$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft File: ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json) Hash identifier: GcDwyO8P/jCBjrTQxUG9dxAzT4LXljqHjJJTlszdfDQ= Subject key identifier: 2D:D7:E2:8D:B4:67:92:5C:49:4C:85:9C:37:6C:E6:25:D9:CE:D3:D7 Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Certificate serial: 083A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft Manifest number: 0834 Signing time: Sat 18 May 2024 21:44:05 +0000 Manifest this update: Sat 18 May 2024 21:44:04 +0000 Manifest next update: Sat 25 May 2024 21:44:04 +0000 Files and hashes: 1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: t9WGVvV1dPPaK4mVdaxaiRg7YFmkiTO5CP47M2RYY38=) 2: CD77D766287911ED93621A30C4F9AE02.roa (hash: gN2FZeNXqiYFjRqzzNhrx6X/x84wIeQDu/SZTNGaq+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2106 (0x83a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Validity Not Before: May 18 21:44:04 2024 GMT Not After : May 25 21:44:04 2024 GMT Subject: CN=66492125-dba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:55:74:3b:d9:d9:52:98:8a:aa:fc:20:fa: 2c:c8:f0:2b:f7:90:3b:9a:c8:d7:77:06:8e:c2:76: 82:ba:db:75:b1:26:82:92:d7:55:00:7f:a0:d6:b8: e7:9c:29:e3:ff:72:07:1b:81:c0:08:f2:3b:77:ab: 44:e3:ff:d1:8a:56:b6:1d:a1:24:14:bd:d2:8f:36: 5d:87:86:d0:83:a6:bf:f8:a7:6d:39:e1:9b:0c:49: f5:87:8a:db:f5:48:47:cb:49:c0:49:3c:a8:9e:65: 2b:78:12:6c:b8:55:3f:70:2d:e7:90:5f:3a:ea:56: ed:ff:2d:c7:3d:31:e7:2c:e8:c8:90:ec:f9:a6:52: b5:b3:64:22:a2:88:9e:95:86:4b:23:b3:6c:4d:75: 82:e4:4b:b5:e2:97:b0:2e:e6:77:d6:c9:5d:30:fc: 9a:d1:be:14:c8:c9:1d:1d:57:d5:4f:33:8f:d4:4f: d2:99:38:9c:2b:7c:b8:18:ee:a3:95:b0:ad:c2:28: df:e1:21:35:ea:ae:e0:fe:3c:57:bc:19:8f:68:a0: aa:12:1e:a4:64:e7:92:9b:5d:24:a7:88:5c:02:43: 0e:d3:98:89:a6:cd:60:cb:2a:fa:e1:85:58:bf:08: d4:5f:da:b8:17:6a:20:2c:e6:f6:b6:9f:51:7f:47: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D7:E2:8D:B4:67:92:5C:49:4C:85:9C:37:6C:E6:25:D9:CE:D3:D7 X509v3 Authority Key Identifier: keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:52:ad:db:29:6b:8d:bb:1c:51:0e:87:07:49:34:89:5f:33: 8a:f8:20:64:c3:85:ef:3b:36:98:18:6e:82:f3:e7:e1:59:7e: 70:1f:46:45:f7:d8:50:db:4b:89:cb:97:79:86:f4:b3:f9:a8: 6b:08:d3:07:71:ef:c6:9b:be:b0:85:9e:93:dd:2f:a0:7c:66: e4:e4:48:3b:38:bf:b1:bc:26:c5:c5:96:4d:e4:57:39:92:03: b8:d0:d8:db:17:e2:97:c1:55:49:07:fe:2c:25:8e:6f:ba:90: 5d:6f:3a:f4:80:fe:be:f8:41:40:93:8c:62:fe:ac:13:7a:ad: 36:d5:8f:77:df:03:f3:f4:ea:eb:3c:09:05:57:9b:ea:b7:17: c9:b5:81:1e:2c:b4:73:a6:c5:37:0b:cb:08:2f:66:1d:90:c4: 9d:28:45:9b:8b:f8:ca:70:cf:72:ea:87:d3:ad:80:0b:1b:85: 9c:74:6b:41:e7:88:b0:b7:c9:0e:97:36:ea:cb:5b:06:9e:f1: 44:80:b7:1d:66:65:6d:02:5d:87:84:b5:a0:eb:9b:b4:80:f8: f6:c1:ee:ce:d3:21:b9:cb:3c:9d:41:b8:7d:fd:11:ea:f1:a6: 36:f6:de:56:8f:85:d3:e7:8d:42:2c:15:a0:1b:76:42:f1:04: 80:9d:0d:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD REZEMTZGRTEwHhcNMjQwNTE4MjE0NDA0WhcNMjQwNTI1MjE0NDA0WjAYMRYwFAYD VQQDEw02NjQ5MjEyNS1kYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12VVdDvZ2VKYiqr8IPosyPAr95A7msjXdwaOwnaCutt1sSaCktdVAH+g1rjn nCnj/3IHG4HACPI7d6tE4//Rila2HaEkFL3SjzZdh4bQg6a/+KdtOeGbDEn1h4rb 9UhHy0nASTyonmUreBJsuFU/cC3nkF866lbt/y3HPTHnLOjIkOz5plK1s2Qiooie lYZLI7NsTXWC5Eu14pewLuZ31sldMPya0b4UyMkdHVfVTzOP1E/SmTicK3y4GO6j lbCtwijf4SE16q7g/jxXvBmPaKCqEh6kZOeSm10kp4hcAkMO05iJps1gyyr64YVY vwjUX9q4F2ogLOb2tp9Rf0cnVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3X4o20 Z5JcSUyFnDds5iXZztPXMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5 QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcyMS9BM0MwNkFENkE5QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JO QkxPYnNlb3JScExOX1JiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsUq3bKWuNuxxRDocHSTSJXzOK+CBkw4XvOzaYGG6C8+fhWX5wH0ZF 99hQ20uJy5d5hvSz+ahrCNMHce/Gm76whZ6T3S+gfGbk5Eg7OL+xvCbFxZZN5Fc5 kgO40NjbF+KXwVVJB/4sJY5vupBdbzr0gP6++EFAk4xi/qwTeq021Y933wPz9Orr PAkFV5vqtxfJtYEeLLRzpsU3C8sIL2YdkMSdKEWbi/jKcM9y6ofTrYALG4WcdGtB 54iwt8kOlzbqy1sGnvFEgLcdZmVtAl2HhLWg65u0gPj2we7O0yG5yzydQbh9/RHq 8aY29t5Wj4XT541CLBWgG3ZC8QSAnQ3Y -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org