$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: 9uBv56hRm6lhRGLQ/ygQTsV9OfqAMJfOJlyCzseFH/o= Subject key identifier: 9B:81:34:9C:C6:7A:36:4F:D6:53:87:D4:6D:EF:17:4D:2C:CE:72:12 Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: 34 Signing time: Fri 31 May 2024 09:17:54 +0000 Manifest this update: Fri 31 May 2024 09:17:52 +0000 Manifest next update: Fri 07 Jun 2024 09:17:52 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: N2hxz6NTN3S7Sw5FbzzoFOJzv7gb0sIL2/CgeHcL/Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: May 31 09:17:52 2024 GMT Not After : Jun 7 09:17:52 2024 GMT Subject: CN=665995c1-1c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:23:7e:12:57:4f:6d:07:e7:5f:d7:f0:27: 4f:88:f7:3f:dc:1d:0b:11:7b:03:1d:f4:3d:44:f9: e6:30:71:f9:d2:0c:12:6f:31:80:5b:07:23:2c:66: 34:01:43:0c:c3:51:37:f9:2c:a5:76:dd:31:f6:e1: 06:87:f8:79:4a:fc:e7:f0:e2:1c:d7:1a:1a:60:dd: 2e:51:e0:5d:61:b5:0c:13:0f:61:85:0e:5d:14:f6: 09:b3:d7:c3:ca:e8:45:71:64:c9:17:d7:01:48:a7: 34:15:70:a3:fe:22:f9:8c:87:37:df:32:33:9e:c4: 62:77:be:8b:f9:ed:f3:3b:c4:10:28:ea:95:97:38: 82:d5:6d:11:8f:84:b7:64:18:d8:ff:38:31:78:bc: 37:01:50:7d:36:00:32:01:46:05:8b:2c:64:22:d3: 35:2f:d7:02:e3:55:1a:0c:f8:37:68:d4:61:ae:8d: 89:d1:20:f8:ee:96:80:63:14:f3:2b:71:d0:36:05: 86:22:05:93:e1:2a:5e:26:10:41:3f:fd:ed:90:be: 20:2e:59:3d:7a:81:64:09:be:8f:d3:f4:2f:79:d4: af:19:ff:ab:5a:d2:a7:3a:c3:87:8a:41:f9:55:f9: aa:65:8d:8b:94:e3:d1:12:e8:cc:7b:f8:e5:71:9d: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:81:34:9C:C6:7A:36:4F:D6:53:87:D4:6D:EF:17:4D:2C:CE:72:12 X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d1:02:b1:e3:c7:65:38:a2:67:aa:b0:8e:46:06:37:db:74: 4f:79:63:c7:2b:18:f1:87:a7:a3:c1:76:23:4b:d5:cb:f7:7b: 15:83:a2:67:ca:ad:fc:97:82:8f:f7:55:6d:01:e2:ec:de:f4: 82:87:cc:90:ba:7d:12:97:ff:6d:3d:22:ce:3f:66:51:90:85: b3:a9:07:38:52:63:3a:ab:62:c5:75:b0:09:41:6d:4e:bf:5f: 94:59:43:3e:4a:b3:28:5c:7f:16:2f:c3:7d:30:3f:78:8e:94: 49:ae:0a:21:c1:ab:5f:f2:4e:f4:af:ee:34:02:4a:9f:84:08: f6:45:45:ff:e9:80:69:9f:ad:69:52:62:1e:6d:aa:f6:e4:64: b7:b2:76:86:51:86:b2:c9:db:cb:c7:dd:26:9a:76:bf:ca:a4: 19:90:62:4b:ea:05:44:e8:ca:55:6d:04:9a:54:da:fc:1e:ca: 38:ea:15:32:bc:a4:93:93:88:ed:eb:48:91:66:9d:30:bd:4a: 56:b4:8b:db:25:da:bc:0d:59:e5:ae:f5:e9:6b:74:06:22:49: 01:43:44:22:da:2a:fe:b8:88:42:68:2a:00:cb:71:25:44:42: 8e:73:99:83:ef:cf:02:91:98:a4:2f:0e:53:10:d6:a9:6e:2b: 72:8b:3b:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NTBBMjExMC8GA1UEBRMoNjI2MTA5QkJFQ0M5OEJBNTJFN0YzOTlCODA5NjJEM0FG RTVBQjJENDAeFw0yNDA1MzEwOTE3NTJaFw0yNDA2MDcwOTE3NTJaMBgxFjAUBgNV BAMTDTY2NTk5NWMxLTFjODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV2iN+EldPbQfnX9fwJ0+I9z/cHQsRewMd9D1E+eYwcfnSDBJvMYBbByMsZjQB QwzDUTf5LKV23TH24QaH+HlK/Ofw4hzXGhpg3S5R4F1htQwTD2GFDl0U9gmz18PK 6EVxZMkX1wFIpzQVcKP+IvmMhzffMjOexGJ3vov57fM7xBAo6pWXOILVbRGPhLdk GNj/ODF4vDcBUH02ADIBRgWLLGQi0zUv1wLjVRoM+Ddo1GGujYnRIPjuloBjFPMr cdA2BYYiBZPhKl4mEEE//e2QviAuWT16gWQJvo/T9C951K8Z/6ta0qc6w4eKQflV +apljYuU49ES6Mx7+OVxnc6xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm4E0nMZ6 Nk/WU4fUbe8XTSzOchIwHwYDVR0jBBgwFoAUYmEJu+zJi6UufzmbgJYtOv5astQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1MEEyL0VFMzFEODc0RDAy NzExRUVCRjVCNjkzQ0M0RjlBRTAyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWW1FSnUtekppNlV1ZnptYmdKWXRPdjVhc3RRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1 MEEyL0VFMzFEODc0RDAyNzExRUVCRjVCNjkzQ0M0RjlBRTAyL1ltRUp1LXpKaTZV dWZ6bWJnSll0T3Y1YXN0US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfRArHjx2U4omeqsI5GBjfbdE95Y8crGPGHp6PBdiNL1cv3exWDomfK rfyXgo/3VW0B4uze9IKHzJC6fRKX/209Is4/ZlGQhbOpBzhSYzqrYsV1sAlBbU6/ X5RZQz5KsyhcfxYvw30wP3iOlEmuCiHBq1/yTvSv7jQCSp+ECPZFRf/pgGmfrWlS Yh5tqvbkZLeydoZRhrLJ28vH3Saadr/KpBmQYkvqBUToylVtBJpU2vweyjjqFTK8 pJOTiO3rSJFmnTC9Sla0i9sl2rwNWeWu9elrdAYiSQFDRCLaKv64iEJoKgDLcSVE Qo5zmYPvzwKRmKQvDlMQ1qluK3KLO+I= -----END CERTIFICATE-----Generated at Fri May 31 10:42:52 2024 by rpki-client on console-fra.rpki-client.org