$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: Nd1E1UsIR+KLcVZBzxLs1f1E4r4jm/hYPyzA3uTYFPg= Subject key identifier: CD:E6:54:66:82:48:40:4E:6B:AB:5D:CC:36:A3:0F:7B:B4:02:0C:42 Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0AB4 Signing time: Thu 16 May 2024 20:49:18 +0000 Manifest this update: Thu 16 May 2024 20:49:17 +0000 Manifest next update: Thu 23 May 2024 20:49:17 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: B5D+uuHfgzW8CAjSoZ8E5N8rEbIfmIrJFN+tGx4Rcm4=) 2: 542FFB900AF511EEA1DD143EC4F9AE02.roa (hash: v8b5gIDYMr/mxUmoE1WG6bs8RGPx8egxgRGtaO/YZ90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: May 16 20:49:17 2024 GMT Not After : May 23 20:49:17 2024 GMT Subject: CN=6646714d-dc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:41:e2:86:89:3f:0d:1e:a2:58:d1:47:ea: c1:5c:95:24:2b:e5:22:a3:33:42:15:6d:67:d5:27: e8:90:7f:fa:a9:25:db:e5:3e:0c:e3:17:c8:e0:d5: 9d:1b:34:57:23:d1:63:ca:33:34:3f:c2:b1:f0:ef: 82:2c:fc:37:8c:ee:be:86:ed:81:c2:95:36:ae:1d: 53:44:f5:71:33:58:83:5b:e7:48:60:ef:07:b4:ab: a4:86:58:6d:a5:a2:8c:6e:23:78:30:dc:53:ae:a5: 3e:b4:c0:ef:36:5a:e0:e4:0f:26:8b:98:b1:f2:5f: 76:15:cc:e9:14:bb:16:9f:af:ff:02:0b:00:47:23: d5:9d:84:0b:d6:40:3a:b5:ed:01:95:12:c0:2d:83: 49:98:9b:25:2f:e8:4d:1c:59:36:d1:e8:1e:03:ea: e0:15:56:64:ed:c0:8c:29:4c:a4:90:cf:0c:1a:53: 99:d8:c7:b0:38:e9:48:fa:28:94:ff:e0:bd:0d:71: cd:79:8e:5e:f8:78:ea:9b:f3:2b:0d:02:73:c0:27: 23:ed:60:8f:1d:98:f6:b8:24:8a:9f:8a:be:43:ef: e7:3b:34:b9:25:02:4a:07:0e:bd:3c:a7:4c:9a:33: ec:59:d1:49:ae:b2:23:35:25:be:60:91:e0:62:2b: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E6:54:66:82:48:40:4E:6B:AB:5D:CC:36:A3:0F:7B:B4:02:0C:42 X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f6:fa:a7:df:e5:1e:13:0e:96:c4:52:87:bb:61:0b:de:46: 5b:5f:2d:28:73:c0:49:44:11:e4:34:4c:01:a2:92:26:db:84: a7:4d:25:64:ef:29:a9:1f:55:43:0d:38:85:6c:35:35:73:fc: 4f:9e:bf:56:73:ec:93:db:48:e9:1c:29:70:81:04:8e:75:db: 2a:57:7e:e9:99:19:e3:ed:be:83:cc:86:06:fb:a0:be:7e:42: a0:d9:f7:65:b0:89:8d:56:20:fe:44:9c:03:00:91:50:c2:28: eb:0e:5d:c2:96:b8:84:c6:fc:d8:8a:4f:2d:46:2f:51:b5:a6: 52:8e:ae:47:29:a3:21:f2:eb:e8:29:1e:68:6a:36:24:9c:c5: a6:50:54:64:d6:c3:54:ae:e8:7a:8b:95:d3:a8:2c:17:0a:09: 84:46:0f:23:b9:2c:db:09:c6:39:89:10:dc:97:92:cd:df:3c: 5a:dc:c0:f9:e3:17:cc:28:a7:2c:42:20:c9:49:5a:83:f4:7c: b9:b9:22:fc:e9:89:20:b3:be:bf:37:4b:43:85:f5:97:00:04: 86:e0:81:61:63:e3:4c:ce:2f:6e:4e:5f:5e:06:8f:06:88:02: a1:67:a5:1b:89:e1:e0:98:83:1e:03:3a:18:12:36:d4:aa:f1: 17:00:2d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjQwNTE2MjA0OTE3WhcNMjQwNTIzMjA0OTE3WjAYMRYwFAYD VQQDEw02NjQ2NzE0ZC1kYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzodB4oaJPw0eoljRR+rBXJUkK+UiozNCFW1n1SfokH/6qSXb5T4M4xfI4NWd GzRXI9FjyjM0P8Kx8O+CLPw3jO6+hu2BwpU2rh1TRPVxM1iDW+dIYO8HtKukhlht paKMbiN4MNxTrqU+tMDvNlrg5A8mi5ix8l92FczpFLsWn6//AgsARyPVnYQL1kA6 te0BlRLALYNJmJslL+hNHFk20egeA+rgFVZk7cCMKUykkM8MGlOZ2MewOOlI+iiU /+C9DXHNeY5e+Hjqm/MrDQJzwCcj7WCPHZj2uCSKn4q+Q+/nOzS5JQJKBw69PKdM mjPsWdFJrrIjNSW+YJHgYivB2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3mVGaC SEBOa6tdzDajD3u0AgxCMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP9vqn3+UeEw6WxFKHu2EL3kZbXy0oc8BJRBHkNEwBopIm24SnTSVk 7ympH1VDDTiFbDU1c/xPnr9Wc+yT20jpHClwgQSOddsqV37pmRnj7b6DzIYG+6C+ fkKg2fdlsImNViD+RJwDAJFQwijrDl3ClriExvzYik8tRi9RtaZSjq5HKaMh8uvo KR5oajYknMWmUFRk1sNUruh6i5XTqCwXCgmERg8juSzbCcY5iRDcl5LN3zxa3MD5 4xfMKKcsQiDJSVqD9Hy5uSL86Ykgs76/N0tDhfWXAASG4IFhY+NMzi9uTl9eBo8G iAKhZ6UbieHgmIMeAzoYEjbUqvEXAC2t -----END CERTIFICATE-----Generated at Thu May 16 21:45:25 2024 by rpki-client on console-fra.rpki-client.org