$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft File: ySmS1w7OQRpiVb9AueCkUhSUQA0.mft (raw, json) Hash identifier: d6aaEnQfISbm/TzRSz49RFTBCi2pOEIENHM7zeYZ9e0= Subject key identifier: 44:F3:AB:29:5B:0E:DD:AB:8A:E1:E3:95:64:82:80:16:F6:AB:49:07 Authority key identifier: C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D Certificate issuer: /CN=A91C4102/serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft Manifest number: 1053 Signing time: Sat 18 May 2024 20:53:55 +0000 Manifest this update: Sat 18 May 2024 20:53:55 +0000 Manifest next update: Sat 25 May 2024 20:53:55 +0000 Files and hashes: 1: ySmS1w7OQRpiVb9AueCkUhSUQA0.crl (hash: /MHXBwUgqaQ5FNXspdnN5ztBXCfOBxf+xUNKFPvWoTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102/serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Validity Not Before: May 18 20:53:55 2024 GMT Not After : May 25 20:53:55 2024 GMT Subject: CN=66491563-7b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:af:28:9e:05:5a:3a:d7:ec:97:c9:b3:fc: 08:d0:dd:80:1f:89:1e:6a:ba:f3:46:88:b6:9a:9b: be:44:22:fc:72:e9:f3:0d:3f:61:8d:cd:18:6b:0e: 47:8a:e9:4e:b3:15:6f:b3:3f:f8:cf:24:46:26:38: a7:67:17:65:14:c1:bf:bb:e9:c2:c1:3d:6c:72:a5: 9e:bc:de:2e:f7:2c:92:d9:54:9a:82:bf:49:1b:94: c3:39:92:a3:dd:03:81:25:dd:49:dc:54:c8:ec:bc: 1f:9f:a3:a2:50:90:e2:9c:76:e9:2a:0d:b4:4b:be: 10:31:c7:53:cd:a0:36:42:ce:64:cb:9b:80:20:92: 65:ad:c5:96:c9:1a:ca:84:60:81:8a:9d:c8:58:98: 55:2d:0e:36:fa:a9:b3:d5:de:77:73:44:1e:7c:f3: b0:73:3c:0c:bb:78:aa:3f:9e:83:b3:bd:47:d7:44: 18:6e:98:2d:2b:5e:0d:86:5b:cb:4c:76:ad:10:62: aa:4d:8f:fc:ab:c2:98:f7:b6:6f:0c:6d:10:94:57: 3a:55:d9:64:be:78:db:a0:30:1d:41:ba:61:c6:fd: 3f:bf:e3:2d:46:3b:46:21:90:e5:c8:94:ac:fe:cc: f2:80:97:58:ea:95:b5:d4:dc:aa:3e:fa:16:be:32: 77:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F3:AB:29:5B:0E:DD:AB:8A:E1:E3:95:64:82:80:16:F6:AB:49:07 X509v3 Authority Key Identifier: keyid:C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e4:59:39:0d:46:f2:75:50:65:f1:02:31:6d:0a:4f:dc:12: 59:17:76:0a:fe:4b:14:3d:77:4b:b3:e2:1c:ae:a4:61:d3:76: c8:00:1b:07:7d:00:f0:76:a8:ec:ec:54:c4:dd:94:6c:df:fc: da:59:e4:a0:36:e5:04:7f:4c:c7:3f:77:d4:58:db:79:99:17: 61:25:e7:0d:4c:ff:f8:56:d4:a3:a7:12:32:41:2a:67:88:e2: 72:dd:49:52:2b:29:01:1c:23:ad:53:2b:0a:7d:65:3f:59:7f: e3:fa:79:af:50:c7:ad:96:76:1f:5e:f5:cb:2f:77:fd:53:04: d0:32:1b:15:fa:25:12:6c:97:e4:99:0d:43:c4:08:de:70:83: e8:87:5b:48:b0:74:8d:7c:f3:c0:52:da:4a:ec:dc:dc:6f:7c: 73:4c:c6:a1:f7:83:02:0a:26:80:c8:e9:71:9b:d4:55:86:c8: 28:bc:fb:31:47:37:a9:6c:e8:ac:12:9c:a8:47:00:b2:7f:52: 65:a5:cc:4a:16:77:ef:ab:f4:0c:52:c0:83:16:77:d7:74:9a: 9c:d2:d2:a3:bb:07:03:91:d5:17:5b:f8:21:4b:0e:7c:7d:4e: c1:fc:91:b4:3e:45:88:78:0e:64:67:7e:cc:73:75:45:d3:a1: 61:34:5b:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEM5Mjk5MkQ3MEVDRTQxMUE2MjU1QkY0MEI5RTBBNDUy MTQ5NDQwMEQwHhcNMjQwNTE4MjA1MzU1WhcNMjQwNTI1MjA1MzU1WjAYMRYwFAYD VQQDEw02NjQ5MTU2My03YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RuvKJ4FWjrX7JfJs/wI0N2AH4kearrzRoi2mpu+RCL8cunzDT9hjc0Yaw5H iulOsxVvsz/4zyRGJjinZxdlFMG/u+nCwT1scqWevN4u9yyS2VSagr9JG5TDOZKj 3QOBJd1J3FTI7Lwfn6OiUJDinHbpKg20S74QMcdTzaA2Qs5ky5uAIJJlrcWWyRrK hGCBip3IWJhVLQ42+qmz1d53c0QefPOwczwMu3iqP56Ds71H10QYbpgtK14NhlvL THatEGKqTY/8q8KY97ZvDG0QlFc6VdlkvnjboDAdQbphxv0/v+MtRjtGIZDlyJSs /szygJdY6pW11NyqPvoWvjJ3RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETzqylb Dt2riuHjlWSCgBb2q0kHMB8GA1UdIwQYMBaAFMkpktcOzkEaYlW/QLngpFIUlEAN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FScGlWYjlBdWVDa1VoU1VR QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lTbVMxdzdPUVJwaVZiOUF1ZUNrVWhTVVFBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FS cGlWYjlBdWVDa1VoU1VRQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD5Fk5DUbydVBl8QIxbQpP3BJZF3YK/ksUPXdLs+IcrqRh03bIABsH fQDwdqjs7FTE3ZRs3/zaWeSgNuUEf0zHP3fUWNt5mRdhJecNTP/4VtSjpxIyQSpn iOJy3UlSKykBHCOtUysKfWU/WX/j+nmvUMetlnYfXvXLL3f9UwTQMhsV+iUSbJfk mQ1DxAjecIPoh1tIsHSNfPPAUtpK7Nzcb3xzTMah94MCCiaAyOlxm9RVhsgovPsx RzepbOisEpyoRwCyf1JlpcxKFnfvq/QMUsCDFnfXdJqc0tKjuwcDkdUXW/ghSw58 fU7B/JG0PkWIeA5kZ37Mc3VF06FhNFs+ -----END CERTIFICATE-----Generated at Sat May 18 21:31:31 2024 by rpki-client on console-ams.rpki-client.org