$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: c1eObpNumoe2fOK1NSfPzXBDc3P9abA4bV42yu9kUCQ= Subject key identifier: B9:A1:BF:95:A3:62:6E:C2:CA:4A:87:7D:3F:9C:47:90:BF:26:02:5E Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 10AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 108F Signing time: Sat 18 May 2024 17:56:37 +0000 Manifest this update: Sat 18 May 2024 17:56:36 +0000 Manifest next update: Sat 25 May 2024 17:56:36 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: ibOqTf8CtSuxh3Bzpuc+vF9TkEjKTRARM44BZcY75Ao=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: rTWaJgfUR2psrR21EoeQJLvTRHKPQ1rPuxcUE6JcH+w=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: pWdQ4IizlHGhv4v0y1WN27GZONYdZqMGn3TElsSXsH0=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: 1my6sk8i/eIg+uc24KGSX0gIG59c3eLvlY9ysVKnZDo=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: bi7pcquqE9i+ZucJjCTDHDy2TZt+JYWlYj8B4ZHd21Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4271 (0x10af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: May 18 17:56:36 2024 GMT Not After : May 25 17:56:36 2024 GMT Subject: CN=6648ebd4-590e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:71:e3:82:95:e4:3a:55:30:e1:e5:c8:16: 1d:e4:b0:78:41:0c:ab:6d:e1:21:f7:1e:4e:65:b8: 04:83:e7:b3:6c:15:cb:49:db:78:2c:b6:95:2e:8a: 56:4e:76:51:a2:e2:f6:df:50:cd:78:8f:02:bd:e0: 7c:c3:55:f0:e3:65:c8:b6:f1:dd:dd:35:6c:dc:51: b3:14:6e:a9:8f:1c:32:c9:45:40:52:a9:c6:b5:9f: 23:c4:14:7c:aa:b9:75:24:e8:ec:2a:f6:4b:4d:8e: 22:1a:cb:53:ce:09:7d:47:8b:e8:f3:6b:53:1f:0c: ed:73:f0:90:67:fc:72:ef:08:b3:72:0e:3d:33:09: 8f:d3:e9:24:eb:f9:8f:5c:ea:c1:2f:e8:95:0c:73: d0:0b:d1:21:d3:8a:53:c5:4e:ae:f2:e2:6a:fd:c0: a9:e5:bd:c4:fb:43:92:16:57:dd:26:ee:1e:5f:ab: 5a:45:25:f1:20:c3:d1:b6:4d:11:7c:a5:7c:10:a0: 0c:db:03:24:29:c9:ac:71:59:42:db:69:10:a1:4f: 00:17:72:f6:63:a8:de:7a:95:65:e0:2a:8f:31:06: aa:ec:5f:fd:08:46:fb:81:3d:48:0e:84:ef:af:e6: 47:57:35:02:3e:4c:10:3f:fc:26:d5:5e:ad:65:12: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:BF:95:A3:62:6E:C2:CA:4A:87:7D:3F:9C:47:90:BF:26:02:5E X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d8:a1:66:58:c3:48:e4:14:1e:b5:49:e1:3b:00:29:b0:f8: 51:fa:c3:ec:3b:81:cb:9e:91:41:8b:e1:31:72:82:c7:34:51: c8:2b:a8:d1:11:e2:d1:69:ba:c5:e1:b9:50:08:cb:49:45:b0: 7c:49:ee:ae:d9:8d:a2:07:63:64:7d:9e:82:64:84:76:f1:81: 36:1c:48:9a:89:3e:12:c1:63:2a:0f:ef:3a:59:0a:38:80:65: a7:73:c8:b4:51:e2:1f:d9:1f:00:f3:a1:4e:8d:3d:36:1c:2a: e8:71:19:f6:68:5a:ce:23:3c:06:45:9b:e6:3d:06:ca:23:b5: 26:6d:94:22:48:ec:d1:30:1a:c2:20:63:4a:56:7d:e9:e4:1c: 20:5b:96:fe:c6:d2:45:2c:69:bd:c9:af:c1:36:b2:12:04:46: a8:e5:ea:32:7c:f3:19:e5:eb:8a:78:a5:17:7f:6c:11:5a:fd: 37:44:e8:b6:7a:1e:73:73:5b:54:bb:59:98:49:29:4d:1f:8f: fa:fb:bb:90:c4:de:bd:84:bf:31:64:6b:e9:ca:c9:82:62:65: e1:59:ba:1f:ee:c2:79:76:99:48:f5:b1:83:64:bb:a5:d4:9a: 1e:d0:5e:30:09:3d:13:40:16:69:c9:3f:a7:4f:bf:08:6b:c0: fc:c1:8d:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjQwNTE4MTc1NjM2WhcNMjQwNTI1MTc1NjM2WjAYMRYwFAYD VQQDEw02NjQ4ZWJkNC01OTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F1x44KV5DpVMOHlyBYd5LB4QQyrbeEh9x5OZbgEg+ezbBXLSdt4LLaVLopW TnZRouL231DNeI8CveB8w1Xw42XItvHd3TVs3FGzFG6pjxwyyUVAUqnGtZ8jxBR8 qrl1JOjsKvZLTY4iGstTzgl9R4vo82tTHwztc/CQZ/xy7wizcg49MwmP0+kk6/mP XOrBL+iVDHPQC9Eh04pTxU6u8uJq/cCp5b3E+0OSFlfdJu4eX6taRSXxIMPRtk0R fKV8EKAM2wMkKcmscVlC22kQoU8AF3L2Y6jeepVl4CqPMQaq7F/9CEb7gT1IDoTv r+ZHVzUCPkwQP/wm1V6tZRK8wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmhv5Wj Ym7CykqHfT+cR5C/JgJeMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT2KFmWMNI5BQetUnhOwApsPhR+sPsO4HLnpFBi+ExcoLHNFHIK6jR EeLRabrF4blQCMtJRbB8Se6u2Y2iB2NkfZ6CZIR28YE2HEiaiT4SwWMqD+86WQo4 gGWnc8i0UeIf2R8A86FOjT02HCrocRn2aFrOIzwGRZvmPQbKI7UmbZQiSOzRMBrC IGNKVn3p5BwgW5b+xtJFLGm9ya/BNrISBEao5eoyfPMZ5euKeKUXf2wRWv03ROi2 eh5zc1tUu1mYSSlNH4/6+7uQxN69hL8xZGvpysmCYmXhWbof7sJ5dplI9bGDZLul 1Joe0F4wCT0TQBZpyT+nT78Ia8D8wY2K -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org