$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json) Hash identifier: delhjKpWr/CLKn/BNU4aKPNEOczrCqMHSpejEL60AIk= Subject key identifier: 0F:A3:D0:5C:22:FF:8A:5C:1C:28:ED:08:2C:D2:9B:4D:CD:AC:23:CA Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft Manifest number: E4 Signing time: Sun 19 May 2024 06:01:28 +0000 Manifest this update: Sun 19 May 2024 06:01:27 +0000 Manifest next update: Sun 26 May 2024 06:01:27 +0000 Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: pmEMtPHvCFj7QbM9jdWHp0LadOk3j5JomJuO+edroyk=) 2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: 307Gxd4M7BNZ22HOhN4gQVH037OEfJpHMiGF7rrVYmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Validity Not Before: May 19 06:01:27 2024 GMT Not After : May 26 06:01:27 2024 GMT Subject: CN=664995b7-a9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:35:6e:ac:7a:87:10:2c:84:f2:18:06:db: 81:1f:d2:8c:86:f0:49:83:17:df:85:78:3c:2c:70: f6:42:d4:af:dc:88:aa:5b:9b:56:c2:60:72:4b:6b: f3:62:49:8b:1a:f8:59:4e:53:80:81:b3:7b:80:85: 3e:4e:9d:7b:33:d4:65:77:ff:bd:57:0c:33:0d:ba: 63:36:d5:ef:5e:2f:97:e6:42:47:9e:57:0d:88:f9: 5f:99:90:9a:36:ce:df:d8:b2:e7:88:78:5f:ce:8f: b9:c4:6e:58:b3:4d:ba:78:89:f5:bd:2f:cb:a4:f8: 77:87:ea:c7:a9:e8:e1:8e:bc:71:d4:db:5f:b3:fa: b1:55:82:13:35:cb:27:08:2a:e4:4f:e8:6b:dc:7f: c5:ba:cf:64:c0:1e:92:55:47:d5:df:30:5a:fa:87: 25:38:c4:15:a0:2e:10:44:80:64:11:42:99:e2:65: 44:58:b4:c2:c5:64:3e:2e:30:f1:aa:98:4b:f5:24: 65:ff:ec:6e:04:81:42:ea:0a:16:dc:b3:2f:58:b9: 9f:ec:ce:35:b1:ec:48:c5:f1:fc:04:ac:b7:d8:12: f5:1a:f8:eb:d4:0b:40:8f:b7:43:e1:c7:75:89:bc: 9c:05:a6:05:64:e4:d4:3b:ff:cb:6f:05:22:c4:2d: d6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A3:D0:5C:22:FF:8A:5C:1C:28:ED:08:2C:D2:9B:4D:CD:AC:23:CA X509v3 Authority Key Identifier: keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d1:36:18:d7:c3:8f:72:a3:9f:8e:67:94:1a:62:0e:b1:0d: 78:a7:1b:e9:56:88:ed:33:ac:2a:a9:01:82:f0:ae:dc:ed:b7: d9:56:b1:df:66:68:0a:e3:20:75:a9:56:3d:d8:30:b5:d7:1c: ad:a4:2b:9a:b6:f8:48:c9:d4:d9:fb:0f:5d:1c:f3:9e:2c:35: 09:03:37:5c:e8:6b:91:11:da:3e:37:11:4a:4b:3a:f3:66:b7: 1f:1c:73:3f:c8:35:d3:5e:dc:3f:4a:d7:f4:69:23:ee:23:da: b1:97:be:32:c4:16:c1:9f:f5:fb:15:dc:cb:e0:ea:a8:c6:40: 22:99:48:4a:25:db:85:a2:0b:b9:61:ab:27:7c:b7:bb:77:d6: 00:cb:2e:a6:c1:1e:7a:20:a8:92:11:5a:cf:6f:3d:75:ed:23: 5e:db:a6:2b:a9:7b:d0:a0:a5:66:18:48:ae:75:1e:66:6b:4e: 86:e3:fb:f0:2b:f6:4c:91:04:4d:9c:09:d2:c6:33:71:46:d4: 5a:21:3c:93:af:61:01:43:cb:7c:10:0a:c4:ad:9d:39:14:48: 90:2a:17:e0:4e:8b:3b:4c:40:42:95:73:02:2f:fe:07:4b:b9: 22:c1:88:c8:d9:0f:c5:b6:35:39:4f:7b:40:97:a5:32:46:38: e4:8d:14:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NkIxMTAvBgNVBAUTKDYyNjdDOTdFQjRBMERGMDFFREJENkY5RDQxQTg2QTg3 OUUwMjc5N0YwHhcNMjQwNTE5MDYwMTI3WhcNMjQwNTI2MDYwMTI3WjAYMRYwFAYD VQQDEw02NjQ5OTViNy1hOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmY1bqx6hxAshPIYBtuBH9KMhvBJgxffhXg8LHD2QtSv3IiqW5tWwmByS2vz YkmLGvhZTlOAgbN7gIU+Tp17M9Rld/+9VwwzDbpjNtXvXi+X5kJHnlcNiPlfmZCa Ns7f2LLniHhfzo+5xG5Ys026eIn1vS/LpPh3h+rHqejhjrxx1Ntfs/qxVYITNcsn CCrkT+hr3H/Fus9kwB6SVUfV3zBa+oclOMQVoC4QRIBkEUKZ4mVEWLTCxWQ+LjDx qphL9SRl/+xuBIFC6goW3LMvWLmf7M41sexIxfH8BKy32BL1Gvjr1AtAj7dD4cd1 ibycBaYFZOTUO//LbwUixC3W7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+j0Fwi /4pcHCjtCCzSm03NrCPKMB8GA1UdIwQYMBaAFGJnyX60oN8B7b1vnUGoaoeeAnl/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY2Qi8xNDJCQ0I5NkM0 RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3SHR2Vy1kUWFocWg1NENl WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltZkpmclNnM3dIdHZXLWRRYWhxaDU0Q2VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY2Qi8xNDJCQ0I5NkM0RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3 SHR2Vy1kUWFocWg1NENlWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD0TYY18OPcqOfjmeUGmIOsQ14pxvpVojtM6wqqQGC8K7c7bfZVrHf ZmgK4yB1qVY92DC11xytpCuatvhIydTZ+w9dHPOeLDUJAzdc6GuREdo+NxFKSzrz ZrcfHHM/yDXTXtw/Stf0aSPuI9qxl74yxBbBn/X7FdzL4OqoxkAimUhKJduFogu5 YasnfLe7d9YAyy6mwR56IKiSEVrPbz117SNe26YrqXvQoKVmGEiudR5ma06G4/vw K/ZMkQRNnAnSxjNxRtRaITyTr2EBQ8t8EArErZ05FEiQKhfgTos7TEBClXMCL/4H S7kiwYjI2Q/FtjU5T3tAl6UyRjjkjRT2 -----END CERTIFICATE-----Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org