$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: SZYa0kpuKT6nrs5C+iD4jYVdvDyMPh3k+Mz/1QmkeOA= Subject key identifier: B8:07:A6:16:83:BD:24:AA:E1:03:F3:30:AC:E9:4A:B1:69:0E:FD:84 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 69 Signing time: Sun 19 May 2024 07:35:08 +0000 Manifest this update: Sun 19 May 2024 07:35:08 +0000 Manifest next update: Sun 26 May 2024 07:35:08 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: B3TgozvAZ6puBB22g4zxk6PwglbGJU2x/88G4m8DJp0=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: wanxQuepEX9qREaCj7GWSWXPUE4lDbzB2fvKKRpsz60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: May 19 07:35:08 2024 GMT Not After : May 26 07:35:08 2024 GMT Subject: CN=6649abac-a58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:cb:63:95:0a:fa:d6:08:04:a2:af:39:23: 9f:c2:41:f0:54:66:db:06:f8:54:a0:12:35:93:7b: 58:ae:1e:99:ac:2b:c8:95:63:38:cd:cb:01:d1:1c: 2a:a6:81:df:26:91:67:49:93:8c:ec:bb:8d:2d:43: e6:2d:23:ec:ed:7a:a9:61:c8:41:02:55:a9:76:5b: d9:17:bc:0e:bd:f9:98:7d:63:87:29:5f:6d:5a:bc: 40:a8:0c:d7:f0:28:16:9e:89:f2:bf:23:47:be:de: 3d:aa:e3:92:3b:84:a5:42:7d:4e:c3:cb:30:03:8d: 45:72:48:de:7d:0c:3c:44:df:84:37:69:d3:46:ba: 4d:80:15:fa:58:65:c5:69:f5:36:ea:32:ba:58:e5: 57:b0:5d:76:de:19:43:7b:90:4e:38:da:39:68:7a: 5e:aa:e5:ed:81:90:64:d7:d1:eb:16:f5:41:49:e6: 69:79:a9:ef:3c:5a:a0:81:6f:2c:b6:04:83:0a:c2: f7:fa:e5:9d:7e:c5:52:f7:e2:4f:6f:44:42:1e:98: 0c:49:1d:af:1d:e3:36:52:f8:ea:54:67:3e:67:60: f1:63:f0:bc:59:cd:c0:eb:b2:3c:8f:87:d4:f3:4b: 88:16:8a:8a:43:59:31:84:48:71:6c:3e:72:08:38: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:07:A6:16:83:BD:24:AA:E1:03:F3:30:AC:E9:4A:B1:69:0E:FD:84 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e1:47:36:f0:77:ec:5c:2d:09:38:9d:be:ab:b6:45:3c:e1: 2f:64:e7:c3:7a:4f:96:57:8a:f7:cb:ce:25:ea:62:60:db:2b: b8:4c:b7:30:5d:3a:c4:37:7c:35:8b:a8:cd:5f:0d:e8:1a:30: 26:17:09:aa:85:cd:a5:7c:1e:0f:76:54:b7:d9:ce:22:84:b3: 24:7d:9d:80:4a:68:1a:d7:dd:33:45:d8:41:bc:90:c1:0e:0e: 21:bd:b8:87:c9:a3:ce:7b:8a:35:70:be:37:ff:b5:fc:aa:c8: 13:1f:5e:b8:ce:47:c8:86:cb:af:84:87:a6:60:32:73:58:8e: 96:eb:5e:3b:0c:82:ce:88:0d:2a:c9:db:a1:15:44:b5:2d:da: 38:47:37:68:c1:d9:44:43:61:08:1f:e1:27:82:ff:53:12:cc: ec:94:6a:49:da:67:a8:a3:a8:77:dd:ac:a3:14:96:24:60:42: 18:1f:9f:dd:6e:7b:44:f0:8b:03:b0:f7:98:01:86:3e:a5:97: 17:82:23:4d:4a:ad:5a:1a:96:54:04:32:2f:cf:6b:87:a7:ab: 62:c2:6c:e2:e3:5f:ce:54:07:85:9f:fa:c6:ed:10:d8:43:42: 17:df:de:90:1b:57:e9:eb:30:b6:2e:79:f9:2c:15:32:85:1a: 66:5f:8e:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkVEMDExMC8GA1UEBRMoNjA5RkVDMjU5NDM4MEZDNzYzOTY5NDE3M0MzQ0ZFNUYy QjU5NjIwNDAeFw0yNDA1MTkwNzM1MDhaFw0yNDA1MjYwNzM1MDhaMBgxFjAUBgNV BAMTDTY2NDlhYmFjLWE1OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLdMtjlQr61ggEoq85I5/CQfBUZtsG+FSgEjWTe1iuHpmsK8iVYzjNywHRHCqm gd8mkWdJk4zsu40tQ+YtI+zteqlhyEECVal2W9kXvA69+Zh9Y4cpX21avECoDNfw KBaeifK/I0e+3j2q45I7hKVCfU7DyzADjUVySN59DDxE34Q3adNGuk2AFfpYZcVp 9TbqMrpY5VewXXbeGUN7kE442jloel6q5e2BkGTX0esW9UFJ5ml5qe88WqCBbyy2 BIMKwvf65Z1+xVL34k9vREIemAxJHa8d4zZS+OpUZz5nYPFj8LxZzcDrsjyPh9Tz S4gWiopDWTGESHFsPnIIOC+zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuAemFoO9 JKrhA/MwrOlKsWkO/YQwHwYDVR0jBBgwFoAUYJ/sJZQ4D8djlpQXPDz+XytZYgQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCRUQwLzRDMTdBMDRFNzdF MTExRUVBQjRBRUY1M0M0RjlBRTAyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0Wlln US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUpfc0paUTREOGRqbHBRWFBEei1YeXRaWWdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC RUQwLzRDMTdBMDRFNzdFMTExRUVBQjRBRUY1M0M0RjlBRTAyL1lKX3NKWlE0RDhk amxwUVhQRHotWHl0WllnUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAErhRzbwd+xcLQk4nb6rtkU84S9k58N6T5ZXivfLziXqYmDbK7hMtzBd OsQ3fDWLqM1fDegaMCYXCaqFzaV8Hg92VLfZziKEsyR9nYBKaBrX3TNF2EG8kMEO DiG9uIfJo857ijVwvjf/tfyqyBMfXrjOR8iGy6+Eh6ZgMnNYjpbrXjsMgs6IDSrJ 26EVRLUt2jhHN2jB2URDYQgf4SeC/1MSzOyUaknaZ6ijqHfdrKMUliRgQhgfn91u e0TwiwOw95gBhj6llxeCI01KrVoallQEMi/Pa4enq2LCbOLjX85UB4Wf+sbtENhD Qhff3pAbV+nrMLYuefksFTKFGmZfjoA= -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org