$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: YYc2nIHySlMOJMWVY/Gz06a11AzuAtgLu5GrVArddUM= Subject key identifier: F1:82:2A:3D:3E:53:A8:29:46:18:50:26:CC:61:BA:0A:D9:7B:E3:DF Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0A9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 1230 Signing time: Sat 18 May 2024 20:12:37 +0000 Manifest this update: Sat 18 May 2024 20:12:37 +0000 Manifest next update: Sat 25 May 2024 20:12:37 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: HBqus+sTVR6bk7qtygvAafxpSHrIpQp5hDiLU+y/ILA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2714 (0xa9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: May 18 20:12:37 2024 GMT Not After : May 25 20:12:37 2024 GMT Subject: CN=66490bb5-1239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:5c:cf:02:81:51:a4:d3:59:c3:97:3a:ac: 5e:54:4b:e8:5c:3f:41:ea:4c:bb:f5:2a:25:47:a3: 0e:5e:63:c6:3c:e3:d1:80:9d:80:88:bf:eb:32:1a: dc:81:7d:42:8d:39:03:80:11:c6:0b:63:af:1d:61: 6c:b2:dd:a4:38:e2:63:8a:40:ca:98:9f:43:d2:8f: 29:87:54:be:52:00:f2:af:d4:07:a7:c3:73:15:95: fb:6a:6e:5b:03:89:a8:e8:34:06:7d:f8:a6:33:24: 5d:8f:e2:35:96:91:45:1f:64:7a:11:15:8f:04:d2: 72:76:c1:6c:2e:6c:ad:05:70:e3:8f:bc:68:bc:bf: 35:9a:9c:a7:89:03:46:26:9d:c3:99:4d:0e:d2:7a: 95:18:a3:24:6a:d8:3a:47:47:0f:80:50:fd:78:8d: 3a:e3:b8:48:a7:80:c8:56:e3:05:2b:38:46:b6:4c: c5:ee:ff:70:a4:7a:ba:93:4d:03:6a:c2:bf:7b:c8: 6e:7d:de:98:22:fb:c8:8e:c9:03:49:0a:4c:98:ea: 93:73:83:44:f7:a3:c6:6d:34:16:5f:59:ea:c7:b7: 5d:5b:88:f8:4a:2a:0f:6e:43:3c:28:a6:5d:9d:77: 8f:a3:0d:bf:72:56:5a:88:0e:4b:cf:21:80:b4:8d: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:82:2A:3D:3E:53:A8:29:46:18:50:26:CC:61:BA:0A:D9:7B:E3:DF X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ad:6a:5d:5b:9e:86:6b:f3:1c:7e:37:37:0c:b7:7d:f4:c0: c6:6d:41:c4:bb:b8:ce:28:1b:f1:bb:c9:00:ee:79:96:76:4e: 70:1c:09:6b:24:24:5c:b8:ef:cf:2d:8c:96:c8:eb:27:ce:2f: 32:29:b0:71:3f:c9:ed:7a:da:b2:e9:04:d9:3a:29:32:1d:7e: c5:4b:c9:42:42:ed:0d:ce:9a:11:1a:9d:f1:90:48:d4:7c:60: 28:e8:39:02:e3:31:ad:db:4b:46:41:a9:12:60:30:c4:f6:bc: 97:cf:5f:e2:42:bd:f8:31:85:84:3f:29:7b:94:e5:80:28:47: 02:47:d7:bb:ef:b9:45:3b:8b:a5:51:a8:1c:18:b8:22:2e:dc: 01:67:db:21:19:4c:2c:65:e6:61:7c:9b:6b:2a:fa:c3:e7:3f: f2:62:f9:c4:4d:2f:34:e4:eb:8c:f3:0b:57:d9:99:0c:a3:76: a0:da:ee:55:44:bb:4f:56:20:9e:6b:1a:bc:9a:1e:3f:03:69: 7d:77:63:cb:49:28:b9:29:57:11:13:86:19:0e:86:f8:26:d6: 41:ed:08:0f:3a:81:11:36:92:b6:ef:86:9c:ab:59:55:9a:49: 12:24:51:28:c4:b7:72:d7:2e:0c:4c:85:e5:21:71:2e:2b:26: 96:e5:df:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjQwNTE4MjAxMjM3WhcNMjQwNTI1MjAxMjM3WjAYMRYwFAYD VQQDEw02NjQ5MGJiNS0xMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvlczwKBUaTTWcOXOqxeVEvoXD9B6ky79SolR6MOXmPGPOPRgJ2AiL/rMhrc gX1CjTkDgBHGC2OvHWFsst2kOOJjikDKmJ9D0o8ph1S+UgDyr9QHp8NzFZX7am5b A4mo6DQGffimMyRdj+I1lpFFH2R6ERWPBNJydsFsLmytBXDjj7xovL81mpyniQNG Jp3DmU0O0nqVGKMkatg6R0cPgFD9eI0647hIp4DIVuMFKzhGtkzF7v9wpHq6k00D asK/e8hufd6YIvvIjskDSQpMmOqTc4NE96PGbTQWX1nqx7ddW4j4SioPbkM8KKZd nXePow2/clZaiA5LzyGAtI37VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGCKj0+ U6gpRhhQJsxhugrZe+PfMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnrWpdW56Ga/Mcfjc3DLd99MDGbUHEu7jOKBvxu8kA7nmWdk5wHAlr JCRcuO/PLYyWyOsnzi8yKbBxP8ntetqy6QTZOikyHX7FS8lCQu0NzpoRGp3xkEjU fGAo6DkC4zGt20tGQakSYDDE9ryXz1/iQr34MYWEPyl7lOWAKEcCR9e777lFO4ul UagcGLgiLtwBZ9shGUwsZeZhfJtrKvrD5z/yYvnETS805OuM8wtX2ZkMo3ag2u5V RLtPViCeaxq8mh4/A2l9d2PLSSi5KVcRE4YZDob4JtZB7QgPOoERNpK274acq1lV mkkSJFEoxLdy1y4MTIXlIXEuKyaW5d+N -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org