$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: gJI/amVs3stCgPr1OjznX8z149CFTnRLdjc9YAa09lk= Subject key identifier: C7:81:81:32:5A:B4:65:1C:B0:76:F5:36:2E:33:21:A5:9B:4D:15:85 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0D35 Signing time: Sat 18 May 2024 18:41:10 +0000 Manifest this update: Sat 18 May 2024 18:41:09 +0000 Manifest next update: Sat 25 May 2024 18:41:09 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: tDazqa0Lpn7aIeSLm79P/zVZc8S+/Vn6r6I/b9HagwY=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: X/Sdq5hIJBEWvLlKJlrKk+UmqaZwGN/XOEju9L4WvGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: May 18 18:41:09 2024 GMT Not After : May 25 18:41:09 2024 GMT Subject: CN=6648f646-a110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:10:d4:84:e2:ed:78:a5:f2:a5:f8:c3:c4: 92:6a:b8:fc:a9:cc:d5:05:fa:07:80:3a:46:d4:d0: dc:0e:ff:5d:d6:aa:fa:2d:d0:70:d1:1e:45:b1:9f: a3:88:5b:a7:43:ad:41:08:e5:1e:ca:d5:68:20:d3: b3:53:01:0a:eb:51:b5:43:0c:ce:0f:a6:ae:e7:2d: 78:f4:9c:bf:27:d4:48:e5:35:18:9b:4f:20:dc:c7: 0d:33:07:2c:64:5c:73:2f:31:17:ec:14:de:10:c8: c7:54:52:3b:63:c2:69:b0:a6:05:5b:eb:aa:00:2b: d5:25:f3:56:ee:27:9d:2b:2e:b8:5a:65:b3:7f:8d: 3c:12:1c:8e:0b:99:fd:8c:b0:e2:af:a4:97:fd:1d: 69:05:6e:ac:01:9c:5c:f2:02:85:7a:85:a6:3e:ef: c1:b8:2a:3d:07:e0:83:99:1e:ae:80:d6:22:92:bd: 35:85:f8:94:10:36:89:05:eb:c9:45:1d:71:2f:55: 39:b9:38:dd:0c:ad:32:86:07:8e:7e:a8:46:a6:f9: bb:09:ae:16:52:01:97:c2:5b:e1:e5:86:78:73:ba: 7b:a6:18:57:4d:0a:df:68:f1:c8:47:7f:ec:d0:23: 61:b2:7d:be:17:c5:87:b7:4f:d4:1e:6a:38:af:a3: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:81:81:32:5A:B4:65:1C:B0:76:F5:36:2E:33:21:A5:9B:4D:15:85 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0e:aa:b4:be:7a:56:2e:ea:1f:ad:ae:8b:88:bb:bf:09:43: 8f:b5:dd:c0:27:16:b9:a8:6a:bd:95:0e:41:9b:2a:d8:7f:b8: 85:9e:04:3b:53:e5:c6:bd:6d:8a:a4:1c:f1:4b:86:99:50:ce: a6:2c:38:12:2d:fc:59:3d:13:c7:35:12:4b:f2:76:46:b9:d8: dd:95:93:8d:4d:09:4f:8a:20:d0:61:d9:27:64:e1:5a:92:23: db:34:14:b1:fc:fe:7d:46:1b:82:21:94:ec:d1:ce:79:1a:87: 26:83:bf:fb:1e:ce:38:2a:ca:d2:82:d1:90:17:0c:d6:79:26: 55:f9:2c:82:5b:17:7e:84:ed:ba:22:fa:34:52:94:cf:8e:03: 91:f3:d6:64:df:b7:80:8d:fd:86:71:ad:20:9b:f9:07:1d:9a: c3:75:05:03:bf:e5:5f:1f:23:cf:f9:2d:bd:24:a1:d8:73:b3: f1:b4:e6:e5:83:4b:4a:cd:88:92:cb:2d:65:a0:f0:72:02:b1: 48:f0:09:76:66:b0:5a:31:f0:99:14:af:d6:a2:d6:d2:ce:ab: 01:e4:d7:46:1c:c8:c6:87:8a:6d:14:e9:c7:32:cf:3d:1a:9b: 7c:7b:0f:73:6d:5e:35:26:fe:41:6d:88:1e:96:6f:82:c3:c1: 45:96:1e:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjQwNTE4MTg0MTA5WhcNMjQwNTI1MTg0MTA5WjAYMRYwFAYD VQQDEw02NjQ4ZjY0Ni1hMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/sQ1ITi7Xil8qX4w8SSarj8qczVBfoHgDpG1NDcDv9d1qr6LdBw0R5FsZ+j iFunQ61BCOUeytVoINOzUwEK61G1QwzOD6au5y149Jy/J9RI5TUYm08g3McNMwcs ZFxzLzEX7BTeEMjHVFI7Y8JpsKYFW+uqACvVJfNW7iedKy64WmWzf408EhyOC5n9 jLDir6SX/R1pBW6sAZxc8gKFeoWmPu/BuCo9B+CDmR6ugNYikr01hfiUEDaJBevJ RR1xL1U5uTjdDK0yhgeOfqhGpvm7Ca4WUgGXwlvh5YZ4c7p7phhXTQrfaPHIR3/s 0CNhsn2+F8WHt0/UHmo4r6NxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeBgTJa tGUcsHb1Ni4zIaWbTRWFMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEDqq0vnpWLuofra6LiLu/CUOPtd3AJxa5qGq9lQ5BmyrYf7iFngQ7 U+XGvW2KpBzxS4aZUM6mLDgSLfxZPRPHNRJL8nZGudjdlZONTQlPiiDQYdknZOFa kiPbNBSx/P59RhuCIZTs0c55Gocmg7/7Hs44KsrSgtGQFwzWeSZV+SyCWxd+hO26 Ivo0UpTPjgOR89Zk37eAjf2Gca0gm/kHHZrDdQUDv+VfHyPP+S29JKHYc7PxtObl g0tKzYiSyy1loPByArFI8Al2ZrBaMfCZFK/WotbSzqsB5NdGHMjGh4ptFOnHMs89 Gpt8ew9zbV41Jv5BbYgelm+Cw8FFlh4k -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org