$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: 8mQf0IrZwIOaCs0Zsd3AAzNEh+JlbV3aVlQ5JtRYTYA= Subject key identifier: 7E:66:64:96:20:E4:F4:99:C3:9D:B7:42:60:5B:98:43:F3:D9:D7:25 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 05BD Signing time: Sun 19 May 2024 00:07:50 +0000 Manifest this update: Sun 19 May 2024 00:07:50 +0000 Manifest next update: Sun 26 May 2024 00:07:50 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: LXtS9Ewnw7ukWhl0qVjy5FP+Oo5F2WVUb3GSNZgd6jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: May 19 00:07:50 2024 GMT Not After : May 26 00:07:50 2024 GMT Subject: CN=664942d6-ff5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:b4:11:c1:81:1d:6d:9b:86:72:17:eb:35: 28:3e:26:29:73:3e:73:75:4e:05:77:d7:d9:ac:5d: b2:5f:33:a1:5e:04:e5:a4:44:cd:25:2f:d7:dc:83: aa:f4:8d:f0:63:9e:1c:ed:e8:c4:b8:d8:a2:ef:25: 4e:f4:93:94:8e:ba:5a:23:ce:4a:90:19:b1:33:33: f4:2c:f1:15:35:c3:6e:cc:2d:60:5e:24:53:1a:cd: db:6f:c9:4b:12:8e:00:75:40:f7:05:c3:59:d1:77: ea:f7:6e:aa:f8:35:27:71:ea:07:38:09:71:3b:32: ba:e1:9c:d4:a5:e6:a2:a9:8e:e2:b4:12:68:03:64: a9:51:d4:b6:fa:f5:41:5d:b3:25:7c:20:d5:de:85: f8:29:dc:5f:03:d9:18:ce:27:ce:39:2d:8d:60:d6: 40:74:2e:55:51:b1:25:1f:08:13:92:f0:1d:83:9e: 7b:1a:0f:c0:f2:9d:12:35:8d:c2:16:f3:35:90:78: c7:ee:9d:f5:40:42:32:4e:b1:18:b6:78:2f:0f:cd: a1:fd:4e:91:88:4a:d2:37:f9:d3:44:89:63:45:26: 2b:6e:62:15:a0:19:77:af:c7:fc:26:36:bf:61:47: 60:e9:dc:38:dc:1e:f8:1c:0d:b4:d1:da:11:5f:8e: 05:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:66:64:96:20:E4:F4:99:C3:9D:B7:42:60:5B:98:43:F3:D9:D7:25 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:99:d0:1c:0a:68:4f:5a:c8:fb:11:99:58:e3:64:fa:0f:6b: 6e:40:01:77:27:6a:b4:7c:cd:64:36:4e:62:80:56:bb:bb:de: 73:81:aa:55:38:36:a0:57:42:24:ba:80:73:21:3f:97:06:2c: 9f:7a:1a:26:8e:08:a3:24:f5:1e:a2:49:67:b6:70:6d:6a:77: ab:52:eb:e1:9e:40:5b:3c:a4:f9:94:ee:33:80:aa:ce:0d:67: b8:98:85:98:a1:e2:41:7c:f5:87:e6:91:f2:6a:06:34:af:2b: a3:b8:b8:20:8c:4d:08:ba:cf:1d:4d:c0:56:86:84:c5:dd:61: 48:cc:1b:26:e8:28:3e:a6:58:b6:46:44:17:09:c9:b8:52:8a: 70:83:e3:ac:98:12:7e:73:fd:0c:db:00:b0:43:b8:d9:fe:58: 5b:5a:f4:49:c5:9b:15:76:d4:83:87:2f:3f:b0:0e:a2:54:50: 22:65:a9:10:b4:c3:bf:84:5f:f2:b5:84:9b:e5:5f:27:99:f5: 4b:e6:3d:e4:9b:d7:bc:64:cb:72:15:9a:a6:5b:d8:14:de:df: 6c:d5:bd:3a:75:a4:e5:5d:5c:35:1f:33:29:da:0e:c2:92:74: 96:04:5b:3d:5e:81:13:c7:1c:27:5f:a5:2a:e5:91:10:09:e2: f1:d4:26:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjQwNTE5MDAwNzUwWhcNMjQwNTI2MDAwNzUwWjAYMRYwFAYD VQQDEw02NjQ5NDJkNi1mZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Oy0EcGBHW2bhnIX6zUoPiYpcz5zdU4Fd9fZrF2yXzOhXgTlpETNJS/X3IOq 9I3wY54c7ejEuNii7yVO9JOUjrpaI85KkBmxMzP0LPEVNcNuzC1gXiRTGs3bb8lL Eo4AdUD3BcNZ0Xfq926q+DUnceoHOAlxOzK64ZzUpeaiqY7itBJoA2SpUdS2+vVB XbMlfCDV3oX4KdxfA9kYzifOOS2NYNZAdC5VUbElHwgTkvAdg557Gg/A8p0SNY3C FvM1kHjH7p31QEIyTrEYtngvD82h/U6RiErSN/nTRIljRSYrbmIVoBl3r8f8Jja/ YUdg6dw43B74HA200doRX44FzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5mZJYg 5PSZw523QmBbmEPz2dclMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYmdAcCmhPWsj7EZlY42T6D2tuQAF3J2q0fM1kNk5igFa7u95zgapV ODagV0IkuoBzIT+XBiyfehomjgijJPUeoklntnBtanerUuvhnkBbPKT5lO4zgKrO DWe4mIWYoeJBfPWH5pHyagY0ryujuLggjE0Ius8dTcBWhoTF3WFIzBsm6Cg+pli2 RkQXCcm4Uopwg+OsmBJ+c/0M2wCwQ7jZ/lhbWvRJxZsVdtSDhy8/sA6iVFAiZakQ tMO/hF/ytYSb5V8nmfVL5j3km9e8ZMtyFZqmW9gU3t9s1b06daTlXVw1HzMp2g7C knSWBFs9XoETxxwnX6Uq5ZEQCeLx1Cai -----END CERTIFICATE-----Generated at Sun May 19 01:47:19 2024 by rpki-client on console-ams.rpki-client.org