$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft File: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json) Hash identifier: mI0jfkcDmXBLc00z02hC4d797UC8kJ01I9oojaMRjyk= Subject key identifier: A3:58:AC:1E:F4:99:34:39:97:0B:08:32:18:DA:04:EB:51:58:EB:97 Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft Manifest number: 0323 Signing time: Wed 01 May 2024 03:20:23 +0000 Manifest this update: Wed 01 May 2024 03:20:22 +0000 Manifest next update: Wed 08 May 2024 03:20:22 +0000 Files and hashes: 1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: j0unVwCfU0Z7gFsHa/YaoAIOFNPB0bltfYQmYE26Y4c=) 2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: rK8LNE70vEcEXQqVgfhb/qql1fI8LntfPvWUogqa3lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Validity Not Before: May 1 03:20:22 2024 GMT Not After : May 8 03:20:22 2024 GMT Subject: CN=6631b4f7-20ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:a2:59:37:6d:cf:ee:5b:98:86:67:fc:67: 97:09:d7:f4:92:71:ab:d7:eb:77:cc:bb:50:04:fb: 88:1a:4b:e0:16:23:8e:3e:be:20:9f:42:7e:46:08: 04:9f:10:05:70:3e:b5:24:ae:6b:ae:28:a6:16:9a: 7c:60:dd:26:98:1e:24:3e:97:7c:27:bc:b9:14:38: e4:93:4c:74:31:b1:f2:ff:0b:aa:b3:29:76:70:4e: 74:d9:15:0a:59:7a:45:33:3f:22:23:6c:f7:74:7f: 9f:b6:f2:d6:67:f4:c3:67:85:04:96:28:41:7b:9b: 88:7f:3a:90:55:0a:ef:cf:0a:ec:5e:80:26:d4:28: 60:48:a8:8d:9a:13:a0:fe:bc:86:7c:ca:a8:e7:8d: c2:4d:c1:0f:9a:fa:f4:51:4b:5a:16:43:59:82:06: d8:40:c9:a2:c1:29:d4:80:67:94:53:63:d3:a9:d2: b7:d4:a2:ee:35:f0:18:71:fd:e4:b7:e2:45:78:cd: bb:c0:b5:a1:7f:7d:76:4e:02:47:ff:d3:42:7d:93: bd:0d:22:05:86:8f:fc:29:23:78:f9:2c:79:24:4c: 79:1c:20:8a:f7:e8:5e:b7:62:09:02:96:e5:29:6b: 49:87:3f:29:76:6a:ad:22:88:1f:d1:92:42:2c:01: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:AC:1E:F4:99:34:39:97:0B:08:32:18:DA:04:EB:51:58:EB:97 X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:64:d9:09:13:a2:80:2e:4c:45:1a:2c:e4:f6:fe:43:8e:7d: 50:60:eb:d2:55:ec:ba:14:d3:3b:5b:f2:6d:c7:75:b1:7a:fe: 60:f6:ca:0c:d4:d0:16:5f:d5:0d:e7:5f:4e:9b:36:78:39:d5: 9d:ea:b3:69:f8:1f:56:54:9f:5c:cf:a8:1c:87:05:9e:a4:78: 00:51:6c:50:7a:91:01:6d:15:8c:88:8c:af:61:f7:3d:ac:3f: d5:8c:5a:76:ed:90:f0:d0:28:3f:40:7b:a8:2d:0d:99:b6:18: 25:78:b1:f6:4f:21:9c:9b:4e:91:42:fb:42:08:fe:de:1f:40: 53:f1:87:e3:db:5f:03:15:a8:18:73:ee:39:fa:05:89:dd:4d: 56:f6:39:1b:ef:56:67:68:cd:6f:72:a1:61:be:5c:4d:d6:31: 9b:fd:b7:0f:b9:4b:00:e8:f3:98:50:4e:40:e7:be:57:f3:13: be:c9:35:eb:26:f9:48:66:93:ea:81:dd:55:18:6b:80:e6:4a: b2:7b:da:2a:a8:11:9b:c7:d8:c7:77:66:c4:aa:ce:ac:e1:1b: f2:e6:ad:57:f2:4a:25:96:41:a9:c0:93:8e:66:42:24:9a:11: b4:77:6d:5c:74:af:f7:b3:21:98:3f:bd:19:57:11:7a:e8:25: 7e:5b:be:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjQwNTAxMDMyMDIyWhcNMjQwNTA4MDMyMDIyWjAYMRYwFAYD VQQDEw02NjMxYjRmNy0yMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskeiWTdtz+5bmIZn/GeXCdf0knGr1+t3zLtQBPuIGkvgFiOOPr4gn0J+RggE nxAFcD61JK5rriimFpp8YN0mmB4kPpd8J7y5FDjkk0x0MbHy/wuqsyl2cE502RUK WXpFMz8iI2z3dH+ftvLWZ/TDZ4UElihBe5uIfzqQVQrvzwrsXoAm1ChgSKiNmhOg /ryGfMqo543CTcEPmvr0UUtaFkNZggbYQMmiwSnUgGeUU2PTqdK31KLuNfAYcf3k t+JFeM27wLWhf312TgJH/9NCfZO9DSIFho/8KSN4+Sx5JEx5HCCK9+het2IJApbl KWtJhz8pdmqtIogf0ZJCLAEdRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNYrB70 mTQ5lwsIMhjaBOtRWOuXMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDA2Qi9ENjM4MjdBRTdDMjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4 dDdJU1MyX0QtWnpEWWctRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ZNkJE6KALkxFGizk9v5Djn1QYOvSVey6FNM7W/Jtx3Wxev5g9soM 1NAWX9UN519OmzZ4OdWd6rNp+B9WVJ9cz6gchwWepHgAUWxQepEBbRWMiIyvYfc9 rD/VjFp27ZDw0Cg/QHuoLQ2ZthgleLH2TyGcm06RQvtCCP7eH0BT8Yfj218DFagY c+45+gWJ3U1W9jkb71ZnaM1vcqFhvlxN1jGb/bcPuUsA6POYUE5A575X8xO+yTXr JvlIZpPqgd1VGGuA5kqye9oqqBGbx9jHd2bEqs6s4Rvy5q1X8kollkGpwJOOZkIk mhG0d21cdK/3syGYP70ZVxF66CV+W75r -----END CERTIFICATE-----Generated at Wed May 1 04:49:20 2024 by rpki-client on console-ams.rpki-client.org