$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft File: cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft (raw, json) Hash identifier: n9gNwUab0J3gCleFXfEq1aU6FYkUs4oK/T0WJjjm2fk= Subject key identifier: 79:3B:83:C5:9D:1A:BC:E5:07:44:39:34:E3:AE:0E:69:68:7F:4C:5B Authority key identifier: 73:2A:ED:A4:1C:3E:B1:F6:AD:99:43:42:21:70:FE:7C:02:49:E5:B4 Certificate issuer: /CN=A91F9090/serialNumber=732AEDA41C3EB1F6AD9943422170FE7C0249E5B4 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft Manifest number: 0272 Signing time: Sun 19 May 2024 03:45:18 +0000 Manifest this update: Sun 19 May 2024 03:45:17 +0000 Manifest next update: Sun 26 May 2024 03:45:17 +0000 Files and hashes: 1: cyrtpBw-sfatmUNCIXD-fAJJ5bQ.crl (hash: KaPgc4ZTsD29qErGcxU5rYU07YQQ0I2FsbEQ770l6xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.crl rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9090/serialNumber=732AEDA41C3EB1F6AD9943422170FE7C0249E5B4 Validity Not Before: May 19 03:45:17 2024 GMT Not After : May 26 03:45:17 2024 GMT Subject: CN=664975cd-a177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:3a:41:84:74:14:89:26:65:e2:d6:52:91: c4:ed:44:a9:3c:03:85:d0:a0:f3:dd:66:e8:50:f6: ff:b0:87:7e:19:7a:2a:76:f3:0e:33:7f:c7:48:ee: aa:dd:32:d6:fd:01:4d:0b:0e:6d:d7:7d:57:05:78: f2:78:ed:a1:26:4d:f0:02:21:f7:f1:cb:ce:21:cb: ea:42:a4:a0:6e:f7:a4:7d:bf:b9:cf:08:9b:49:7f: be:2e:ab:c8:ef:66:6a:51:fc:51:7c:c7:2e:32:31: 13:63:6a:32:58:15:28:f3:43:a1:de:6b:f5:83:c9: a3:a5:eb:2b:e2:12:c8:36:ec:20:d2:e9:58:54:fa: d6:45:4a:89:e0:7c:90:be:81:a0:4c:c8:16:9c:62: fb:2f:f9:5c:c7:c4:46:76:45:b3:3c:e4:34:38:28: 18:d0:61:5c:21:77:e3:af:15:80:62:89:08:ab:63: 1c:54:7f:c3:2a:5c:d0:ab:73:7c:da:a0:1c:ac:df: b4:bd:0d:07:c5:8f:c5:90:ad:6c:d3:6b:b3:7c:7f: c2:17:31:55:36:cf:75:50:0c:93:35:08:62:45:0d: ff:51:6f:f5:72:3a:c2:e9:a1:90:da:91:97:7f:8f: 28:44:22:47:b9:71:8c:2b:93:85:3c:93:a4:1d:f3: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3B:83:C5:9D:1A:BC:E5:07:44:39:34:E3:AE:0E:69:68:7F:4C:5B X509v3 Authority Key Identifier: keyid:73:2A:ED:A4:1C:3E:B1:F6:AD:99:43:42:21:70:FE:7C:02:49:E5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:21:03:bf:bb:c3:52:58:bb:96:d6:d2:75:f1:12:84:9b:56: 5e:90:51:32:5a:50:29:c8:48:fb:3c:f8:bc:c5:60:a3:7c:e4: 