$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: ctlnmS3UbZe77hSOSnxIKf2tebg4biAAfu2kHQ5KHLk= Subject key identifier: 2D:0E:0A:B5:63:32:AD:2A:02:EC:02:8E:02:53:6F:14:8A:26:33:9C Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0E3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0E34 Signing time: Sat 18 May 2024 18:26:19 +0000 Manifest this update: Sat 18 May 2024 18:26:18 +0000 Manifest next update: Sat 25 May 2024 18:26:18 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: uk3aXOdwEvNNVw0h1FFkgHQ4uaiBC9SrKOUFSVUkVic=) 2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: 02Gzx78skBC3A5z4FgwAljuDa/r2bhVIgxNZ9hamRSk=) 3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: yxqOrTWG1l4E66Ldnkh3RH8ccpHwkvnioa7/AvcJV9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3647 (0xe3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: May 18 18:26:18 2024 GMT Not After : May 25 18:26:18 2024 GMT Subject: CN=6648f2ca-ecd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:5e:52:f7:bb:1b:c0:23:a4:36:e8:82:54: 1d:7d:ac:ad:2b:15:3e:b2:ef:df:21:4b:51:8f:a6: 7f:95:ea:4b:b7:51:d8:60:6a:e2:1d:20:7f:dc:8f: c2:f5:2b:d7:b9:71:81:04:a1:22:a2:7c:6f:0c:02: 00:5a:57:5e:d1:f0:07:c0:9c:94:f4:22:84:d2:1e: 3a:5d:dc:94:52:46:a8:87:ae:03:ac:54:18:e0:50: dc:2a:0f:96:55:49:73:4b:71:b3:30:0f:d5:a1:84: a7:fa:7d:42:7b:7a:c8:11:f1:fc:4b:c5:98:63:b9: 7d:3f:f5:f4:0d:56:d2:2e:f2:34:d2:ac:9e:ba:fe: 01:c2:31:4b:14:fb:b7:14:73:50:0e:bd:58:a5:a7: 95:10:32:de:76:7a:ad:17:58:2e:f9:13:8f:5d:13: f2:9c:4a:aa:2e:0e:2f:02:7b:f1:b7:2e:ee:02:81: 2a:9d:c4:1f:62:e7:a9:0c:77:25:8c:6b:ea:58:79: 96:24:d0:dc:ff:5e:7b:56:c1:70:ca:c0:a0:8c:97: 5f:d4:b3:fa:bd:34:16:5a:77:ca:fb:1a:c2:2f:c1: 4e:60:32:52:78:d2:71:92:13:58:b9:4b:a2:48:85: 80:43:ae:f9:f8:89:23:1b:b2:48:b1:5f:d5:78:42: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0E:0A:B5:63:32:AD:2A:02:EC:02:8E:02:53:6F:14:8A:26:33:9C X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:82:2f:4e:30:2b:ac:69:2a:9e:f7:ec:de:97:91:3e:f2:84: df:58:76:71:96:60:86:dd:c4:7d:d2:b7:08:04:00:95:78:d8: a2:21:54:62:42:f8:06:60:2e:07:f9:d0:c8:ab:ad:65:30:fc: 9e:e5:83:50:8f:13:2f:af:23:20:0e:0f:a6:4e:78:db:d0:3f: de:3f:30:00:21:1a:c3:04:d5:f2:35:7f:63:c9:07:6f:14:c4: 73:93:12:84:24:a7:a6:2f:bc:b6:4a:40:d5:98:4a:f5:19:93: 5b:69:90:07:0e:41:47:20:36:e8:c6:fa:80:ac:59:d2:10:5e: f1:cb:5f:66:05:f6:0d:f7:66:3c:dc:48:15:54:d6:48:0c:1e: 0e:9e:ce:2b:9c:41:23:29:8b:de:5d:63:24:c8:e1:b6:35:40: 2d:c4:03:31:a6:0b:f2:74:5e:54:a2:80:e4:27:cb:4c:2d:f5: fb:55:33:30:62:5a:59:3f:35:73:6f:a7:93:ab:9b:88:63:72: 9b:99:82:33:87:6b:e2:38:f0:ae:2d:74:1c:5d:f2:26:32:11: e2:1a:c9:91:f6:cf:95:1b:d7:fb:66:e2:ad:8c:68:7a:e5:5f: 83:0e:88:c4:a5:b2:41:12:83:0d:03:b3:23:7a:13:b6:f5:72: cc:c8:5c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjQwNTE4MTgyNjE4WhcNMjQwNTI1MTgyNjE4WjAYMRYwFAYD VQQDEw02NjQ4ZjJjYS1lY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hFeUve7G8AjpDboglQdfaytKxU+su/fIUtRj6Z/lepLt1HYYGriHSB/3I/C 9SvXuXGBBKEionxvDAIAWlde0fAHwJyU9CKE0h46XdyUUkaoh64DrFQY4FDcKg+W VUlzS3GzMA/VoYSn+n1Ce3rIEfH8S8WYY7l9P/X0DVbSLvI00qyeuv4BwjFLFPu3 FHNQDr1YpaeVEDLednqtF1gu+ROPXRPynEqqLg4vAnvxty7uAoEqncQfYuepDHcl jGvqWHmWJNDc/157VsFwysCgjJdf1LP6vTQWWnfK+xrCL8FOYDJSeNJxkhNYuUui SIWAQ675+IkjG7JIsV/VeEJVowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0OCrVj Mq0qAuwCjgJTbxSKJjOcMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCigi9OMCusaSqe9+zel5E+8oTfWHZxlmCG3cR90rcIBACVeNiiIVRi QvgGYC4H+dDIq61lMPye5YNQjxMvryMgDg+mTnjb0D/ePzAAIRrDBNXyNX9jyQdv FMRzkxKEJKemL7y2SkDVmEr1GZNbaZAHDkFHIDboxvqArFnSEF7xy19mBfYN92Y8 3EgVVNZIDB4Ons4rnEEjKYveXWMkyOG2NUAtxAMxpgvydF5UooDkJ8tMLfX7VTMw YlpZPzVzb6eTq5uIY3KbmYIzh2viOPCuLXQcXfImMhHiGsmR9s+VG9f7ZuKtjGh6 5V+DDojEpbJBEoMNA7MjehO29XLMyFxk -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org