$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json) Hash identifier: dD5KowfXGg1ywa3v/vE1DCvco5nhekzZNlLwwmxnYK0= Subject key identifier: FE:DB:7A:9A:EB:84:3F:55:58:04:9F:4D:A5:AF:A5:3C:13:79:C0:B9 Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft Manifest number: 022E Signing time: Fri 31 May 2024 04:39:49 +0000 Manifest this update: Fri 31 May 2024 04:39:49 +0000 Manifest next update: Fri 07 Jun 2024 04:39:49 +0000 Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: L/h+OJNpTPfbbevBpBS3z/AtKoWbOsmZRDvozisurt8=) 2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: 5HeQjUddVlUYpXJizX31EU4mHLeHBhXjUJazCJXsOvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Validity Not Before: May 31 04:39:49 2024 GMT Not After : Jun 7 04:39:49 2024 GMT Subject: CN=66595495-dbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:5e:46:23:0a:4d:30:05:4e:b7:18:8d:72: b5:13:54:bf:db:7f:33:9e:3a:fd:b7:24:a7:64:12: 58:e9:46:14:ee:3e:f0:b6:9c:11:a0:9f:13:a3:3f: 14:8e:92:1f:c2:e9:02:64:39:f1:7c:73:3d:bd:78: 21:e9:d6:d2:c4:23:6b:fc:14:36:04:e1:e6:77:09: 76:1f:62:be:ec:5d:09:ce:04:5d:44:ab:8d:68:70: 78:33:06:69:5f:f6:46:b4:ef:28:fa:3e:ba:96:40: cf:c9:59:77:1d:49:ce:e2:cf:25:36:bd:d6:36:3c: fb:df:3d:9e:3a:6c:15:b6:c7:71:d8:a7:ed:b8:65: 49:0e:96:97:12:34:b7:75:1c:15:27:f5:ed:67:23: 48:6c:70:58:44:0e:d4:b4:e8:26:87:0e:c5:c2:9e: 68:a2:bf:82:ab:1d:6d:06:e1:2c:10:7e:cb:31:b3: be:b2:86:a3:2d:64:6f:ce:23:27:01:4e:f3:a9:02: f2:6e:9d:dc:40:ca:64:62:07:06:1a:ce:05:e5:94: 45:e8:97:f0:b8:56:e2:af:43:4c:08:c8:8d:c1:d3: 8b:42:e6:45:c9:86:89:93:28:ae:82:b6:85:47:fa: ec:38:3c:39:80:1a:c6:c0:e0:36:8e:67:e7:4d:5d: 8e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DB:7A:9A:EB:84:3F:55:58:04:9F:4D:A5:AF:A5:3C:13:79:C0:B9 X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a9:c9:0c:b6:f2:db:f7:90:65:65:4a:1f:fe:a0:07:d6:be: 3b:02:dc:45:fa:b3:ac:67:c9:ea:44:8a:ef:e8:e3:56:dc:92: 4f:93:71:a9:53:40:a9:90:67:82:8e:c5:28:94:bf:95:55:a2: 9b:c2:ef:9f:0b:74:99:ad:b5:10:61:00:df:99:8c:7a:bf:9d: 0a:7d:f0:71:c6:76:28:97:36:18:dc:3b:ed:21:dc:3d:c9:9c: 0e:00:5d:69:d4:d5:89:5b:18:05:1f:e6:b7:29:65:22:74:5f: 30:9c:80:c1:b7:81:81:8c:e8:9d:45:4b:14:10:e3:c4:b3:be: 80:e8:76:7d:90:26:63:de:e2:cb:fb:9d:55:a6:c7:6a:47:61: 5e:40:0d:47:b3:74:55:dd:05:8f:ce:43:c9:18:c6:64:58:0a: b1:e2:cd:8e:97:16:bb:b1:4e:c4:cc:24:34:ad:93:f7:b7:ec: a9:9d:10:f0:28:cb:d8:cf:97:a7:cc:39:f1:ef:5b:c9:8d:08: e6:fb:59:1b:98:f7:20:41:63:fb:92:cf:af:a9:38:1f:99:35: 01:a0:43:d3:ed:91:85:11:27:c1:44:ff:fe:d2:86:98:72:4a: 82:10:bc:35:07:12:df:d2:1f:9d:0b:c8:b8:39:8d:4a:c4:db: 36:59:2a:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjQwNTMxMDQzOTQ5WhcNMjQwNjA3MDQzOTQ5WjAYMRYwFAYD VQQDEw02NjU5NTQ5NS1kYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCBeRiMKTTAFTrcYjXK1E1S/238znjr9tySnZBJY6UYU7j7wtpwRoJ8Toz8U jpIfwukCZDnxfHM9vXgh6dbSxCNr/BQ2BOHmdwl2H2K+7F0JzgRdRKuNaHB4MwZp X/ZGtO8o+j66lkDPyVl3HUnO4s8lNr3WNjz73z2eOmwVtsdx2KftuGVJDpaXEjS3 dRwVJ/XtZyNIbHBYRA7UtOgmhw7Fwp5oor+Cqx1tBuEsEH7LMbO+soajLWRvziMn AU7zqQLybp3cQMpkYgcGGs4F5ZRF6JfwuFbir0NMCMiNwdOLQuZFyYaJkyiugraF R/rsODw5gBrGwOA2jmfnTV2OHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7beprr hD9VWASfTaWvpTwTecC5MB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0UxNy85MjBDNUVDQUUxNjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJq anFRSVdxN2xXbkpJelRUem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdqckMtvLb95BlZUof/qAH1r47AtxF+rOsZ8nqRIrv6ONW3JJPk3Gp U0CpkGeCjsUolL+VVaKbwu+fC3SZrbUQYQDfmYx6v50KffBxxnYolzYY3DvtIdw9 yZwOAF1p1NWJWxgFH+a3KWUidF8wnIDBt4GBjOidRUsUEOPEs76A6HZ9kCZj3uLL +51VpsdqR2FeQA1Hs3RV3QWPzkPJGMZkWAqx4s2Olxa7sU7EzCQ0rZP3t+ypnRDw KMvYz5enzDnx71vJjQjm+1kbmPcgQWP7ks+vqTgfmTUBoEPT7ZGFESfBRP/+0oaY ckqCELw1BxLf0h+dC8i4OY1KxNs2WSpF -----END CERTIFICATE-----Generated at Fri May 31 05:53:52 2024 by rpki-client on console-fra.rpki-client.org