$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: hIHy6z24raiJoJ1HheYe7x2Sa5xMl3eCNVvKFDIOOdg= Subject key identifier: B7:93:50:DC:28:E3:02:99:B0:27:4E:E2:2B:CA:55:38:B2:F3:CA:E6 Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 01E4 Signing time: Sun 19 May 2024 04:17:41 +0000 Manifest this update: Sun 19 May 2024 04:17:41 +0000 Manifest next update: Sun 26 May 2024 04:17:41 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: VSBRIu26K+dVQI9unDV5hiyD6ghNO5Mu3f30aZO+6q4=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: mdwjdnEcrUfM7aLdZ7REcC0a8w2sZkQI5vBKiVrVe5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: May 19 04:17:41 2024 GMT Not After : May 26 04:17:41 2024 GMT Subject: CN=66497d65-c2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:3b:34:5f:aa:8e:e3:7b:d3:ba:f5:e9:78: 58:a3:da:1c:97:18:6a:ec:47:65:17:df:01:c0:33: c2:f9:aa:8c:05:ad:1c:9f:24:d9:47:16:67:a3:de: 83:72:45:42:89:c7:cf:41:3c:e1:8a:0e:31:42:34: 5c:25:fc:db:84:1d:0c:91:81:1b:5f:4f:08:a8:da: 50:85:bf:7a:5d:e2:51:4a:a5:f0:ad:57:b7:63:47: b9:ea:96:61:ca:b6:aa:b4:01:1a:f5:ae:de:af:41: 72:eb:83:9a:5e:83:d1:dd:66:22:af:0f:d2:dd:d0: 7a:d1:e5:a8:00:c9:f0:ba:e9:3a:16:b9:45:0e:bd: 75:6c:8a:80:e1:43:a5:b8:85:44:28:8a:8d:ad:a0: 11:25:e3:58:7e:41:ce:67:20:59:20:53:56:57:01: 30:2f:a1:98:17:e8:2d:7a:68:4c:68:a4:f2:4c:a1: 1f:71:32:6f:51:fa:ab:fc:fc:01:08:ee:c4:71:00: 2c:7b:80:cd:4e:33:ea:ad:07:77:cf:0b:fd:82:bf: b6:3f:38:9d:26:64:5f:2b:ec:93:ac:9b:cd:3a:9a: 93:a2:da:46:83:b5:8b:51:4b:59:8a:b4:54:95:4c: 12:1e:97:19:3b:5e:23:b3:e2:91:52:df:a7:21:0c: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:93:50:DC:28:E3:02:99:B0:27:4E:E2:2B:CA:55:38:B2:F3:CA:E6 X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:c3:83:ab:ab:a5:b2:42:66:d5:85:32:a4:ca:89:cd:fa:62: a4:ec:7e:88:f3:70:02:40:e5:a0:1b:32:8a:ee:4c:29:76:71: 9d:e0:33:09:dd:30:f9:7f:ed:62:66:39:63:47:0c:b2:c1:21: 45:bd:2c:f7:c1:2a:0e:42:9e:cb:12:c6:39:f8:88:0c:44:13: 4f:2b:ee:27:b2:37:5d:62:28:d1:68:48:42:16:96:0b:a1:d5: 35:ca:08:9c:b4:81:25:d6:2c:74:da:3c:9b:d0:a2:c9:88:2d: 66:1c:60:41:06:04:e3:ce:c5:82:29:51:34:42:45:a1:44:df: 5e:bf:f9:02:d8:b9:0b:e7:17:b5:61:b7:12:fe:de:bb:a0:ea: fa:5a:b7:8c:d0:cf:ce:9e:59:0f:4d:b0:5e:08:5c:a6:ce:f7: 32:ce:ae:26:1b:e0:7b:19:a3:86:50:ae:c7:76:19:38:e8:26: 10:f1:a1:d9:19:d8:0b:d9:52:21:fb:f5:7d:77:be:07:d7:9e: 72:16:ae:9b:80:a6:ef:87:27:0e:1b:42:d1:b9:83:ad:f2:42: f7:28:ad:9c:ea:79:bb:40:59:1b:ce:d8:62:a2:7e:cd:f0:5b: 2f:df:69:07:30:0e:d4:7a:a8:71:d9:97:78:00:9f:e2:fd:30: fe:1e:4b:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjQwNTE5MDQxNzQxWhcNMjQwNTI2MDQxNzQxWjAYMRYwFAYD VQQDEw02NjQ5N2Q2NS1jMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHo7NF+qjuN707r16XhYo9oclxhq7EdlF98BwDPC+aqMBa0cnyTZRxZno96D ckVCicfPQTzhig4xQjRcJfzbhB0MkYEbX08IqNpQhb96XeJRSqXwrVe3Y0e56pZh yraqtAEa9a7er0Fy64OaXoPR3WYirw/S3dB60eWoAMnwuuk6FrlFDr11bIqA4UOl uIVEKIqNraARJeNYfkHOZyBZIFNWVwEwL6GYF+gtemhMaKTyTKEfcTJvUfqr/PwB CO7EcQAse4DNTjPqrQd3zwv9gr+2PzidJmRfK+yTrJvNOpqTotpGg7WLUUtZirRU lUwSHpcZO14js+KRUt+nIQz+BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeTUNwo 4wKZsCdO4ivKVTiy88rmMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJw4Orq6WyQmbVhTKkyonN+mKk7H6I83ACQOWgGzKK7kwpdnGd4DMJ 3TD5f+1iZjljRwyywSFFvSz3wSoOQp7LEsY5+IgMRBNPK+4nsjddYijRaEhCFpYL odU1ygictIEl1ix02jyb0KLJiC1mHGBBBgTjzsWCKVE0QkWhRN9ev/kC2LkL5xe1 YbcS/t67oOr6WreM0M/OnlkPTbBeCFymzvcyzq4mG+B7GaOGUK7Hdhk46CYQ8aHZ GdgL2VIh+/V9d74H155yFq6bgKbvhycOG0LRuYOt8kL3KK2c6nm7QFkbzthion7N 8Fsv32kHMA7Ueqhx2Zd4AJ/i/TD+Hkth -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org