$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft File: Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json) Hash identifier: yk5yaIuqJQEWBSJLm39fbAD0ic7aiI38yy73eCM6f4M= Subject key identifier: 10:A1:91:81:23:FB:5B:93:9F:28:3E:42:39:AC:FE:F6:03:13:DE:0A Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft Manifest number: 051D Signing time: Sun 19 May 2024 01:02:56 +0000 Manifest this update: Sun 19 May 2024 01:02:56 +0000 Manifest next update: Sun 26 May 2024 01:02:56 +0000 Files and hashes: 1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: G58tTLOgOMXpeaUa1gpqJ3UamPrPKd1uiuwzaXIgSgs=) 2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: 8A4qahseWZRMlIxZiZssA7PdmU7bh2Sf762zX6THCIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Validity Not Before: May 19 01:02:56 2024 GMT Not After : May 26 01:02:56 2024 GMT Subject: CN=66494fc0-99a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4f:4c:bf:49:83:a7:4b:5c:99:de:59:cd:b9: 29:27:d9:c4:73:b3:d9:9e:77:34:91:a1:98:29:d8: 5e:ad:61:03:45:cb:46:91:47:99:24:27:c7:66:fa: 79:aa:49:3e:16:ad:17:ba:10:48:e7:2a:06:7b:7f: d9:4f:79:33:1c:d6:58:e1:ab:e0:bd:d0:68:02:be: 64:fa:66:8c:2f:45:74:f5:ed:c0:60:39:1f:f7:98: d8:ca:62:a3:8a:4d:7b:7d:c7:f0:85:26:08:36:7a: c5:f6:be:06:c0:f1:dc:b3:50:d0:4b:84:b1:db:f9: 84:f5:f7:77:c1:78:31:39:f6:23:02:cd:b6:95:11: 03:fd:29:a8:40:32:19:dc:c6:03:41:0b:b5:44:23: 90:d3:5a:7d:25:b4:a2:3b:5e:0e:96:bf:99:88:d5: 56:a7:60:4b:21:96:37:04:91:35:8a:b9:1f:27:1b: 07:62:0d:b6:32:b5:99:bb:4a:c3:4b:55:db:5c:c9: 33:4e:2a:93:43:63:7e:fb:e7:0a:10:3b:f4:c3:00: 02:71:10:7b:4e:d9:09:06:9b:79:ee:15:4f:0e:5d: 6b:f6:49:23:e0:ae:e0:f6:ed:3b:2f:dd:c8:77:27: a0:72:d5:c4:b7:4b:64:63:dc:52:90:23:7a:50:4d: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A1:91:81:23:FB:5B:93:9F:28:3E:42:39:AC:FE:F6:03:13:DE:0A X509v3 Authority Key Identifier: keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a0:c6:a1:84:df:e2:a0:1b:b4:5c:5c:57:ab:a6:1c:a9:25: 64:bd:9d:d1:ab:a6:07:72:10:1e:4b:b7:10:dc:a5:28:83:5e: 40:cd:00:12:77:dd:ab:3a:61:fa:26:fc:30:fc:bf:8c:f3:e4: 79:27:e0:41:8b:27:f6:1b:50:43:a3:8e:1d:43:ae:21:52:1d: 48:77:ca:d1:f5:b7:63:bd:79:e0:3b:4d:ff:0e:54:9c:cb:52: c2:56:7b:90:ed:c2:68:fd:77:86:b0:f5:f9:7b:f5:32:c0:43: 97:96:4d:41:9f:2d:ba:24:6d:fe:29:d6:6a:ea:fb:fe:54:38: 1d:bc:2b:8a:7d:af:22:d0:95:81:eb:5b:6f:9e:97:c0:69:ba: 13:f2:7a:20:98:51:79:ea:eb:6d:2c:0b:e5:cd:60:87:67:f6: 38:ca:70:e3:b8:d4:40:07:dd:8e:79:46:c6:5a:b3:1a:b7:63: 29:7a:ee:9f:88:e2:5f:fa:e4:90:5e:cb:3a:d9:df:96:d1:a3: e6:05:93:dc:ec:f6:98:83:52:43:ca:af:f7:fb:fe:95:38:c1: c4:49:f6:d8:88:17:76:96:51:0c:53:8d:78:d2:69:4e:e8:6e: 16:bf:c4:d2:69:86:e0:b6:78:b0:eb:7e:15:aa:8b:c6:87:d5: 94:ff:b4:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE1RjIxMTAvBgNVBAUTKDYzODJCNTEzMzQ4MzE1RDVBRjNGMTMwRUM1NEMxREE4 NjcyODhDMkMwHhcNMjQwNTE5MDEwMjU2WhcNMjQwNTI2MDEwMjU2WjAYMRYwFAYD VQQDEw02NjQ5NGZjMC05OWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6E9Mv0mDp0tcmd5ZzbkpJ9nEc7PZnnc0kaGYKdherWEDRctGkUeZJCfHZvp5 qkk+Fq0XuhBI5yoGe3/ZT3kzHNZY4avgvdBoAr5k+maML0V09e3AYDkf95jYymKj ik17fcfwhSYINnrF9r4GwPHcs1DQS4Sx2/mE9fd3wXgxOfYjAs22lRED/SmoQDIZ 3MYDQQu1RCOQ01p9JbSiO14Olr+ZiNVWp2BLIZY3BJE1irkfJxsHYg22MrWZu0rD S1XbXMkzTiqTQ2N+++cKEDv0wwACcRB7TtkJBpt57hVPDl1r9kkj4K7g9u07L93I dyegctXEt0tkY9xSkCN6UE09ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBChkYEj +1uTnyg+Qjms/vYDE94KMB8GA1UdIwQYMBaAFGOCtRM0gxXVrz8TDsVMHahnKIws MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTVGMi81NjMyMkQ5OEI4 OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZkV3ZQeE1PeFV3ZHFHY29q Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0SzFFelNERmRXdlB4TU94VXdkcUdjb2pDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTVGMi81NjMyMkQ5OEI4OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZk V3ZQeE1PeFV3ZHFHY29qQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8oMahhN/ioBu0XFxXq6YcqSVkvZ3Rq6YHchAeS7cQ3KUog15AzQAS d92rOmH6Jvww/L+M8+R5J+BBiyf2G1BDo44dQ64hUh1Id8rR9bdjvXngO03/DlSc y1LCVnuQ7cJo/XeGsPX5e/UywEOXlk1Bny26JG3+KdZq6vv+VDgdvCuKfa8i0JWB 61tvnpfAaboT8nogmFF56uttLAvlzWCHZ/Y4ynDjuNRAB92OeUbGWrMat2Mpeu6f iOJf+uSQXss62d+W0aPmBZPc7PaYg1JDyq/3+/6VOMHESfbYiBd2llEMU4140mlO 6G4Wv8TSaYbgtniw634VqovGh9WU/7QR -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org