$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: fQV2XHdhJECGvasT8SpAXvZGcA5ifTLfG1LrCOYVsL8= Subject key identifier: 1E:71:24:77:B0:A5:3C:96:29:2D:70:B7:CA:3D:CB:90:BB:AC:8E:A8 Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 0817 Signing time: Sat 18 May 2024 21:49:16 +0000 Manifest this update: Sat 18 May 2024 21:49:16 +0000 Manifest next update: Sat 25 May 2024 21:49:16 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: qRV2a1cHkVVS9Vkv/cyX+U+V/qUeEMwDJkeGIM8RqeM=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: NtKeyULWQMsrxRlevOb1FWtm72F4mnEmkpXQ082SXfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: May 18 21:49:16 2024 GMT Not After : May 25 21:49:16 2024 GMT Subject: CN=6649225c-2f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:67:39:2d:fd:4a:46:5f:fd:3d:0c:8b:81:9e: 64:6b:46:4e:d2:a5:8e:c8:a6:73:a7:c6:fb:8b:a7: 56:0b:0a:62:88:b8:d6:a7:b1:fe:ba:9b:60:2c:a5: e9:7a:b8:4b:c7:a2:bc:cd:15:5d:49:8d:0e:b8:e1: 1c:0d:30:3c:9c:ae:f7:9b:42:71:7a:8a:93:39:0d: e1:66:ce:19:a0:8b:7e:42:67:eb:8a:b8:d2:f4:1c: 71:fb:51:34:51:8a:dd:13:35:e9:2e:60:3e:d7:49: c9:db:ab:9b:5b:f1:15:78:61:28:f7:f3:d2:81:fa: 80:6d:23:16:bd:fc:98:24:95:21:40:07:42:3c:3e: 2c:4c:00:93:d2:38:0e:d5:b2:e4:ea:4e:3f:ac:87: 68:61:85:12:4f:c2:a7:21:f3:c5:03:5c:a5:14:bb: b5:b2:f7:a8:7a:c9:c8:b5:19:97:d2:63:1b:6c:d3: 7e:17:5d:b0:29:cc:7d:46:a6:09:82:18:8d:e8:f4: 40:8c:6d:d2:b7:ef:57:cf:40:64:67:4c:8f:1b:5f: 32:ff:76:59:59:d2:2e:27:2e:f0:9b:3a:7d:91:59: 23:43:79:6e:05:e6:69:68:f4:59:15:e5:4e:7b:9b: 17:ba:70:b6:81:e1:50:a3:17:04:f9:cd:80:b4:43: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:71:24:77:B0:A5:3C:96:29:2D:70:B7:CA:3D:CB:90:BB:AC:8E:A8 X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f2:74:5d:cc:3a:46:b9:b6:90:02:1c:31:6e:3c:cb:5e:d4: 40:79:9c:4f:97:4f:20:9c:cd:28:bb:db:87:a2:ae:0f:64:6f: ad:11:5f:99:21:c3:90:56:9f:4b:3d:ed:71:ff:63:0e:7f:83: 13:c1:27:95:18:3a:27:b9:b8:63:e1:a0:1b:d0:6a:7f:76:00: 22:9f:24:86:1d:cc:7c:95:b0:0e:1b:05:1a:56:70:5b:c7:1f: 8f:fd:bc:ba:09:6f:1a:53:c4:2f:a9:16:ca:a0:2e:43:ec:b8: 0c:86:18:25:b7:23:4e:2f:d8:8f:ef:c5:99:20:5c:38:67:de: f2:ec:c5:0f:cb:66:ad:5c:7c:05:92:b5:a0:e8:72:61:c0:c3: 4b:95:2f:b2:71:06:82:df:3d:89:db:09:3b:9b:f5:72:38:c2: 6c:c8:87:d3:c5:55:9b:f7:bf:bb:54:21:44:75:96:11:b3:f0: 6b:6e:5e:9a:4b:9b:c5:f0:39:85:f4:3d:a5:72:ba:bc:c1:32: 9e:c2:ee:28:c0:a1:45:00:96:33:3f:9f:53:7c:22:86:01:12: 1f:ae:9c:e3:e1:09:ca:85:c6:ac:28:76:0e:48:f6:09:d4:96: c1:1d:6a:51:27:1c:4b:2c:fb:fa:d2:5f:5f:fe:44:f9:45:78: a4:d9:e6:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjQwNTE4MjE0OTE2WhcNMjQwNTI1MjE0OTE2WjAYMRYwFAYD VQQDEw02NjQ5MjI1Yy0yZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mc5Lf1KRl/9PQyLgZ5ka0ZO0qWOyKZzp8b7i6dWCwpiiLjWp7H+uptgLKXp erhLx6K8zRVdSY0OuOEcDTA8nK73m0JxeoqTOQ3hZs4ZoIt+QmfrirjS9Bxx+1E0 UYrdEzXpLmA+10nJ26ubW/EVeGEo9/PSgfqAbSMWvfyYJJUhQAdCPD4sTACT0jgO 1bLk6k4/rIdoYYUST8KnIfPFA1ylFLu1sveoesnItRmX0mMbbNN+F12wKcx9RqYJ ghiN6PRAjG3St+9Xz0BkZ0yPG18y/3ZZWdIuJy7wmzp9kVkjQ3luBeZpaPRZFeVO e5sXunC2geFQoxcE+c2AtEM5vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5xJHew pTyWKS1wt8o9y5C7rI6oMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo8nRdzDpGubaQAhwxbjzLXtRAeZxPl08gnM0ou9uHoq4PZG+tEV+Z IcOQVp9LPe1x/2MOf4MTwSeVGDonubhj4aAb0Gp/dgAinySGHcx8lbAOGwUaVnBb xx+P/by6CW8aU8QvqRbKoC5D7LgMhhgltyNOL9iP78WZIFw4Z97y7MUPy2atXHwF krWg6HJhwMNLlS+ycQaC3z2J2wk7m/VyOMJsyIfTxVWb97+7VCFEdZYRs/Brbl6a S5vF8DmF9D2lcrq8wTKewu4owKFFAJYzP59TfCKGARIfrpzj4QnKhcasKHYOSPYJ 1JbBHWpRJxxLLPv60l9f/kT5RXik2eaK -----END CERTIFICATE-----Generated at Sat May 18 22:28:02 2024 by rpki-client on console-ams.rpki-client.org