$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft File: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft (raw, json) Hash identifier: 2XUaq8L8KEM2VZlOmZ7yrZEBRmzskl9R08neVQtTKkk= Subject key identifier: 34:79:9F:FB:23:D1:40:DE:01:F9:32:33:56:CF:5A:4E:33:FE:91:E4 Authority key identifier: D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23 Certificate issuer: /CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft Manifest number: 012F Signing time: Sun 19 May 2024 04:59:51 +0000 Manifest this update: Sun 19 May 2024 04:59:51 +0000 Manifest next update: Sun 26 May 2024 04:59:51 +0000 Files and hashes: 1: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl (hash: uDyPTDB5PdF4rUEZLKO98bgR4t5d6KLsfklB6TIHhC8=) 2: C18E7856446C11EDA55DB951C4F9AE02.roa (hash: f3dkko2SsUhOvSSMI7rmurbucL4yK02dZgoRDuXpmPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323 Validity Not Before: May 19 04:59:51 2024 GMT Not After : May 26 04:59:51 2024 GMT Subject: CN=66498747-779e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:05:0f:b4:d7:5b:bc:92:57:c1:df:aa:61: 3c:40:8c:01:04:35:87:d3:51:79:62:14:55:b4:fd: af:bd:3e:4b:9d:38:2b:c5:42:a6:22:a5:e6:e2:9e: ce:1d:3e:17:be:fb:12:bd:f1:d1:ab:27:72:26:1a: f7:c3:35:d5:6d:47:28:fe:30:8e:56:cc:96:6a:20: cc:62:25:4d:28:23:ad:f9:2d:50:28:7b:12:d7:4d: 34:13:a2:03:66:39:da:4d:b6:9c:66:63:a9:09:b2: 2e:78:8b:f1:6d:23:48:9c:0b:92:a4:fc:c0:bb:7f: d8:1a:67:3e:fd:bd:96:8e:99:1d:a0:d9:19:d6:f4: ad:eb:7e:df:3e:2c:e6:3a:a0:37:ef:ee:67:73:19: fd:38:a1:e5:d2:36:bf:eb:2b:ea:5d:44:97:45:65: 59:03:56:04:c6:e2:1a:11:37:1a:5b:82:2d:10:3c: 68:03:f9:cb:b9:6a:67:de:78:b8:be:ba:2b:4d:df: f1:37:9d:de:9d:5f:a0:fc:ef:1f:a3:6f:a9:4f:5f: 24:ea:0f:83:5e:9b:75:0c:23:23:13:6e:e3:cc:09: 08:e9:d5:57:7c:fd:4d:8a:94:9e:a4:79:83:ea:3f: 7d:85:ab:9d:6b:0a:8e:9f:8b:df:dd:de:0d:f9:6a: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:79:9F:FB:23:D1:40:DE:01:F9:32:33:56:CF:5A:4E:33:FE:91:E4 X509v3 Authority Key Identifier: keyid:D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0d:b0:6b:b9:d2:11:cf:9e:d5:08:01:a9:fd:ff:72:99:fd: ed:01:40:3a:81:42:59:6d:41:65:ed:5d:cc:14:b7:cd:b8:ac: 5e:eb:f1:c1:6a:4e:55:b7:ba:91:76:ee:b9:7d:3f:3f:78:c2: 12:a7:aa:e8:1b:17:68:c6:64:99:57:96:a4:a4:1d:1b:a3:b5: 9f:c3:70:74:4a:67:b1:47:a2:2e:32:e3:7d:40:23:db:da:db: 2a:40:1b:66:49:a8:e3:04:b9:ae:49:23:ca:78:f8:b0:81:2b: 63:5f:4f:08:54:d5:89:e1:e9:47:93:d4:6c:11:84:2d:ab:ec: 6a:09:77:4e:5d:e3:e2:75:c4:3f:c6:b2:9c:bb:c7:a9:a2:3e: a9:3e:f8:c3:2d:21:55:54:2e:b7:d9:7a:14:da:2b:ca:1e:e4: 17:5c:06:d2:ef:20:0a:14:8d:5c:3f:17:b7:47:7d:6f:e1:e3: 61:c2:53:9b:56:96:8f:98:73:1f:97:46:e8:78:0c:ca:31:4d: 39:2b:68:77:06:83:67:5a:cd:ac:b9:bf:4b:7d:dd:16:cb:96: 0a:6e:e7:79:a5:8e:7c:84:19:8e:70:7c:7d:97:a0:22:5b:a7: e7:82:12:e8:aa:59:a5:18:44:b9:33:1c:0f:3c:55:71:33:d3: 53:ef:94:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCMzkxMTAvBgNVBAUTKEQxOEY5OEE0MUMwQURDOEM4MTg0QjgyNkE3MUYzRUYy N0YxOTUzMjMwHhcNMjQwNTE5MDQ1OTUxWhcNMjQwNTI2MDQ1OTUxWjAYMRYwFAYD VQQDEw02NjQ5ODc0Ny03NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGIFD7TXW7ySV8HfqmE8QIwBBDWH01F5YhRVtP2vvT5LnTgrxUKmIqXm4p7O HT4XvvsSvfHRqydyJhr3wzXVbUco/jCOVsyWaiDMYiVNKCOt+S1QKHsS1000E6ID ZjnaTbacZmOpCbIueIvxbSNInAuSpPzAu3/YGmc+/b2WjpkdoNkZ1vSt637fPizm OqA37+5ncxn9OKHl0ja/6yvqXUSXRWVZA1YExuIaETcaW4ItEDxoA/nLuWpn3ni4 vrorTd/xN53enV+g/O8fo2+pT18k6g+DXpt1DCMjE27jzAkI6dVXfP1NipSepHmD 6j99haudawqOn4vf3d4N+WoXXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR5n/sj 0UDeAfkyM1bPWk4z/pHkMB8GA1UdIwQYMBaAFNGPmKQcCtyMgYS4JqcfPvJ/GVMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUIzOS9CNzY5OUQyQzQ0 NjkxMUVEQkU0RTc5NENDNEY5QUUwMi8wWS1ZcEJ3SzNJeUJoTGdtcHg4LThuOFpV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZLVlwQndLM0l5QmhMZ21weDgtOG44WlV5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUIzOS9CNzY5OUQyQzQ0NjkxMUVEQkU0RTc5NENDNEY5QUUwMi8wWS1ZcEJ3SzNJ eUJoTGdtcHg4LThuOFpVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiDbBrudIRz57VCAGp/f9ymf3tAUA6gUJZbUFl7V3MFLfNuKxe6/HB ak5Vt7qRdu65fT8/eMISp6roGxdoxmSZV5akpB0bo7Wfw3B0SmexR6IuMuN9QCPb 2tsqQBtmSajjBLmuSSPKePiwgStjX08IVNWJ4elHk9RsEYQtq+xqCXdOXePidcQ/ xrKcu8epoj6pPvjDLSFVVC632XoU2ivKHuQXXAbS7yAKFI1cPxe3R31v4eNhwlOb VpaPmHMfl0boeAzKMU05K2h3BoNnWs2sub9Lfd0Wy5YKbud5pY58hBmOcHx9l6Ai W6fnghLoqlmlGES5MxwPPFVxM9NT75RD -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org