$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft File: y_Kp2oisCPjVEG3svXLW-gnIGOk.mft (raw, json) Hash identifier: lwzfS/fcE81n43OIUEHmt7CQvaeEF//mXyn6ce21hTU= Subject key identifier: 29:B2:30:E9:49:76:D5:01:68:33:F9:48:4C:69:EA:0E:5E:5C:1E:DD Authority key identifier: CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 Certificate issuer: /CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Certificate serial: 0E60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft Manifest number: 0E58 Signing time: Sat 18 May 2024 18:24:38 +0000 Manifest this update: Sat 18 May 2024 18:24:38 +0000 Manifest next update: Sat 25 May 2024 18:24:38 +0000 Files and hashes: 1: y_Kp2oisCPjVEG3svXLW-gnIGOk.crl (hash: JvP1tV1XmG2SRnB65eqs6q3iB5RsomrKCZ5m1I1aOIk=) 2: 4ECF0A4C765C11E9A01A6E34C4F9AE02.roa (hash: Ce9BbpW+u6Lf3eiA8gD0/jqkNi4bCrcEPxDFa4yC7Go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3680 (0xe60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Validity Not Before: May 18 18:24:38 2024 GMT Not After : May 25 18:24:38 2024 GMT Subject: CN=6648f266-3c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a1:0d:3b:83:47:bb:09:9b:71:6e:7b:fc:88: 5f:ab:b7:80:e1:7f:01:93:67:34:5f:b9:5b:db:b2: ef:e5:73:49:aa:29:15:3f:c2:06:1e:d2:ea:ef:8d: 3a:f7:3d:b2:d6:59:a2:de:65:cc:3d:d3:e8:98:c1: f5:19:c5:5f:7c:4d:c2:23:b3:b1:01:a0:3a:5c:b6: 73:41:84:ad:e4:75:ff:8b:f2:49:ab:41:ac:44:f4: da:f2:89:60:55:f6:56:76:9e:22:88:98:5a:39:6b: dc:86:84:8a:fd:22:d1:10:7b:23:ca:72:0e:09:2b: 57:4a:68:22:84:46:b4:bd:e6:22:1f:f2:39:e1:be: 5a:b7:ec:a5:00:7c:4c:e3:93:ab:2e:c8:e7:c0:fe: e0:9c:9c:cd:19:58:52:c5:70:ad:89:8f:ef:93:6a: 7b:17:3b:ce:11:69:ad:0e:1e:65:2e:eb:72:ce:53: 4e:d2:08:2e:b2:3e:f8:f0:76:38:d3:e0:86:55:dc: 29:6c:62:39:88:aa:00:2c:a3:05:c5:b7:d8:a3:30: 61:27:9d:9d:ad:7d:68:76:b0:c5:c4:c4:52:7f:51: 80:cd:b4:bc:88:93:08:08:b4:c6:ed:12:73:c1:11: 5f:b8:a1:93:6b:c4:9c:a3:d2:ec:7a:07:f3:a8:90: de:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B2:30:E9:49:76:D5:01:68:33:F9:48:4C:69:EA:0E:5E:5C:1E:DD X509v3 Authority Key Identifier: keyid:CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:bc:7b:a0:c4:47:f8:d6:8e:16:a7:3b:9e:28:01:c2:ba:05: 26:9f:03:2c:19:4f:5a:76:27:fc:48:fe:4e:d5:30:44:40:f1: 75:7e:e3:21:59:2c:21:6d:53:bb:83:dc:f3:e1:44:6a:77:14: 05:17:a7:80:0c:6f:d3:e3:1b:3b:66:c7:fe:0f:9e:6b:85:d7: e3:81:31:34:e6:e5:66:af:10:db:b0:0d:c8:dd:aa:24:14:26: 9b:79:b0:12:2a:9d:f2:76:c8:ab:e9:68:58:58:f5:ea:16:71: 32:65:b3:ba:2c:71:cc:02:d9:6a:77:e1:e4:45:01:3c:0f:c9: cf:9c:28:7c:81:06:f3:98:1b:b4:d4:5e:a9:bc:05:b0:a6:a9: 71:30:d2:69:ba:93:6c:9b:d4:a8:c7:94:08:a4:e0:f6:ab:e1: 52:1a:ea:9b:e5:54:a7:44:4e:b0:60:8e:02:ba:2d:c1:35:a5: 62:74:08:ee:67:18:ec:1f:83:d8:ed:cb:57:1f:37:91:a2:6f: c3:2d:ec:53:69:86:f4:bb:9f:97:3f:10:4d:df:ef:98:f4:6c: 3e:54:22:ae:c4:ac:01:d4:a8:1d:50:70:a9:eb:2f:8c:94:fe: ec:cd:f8:0b:bb:a4:0b:97:84:db:79:45:b4:a2:ad:44:1a:c9: ac:0b:83:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVDMjUxMTAvBgNVBAUTKENCRjJBOURBODhBQzA4RjhENTEwNkRFQ0JENzJENkZB MDlDODE4RTkwHhcNMjQwNTE4MTgyNDM4WhcNMjQwNTI1MTgyNDM4WjAYMRYwFAYD VQQDEw02NjQ4ZjI2Ni0zYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aENO4NHuwmbcW57/Ihfq7eA4X8Bk2c0X7lb27Lv5XNJqikVP8IGHtLq7406 9z2y1lmi3mXMPdPomMH1GcVffE3CI7OxAaA6XLZzQYSt5HX/i/JJq0GsRPTa8olg VfZWdp4iiJhaOWvchoSK/SLREHsjynIOCStXSmgihEa0veYiH/I54b5at+ylAHxM 45OrLsjnwP7gnJzNGVhSxXCtiY/vk2p7FzvOEWmtDh5lLutyzlNO0ggusj748HY4 0+CGVdwpbGI5iKoALKMFxbfYozBhJ52drX1odrDFxMRSf1GAzbS8iJMICLTG7RJz wRFfuKGTa8Sco9LsegfzqJDexQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmyMOlJ dtUBaDP5SExp6g5eXB7dMB8GA1UdIwQYMBaAFMvyqdqIrAj41RBt7L1y1voJyBjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUMyNS82ODdBMTBBNjc2 NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQalZFRzNzdlhMVy1nbklH T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lfS3Ayb2lzQ1BqVkVHM3N2WExXLWduSUdPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUMyNS82ODdBMTBBNjc2NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQ alZFRzNzdlhMVy1nbklHT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0vHugxEf41o4WpzueKAHCugUmnwMsGU9adif8SP5O1TBEQPF1fuMh WSwhbVO7g9zz4URqdxQFF6eADG/T4xs7Zsf+D55rhdfjgTE05uVmrxDbsA3I3aok FCabebASKp3ydsir6WhYWPXqFnEyZbO6LHHMAtlqd+HkRQE8D8nPnCh8gQbzmBu0 1F6pvAWwpqlxMNJpupNsm9Sox5QIpOD2q+FSGuqb5VSnRE6wYI4Cui3BNaVidAju ZxjsH4PY7ctXHzeRom/DLexTaYb0u5+XPxBN3++Y9Gw+VCKuxKwB1KgdUHCp6y+M lP7szfgLu6QLl4TbeUW0oq1EGsmsC4N4 -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org