$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json) Hash identifier: Y+S92RaqStDPK1Mdbq3EjiadIDJKMz/eFjD3XyVZk+Q= Subject key identifier: 2C:75:CF:55:90:D7:44:2E:0B:C1:4B:3D:F0:19:E7:D0:E4:71:E8:14 Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft Manifest number: 6B Signing time: Fri 17 May 2024 07:38:41 +0000 Manifest this update: Fri 17 May 2024 07:38:40 +0000 Manifest next update: Fri 24 May 2024 07:38:40 +0000 Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: v2bfUHviLHdx1YfxaaC95xWQM8rodVUUC6jwVZz55eA=) 2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: irBKz5hDdDQSuzPo8HTBKaH+G3tFJbjs2+W0RwVXyv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Validity Not Before: May 17 07:38:40 2024 GMT Not After : May 24 07:38:40 2024 GMT Subject: CN=66470980-0eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:58:e9:cd:13:4e:00:0a:89:8e:1f:84:23: 18:5c:f0:b4:d1:4d:a4:0c:e0:39:dd:2a:45:a1:d5: 19:9f:8a:c4:2d:12:74:6d:93:7b:97:56:53:7c:da: c0:ce:8f:48:03:a1:5d:41:76:85:3f:13:f6:06:ac: 49:2c:3d:9c:fb:2d:bb:85:dd:43:ee:1e:70:b9:3a: 22:30:b2:fa:f3:04:46:08:41:fc:e7:26:f8:61:bf: 00:a1:0b:f3:24:1a:97:cd:1b:5a:47:2d:15:8d:58: 6f:45:59:e1:74:82:ae:23:92:bf:c0:48:c8:8e:68: 7e:47:c8:6b:66:1d:8b:f1:2b:91:94:19:4d:07:30: 03:d5:0c:9e:e8:cc:42:4c:7b:db:d9:d8:dd:f6:04: bc:fa:66:2f:86:ea:c3:12:d7:54:85:e3:70:0a:b4: 96:16:e6:59:c6:aa:03:7f:c9:eb:8c:b4:0d:97:34: c9:f0:dd:77:6e:d6:98:c3:fd:a9:56:09:8c:7c:46: 54:63:e8:91:cf:8d:7b:74:8b:67:dc:60:86:b6:0c: 98:22:0f:1d:68:72:c4:f4:d6:32:54:b3:13:56:ae: ac:05:56:97:4f:b1:3e:92:76:c8:44:dd:01:a4:46: 6e:b0:09:65:db:51:5a:66:cd:38:35:21:8e:b3:16: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:75:CF:55:90:D7:44:2E:0B:C1:4B:3D:F0:19:E7:D0:E4:71:E8:14 X509v3 Authority Key Identifier: keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b4:bd:90:00:fe:a8:26:5e:e5:72:ce:7c:98:4c:8d:ec:a5: 18:94:fa:18:ae:06:53:a8:00:a3:22:3b:ca:84:6b:b7:8f:7b: a9:d9:dd:fb:8e:15:61:fa:55:f1:86:46:b0:4c:9f:f9:c7:e9: c4:69:79:d8:da:86:c8:5b:ce:b7:06:fd:9f:93:b1:b7:28:d3: 00:7a:61:50:e9:f2:d6:6a:33:85:c7:32:a8:e7:ac:8f:39:b3: 0b:9d:2d:4f:e1:32:12:b9:a3:1b:c3:34:90:f7:93:fb:b0:e7: 29:18:a8:85:51:0d:0e:4e:5e:a5:05:5f:6f:9d:3b:84:de:68: 3e:71:b6:97:94:10:c8:e2:06:d2:46:7c:29:6e:ee:ba:ba:33: 64:d6:af:ac:3c:3e:89:80:2b:ec:78:a7:4a:10:21:d5:c4:23: b0:7c:42:d0:e2:0c:fe:c0:10:f9:e1:bd:6a:5c:a7:fb:04:87: 48:01:5e:d6:e6:ca:04:5d:1e:8d:83:d4:ed:73:30:05:25:8b: 54:59:aa:7b:ef:03:b3:f7:2d:e7:94:52:53:f4:ae:68:74:12: 3e:0a:85:15:b1:68:47:24:10:73:6e:39:dd:4c:c7:ad:66:c6: e2:d2:1e:a8:6e:d6:e9:9e:00:1d:68:1a:c3:f6:72:6d:ef:ba: 06:dc:2d:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MjhFMjExMC8GA1UEBRMoQzg4QzJBQTk0QUFFNUVGOUY0RDQ5N0U4Mzg3QTM5REQx QkNFOTM5RDAeFw0yNDA1MTcwNzM4NDBaFw0yNDA1MjQwNzM4NDBaMBgxFjAUBgNV BAMTDTY2NDcwOTgwLTBlYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDptFjpzRNOAAqJjh+EIxhc8LTRTaQM4DndKkWh1RmfisQtEnRtk3uXVlN82sDO j0gDoV1BdoU/E/YGrEksPZz7LbuF3UPuHnC5OiIwsvrzBEYIQfznJvhhvwChC/Mk GpfNG1pHLRWNWG9FWeF0gq4jkr/ASMiOaH5HyGtmHYvxK5GUGU0HMAPVDJ7ozEJM e9vZ2N32BLz6Zi+G6sMS11SF43AKtJYW5lnGqgN/yeuMtA2XNMnw3Xdu1pjD/alW CYx8RlRj6JHPjXt0i2fcYIa2DJgiDx1ocsT01jJUsxNWrqwFVpdPsT6SdshE3QGk Rm6wCWXbUVpmzTg1IY6zFrCLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULHXPVZDX RC4LwUs98Bnn0ORx6BQwHwYDVR0jBBgwFoAUyIwqqUquXvn01JfoOHo53RvOk50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyOEUyL0NFNTQwNkY2NzJF MTExRUVCMDc4MTYxOUM0RjlBRTAyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUl3cXFVcXVYdm4wMUpmb09IbzUzUnZPazUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy OEUyL0NFNTQwNkY2NzJFMTExRUVCMDc4MTYxOUM0RjlBRTAyL3lJd3FxVXF1WHZu MDFKZm9PSG81M1J2T2s1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIG0vZAA/qgmXuVyznyYTI3spRiU+hiuBlOoAKMiO8qEa7ePe6nZ3fuO FWH6VfGGRrBMn/nH6cRpedjahshbzrcG/Z+Tsbco0wB6YVDp8tZqM4XHMqjnrI85 swudLU/hMhK5oxvDNJD3k/uw5ykYqIVRDQ5OXqUFX2+dO4TeaD5xtpeUEMjiBtJG fClu7rq6M2TWr6w8PomAK+x4p0oQIdXEI7B8QtDiDP7AEPnhvWpcp/sEh0gBXtbm ygRdHo2D1O1zMAUli1RZqnvvA7P3LeeUUlP0rmh0Ej4KhRWxaEckEHNuOd1Mx61m xuLSHqhu1umeAB1oGsP2cm3vugbcLXE= -----END CERTIFICATE-----Generated at Fri May 17 08:52:45 2024 by rpki-client on console-ams.rpki-client.org