$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft File: YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft (raw, json) Hash identifier: ffceHZK+OmpsECZLH35MgI01g3lzNpZnyjifEtmIzKo= Subject key identifier: 26:C4:7A:C8:38:40:CF:CA:5B:BE:31:49:30:D5:45:4D:9E:4D:29:E7 Authority key identifier: 60:87:E3:54:FA:19:15:1C:FB:C6:18:48:B2:01:97:E1:7F:1C:7F:2C Certificate issuer: /CN=A91DBD45/serialNumber=6087E354FA19151CFBC61848B20197E17F1C7F2C Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YIfjVPoZFRz7xhhIsgGX4X8cfyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft Manifest number: BE Signing time: Sat 01 Jun 2024 07:46:02 +0000 Manifest this update: Sat 01 Jun 2024 07:46:01 +0000 Manifest next update: Sat 08 Jun 2024 07:46:01 +0000 Files and hashes: 1: YIfjVPoZFRz7xhhIsgGX4X8cfyw.crl (hash: GdcnvovKV1mET9GMGk1qtLVrPfn87CWdKmMfofQECRE=) 2: DCFF224CFEA311EDB9013076C4F9AE02.roa (hash: 3eLRaDdQwEbYF6ZCaLhw1Wi+F0nQMsWfJMWlSrJr4LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.crl rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YIfjVPoZFRz7xhhIsgGX4X8cfyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBD45/serialNumber=6087E354FA19151CFBC61848B20197E17F1C7F2C Validity Not Before: Jun 1 07:46:01 2024 GMT Not After : Jun 8 07:46:01 2024 GMT Subject: CN=665ad1ba-fa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:f0:22:99:b6:d0:98:2b:84:76:5d:92:c2: 4a:f4:a3:64:89:61:bf:35:6c:4b:07:8e:05:6a:f6: 88:4a:5c:75:fc:27:36:fa:ae:73:2e:32:11:09:b5: c8:19:c6:1c:1c:57:74:15:23:d9:a4:b5:5f:e3:71: 7e:10:f9:6e:71:0c:7e:6a:fb:e2:79:73:d4:7a:13: d4:ac:bf:97:77:2c:b5:17:25:86:68:bf:79:24:3c: bc:0a:bb:59:24:a9:0e:29:9d:84:09:b8:37:d4:8d: 7e:b2:1d:3d:8d:d5:aa:9b:64:75:fc:7e:eb:6e:d7: 96:66:54:84:6f:5b:76:9c:32:18:da:da:46:6f:9f: cb:da:6d:62:27:b8:a1:90:72:7e:49:01:57:1e:85: 1e:79:1a:2c:a6:25:13:c6:22:69:e8:5b:f8:ef:56: 9c:0a:c6:ab:be:66:b5:ea:50:7a:84:74:50:22:92: 3a:d3:9f:96:2c:b3:ce:0c:6b:c1:a7:e4:35:8f:7c: 5b:ec:38:fd:1b:fd:f6:e3:08:da:b3:3e:6a:65:7a: b3:5a:65:b3:62:bc:9d:42:18:83:23:af:15:b7:3a: 1d:0a:48:bf:4e:40:e3:a8:0a:73:42:40:05:f3:67: 30:3a:0f:a1:e1:d5:31:e5:74:9a:dd:ce:3f:50:72: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C4:7A:C8:38:40:CF:CA:5B:BE:31:49:30:D5:45:4D:9E:4D:29:E7 X509v3 Authority Key Identifier: keyid:60:87:E3:54:FA:19:15:1C:FB:C6:18:48:B2:01:97:E1:7F:1C:7F:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YIfjVPoZFRz7xhhIsgGX4X8cfyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e5:f4:13:f4:c5:0e:c0:72:44:a5:26:6a:40:79:90:27:57: