$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: 3UWIZGBvsP+HFeEk2S9oo1AbqH7/CqwT5V8seyIc6kE= Subject key identifier: 9E:7C:83:46:C5:75:CE:DB:36:45:13:A0:70:6F:B9:81:F9:56:F5:58 Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: 27 Signing time: Fri 17 May 2024 08:38:53 +0000 Manifest this update: Fri 17 May 2024 08:38:52 +0000 Manifest next update: Fri 24 May 2024 08:38:52 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: ASEYP+Pbp1PzKy1jw1lFS2TzXdY0bitRfFb4KSM6xZg=) 2: 0F8D82DCD9FD11EEA4312983C4F9AE02.roa (hash: o70V3rgTm8yRRylFlCudRELCYk4ehTX4M2+Mtzto8oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: May 17 08:38:52 2024 GMT Not After : May 24 08:38:52 2024 GMT Subject: CN=6647179c-0332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:4b:e8:f8:21:a7:13:63:c5:d1:e6:39:e2: ef:89:65:e8:56:c6:3d:01:f3:0d:13:6f:70:ce:dc: 12:3c:96:b3:86:94:26:ec:37:af:60:90:24:f4:24: 11:e5:62:e6:4a:0a:d9:b6:56:4f:7e:4a:99:5f:00: a6:c6:b3:2a:2b:08:9e:06:02:88:8b:cb:97:ef:ba: db:53:a7:b6:db:52:16:45:f3:84:95:82:2c:90:2e: 29:4c:ca:20:56:f1:29:0c:1f:87:64:fe:75:c4:9e: ce:82:38:18:30:b2:e2:6c:64:dd:41:2b:ae:f4:6d: 99:e1:4f:a7:27:2f:fe:b1:96:e2:f4:d6:90:2b:cd: c8:cf:86:8e:fc:30:2d:d4:a7:e4:16:fb:e5:a0:89: 62:1d:97:b0:18:27:b8:6b:9a:26:06:f1:db:1b:9c: 2e:11:36:51:c5:15:25:69:c4:7e:81:4c:76:16:75: 9f:8d:12:a2:4a:94:89:68:5c:75:3f:79:6e:2c:8e: 68:60:84:7c:1a:41:45:b8:e1:07:7d:a5:3c:2b:0d: 86:79:8d:6e:15:e0:58:89:cc:24:a4:3e:b8:0d:16: 9c:5d:8d:2c:ac:19:59:59:3b:05:7b:be:9d:3d:1a: dc:97:2c:78:00:b1:00:75:7d:03:fd:cf:6d:e0:02: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:83:46:C5:75:CE:DB:36:45:13:A0:70:6F:B9:81:F9:56:F5:58 X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0b:33:15:0d:9a:82:fd:a6:0e:c3:65:4a:7d:bd:07:7e:f8: b8:99:d6:13:6e:e3:51:ae:b8:99:09:e1:01:5d:20:b2:af:4d: 88:95:27:0a:63:2c:96:60:1d:d2:d2:f9:97:5c:50:e2:c0:a1: 94:7e:81:1b:57:47:9f:45:b5:46:9e:23:1f:1b:df:1b:77:0f: 1b:a5:da:94:93:a7:78:38:f5:b9:87:39:37:19:04:a0:ee:ec: 40:18:da:76:5d:30:19:c7:91:dd:ca:4c:b2:13:1a:8b:38:97: a3:01:61:31:2f:95:ec:e4:6a:26:e9:34:db:b4:8c:f0:e1:44: 60:39:e9:5b:f5:81:fc:da:e5:25:04:7f:38:62:a9:65:17:50: 97:cf:a0:ca:55:95:73:06:72:8a:50:4b:c7:d5:a1:3e:b9:72: e9:12:65:70:ce:d7:6b:51:12:83:46:77:46:1e:d1:af:94:eb: f3:fb:8b:04:f9:88:4c:5d:e1:ee:5a:ce:e0:66:18:0b:3f:46: 04:25:32:b0:01:0d:71:e5:df:e9:90:d5:1f:cb:93:ef:e7:f3: c2:fc:4e:31:a3:57:cf:5d:c9:1e:35:80:24:26:fd:85:fb:7c: 59:85:a4:c0:f3:d7:44:bf:24:27:94:1f:04:55:ce:41:bc:c0: 2f:e8:dc:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjRGNTExMC8GA1UEBRMoNjE2M0E5NTU0QzMzMDY3OUY3RUExNjY3OEIxMDhEOTY0 RUMxQzgwMjAeFw0yNDA1MTcwODM4NTJaFw0yNDA1MjQwODM4NTJaMBgxFjAUBgNV BAMTDTY2NDcxNzljLTAzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDiUvo+CGnE2PF0eY54u+JZehWxj0B8w0Tb3DO3BI8lrOGlCbsN69gkCT0JBHl YuZKCtm2Vk9+SplfAKbGsyorCJ4GAoiLy5fvuttTp7bbUhZF84SVgiyQLilMyiBW 8SkMH4dk/nXEns6COBgwsuJsZN1BK670bZnhT6cnL/6xluL01pArzcjPho78MC3U p+QW++WgiWIdl7AYJ7hrmiYG8dsbnC4RNlHFFSVpxH6BTHYWdZ+NEqJKlIloXHU/ eW4sjmhghHwaQUW44Qd9pTwrDYZ5jW4V4FiJzCSkPrgNFpxdjSysGVlZOwV7vp09 GtyXLHgAsQB1fQP9z23gApZBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnnyDRsV1 zts2RROgcG+5gflW9VgwHwYDVR0jBBgwFoAUYWOpVUwzBnn36hZnixCNlk7ByAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NEY1LzVCNUI5M0VDRDlG OTExRUU5RUFFNUQ3REM0RjlBRTAyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVdPcFZVd3pCbm4zNmhabml4Q05sazdCeUFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NEY1LzVCNUI5M0VDRDlGOTExRUU5RUFFNUQ3REM0RjlBRTAyL1lXT3BWVXd6Qm5u MzZoWm5peENObGs3QnlBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8LMxUNmoL9pg7DZUp9vQd++LiZ1hNu41GuuJkJ4QFdILKvTYiVJwpj LJZgHdLS+ZdcUOLAoZR+gRtXR59FtUaeIx8b3xt3Dxul2pSTp3g49bmHOTcZBKDu 7EAY2nZdMBnHkd3KTLITGos4l6MBYTEvlezkaibpNNu0jPDhRGA56Vv1gfza5SUE fzhiqWUXUJfPoMpVlXMGcopQS8fVoT65cukSZXDO12tREoNGd0Ye0a+U6/P7iwT5 iExd4e5azuBmGAs/RgQlMrABDXHl3+mQ1R/Lk+/n88L8TjGjV89dyR41gCQm/YX7 fFmFpMDz10S/JCeUHwRVzkG8wC/o3Gw= -----END CERTIFICATE-----Generated at Fri May 17 10:59:08 2024 by rpki-client on console-ams.rpki-client.org