$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: X+6qjmNLEU8mfzrfUuVU4sgKBHs9J87RcYs2IOo+zvU= Subject key identifier: 2E:03:FF:8F:30:79:AE:68:81:18:03:D9:20:2D:D5:9C:18:3F:F6:93 Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0B19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0B12 Signing time: Fri 31 May 2024 20:33:40 +0000 Manifest this update: Fri 31 May 2024 20:33:40 +0000 Manifest next update: Fri 07 Jun 2024 20:33:40 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: LhQXgg0gAbfjNwN+5PxKILGBugm0601ivM7agF5KZaU=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: uydGEfUeJ9GoCJahUH8Dg4uVB/Z/ZVqnT2h9hBM2XBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2841 (0xb19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: May 31 20:33:40 2024 GMT Not After : Jun 7 20:33:40 2024 GMT Subject: CN=665a3424-c4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b5:28:29:d3:85:2a:3c:8e:fe:06:05:d7:84: 09:05:3c:5c:94:79:fe:5a:74:d8:79:7e:73:e9:61: ea:ae:c7:ae:e9:1a:13:5a:08:06:5a:28:ee:ef:57: 91:8e:7a:5c:36:bc:51:c2:17:97:d0:e6:4b:e8:32: d2:e1:2b:07:72:e1:05:01:44:64:78:cb:91:84:21: f8:67:78:8e:3d:e9:ff:1d:32:a4:58:00:fa:3d:61: b7:d0:f0:10:49:9d:e2:09:72:16:80:a2:52:d5:3c: 3b:e5:19:38:e0:69:51:74:29:7b:ad:98:df:ad:e7: 01:a1:ba:22:90:28:77:75:88:6c:2f:76:ba:47:59: dd:e2:e0:c0:c0:1f:22:0b:bd:c0:1d:cb:e9:39:62: dd:f0:a4:84:8c:6f:03:fa:1f:1c:a9:b5:4c:eb:43: ab:4c:ed:2b:ef:b6:ea:9b:2a:be:76:3c:80:74:20: 0f:68:22:b3:c9:89:28:5d:c3:b0:6b:a3:46:9d:40: 25:5f:43:9e:b7:f7:b9:ac:46:7e:92:70:bb:9b:33: 97:06:30:0c:fa:5f:ee:60:04:da:c7:33:77:fc:fb: 5e:5e:90:fe:8c:95:2c:1f:5d:5d:f2:87:fe:ce:cf: e1:ea:c3:c5:4f:4d:82:9f:30:c7:60:5d:0d:99:9b: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:03:FF:8F:30:79:AE:68:81:18:03:D9:20:2D:D5:9C:18:3F:F6:93 X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:34:06:b8:66:4d:fe:17:58:d4:a7:ba:48:94:45:c9:62:30: 31:58:3e:ee:24:dd:6f:53:8f:75:96:68:f5:73:81:52:bb:cb: 52:ca:58:81:52:ca:b1:25:f3:7d:75:d8:7b:10:21:46:4d:fa: a2:9c:55:45:45:64:08:51:db:36:9d:e6:e9:f4:4f:cb:89:7a: 3a:90:f6:63:43:e8:17:c6:08:b7:da:3f:8d:bc:a7:32:80:09: 76:5e:cc:cf:ea:22:96:d5:6d:69:13:19:cc:db:7a:4e:95:2e: ba:74:54:e9:08:d6:42:3b:69:ce:26:d3:61:11:eb:5e:94:04: d8:20:57:99:5e:96:d3:e8:ca:5b:17:fa:d0:07:93:a8:4c:64: 22:f0:9b:b3:82:ed:7c:76:bd:7c:ca:0c:b8:bb:47:5e:c5:40: a9:eb:1d:d7:21:7e:85:67:a7:07:b2:3d:46:c9:4d:1b:6f:29: 32:a2:f5:ca:62:9f:ac:ca:46:82:f9:3f:56:9d:63:d3:34:97: 77:de:69:ad:02:a7:15:57:f1:f8:c3:b0:67:4e:af:d0:a0:b2: 96:62:66:ee:52:dd:cc:ae:8d:17:f9:da:bf:89:72:7f:76:6a: d8:ef:47:d0:ff:3e:6a:83:9c:ce:d4:7d:e6:e0:00:0d:23:44: c3:78:4d:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjQwNTMxMjAzMzQwWhcNMjQwNjA3MjAzMzQwWjAYMRYwFAYD VQQDEw02NjVhMzQyNC1jNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LUoKdOFKjyO/gYF14QJBTxclHn+WnTYeX5z6WHqrseu6RoTWggGWiju71eR jnpcNrxRwheX0OZL6DLS4SsHcuEFAURkeMuRhCH4Z3iOPen/HTKkWAD6PWG30PAQ SZ3iCXIWgKJS1Tw75Rk44GlRdCl7rZjfrecBoboikCh3dYhsL3a6R1nd4uDAwB8i C73AHcvpOWLd8KSEjG8D+h8cqbVM60OrTO0r77bqmyq+djyAdCAPaCKzyYkoXcOw a6NGnUAlX0Oet/e5rEZ+knC7mzOXBjAM+l/uYATaxzN3/PteXpD+jJUsH11d8of+ zs/h6sPFT02CnzDHYF0NmZu5FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4D/48w ea5ogRgD2SAt1ZwYP/aTMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmNAa4Zk3+F1jUp7pIlEXJYjAxWD7uJN1vU491lmj1c4FSu8tSyliB UsqxJfN9ddh7ECFGTfqinFVFRWQIUds2nebp9E/LiXo6kPZjQ+gXxgi32j+NvKcy gAl2XszP6iKW1W1pExnM23pOlS66dFTpCNZCO2nOJtNhEetelATYIFeZXpbT6Mpb F/rQB5OoTGQi8Juzgu18dr18ygy4u0dexUCp6x3XIX6FZ6cHsj1GyU0bbykyovXK Yp+sykaC+T9WnWPTNJd33mmtAqcVV/H4w7BnTq/QoLKWYmbuUt3Mro0X+dq/iXJ/ dmrY70fQ/z5qg5zO1H3m4AANI0TDeE1k -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:25 2024 by rpki-client on console-ams.rpki-client.org