$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: MuW1bC/dvBwmywn97l7ABxBocXEFltVFm+ETJKeE6i4= Subject key identifier: 78:35:A7:34:02:62:70:34:9C:77:50:0A:A6:D2:9E:7D:F8:72:C6:BB Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 33 Signing time: Sun 19 May 2024 08:25:59 +0000 Manifest this update: Sun 19 May 2024 08:25:58 +0000 Manifest next update: Sun 26 May 2024 08:25:58 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: 1OPSche57syf7WKOP6EopSvw1M0GiQ9Br8DZGQw/J7A=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: XKcOzakVnPRp9ouJIJxeStnG3KeM6fFZu4MKPyMThqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: May 19 08:25:58 2024 GMT Not After : May 26 08:25:58 2024 GMT Subject: CN=6649b797-978f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:f6:04:bf:bf:ce:d1:58:ec:88:46:5d:c0: a8:84:b9:9b:8f:1b:27:28:64:4a:f6:cc:ff:8c:50: 63:a5:18:f8:90:a5:04:cf:cf:92:1c:d1:13:7e:ee: af:f1:c3:e1:29:12:7e:03:97:3e:1a:74:15:2b:8e: 09:21:6e:8e:0a:67:e3:9a:9c:ad:57:b0:16:8f:53: d3:44:18:60:43:98:73:ce:c5:81:09:c1:37:16:c6: 39:80:cb:66:75:24:c4:44:f0:79:8a:81:84:ef:13: ee:86:58:ec:b2:97:55:fb:86:78:37:72:4d:c9:31: a7:fe:d2:c9:c0:53:cb:ac:0b:62:6b:64:a1:4e:28: e5:db:ba:8e:5f:cd:98:97:a7:a0:ad:16:6a:ef:5c: fe:32:ac:e5:76:35:3f:a5:28:8e:ce:62:f5:61:ae: 0b:f0:4a:f4:70:6d:73:f3:bb:0a:90:61:ba:7b:b4: 7d:ae:a4:5d:41:6c:4f:53:73:ea:59:28:ba:69:46: 51:9c:a9:81:ec:cf:1f:d1:9f:30:78:48:c9:c4:60: df:b0:29:1b:a2:eb:c7:1d:bb:5c:ff:fc:48:61:7b: b1:fd:67:0f:a0:60:c6:22:c2:52:a2:12:0e:d3:7c: cc:c9:17:eb:62:20:32:60:a9:86:5c:41:b1:6c:b3: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:35:A7:34:02:62:70:34:9C:77:50:0A:A6:D2:9E:7D:F8:72:C6:BB X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f2:e0:c4:da:17:fb:0c:b8:d7:b7:bb:bf:7f:9e:9c:59:03: 52:ba:37:dc:b0:b2:97:fc:7c:68:fc:c0:94:9b:b1:ff:62:69: 6f:bc:f7:d2:73:9a:e7:fa:20:a3:48:59:e5:48:b7:bd:63:42: c0:dc:ae:52:04:4a:2d:f0:94:ac:17:7b:5e:f7:06:c9:9b:6c: a2:73:f4:1a:d1:3c:d5:11:ab:22:26:f3:db:8f:c7:3d:29:f9: ef:1b:08:e6:fc:b2:11:42:6f:65:02:1c:bd:be:c7:31:7d:b9: 65:48:dc:8f:f3:4a:76:b2:d8:12:4e:e6:33:bf:cd:be:22:93: a3:9c:18:e9:11:c9:ed:a9:b3:55:41:ec:56:1c:97:f9:d9:e3: 66:95:63:6b:04:e8:ab:a9:61:ed:ef:13:be:b4:f0:d8:d7:a7: dd:02:6c:e9:fe:36:30:cb:ea:48:78:e4:73:41:7f:40:95:c7: 2b:1b:be:0e:b1:8e:d2:b7:b3:a2:d9:dd:2b:57:95:bd:d4:ad: e8:18:32:56:eb:2c:c8:be:6e:78:31:28:bf:76:f3:88:c2:60: f8:cc:da:39:2c:4a:66:58:01:c7:cb:b9:35:7a:51:34:bf:a1: ae:60:4f:8e:4a:a1:55:c9:f0:03:71:aa:86:23:12:b1:69:e9: 38:c9:ec:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEVGOTExMC8GA1UEBRMoODcyQzkzNjg2NTZDNzc4MzU3QzJBNUE5OUJFQ0ZGRjY3 NzU1MEFDODAeFw0yNDA1MTkwODI1NThaFw0yNDA1MjYwODI1NThaMBgxFjAUBgNV BAMTDTY2NDliNzk3LTk3OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0K/YEv7/O0VjsiEZdwKiEuZuPGycoZEr2zP+MUGOlGPiQpQTPz5Ic0RN+7q/x w+EpEn4Dlz4adBUrjgkhbo4KZ+OanK1XsBaPU9NEGGBDmHPOxYEJwTcWxjmAy2Z1 JMRE8HmKgYTvE+6GWOyyl1X7hng3ck3JMaf+0snAU8usC2JrZKFOKOXbuo5fzZiX p6CtFmrvXP4yrOV2NT+lKI7OYvVhrgvwSvRwbXPzuwqQYbp7tH2upF1BbE9Tc+pZ KLppRlGcqYHszx/RnzB4SMnEYN+wKRui68cdu1z//Ehhe7H9Zw+gYMYiwlKiEg7T fMzJF+tiIDJgqYZcQbFss/LTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeDWnNAJi cDScd1AKptKeffhyxrswHwYDVR0jBBgwFoAUhyyTaGVsd4NXwqWpm+z/9ndVCsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0RUY5Lzc1QTBDRDE0RDEz NzExRUVBQTlGMTk4MEM0RjlBRTAyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaHl5VGFHVnNkNE5Yd3FXcG0tel85bmRWQ3NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 RUY5Lzc1QTBDRDE0RDEzNzExRUVBQTlGMTk4MEM0RjlBRTAyL2h5eVRhR1ZzZDRO WHdxV3BtLXpfOW5kVkNzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHby4MTaF/sMuNe3u79/npxZA1K6N9ywspf8fGj8wJSbsf9iaW+899Jz muf6IKNIWeVIt71jQsDcrlIESi3wlKwXe173BsmbbKJz9BrRPNURqyIm89uPxz0p +e8bCOb8shFCb2UCHL2+xzF9uWVI3I/zSnay2BJO5jO/zb4ik6OcGOkRye2ps1VB 7FYcl/nZ42aVY2sE6KupYe3vE7608NjXp90CbOn+NjDL6kh45HNBf0CVxysbvg6x jtK3s6LZ3StXlb3UregYMlbrLMi+bngxKL9284jCYPjM2jksSmZYAcfLuTV6UTS/ oa5gT45KoVXJ8ANxqoYjErFp6TjJ7K4= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org