13:b5:76:e1:34:dc:fd:50:43:c3:ba:c4:44:27:0e:eb:3c:8f: 6d:0f:a1:3f:03:07:9b:83:b0:43:75:4d:02:7d:68:58:4e:4a: 5e:49:a4:b8:c7:03:0a:ad:97:87:17:65:46:16:99:a4:fb:75: 3e:49:87:af:13:ce:8f:b2:37:65:a7:84:26:84:a5:85:45:f8: 46:e1:91:a1:90:0d:5b:0c:7a:50:2c:60:4f:23:b7:76:40:dc: c9:f1:e7:96:11:0f:14:05:22:c8:2b:8e:cc:fb:f2:f5:db:65: 71:bb:fd:2a:ba:68:68:85:35:2b:ec:69:0d:b4:6a:36:72:b2: c3:55:85:3f:e0:d0:ca:70:c1:71:0e:98:af:a7:1d:15:d7:da: d9:47:32:d1:7e:67:50:85:1c:b4:e1:5f:03:0b:22:82:c2:23: ec:06:87:06:40:f1:6a:91:50:b3:48:2d:0c:92:28:ad:59:a2: 0f:86:ff:4d:70:c7:6f:4c:a0:a8:a6:f3:28:8a:56:e1:d1:11: d1:b9:4c:18:4e:0f:f9:28:2b:85:81:d0:63:8b:cc:1a:5e:e4: 68:0b:a4:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkwOTAxMTAvBgNVBAUTKDczMkFFREE0MUMzRUIxRjZBRDk5NDM0MjIxNzBGRTdD MDI0OUU1QjQwHhcNMjQwNTE5MDM0NTE3WhcNMjQwNTI2MDM0NTE3WjAYMRYwFAYD VQQDEw02NjQ5NzVjZC1hMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0Y6QYR0FIkmZeLWUpHE7USpPAOF0KDz3WboUPb/sId+GXoqdvMOM3/HSO6q 3TLW/QFNCw5t131XBXjyeO2hJk3wAiH38cvOIcvqQqSgbvekfb+5zwibSX++LqvI 72ZqUfxRfMcuMjETY2oyWBUo80Oh3mv1g8mjpesr4hLINuwg0ulYVPrWRUqJ4HyQ voGgTMgWnGL7L/lcx8RGdkWzPOQ0OCgY0GFcIXfjrxWAYokIq2McVH/DKlzQq3N8 2qAcrN+0vQ0HxY/FkK1s02uzfH/CFzFVNs91UAyTNQhiRQ3/UW/1cjrC6aGQ2pGX f48oRCJHuXGMK5OFPJOkHfO6fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk7g8Wd GrzlB0Q5NOOuDmlof0xbMB8GA1UdIwQYMBaAFHMq7aQcPrH2rZlDQiFw/nwCSeW0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTA5MC9GNTJFOUEyMEM1 MzYxMUVDOTM5NzhFMjlDNEY5QUUwMi9jeXJ0cEJ3LXNmYXRtVU5DSVhELWZBSko1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5cnRwQnctc2ZhdG1VTkNJWEQtZkFKSjViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTA5MC9GNTJFOUEyMEM1MzYxMUVDOTM5NzhFMjlDNEY5QUUwMi9jeXJ0cEJ3LXNm YXRtVU5DSVhELWZBSko1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEIQO/u8NSWLuW1tJ18RKEm1ZekFEyWlApyEj7PPi8xWCjfOQTtXbh NNz9UEPDusREJw7rPI9tD6E/Awebg7BDdU0CfWhYTkpeSaS4xwMKrZeHF2VGFpmk +3U+SYevE86Psjdlp4QmhKWFRfhG4ZGhkA1bDHpQLGBPI7d2QNzJ8eeWEQ8UBSLI K47M+/L122Vxu/0qumhohTUr7GkNtGo2crLDVYU/4NDKcMFxDpivpx0V19rZRzLR fmdQhRy04V8DCyKCwiPsBocGQPFqkVCzSC0MkiitWaIPhv9NcMdvTKCopvMoilbh 0RHRuUwYTg/5KCuFgdBji8waXuRoC6S2 -----END CERTIFICATE-----Generated at Sun May 19 04:22:06 2024 by rpki-client on console-fra.rpki-client.org