$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: DwDoF0pgVMkufxX2ZbOsnZqV3ssqTrD9/wxPA77G8TU= Subject key identifier: 8C:78:47:8B:9A:3E:EC:9D:6C:45:43:FC:7A:F6:3D:B8:D0:3A:CE:4A Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0EDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0ED9 Signing time: Sat 18 May 2024 18:17:37 +0000 Manifest this update: Sat 18 May 2024 18:17:36 +0000 Manifest next update: Sat 25 May 2024 18:17:36 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: 7JeHVwX0jSYcwH8GdRuy25HTvnwKSX5luP8upAAaADQ=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: X/citOv1Ggn8GInkQClxSFdoCzSDhLVJCA7AtRBk39U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3807 (0xedf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: May 18 18:17:36 2024 GMT Not After : May 25 18:17:36 2024 GMT Subject: CN=6648f0c1-71ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:d5:4f:d4:5b:e1:8e:fb:ec:18:39:14:52: 88:ba:7a:2f:63:99:2c:b0:5d:2e:c8:b8:3a:81:72: 36:9e:4c:48:9a:e4:4c:3e:1f:78:50:6e:f0:40:41: f0:4d:dc:0d:84:96:46:1b:c2:1e:9b:87:ab:2e:99: 6d:9d:eb:30:54:1a:f2:a8:36:55:7e:ab:51:10:69: b1:a1:93:8c:3e:94:48:01:49:61:82:66:c7:72:e7: 61:48:fd:5e:f5:18:08:a0:88:f7:d2:16:e9:1f:40: 5d:aa:94:d4:9f:c9:aa:b2:f2:5f:09:a7:11:c4:0b: 3a:3b:cb:76:62:dc:80:af:3a:1f:3f:6e:b4:86:c0: 97:98:fa:0d:e8:38:d9:cf:15:84:18:5a:c4:c6:49: 61:26:58:25:25:0a:66:83:ae:43:a2:fe:fb:4c:27: 71:da:b3:91:6a:96:62:2b:9d:20:5b:75:f9:1d:aa: bc:dd:6d:d3:2f:eb:9d:d6:cd:94:12:10:f2:9a:1f: 76:56:9d:02:c8:21:78:f2:a0:27:eb:65:06:ec:5c: 5e:bd:0b:81:07:44:1d:74:8d:12:8f:eb:44:03:c2: 48:c1:60:9c:47:1d:d4:50:ee:26:db:2f:f2:91:bd: 4b:af:1e:88:eb:16:69:dc:77:a2:e0:ab:d3:50:0c: f5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:78:47:8B:9A:3E:EC:9D:6C:45:43:FC:7A:F6:3D:B8:D0:3A:CE:4A X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:2a:59:02:c1:0f:41:02:77:94:b8:10:e8:58:aa:db:34:1b: ec:24:7b:b2:02:ad:fb:9e:f7:6c:f9:12:6f:b3:ec:ce:72:c6: 66:55:fa:5d:78:60:4a:25:de:2d:66:26:e1:9b:69:04:40:15: ba:9e:19:80:68:6d:f3:2f:67:03:c3:3e:22:d5:fd:73:21:43: 98:74:ef:87:2a:ae:94:84:92:20:21:42:b0:75:10:f7:db:d4: 14:5c:3b:30:ef:06:aa:de:83:ec:08:d5:bd:d0:9e:42:33:32: 8c:a5:86:a2:4a:4a:b5:32:45:72:83:1e:59:f5:59:5b:c8:11: 81:d9:d2:e4:71:4c:e1:16:65:ae:d3:97:2b:b5:75:34:92:51: 9f:7c:aa:ff:cf:4e:b4:57:51:7c:f9:df:fd:92:67:b8:0d:9a: 7c:56:29:e1:07:dc:db:1b:06:4e:ab:47:92:ec:8d:96:df:88: d8:01:59:1c:42:af:17:1c:d2:c3:d7:e7:58:2c:d7:66:30:1c: de:e8:b6:4d:df:58:a3:3a:91:fa:29:03:7d:bb:7e:2a:c9:49: 7b:f4:e5:7f:52:6c:a2:67:4e:bf:22:fb:a6:00:fb:77:e8:84: 52:17:c7:0c:08:95:53:f1:8e:9c:0a:ec:72:35:1b:c2:c3:90: d5:eb:cb:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjQwNTE4MTgxNzM2WhcNMjQwNTI1MTgxNzM2WjAYMRYwFAYD VQQDEw02NjQ4ZjBjMS03MWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0J3VT9Rb4Y777Bg5FFKIunovY5kssF0uyLg6gXI2nkxImuRMPh94UG7wQEHw TdwNhJZGG8Iem4erLpltneswVBryqDZVfqtREGmxoZOMPpRIAUlhgmbHcudhSP1e 9RgIoIj30hbpH0BdqpTUn8mqsvJfCacRxAs6O8t2YtyArzofP260hsCXmPoN6DjZ zxWEGFrExklhJlglJQpmg65Dov77TCdx2rORapZiK50gW3X5Haq83W3TL+ud1s2U EhDymh92Vp0CyCF48qAn62UG7FxevQuBB0QddI0Sj+tEA8JIwWCcRx3UUO4m2y/y kb1Lrx6I6xZp3Hei4KvTUAz1NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIx4R4ua PuydbEVD/Hr2PbjQOs5KMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTKlkCwQ9BAneUuBDoWKrbNBvsJHuyAq37nvds+RJvs+zOcsZmVfpd eGBKJd4tZibhm2kEQBW6nhmAaG3zL2cDwz4i1f1zIUOYdO+HKq6UhJIgIUKwdRD3 29QUXDsw7waq3oPsCNW90J5CMzKMpYaiSkq1MkVygx5Z9VlbyBGB2dLkcUzhFmWu 05crtXU0klGffKr/z060V1F8+d/9kme4DZp8VinhB9zbGwZOq0eS7I2W34jYAVkc Qq8XHNLD1+dYLNdmMBze6LZN31ijOpH6KQN9u34qyUl79OV/UmyiZ06/IvumAPt3 6IRSF8cMCJVT8Y6cCuxyNRvCw5DV68vv -----END CERTIFICATE-----Generated at Sat May 18 19:15:27 2024 by rpki-client on console-ams.rpki-client.org