b5:50:e0:0e:00:df:23:b2:30:5f:e8:71:b6:e1:fa:f9:b5:4c: f3:6f:c0:6b:7f:5d:7c:ce:2b:fb:1a:d4:ed:60:0d:fa:0d:88: 0d:4e:79:44:f4:18:03:97:eb:e4:e7:9c:2e:74:2b:c7:e8:48: 87:22:3d:4e:43:38:21:ca:8c:66:02:15:b2:b6:f9:4c:d8:b7: 74:59:e5:a4:fc:ca:a3:2c:16:28:e2:a2:8d:42:39:ea:19:6d: b7:f0:08:5f:ee:2e:ab:1e:ce:69:d0:92:62:11:89:60:94:e5: 5d:5b:4e:5b:24:7a:fd:fa:37:4c:c0:16:af:91:f6:1f:3c:65: c0:01:b5:ef:ef:f8:c5:63:18:da:5e:04:6c:bf:1d:bc:4e:80: f4:96:30:3a:c0:39:32:6c:53:5d:1b:0a:f8:e7:f9:7b:94:a0: f1:ee:8a:47:3b:96:59:1e:77:0c:79:76:cc:26:c3:e0:ea:60: 28:af:27:6c:b6:68:83:39:6f:33:f0:c3:24:a0:cc:63:a9:9a: 6d:5d:e1:ab:7b:81:3d:e4:52:19:7f:3e:80:37:26:3f:12:89: 09:81:99:20:0b:af:14:8f:b2:93:dd:15:94:be:50:f8:2a:16: 0a:a3:d5:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJENDUxMTAvBgNVBAUTKDYwODdFMzU0RkExOTE1MUNGQkM2MTg0OEIyMDE5N0Ux N0YxQzdGMkMwHhcNMjQwNjAxMDc0NjAxWhcNMjQwNjA4MDc0NjAxWjAYMRYwFAYD VQQDEw02NjVhZDFiYS1mYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gXwIpm20JgrhHZdksJK9KNkiWG/NWxLB44FavaISlx1/Cc2+q5zLjIRCbXI GcYcHFd0FSPZpLVf43F+EPlucQx+avvieXPUehPUrL+Xdyy1FyWGaL95JDy8CrtZ JKkOKZ2ECbg31I1+sh09jdWqm2R1/H7rbteWZlSEb1t2nDIY2tpGb5/L2m1iJ7ih kHJ+SQFXHoUeeRospiUTxiJp6Fv471acCsarvma16lB6hHRQIpI605+WLLPODGvB p+Q1j3xb7Dj9G/324wjasz5qZXqzWmWzYrydQhiDI68VtzodCki/TkDjqApzQkAF 82cwOg+h4dUx5XSa3c4/UHIkwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbEesg4 QM/KW74xSTDVRU2eTSnnMB8GA1UdIwQYMBaAFGCH41T6GRUc+8YYSLIBl+F/HH8s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkQ0NS83MDIxMUExQ0ZF OUYxMUVEODNGNDZGNzVDNEY5QUUwMi9ZSWZqVlBvWkZSejd4aGhJc2dHWDRYOGNm eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lJZmpWUG9aRlJ6N3hoaElzZ0dYNFg4Y2Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkQ0NS83MDIxMUExQ0ZFOUYxMUVEODNGNDZGNzVDNEY5QUUwMi9ZSWZqVlBvWkZS ejd4aGhJc2dHWDRYOGNmeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC65fQT9MUOwHJEpSZqQHmQJ1e1UOAOAN8jsjBf6HG24fr5tUzzb8Br f118ziv7GtTtYA36DYgNTnlE9BgDl+vk55wudCvH6EiHIj1OQzghyoxmAhWytvlM 2Ld0WeWk/MqjLBYo4qKNQjnqGW238Ahf7i6rHs5p0JJiEYlglOVdW05bJHr9+jdM wBavkfYfPGXAAbXv7/jFYxjaXgRsvx28ToD0ljA6wDkybFNdGwr45/l7lKDx7opH O5ZZHncMeXbMJsPg6mAorydstmiDOW8z8MMkoMxjqZptXeGre4E95FIZfz6ANyY/ EokJgZkgC68Uj7KT3RWUvlD4KhYKo9V1 -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:38 2024 by rpki-client on console-fra.rpki-client.org