$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json) Hash identifier: yvqf0UEverAXnD2nJNIywmimrbC2hq07h+wKrhNGhU0= Subject key identifier: 17:31:EC:6C:48:24:CE:D6:47:69:4C:D5:59:72:75:74:4F:A4:05:E9 Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft Manifest number: 0252 Signing time: Sun 19 May 2024 03:53:22 +0000 Manifest this update: Sun 19 May 2024 03:53:21 +0000 Manifest next update: Sun 26 May 2024 03:53:21 +0000 Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: rCsOlRzMi5R9xFl1+VRzMYdsrEzEXYoFXo8yWTkOoF0=) 2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: KCh0P3K31z6HR+OiBjsNxJl+UM0RoNVnUzoMfySFZa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: May 19 03:53:21 2024 GMT Not After : May 26 03:53:21 2024 GMT Subject: CN=664977b1-7850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:62:2e:d5:d6:a6:06:6c:70:e7:2a:b5:28: fb:43:5e:3c:4f:f9:fb:79:7b:dc:f1:ca:64:77:b3: 3d:c5:95:4a:f1:f6:d4:06:0e:0b:34:ca:39:4a:a0: 61:ef:d7:d1:f1:dc:56:64:f4:c2:86:c4:e1:16:1d: a0:90:f1:62:34:6c:9b:35:37:07:80:72:cc:9d:87: 31:58:b0:5b:67:b7:d0:77:7f:7e:c3:5e:9c:c3:bc: bb:b4:24:48:63:89:b9:6e:bd:21:94:33:2b:62:07: ff:d1:92:8b:74:ab:58:36:d2:af:11:d7:5d:94:a0: ea:a6:bc:7b:fa:92:34:72:cb:8d:c3:45:03:c9:fc: 06:6e:89:b4:bb:b6:fc:6f:5a:c1:b9:c8:c3:b9:f1: 4c:81:e4:9e:7f:df:a4:93:ec:f7:9c:3c:a9:76:48: a9:09:3c:07:a0:76:46:b8:ab:18:33:9f:53:8f:6a: ad:dc:e9:ca:b7:65:11:45:bd:64:63:29:64:30:98: 60:fd:dd:4c:4f:9f:7a:56:96:e0:73:36:58:3a:6b: a4:dd:9c:a9:19:51:0b:42:c2:ca:a2:9c:d1:86:b5: 3f:33:cf:61:46:9f:30:88:9b:8c:cc:91:69:93:27: aa:cc:92:14:b8:6b:21:5d:26:e5:45:7d:ec:26:e3: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:31:EC:6C:48:24:CE:D6:47:69:4C:D5:59:72:75:74:4F:A4:05:E9 X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:25:92:15:81:af:be:59:f1:1f:cc:c6:32:50:cc:34:61:27: 47:91:da:06:b2:0f:3b:ad:5c:55:d7:ee:ac:63:e7:06:4e:2b: 17:85:ed:17:31:76:47:7e:c1:5b:c8:21:cf:79:59:c5:4a:d9: 80:09:e5:24:5c:77:a5:72:3e:02:b5:6c:35:83:79:4a:d0:98: c9:dc:dd:13:fc:70:bf:09:96:13:a8:30:74:5b:55:b7:58:4d: 04:06:1e:7e:06:07:42:24:fa:df:cf:cf:08:91:49:0f:f5:50: bb:e8:19:ff:46:3f:80:aa:fe:75:28:0d:0c:9d:7c:d7:7f:23: 92:89:48:bd:9e:fa:80:31:8b:81:71:88:cf:ba:e4:33:30:75: 75:90:4d:a6:f6:26:a2:66:2a:f1:2d:2a:37:d5:e8:0a:dc:8f: 1c:33:d6:a2:7a:9b:d3:bd:8f:18:b3:8f:55:c5:7a:70:24:91: 89:68:4e:4a:b5:5f:ff:75:41:a8:dc:b9:0c:f3:9f:ae:96:0b: 39:08:fc:fd:ea:d5:96:1c:e1:18:1c:68:76:32:83:57:8d:1d: cb:69:05:8e:ce:0a:c5:a6:03:a9:67:ea:43:4d:bd:f2:2a:d5: be:c7:6a:e2:cc:29:b7:c7:39:60:e3:9d:22:10:86:bd:98:3a: 6c:1c:86:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjQwNTE5MDM1MzIxWhcNMjQwNTI2MDM1MzIxWjAYMRYwFAYD VQQDEw02NjQ5NzdiMS03ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopJiLtXWpgZscOcqtSj7Q148T/n7eXvc8cpkd7M9xZVK8fbUBg4LNMo5SqBh 79fR8dxWZPTChsThFh2gkPFiNGybNTcHgHLMnYcxWLBbZ7fQd39+w16cw7y7tCRI Y4m5br0hlDMrYgf/0ZKLdKtYNtKvEdddlKDqprx7+pI0csuNw0UDyfwGbom0u7b8 b1rBucjDufFMgeSef9+kk+z3nDypdkipCTwHoHZGuKsYM59Tj2qt3OnKt2URRb1k YylkMJhg/d1MT596VpbgczZYOmuk3ZypGVELQsLKopzRhrU/M89hRp8wiJuMzJFp kyeqzJIUuGshXSblRX3sJuP8fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcx7GxI JM7WR2lM1VlydXRPpAXpMB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2 RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqJZIVga++WfEfzMYyUMw0YSdHkdoGsg87rVxV1+6sY+cGTisXhe0X MXZHfsFbyCHPeVnFStmACeUkXHelcj4CtWw1g3lK0JjJ3N0T/HC/CZYTqDB0W1W3 WE0EBh5+BgdCJPrfz88IkUkP9VC76Bn/Rj+Aqv51KA0MnXzXfyOSiUi9nvqAMYuB cYjPuuQzMHV1kE2m9iaiZirxLSo31egK3I8cM9aiepvTvY8Ys49VxXpwJJGJaE5K tV//dUGo3LkM85+ulgs5CPz96tWWHOEYHGh2MoNXjR3LaQWOzgrFpgOpZ+pDTb3y KtW+x2rizCm3xzlg450iEIa9mDpsHIYX -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org