$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json) Hash identifier: NgQF8uy6kVfQ8jYnmjRfiCH2m2stks1dPhvmwY4UPbw= Subject key identifier: AA:90:FE:74:20:3E:71:05:DE:A5:14:92:4D:28:F0:10:3F:82:5A:A5 Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft Manifest number: 33 Signing time: Sun 19 May 2024 08:22:29 +0000 Manifest this update: Sun 19 May 2024 08:22:28 +0000 Manifest next update: Sun 26 May 2024 08:22:28 +0000 Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: mqhaUq4fuk4JUMbAmbKPJQ5bd7QJiVkqKTW3MY+9GsQ=) 2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: G9EIa2BVNO7fX3LicRxHEyaNZZ8dyrZGH4JhXSaCDa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Validity Not Before: May 19 08:22:28 2024 GMT Not After : May 26 08:22:28 2024 GMT Subject: CN=6649b6c5-e308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:22:72:89:74:1f:19:6f:ec:9b:4b:cd:0d: 6f:fb:74:e4:2a:cc:71:e4:74:9a:b5:80:a0:7b:40: 56:70:22:2c:d9:e9:7d:01:f2:a5:dd:67:77:ff:68: ae:24:c7:9d:d2:52:d6:0c:27:e1:b7:e7:c5:1a:7c: aa:f6:b7:cc:91:00:65:ed:23:ea:a5:e1:ea:f9:3e: b7:13:f7:34:b1:22:4e:93:d7:67:14:cd:9a:29:d5: cb:ec:5b:08:db:7a:c8:60:bf:10:42:c6:99:fc:29: f0:e3:95:be:70:0d:73:f1:3b:d7:5e:dd:48:d1:1d: 6b:e7:69:f7:f9:9c:c1:a3:6f:4b:37:1a:b8:82:ee: 4b:54:2b:1d:19:1f:e7:37:f4:44:7e:39:50:ce:24: da:9e:a2:6b:a4:ad:3c:fb:40:27:5a:81:42:61:ac: 8d:fb:89:0c:d1:48:2a:df:cd:2e:6b:ee:70:e3:f4: d4:b1:33:11:2a:3f:27:e5:fe:fc:ef:03:92:7f:80: 0b:77:ce:3a:90:2f:16:b5:ad:ef:d5:5f:9d:5b:60: e8:70:4b:96:a8:16:c3:70:a8:80:cd:20:02:59:a6: 53:2b:d4:bd:35:0e:ce:83:bc:db:af:e7:7d:79:48: 1e:2b:f3:fa:d3:ae:c3:4e:47:2c:b6:86:5c:2f:2a: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:90:FE:74:20:3E:71:05:DE:A5:14:92:4D:28:F0:10:3F:82:5A:A5 X509v3 Authority Key Identifier: keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9e:df:2e:0c:22:fe:2b:88:71:9f:93:0a:e8:02:05:86:0d: 8d:95:7e:72:72:8a:bf:1d:54:0d:62:e9:95:45:2f:e0:72:4e: 67:87:f3:d5:5f:0d:dc:64:5c:89:58:0f:27:5f:35:68:c4:5c: e8:65:a0:ed:bf:11:82:56:44:0c:a6:37:6f:58:55:b2:bc:d9: 32:75:60:bf:11:1e:53:37:4f:e7:af:1d:2e:1d:91:7f:82:6a: e8:3a:2b:da:37:fc:26:ea:b4:38:56:c9:e9:46:2f:b7:03:68: dd:79:12:6d:67:b4:81:87:d5:17:cc:39:e2:78:c6:52:1b:d1: 95:cd:12:da:72:29:08:38:40:6d:13:e0:d1:75:71:1c:3c:b6: 7f:51:06:77:ab:0c:53:5a:ff:a1:25:8f:6b:48:29:26:26:75: d4:bd:45:c1:d1:d7:72:79:0f:70:3a:f0:a9:4e:e4:19:2b:6d: 55:0e:7e:ea:91:2d:e8:a2:e1:30:1b:72:7b:61:20:2f:79:3c: 15:69:5b:51:9c:c6:2c:08:54:13:38:04:1c:c8:ef:4e:64:01: 89:2b:3b:d7:bf:a4:e5:e4:a1:7d:1d:2f:02:79:e2:ee:fc:9e: 26:5f:06:9a:43:4f:18:6b:fc:19:cb:2d:27:86:eb:ff:2a:8c: 31:97:5f:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUJFRjExMC8GA1UEBRMoNjE5MDQwRTgzNUJBRDNEQ0Y1QzIwMTM5NkQ4NTcxOTk1 QTdBQ0M1MDAeFw0yNDA1MTkwODIyMjhaFw0yNDA1MjYwODIyMjhaMBgxFjAUBgNV BAMTDTY2NDliNmM1LWUzMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLTCJyiXQfGW/sm0vNDW/7dOQqzHHkdJq1gKB7QFZwIizZ6X0B8qXdZ3f/aK4k x53SUtYMJ+G358UafKr2t8yRAGXtI+ql4er5PrcT9zSxIk6T12cUzZop1cvsWwjb eshgvxBCxpn8KfDjlb5wDXPxO9de3UjRHWvnaff5nMGjb0s3GriC7ktUKx0ZH+c3 9ER+OVDOJNqeomukrTz7QCdagUJhrI37iQzRSCrfzS5r7nDj9NSxMxEqPyfl/vzv A5J/gAt3zjqQLxa1re/VX51bYOhwS5aoFsNwqIDNIAJZplMr1L01Ds6DvNuv5315 SB4r8/rTrsNORyy2hlwvKgx3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqpD+dCA+ cQXepRSSTSjwED+CWqUwHwYDVR0jBBgwFoAUYZBA6DW609z1wgE5bYVxmVp6zFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQkVGL0MwNzY0NTcyQ0Ix OTExRUU4MTVGQUI2OEM0RjlBRTAyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVpCQTZEVzYwOXoxd2dFNWJZVnhtVnA2ekZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QkVGL0MwNzY0NTcyQ0IxOTExRUU4MTVGQUI2OEM0RjlBRTAyL1laQkE2RFc2MDl6 MXdnRTViWVZ4bVZwNnpGQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG6e3y4MIv4riHGfkwroAgWGDY2VfnJyir8dVA1i6ZVFL+ByTmeH89Vf DdxkXIlYDydfNWjEXOhloO2/EYJWRAymN29YVbK82TJ1YL8RHlM3T+evHS4dkX+C aug6K9o3/CbqtDhWyelGL7cDaN15Em1ntIGH1RfMOeJ4xlIb0ZXNEtpyKQg4QG0T 4NF1cRw8tn9RBnerDFNa/6Elj2tIKSYmddS9RcHR13J5D3A68KlO5BkrbVUOfuqR Leii4TAbcnthIC95PBVpW1GcxiwIVBM4BBzI705kAYkrO9e/pOXkoX0dLwJ54u78 niZfBppDTxhr/BnLLSeG6/8qjDGXX6g= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org