$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json) Hash identifier: 4DjH+Qzz3WDwHHLF1oDZjmApSW+dlEIXpy+gd22FI7A= Subject key identifier: 2F:F0:E1:B4:5E:E8:BC:9A:4C:FB:44:58:F8:30:E1:58:61:8B:9D:42 Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft Manifest number: 63 Signing time: Sun 19 May 2024 07:39:43 +0000 Manifest this update: Sun 19 May 2024 07:39:43 +0000 Manifest next update: Sun 26 May 2024 07:39:43 +0000 Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: MVWeIkQUNb3i8NGIg8+xzQd7o+vC3+h6zzjDB0lmOQU=) 2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: ZGdA796ml3VKylLB4w8czh682N3cMD4buo243Xsl1pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: May 19 07:39:43 2024 GMT Not After : May 26 07:39:43 2024 GMT Subject: CN=6649acbf-0c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:43:61:a7:dc:6e:45:a6:63:fb:13:3a:d5:0f: 92:ee:6c:36:25:0a:a2:ff:bc:62:27:c1:16:05:2c: af:cf:79:c1:b7:24:cc:ae:41:ca:69:6a:79:a8:f6: 36:d5:80:a3:23:08:08:b4:5f:77:7b:37:9a:1b:62: 10:ab:d6:23:d0:ca:b9:d5:fd:cf:0e:08:6e:43:48: f6:1b:a5:fc:1e:29:98:b1:4b:33:6c:1c:29:f8:d3: 2b:e9:24:7a:83:cd:d1:1f:aa:34:af:f6:5c:74:c2: 1d:cf:33:8f:a1:c7:d0:9f:ef:3d:79:09:c4:dc:9e: 03:73:55:8b:7d:22:56:f8:45:24:a7:8a:5e:89:3c: 97:71:dd:50:5d:4d:04:55:41:d8:2a:99:65:b0:a2: cc:bb:3b:6e:67:73:0e:c0:eb:b2:eb:b3:a6:5f:a7: 93:f7:2e:71:01:85:a9:89:27:92:05:3f:1f:25:dd: 30:f7:f7:2e:54:d6:51:ad:c8:fc:a2:1e:10:20:01: 2a:41:d7:32:ba:d5:45:b7:85:fa:24:0f:46:c7:e4: 9e:75:be:a6:b9:f4:c0:c1:d7:1b:16:77:b2:40:f9: 13:79:58:dd:01:29:ce:ef:1d:a1:4b:0f:3b:fe:d2: 50:9f:da:77:94:8d:d8:a5:ca:9f:65:b6:ac:7b:cf: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F0:E1:B4:5E:E8:BC:9A:4C:FB:44:58:F8:30:E1:58:61:8B:9D:42 X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:be:1f:f9:e9:a0:32:d9:25:f9:98:7c:5d:f4:03:e1:3e:81: 12:bf:92:84:ce:93:9a:d9:ca:03:c9:37:bd:67:08:a3:dc:c5: 42:60:f7:2b:5c:23:28:ce:bf:da:6b:3a:8e:8a:27:27:97:df: bc:72:94:c6:59:0e:e4:33:4d:c4:7b:53:40:58:66:c8:42:00: 69:2b:cb:d3:12:c8:68:ac:28:b5:60:18:6f:0c:9e:af:6c:5b: 68:3c:53:b0:c5:bc:de:ee:c1:77:9c:44:9e:06:be:26:c3:49: f7:ae:29:0e:a6:7b:9a:81:4c:e5:9b:06:11:4d:93:db:e3:b1: 25:bc:a1:ec:d1:63:bc:17:52:17:31:cc:f0:1d:25:4a:13:31: 41:34:31:c5:2e:f0:36:cd:84:e1:6e:c7:7a:e6:0f:d5:7a:34: 83:72:5a:90:a6:2e:62:4b:1c:79:09:ed:d5:dd:66:bf:42:30: 0a:4b:e2:58:87:b0:8d:0f:d0:80:a7:2f:e3:82:86:33:cc:a9: c8:2c:be:9d:3d:fe:56:7a:7c:5b:74:7e:42:00:be:dc:e8:f3: 8b:9c:60:cd:2a:59:44:6c:39:e0:a4:49:be:aa:fc:ab:bf:66: c4:72:24:96:3c:3e:7f:d7:80:fa:12:75:7a:20:08:46:3e:8e: b8:03:95:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0RCMzExMC8GA1UEBRMoNjNBMjlBQkQ4N0Y0QTFGRTU1Q0JGMkEwRjQwOTc1MEFD MzRBQzIzNTAeFw0yNDA1MTkwNzM5NDNaFw0yNDA1MjYwNzM5NDNaMBgxFjAUBgNV BAMTDTY2NDlhY2JmLTBjNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgQ2Gn3G5FpmP7EzrVD5LubDYlCqL/vGInwRYFLK/PecG3JMyuQcppanmo9jbV gKMjCAi0X3d7N5obYhCr1iPQyrnV/c8OCG5DSPYbpfweKZixSzNsHCn40yvpJHqD zdEfqjSv9lx0wh3PM4+hx9Cf7z15CcTcngNzVYt9Ilb4RSSnil6JPJdx3VBdTQRV QdgqmWWwosy7O25ncw7A67Lrs6Zfp5P3LnEBhamJJ5IFPx8l3TD39y5U1lGtyPyi HhAgASpB1zK61UW3hfokD0bH5J51vqa59MDB1xsWd7JA+RN5WN0BKc7vHaFLDzv+ 0lCf2neUjdilyp9ltqx7z3OHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL/DhtF7o vJpM+0RY+DDhWGGLnUIwHwYDVR0jBBgwFoAUY6KavYf0of5Vy/Kg9Al1CsNKwjUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDREIzLzkzMDVEMkUwODJB RjExRUVCRUM1OTc1OUM0RjlBRTAyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dq VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTZLYXZZZjBvZjVWeV9LZzlBbDFDc05Ld2pVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD REIzLzkzMDVEMkUwODJBRjExRUVCRUM1OTc1OUM0RjlBRTAyL1k2S2F2WWYwb2Y1 VnlfS2c5QWwxQ3NOS3dqVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADm+H/npoDLZJfmYfF30A+E+gRK/koTOk5rZygPJN71nCKPcxUJg9ytc IyjOv9prOo6KJyeX37xylMZZDuQzTcR7U0BYZshCAGkry9MSyGisKLVgGG8Mnq9s W2g8U7DFvN7uwXecRJ4GvibDSfeuKQ6me5qBTOWbBhFNk9vjsSW8oezRY7wXUhcx zPAdJUoTMUE0McUu8DbNhOFux3rmD9V6NINyWpCmLmJLHHkJ7dXdZr9CMApL4liH sI0P0ICnL+OChjPMqcgsvp09/lZ6fFt0fkIAvtzo84ucYM0qWURsOeCkSb6q/Ku/ ZsRyJJY8Pn/XgPoSdXogCEY+jrgDlSQ= -----END CERTIFICATE-----Generated at Sun May 19 08:25:08 2024 by rpki-client on console-ams.rpki-client.org