$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: yLDmofogDTHpDi9XxYQL3uyWOxmvzhwgUCJpdCz6JNA= Subject key identifier: 08:55:0B:B6:C9:D2:0B:06:82:DE:78:11:73:C9:CE:22:BD:CC:D3:F1 Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 06E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 06E0 Signing time: Tue 30 Apr 2024 23:09:00 +0000 Manifest this update: Tue 30 Apr 2024 23:09:00 +0000 Manifest next update: Tue 07 May 2024 23:09:00 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: RrESTyli8hhO3dNjU0/OI1OhUQ/VLEwHOzK1HPu2adw=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: l64K4tplog0G07T/3YojgoGRLHdEu1r1sBnnM1yfpLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: Apr 30 23:09:00 2024 GMT Not After : May 7 23:09:00 2024 GMT Subject: CN=66317a0c-3a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:df:99:10:56:0d:6d:a9:9c:83:6c:78:b1: 6e:18:db:30:46:59:81:13:5b:da:aa:16:8d:67:14: ac:9d:d3:ec:15:3b:bf:4a:1e:0f:06:99:20:41:78: c8:1d:e7:87:58:dd:c9:49:d4:27:79:d1:19:0a:0c: 0d:ad:c5:4a:8b:eb:0b:37:e6:78:91:1a:b8:c1:87: f3:62:73:e2:77:a7:fc:6c:19:7e:13:a6:aa:cb:f9: 69:12:8f:f1:f7:81:5d:46:59:99:81:66:21:10:92: 31:32:bf:01:19:30:51:75:65:24:f9:4f:f6:c3:65: 95:3a:39:bd:3f:8e:11:94:a2:f5:82:00:2c:e0:b9: 90:49:06:c7:0c:18:f7:e8:f4:1a:68:56:00:9c:97: 8a:88:88:cd:04:20:4f:fa:e1:02:3d:88:71:71:9c: 76:90:90:5a:6f:2f:44:36:97:e6:35:dd:1f:b1:a8: d9:c6:b7:89:c3:90:80:a2:41:bf:45:34:0d:12:04: a1:c6:e7:08:ff:e4:82:ac:d4:a4:66:58:45:e6:71: 6d:0c:18:03:5f:a4:c8:d2:f9:85:58:15:dd:65:a4: 8b:e3:50:3d:45:a5:e3:38:f8:44:e3:c6:7b:3e:31: 97:18:d9:85:56:08:66:e9:72:e8:de:d1:84:80:6e: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:55:0B:B6:C9:D2:0B:06:82:DE:78:11:73:C9:CE:22:BD:CC:D3:F1 X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ef:59:b6:57:00:90:c1:8b:34:ba:1b:2a:16:87:68:2d:f9: 60:82:de:f8:99:9e:4c:1a:30:bf:f9:4b:71:62:4f:b8:6b:1e: 8c:3b:75:f2:76:76:c9:4a:09:8e:86:96:8a:e9:9e:2c:2c:92: b0:b1:2d:80:cb:08:4b:06:c9:08:91:6f:b9:3d:4d:e8:d6:ec: 06:e7:f6:b0:3b:24:08:2c:66:f9:43:32:c9:03:fa:d2:c6:8a: f5:30:29:23:e5:32:da:85:97:04:27:c1:88:04:06:1a:ba:0e: 74:cc:53:11:31:c9:3f:e3:35:c7:4b:3b:23:12:f4:be:26:e0: 42:eb:2f:c2:fc:5c:b4:50:1e:24:3c:1d:3b:44:b1:83:e4:a7: e7:1f:a8:1c:30:96:f4:42:08:61:05:06:12:54:be:37:33:8a: 38:3b:c7:18:37:e6:61:f2:1a:70:d3:bc:6d:b1:bb:04:f6:57: 72:86:3a:68:08:00:21:19:cb:5d:84:21:f3:4c:f4:53:0c:64: eb:1d:34:3e:d4:07:d4:77:27:ee:f1:81:25:4f:62:58:07:64: 22:b7:94:a3:9a:87:01:6d:db:a3:81:b4:f3:a5:0f:3d:0f:eb: bf:b8:15:ef:b9:74:80:f7:fb:d2:77:21:e0:17:56:23:75:23: 02:d8:30:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjQwNDMwMjMwOTAwWhcNMjQwNTA3MjMwOTAwWjAYMRYwFAYD VQQDEw02NjMxN2EwYy0zYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hjfmRBWDW2pnINseLFuGNswRlmBE1vaqhaNZxSsndPsFTu/Sh4PBpkgQXjI HeeHWN3JSdQnedEZCgwNrcVKi+sLN+Z4kRq4wYfzYnPid6f8bBl+E6aqy/lpEo/x 94FdRlmZgWYhEJIxMr8BGTBRdWUk+U/2w2WVOjm9P44RlKL1ggAs4LmQSQbHDBj3 6PQaaFYAnJeKiIjNBCBP+uECPYhxcZx2kJBaby9ENpfmNd0fsajZxreJw5CAokG/ RTQNEgShxucI/+SCrNSkZlhF5nFtDBgDX6TI0vmFWBXdZaSL41A9RaXjOPhE48Z7 PjGXGNmFVghm6XLo3tGEgG4OuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhVC7bJ 0gsGgt54EXPJziK9zNPxMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA71m2VwCQwYs0uhsqFodoLflggt74mZ5MGjC/+UtxYk+4ax6MO3Xy dnbJSgmOhpaK6Z4sLJKwsS2AywhLBskIkW+5PU3o1uwG5/awOyQILGb5QzLJA/rS xor1MCkj5TLahZcEJ8GIBAYaug50zFMRMck/4zXHSzsjEvS+JuBC6y/C/Fy0UB4k PB07RLGD5KfnH6gcMJb0QghhBQYSVL43M4o4O8cYN+Zh8hpw07xtsbsE9ldyhjpo CAAhGctdhCHzTPRTDGTrHTQ+1AfUdyfu8YElT2JYB2Qit5SjmocBbdujgbTzpQ89 D+u/uBXvuXSA9/vSdyHgF1YjdSMC2DDQ -----END CERTIFICATE-----Generated at Tue Apr 30 23:40:13 2024 by rpki-client on console-fra.rpki-client.org