$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft File: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json) Hash identifier: Brlc3yymg+LJmqd8/5v2hzvJ7wOuZJLOEXCCvtocKjs= Subject key identifier: A4:A6:DE:E8:B9:E4:5B:E3:00:02:E8:C0:99:9E:1E:9C:CA:73:54:AD Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft Manifest number: 080C Signing time: Fri 31 May 2024 22:38:10 +0000 Manifest this update: Fri 31 May 2024 22:38:09 +0000 Manifest next update: Fri 07 Jun 2024 22:38:09 +0000 Files and hashes: 1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: I3Qx6GVoAd9oV4Zy17d6tjgtb7Qzl4pxrJXZNdPO7rI=) 2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: YA4GLUdsIaWbGiBm3KmTSbRFQ2G7IxEvDdxZRgo0HEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Validity Not Before: May 31 22:38:09 2024 GMT Not After : Jun 7 22:38:09 2024 GMT Subject: CN=665a5152-95c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:55:02:68:b8:33:a3:50:73:ef:70:13:bd: b6:73:a5:75:50:32:01:15:47:d6:3e:80:18:3a:43: 80:cf:5e:d6:a4:49:5b:f7:b0:9f:18:76:d5:6d:f0: b6:0f:1a:8b:f5:53:6e:a4:d8:d1:6a:9f:f4:96:03: 04:bb:a0:f2:bb:9a:d1:a3:bd:aa:67:5c:65:0e:fa: 99:0d:80:f5:ee:d0:66:57:0b:d9:32:3f:12:46:10: be:5c:e4:45:cd:48:a7:1c:0d:a0:85:10:9e:4d:d6: 58:5e:ad:66:a5:0d:db:15:37:09:b7:1a:8c:4b:e6: a8:85:a6:8c:dd:a4:9b:7e:2b:ca:75:53:71:54:4c: 19:d6:10:f9:1e:2e:f9:0f:8c:c9:7e:7b:f0:a1:29: 50:7a:4c:19:2e:a1:dc:78:e2:5c:87:f7:3e:c8:79: 6a:fe:1d:3e:7b:47:a4:87:af:0f:d2:30:66:84:61: 22:0a:17:75:e3:49:28:f2:14:66:5f:a4:0b:60:c6: af:a6:f9:b0:69:52:17:5d:26:ed:90:92:7b:49:21: 89:f1:79:ed:ba:66:6d:13:29:72:8c:e8:a8:9a:20: 66:1d:1f:33:e4:eb:e7:65:0a:de:9c:52:5a:7a:70: 12:ca:90:b7:ce:49:2a:37:7a:a5:f5:b2:3c:3c:fa: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:DE:E8:B9:E4:5B:E3:00:02:E8:C0:99:9E:1E:9C:CA:73:54:AD X509v3 Authority Key Identifier: keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c9:83:70:8b:c0:dd:77:50:f5:a7:f0:f4:2f:78:82:f6:1a: 2d:d0:ad:bf:ee:25:d8:5f:26:39:38:e3:d2:c5:50:94:d2:a8: 2f:d1:c4:03:18:a6:fa:99:85:c9:f3:3a:da:d7:7f:83:77:cc: 40:43:f0:d3:9e:a2:b1:57:45:3a:43:ea:b6:f2:16:99:d7:42: 7e:f9:01:17:33:ea:be:e3:37:e4:67:40:89:f6:3c:42:8d:16: 1b:d7:87:9e:33:1f:6e:01:5d:f0:e7:77:c4:2f:97:40:e2:6f: 2f:a1:37:e0:41:e6:f5:54:86:92:f5:5f:00:c6:ac:ff:c0:51: 7e:09:7e:ba:cd:f8:72:b4:6d:20:d9:ad:ff:2c:e7:c0:36:63: b7:ce:9f:7e:1b:79:dc:d0:11:e5:f5:66:47:7e:45:07:9f:20: 75:e9:08:19:ba:88:d6:60:be:1a:4e:bc:20:7f:b0:d4:3c:65: a9:5e:06:9c:bb:d7:0f:59:6f:8c:7d:0c:24:24:f9:5a:ea:46: 61:0c:d2:05:95:2c:47:13:ff:fc:0d:28:68:9f:0f:54:56:22: 16:d3:80:b7:58:06:c3:97:9d:7a:2c:5f:7e:ac:ce:35:4b:b1: 80:95:3d:6a:45:8e:33:05:b0:cc:bf:16:55:33:9b:33:9c:9f: ae:5d:ef:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMjkxMTAvBgNVBAUTKDVCRjYyNDM5OTBBOTQ2NEM4NUI3ODIzREI0MjZFMkFC OTY3MjBBM0MwHhcNMjQwNTMxMjIzODA5WhcNMjQwNjA3MjIzODA5WjAYMRYwFAYD VQQDEw02NjVhNTE1Mi05NWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucNVAmi4M6NQc+9wE722c6V1UDIBFUfWPoAYOkOAz17WpElb97CfGHbVbfC2 DxqL9VNupNjRap/0lgMEu6Dyu5rRo72qZ1xlDvqZDYD17tBmVwvZMj8SRhC+XORF zUinHA2ghRCeTdZYXq1mpQ3bFTcJtxqMS+aohaaM3aSbfivKdVNxVEwZ1hD5Hi75 D4zJfnvwoSlQekwZLqHceOJch/c+yHlq/h0+e0ekh68P0jBmhGEiChd140ko8hRm X6QLYMavpvmwaVIXXSbtkJJ7SSGJ8XntumZtEylyjOiomiBmHR8z5OvnZQrenFJa enASypC3zkkqN3ql9bI8PPri4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSm3ui5 5FvjAALowJmeHpzKc1StMB8GA1UdIwQYMBaAFFv2JDmQqUZMhbeCPbQm4quWcgo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUyOS9ERDEzRjhGMEIy OUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJreUZ0NEk5dENiaXE1WnlD ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dfWWtPWkNwUmt5RnQ0STl0Q2JpcTVaeUNqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUyOS9ERDEzRjhGMEIyOUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJr eUZ0NEk5dENiaXE1WnlDancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOyYNwi8Ddd1D1p/D0L3iC9hot0K2/7iXYXyY5OOPSxVCU0qgv0cQD GKb6mYXJ8zra13+Dd8xAQ/DTnqKxV0U6Q+q28haZ10J++QEXM+q+4zfkZ0CJ9jxC jRYb14eeMx9uAV3w53fEL5dA4m8voTfgQeb1VIaS9V8Axqz/wFF+CX66zfhytG0g 2a3/LOfANmO3zp9+G3nc0BHl9WZHfkUHnyB16QgZuojWYL4aTrwgf7DUPGWpXgac u9cPWW+MfQwkJPla6kZhDNIFlSxHE//8DShonw9UViIW04C3WAbDl516LF9+rM41 S7GAlT1qRY4zBbDMvxZVM5sznJ+uXe8e -----END CERTIFICATE-----Generated at Fri May 31 23:53:08 2024 by rpki-client on console-fra.rpki-client.org