E7:87:25:A3:CF:50:68 X509v3 Authority Key Identifier: keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a9:63:a8:7a:b6:41:a7:f0:cd:4d:0b:32:95:9c:c9:00:fe: 1d:7c:9d:a8:8c:78:25:4e:c6:1a:b9:8f:2b:f8:97:04:1d:f5: c9:48:08:ea:a2:28:4a:26:c9:8f:a5:73:09:a7:07:7c:61:c4: d6:b1:42:7c:c0:be:52:60:e9:9c:69:9b:5c:22:a8:90:13:72: 99:6f:1a:89:1d:8b:24:b3:47:27:da:89:29:7d:1a:d1:5c:0c: 01:00:45:39:d2:33:8d:a1:5a:6b:f8:d3:e6:8c:78:87:b7:c8: 41:f9:21:af:b2:2b:86:ae:4e:cf:28:8e:2a:3b:d2:77:ed:97: 72:96:7f:25:30:9f:dc:17:83:0f:dd:e2:e3:87:81:1e:6a:d7: a5:c9:48:2b:59:c8:50:aa:9e:f7:64:1c:ef:ba:a1:b3:0c:7f: 4a:59:ab:96:c8:2a:08:e4:e2:f6:60:21:e9:30:71:28:13:53: 97:b5:bf:5f:29:35:0d:b3:19:0b:f5:47:aa:65:6d:4f:25:6d: 5d:28:cb:aa:d3:44:75:dc:7c:e2:62:0b:cc:c4:cc:82:8a:82: 39:c3:db:dd:ac:94:44:ea:a6:08:77:af:41:59:08:2e:df:9e: d2:7b:5f:91:aa:48:2a:bd:9b:bb:04:b1:c7:10:a5:f7:18:5d: a5:6f:52:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyNjQxMTAvBgNVBAUTKDYwREQ2NUVDN0Y3MkVCNkM3REE4QjkzNzA2RTJEM0JB MEYwNjVCRkMwHhcNMjQwNTE4MTY0ODU4WhcNMjQwNTI1MTY0ODU4WjAYMRYwFAYD VQQDEw02NjQ4ZGJmYS1mMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxKsbs092cFAhvxK9B8XqGcyywIVSk2VqtCjcf/6Qe5anbMFRk9kIQ1XbkCi iDGg5+3LoSpjX6EY0Dmrxn4QftZG8Z72cF3d8+isAJEP18VJwuH4wb9fRgU0wzOw uH7Mb0JIH874Qxgr/iXPLlzuPnfoYw7C+yOLIgNxOkk8UXpCuMK2xJ9CZZzP/RAi zaSwDfwpCSVa3eu273qT6lUDl2KcMslGHV44Abbos/b0ggwwllFev2TUl5IhKSKA VjTDxO6HkUBED/quAJnxNgRccDOkmAp4+sL4JFFhX0wtGyzCSW8uegqjKgR2WmUR 3j7K5t4NO67n6E5k3KlU2SDl9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3lVWvM 7nXrLckPS5jnhyWjz1BoMB8GA1UdIwQYMBaAFGDdZex/cutsfai5Nwbi07oPBlv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI2NC9DNThENkZGQTQx MDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYyeDlxTGszQnVMVHVnOEdX X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOMWw3SDl5NjJ4OXFMazNCdUxUdWc4R1dfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDI2NC9DNThENkZGQTQxMDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYy eDlxTGszQnVMVHVnOEdXX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaqWOoerZBp/DNTQsylZzJAP4dfJ2ojHglTsYauY8r+JcEHfXJSAjq oihKJsmPpXMJpwd8YcTWsUJ8wL5SYOmcaZtcIqiQE3KZbxqJHYsks0cn2okpfRrR XAwBAEU50jONoVpr+NPmjHiHt8hB+SGvsiuGrk7PKI4qO9J37Zdyln8lMJ/cF4MP 3eLjh4EeatelyUgrWchQqp73ZBzvuqGzDH9KWauWyCoI5OL2YCHpMHEoE1OXtb9f KTUNsxkL9UeqZW1PJW1dKMuq00R13HziYgvMxMyCioI5w9vdrJRE6qYId69BWQgu 357Se1+RqkgqvZu7BLHHEKX3GF2lb1LM -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org