$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json) Hash identifier: xmOs1AzZTqxjL97fYDRM4dXghaW4B4wWUAfN8rIUxok= Subject key identifier: AE:7A:73:BC:3F:79:EB:B9:1B:C2:1C:70:37:BC:DA:E6:53:90:BF:2E Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft Manifest number: 0A26 Signing time: Sat 18 May 2024 20:33:34 +0000 Manifest this update: Sat 18 May 2024 20:33:33 +0000 Manifest next update: Sat 25 May 2024 20:33:33 +0000 Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: vWNOcIiTtD8UPgZN4DEzCcS12S4D/luygjec5MRE+EY=) 2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: sHAaO7xcMRnAefggiAO9NIlqTNGd1VBO4+XdHoCcPBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Validity Not Before: May 18 20:33:33 2024 GMT Not After : May 25 20:33:33 2024 GMT Subject: CN=6649109e-921d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:24:e1:2a:58:a0:1d:85:28:43:4a:32:07: e0:35:99:db:41:63:db:19:4c:95:c7:95:54:ee:74: 48:4a:7f:e6:9e:46:95:97:23:a5:c5:a6:8c:e8:1d: c2:81:cb:67:5d:b6:b0:d8:0c:d6:95:b6:3e:cc:8a: ba:ad:b9:c4:2e:f4:db:a2:b5:63:80:ac:70:6c:c9: 5b:d9:8d:19:fb:d9:d1:6b:a0:03:c7:c0:54:e5:3e: 1b:83:a8:ff:32:6e:3d:c8:be:f5:ae:69:18:9d:6a: 4b:6c:0b:df:b4:49:ef:43:11:d6:ee:2a:9d:3f:49: 62:62:bd:27:e7:3a:8f:c2:f4:8c:ba:b6:12:92:bc: 40:d2:d9:8e:5e:0e:ab:41:a9:c9:5c:18:b0:6d:c9: f0:56:65:3f:c8:bf:2f:ca:43:6b:ff:59:96:cd:aa: c8:3e:ff:ce:57:31:66:40:51:0a:58:a1:4b:69:52: d9:ff:72:19:3a:8e:be:81:e0:2a:b0:75:b9:15:61: 13:a0:a1:ea:2d:16:5e:3b:80:71:49:3b:f3:5c:10: 0e:11:15:2a:86:52:b9:cb:fd:cf:3b:d2:c5:3c:d8: b6:63:79:9d:5d:27:e9:52:74:0e:32:fb:f8:c3:5d: 88:fd:59:0e:2f:e1:66:c6:9c:be:0a:84:8c:1e:86: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7A:73:BC:3F:79:EB:B9:1B:C2:1C:70:37:BC:DA:E6:53:90:BF:2E X509v3 Authority Key Identifier: keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a2:37:8e:f0:f9:d7:a8:c6:c3:2e:8c:5c:de:04:0e:3b:df: 3a:b6:2e:bd:70:08:c5:4a:3e:47:69:ae:37:43:28:3b:da:55: c4:12:f0:68:a2:c3:bd:4c:04:b6:3f:a3:74:fd:e7:1a:51:e6: 72:71:67:d8:fe:0d:29:39:8e:c7:76:50:21:12:9c:18:6c:e6: af:d5:75:7a:47:65:e8:b7:15:27:eb:b0:14:b4:1f:c7:a9:bd: 75:1e:0c:17:a9:cc:77:a1:58:9d:4d:40:b1:65:22:44:e0:54: 46:9b:07:0b:c5:1e:5f:68:90:3c:32:e2:af:92:e9:66:0c:62: fc:45:67:66:bb:26:e8:97:42:cb:94:1f:96:06:90:82:b3:22: 0f:40:06:4d:2c:f1:ee:09:69:d1:7c:37:a6:e0:cc:59:5c:6d: 6c:bf:5c:00:c4:b7:e7:5f:67:75:bc:ea:48:8f:a2:99:cc:30: 38:ea:07:bd:73:a7:c8:1b:f8:08:2e:7d:aa:40:b3:27:b6:34: 39:08:67:21:27:06:f9:eb:30:b3:ae:fa:d2:3b:61:f5:00:04: d1:ee:cf:e0:84:f1:5e:95:fa:89:45:29:3a:16:e7:e6:10:b9: 68:20:a3:02:ee:5a:8b:e9:7b:22:34:09:c1:2d:24:e4:18:20: 70:28:f2:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDNDQxMTAvBgNVBAUTKEY5OEVCRTIwNjkwRjJGMkIyMzRBMTU0ODdERDA5NTIx RjNENDc1M0MwHhcNMjQwNTE4MjAzMzMzWhcNMjQwNTI1MjAzMzMzWjAYMRYwFAYD VQQDEw02NjQ5MTA5ZS05MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxEk4SpYoB2FKENKMgfgNZnbQWPbGUyVx5VU7nRISn/mnkaVlyOlxaaM6B3C gctnXbaw2AzWlbY+zIq6rbnELvTborVjgKxwbMlb2Y0Z+9nRa6ADx8BU5T4bg6j/ Mm49yL71rmkYnWpLbAvftEnvQxHW7iqdP0liYr0n5zqPwvSMurYSkrxA0tmOXg6r QanJXBiwbcnwVmU/yL8vykNr/1mWzarIPv/OVzFmQFEKWKFLaVLZ/3IZOo6+geAq sHW5FWEToKHqLRZeO4BxSTvzXBAOERUqhlK5y/3PO9LFPNi2Y3mdXSfpUnQOMvv4 w12I/VkOL+Fmxpy+CoSMHoYPRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK56c7w/ eeu5G8IccDe82uZTkL8uMB8GA1UdIwQYMBaAFPmOviBpDy8rI0oVSH3QlSHz1HU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0M0NC9DMTYwRkNBQzQ4 MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5c2pTaFZJZmRDVklmUFVk VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZNi1JR2tQTHlzalNoVklmZENWSWZQVWRUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0M0NC9DMTYwRkNBQzQ4MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5 c2pTaFZJZmRDVklmUFVkVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ojeO8PnXqMbDLoxc3gQOO986ti69cAjFSj5Haa43Qyg72lXEEvBo osO9TAS2P6N0/ecaUeZycWfY/g0pOY7HdlAhEpwYbOav1XV6R2XotxUn67AUtB/H qb11HgwXqcx3oVidTUCxZSJE4FRGmwcLxR5faJA8MuKvkulmDGL8RWdmuybol0LL lB+WBpCCsyIPQAZNLPHuCWnRfDem4MxZXG1sv1wAxLfnX2d1vOpIj6KZzDA46ge9 c6fIG/gILn2qQLMntjQ5CGchJwb56zCzrvrSO2H1AATR7s/ghPFelfqJRSk6Fufm ELloIKMC7lqL6XsiNAnBLSTkGCBwKPLX -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org