$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft File: MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json) Hash identifier: URMXmAdm9NZo/ydIKKA6k4J0loZDCk8hosXWN+sg9yM= Subject key identifier: 51:A1:4D:F5:9F:2C:DB:6C:FB:FA:22:FA:8B:CD:5C:56:7C:EF:55:ED Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 Certificate issuer: /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft Manifest number: 23 Signing time: Sun 19 May 2024 08:32:11 +0000 Manifest this update: Sun 19 May 2024 08:32:10 +0000 Manifest next update: Sun 26 May 2024 08:32:10 +0000 Files and hashes: 1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: GsVxPAcdoCEuWktOigaYLlFCHeytjcYBKsCtMUcnwAQ=) 2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: 0MtwCciVuO81difEPZPl8SOQdXiTFdE21V7yrUDjvPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Validity Not Before: May 19 08:32:10 2024 GMT Not After : May 26 08:32:10 2024 GMT Subject: CN=6649b90a-e820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:4d:f3:9f:bf:5d:0c:66:3c:9e:c3:70:e2: 68:87:84:d4:0a:7e:63:64:6d:d1:c6:fa:18:67:4c: 55:63:83:bb:6d:3f:52:62:23:5f:1f:0e:fa:5f:73: 79:6a:54:44:84:4e:d3:cd:e2:5c:f1:37:8e:47:fc: 4e:ac:80:db:7e:44:e7:78:37:25:73:55:50:b0:c4: 92:f7:ec:d6:13:db:bf:06:13:ac:0f:24:ab:8a:5c: b9:49:c3:38:37:29:69:22:46:d6:4b:53:dd:2e:bf: 55:fc:08:af:3f:c3:dd:bb:20:30:97:c0:a1:9e:b3: 26:04:c9:34:54:8a:b9:99:26:1e:18:3e:55:05:2f: 5c:59:fd:a1:d1:c0:f7:06:9a:ab:c0:ec:e2:5e:00: 56:ec:d8:4a:e4:be:d9:fe:69:d2:70:a8:1f:85:ca: 7b:01:39:b8:9e:fa:1e:65:5b:2f:35:10:49:bc:24: 8e:b9:f4:5e:7b:c1:ce:7c:9e:cc:c4:1d:31:79:86: 29:5f:53:73:17:27:65:47:71:52:01:4d:6e:71:13: 0e:a8:7a:39:ea:76:9d:ee:10:d7:33:91:75:04:b1: 9b:40:02:c2:70:53:4b:e3:ae:e4:d5:5e:5a:e6:ee: b3:2c:99:63:b7:ed:17:97:48:79:fc:a5:ca:77:7b: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A1:4D:F5:9F:2C:DB:6C:FB:FA:22:FA:8B:CD:5C:56:7C:EF:55:ED X509v3 Authority Key Identifier: keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a3:1f:56:22:ee:60:34:2a:c4:98:db:ec:18:ad:1e:54:a9: fe:48:2a:ab:69:e5:02:1c:30:6d:cc:6f:af:43:f1:7d:a9:3c: c4:d5:b1:9f:f8:7e:22:6d:80:ef:52:1b:da:d9:4a:a3:ac:46: cd:21:87:2c:16:e0:2f:19:09:81:4f:2f:23:30:71:54:f5:e2: 2d:6f:03:79:bf:4d:77:20:ea:d8:d4:15:0e:a5:1a:20:9d:21: 60:f3:f4:1c:14:0c:7d:2d:3f:15:26:a8:0a:16:6c:20:5d:5f: be:76:ac:17:8e:29:aa:10:fc:6b:13:93:a3:16:c2:f3:8d:5c: 16:5d:a1:c0:e5:45:19:12:03:62:83:79:62:6f:00:15:22:07: 8f:2f:9b:9e:da:da:2e:81:7b:c5:a4:e4:5f:ff:d1:2b:8c:47: 36:52:1d:52:24:c4:bf:ff:52:2e:ef:27:f5:a6:3c:f4:65:66: ee:c0:8c:dc:cc:c7:45:2b:14:57:96:cd:e7:36:29:9d:29:c5: e5:e4:b5:fd:c9:75:64:4b:27:51:52:df:c6:90:bf:54:0e:2f: b2:0d:21:b2:4a:3c:73:9a:25:3c:98:ec:34:ab:7f:6a:02:e8: 6b:41:f1:51:9f:28:df:e0:74:b0:c4:21:a0:31:0f:10:7c:e8: ce:bb:89:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Mzc4QjExMC8GA1UEBRMoMzE4NTUzRUQwOUMyMDA5NThDQjE1RENDRTI3N0NDNDhB QTQyQTM4ODAeFw0yNDA1MTkwODMyMTBaFw0yNDA1MjYwODMyMTBaMBgxFjAUBgNV BAMTDTY2NDliOTBhLWU4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIJ03zn79dDGY8nsNw4miHhNQKfmNkbdHG+hhnTFVjg7ttP1JiI18fDvpfc3lq VESETtPN4lzxN45H/E6sgNt+ROd4NyVzVVCwxJL37NYT278GE6wPJKuKXLlJwzg3 KWkiRtZLU90uv1X8CK8/w927IDCXwKGesyYEyTRUirmZJh4YPlUFL1xZ/aHRwPcG mqvA7OJeAFbs2Erkvtn+adJwqB+FynsBObie+h5lWy81EEm8JI659F57wc58nszE HTF5hilfU3MXJ2VHcVIBTW5xEw6oejnqdp3uENczkXUEsZtAAsJwU0vjruTVXlrm 7rMsmWO37ReXSHn8pcp3e7JVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUaFN9Z8s 22z7+iL6i81cVnzvVe0wHwYDVR0jBBgwFoAUMYVT7QnCAJWMsV3M4nfMSKpCo4gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNzhCL0MxM0FBNzc2RTA1 MTExRUVCNUIwOTI1QkM0RjlBRTAyL01ZVlQ3UW5DQUpXTXNWM000bmZNU0twQ280 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVlWVDdRbkNBSldNc1YzTTRuZk1TS3BDbzRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz NzhCL0MxM0FBNzc2RTA1MTExRUVCNUIwOTI1QkM0RjlBRTAyL01ZVlQ3UW5DQUpX TXNWM000bmZNU0twQ280Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEejH1Yi7mA0KsSY2+wYrR5Uqf5IKqtp5QIcMG3Mb69D8X2pPMTVsZ/4 fiJtgO9SG9rZSqOsRs0hhywW4C8ZCYFPLyMwcVT14i1vA3m/TXcg6tjUFQ6lGiCd IWDz9BwUDH0tPxUmqAoWbCBdX752rBeOKaoQ/GsTk6MWwvONXBZdocDlRRkSA2KD eWJvABUiB48vm57a2i6Be8Wk5F//0SuMRzZSHVIkxL//Ui7vJ/WmPPRlZu7AjNzM x0UrFFeWzec2KZ0pxeXktf3JdWRLJ1FS38aQv1QOL7INIbJKPHOaJTyY7DSrf2oC 6GtB8VGfKN/gdLDEIaAxDxB86M67iZY= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org