$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: z01Gbn8LO84GipkhGVuB/S84JO1qVXuulLG9et9ACoE= Subject key identifier: 5E:7A:AD:D3:64:B6:0F:33:1F:98:5B:B3:26:BC:A0:E1:73:17:61:CC Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0B3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0B39 Signing time: Thu 02 May 2024 19:50:37 +0000 Manifest this update: Thu 02 May 2024 19:50:37 +0000 Manifest next update: Thu 09 May 2024 19:50:37 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: 7ghYHElNvnAAFTNqd6hLAzd1HV2CV08Wc1sw8x284O4=) 2: 9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa (hash: Jeh3zOQgbNPMApItqeyCkWdXrJAzm9EwiIIngDfy7jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: May 2 19:50:37 2024 GMT Not After : May 9 19:50:37 2024 GMT Subject: CN=6633ee8d-5683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:6b:36:9c:dc:5f:4d:eb:56:fe:5a:10:60: b0:ab:31:64:dc:14:ac:e8:42:1d:64:59:d6:c8:00: fb:e5:66:ea:39:a1:a9:08:ed:12:20:da:94:bb:33: b7:78:8d:a8:02:c2:8e:3c:07:eb:01:10:ec:75:9a: d0:52:a3:b9:dc:77:ec:3d:b9:0b:48:ea:20:69:76: 41:c4:2b:63:14:9c:3c:b1:29:cf:e8:ea:e8:a4:89: 71:0a:0d:7f:44:62:2e:4e:79:49:dc:bc:ee:24:36: 8d:34:35:b7:59:ab:9e:8a:fd:9d:5a:de:ed:ae:d6: 5d:2e:24:f1:09:9f:c5:e4:f0:e5:44:8b:5c:ae:23: 0c:c5:13:e9:ca:8e:87:2a:4b:2e:9e:57:31:a5:3c: 37:9e:6b:e1:cd:2c:dd:c2:21:41:4f:f6:9c:62:c4: 47:73:35:73:92:bf:2d:81:27:3d:fc:5f:32:36:09: cc:42:c8:d3:6e:9b:ec:38:6c:e4:78:16:ea:5b:b4: 49:2a:0e:a2:0a:79:01:7e:ac:3d:50:b7:09:7a:57: 2e:f3:a7:c8:1a:c8:34:92:30:29:55:66:3d:35:46: 95:4f:82:b3:47:fb:f7:42:44:ba:70:75:ce:47:34: d5:52:8e:21:d1:b2:c8:a9:3d:36:43:2a:b5:6d:7c: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7A:AD:D3:64:B6:0F:33:1F:98:5B:B3:26:BC:A0:E1:73:17:61:CC X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0f:99:a1:b4:7b:aa:44:c6:93:22:4e:ae:28:86:29:92:5b: bc:14:1e:20:90:23:c9:f5:d8:dd:f2:d4:db:68:86:b0:96:47: 60:31:66:45:63:91:b1:b9:44:96:81:2f:6a:c4:d6:ab:fb:84: 19:3e:17:e6:cf:eb:cc:26:7f:41:ee:6f:41:66:17:4f:d5:0e: 86:43:7e:91:ad:bf:80:2c:60:d4:73:94:8f:d5:c4:0a:3b:e7: 92:64:04:4b:13:5a:94:a3:ce:5f:4e:ec:ad:ae:45:7f:43:02: a6:14:ba:ec:b3:06:13:9f:f4:40:c8:e4:f7:98:2f:45:ef:7a: 50:f3:b4:77:01:6e:01:f6:07:5a:f7:fe:2d:b1:d0:60:9f:a5: ba:12:ae:48:74:bb:51:1e:d7:8a:19:b7:c1:fd:55:e1:7f:82: 94:4b:99:79:83:66:34:84:20:de:10:83:e6:00:d5:93:c7:76: 0d:f8:fb:bc:29:a0:09:eb:e3:4e:1a:fc:64:65:8f:f4:e4:ee: ac:2d:6d:5b:ed:29:38:a6:14:1f:8e:da:e3:e2:9f:af:41:f9: 35:b4:9e:41:f1:e2:bd:cd:4f:4c:64:fd:fd:80:45:5a:69:bd: 67:3b:96:c9:eb:94:f7:24:a0:ba:05:5c:5b:c7:a4:da:88:94: 35:88:dc:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjQwNTAyMTk1MDM3WhcNMjQwNTA5MTk1MDM3WjAYMRYwFAYD VQQDEw02NjMzZWU4ZC01NjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZxrNpzcX03rVv5aEGCwqzFk3BSs6EIdZFnWyAD75WbqOaGpCO0SINqUuzO3 eI2oAsKOPAfrARDsdZrQUqO53HfsPbkLSOogaXZBxCtjFJw8sSnP6OropIlxCg1/ RGIuTnlJ3LzuJDaNNDW3Waueiv2dWt7trtZdLiTxCZ/F5PDlRItcriMMxRPpyo6H KksunlcxpTw3nmvhzSzdwiFBT/acYsRHczVzkr8tgSc9/F8yNgnMQsjTbpvsOGzk eBbqW7RJKg6iCnkBfqw9ULcJelcu86fIGsg0kjApVWY9NUaVT4KzR/v3QkS6cHXO RzTVUo4h0bLIqT02Qyq1bXxBbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF56rdNk tg8zH5hbsya8oOFzF2HMMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeD5mhtHuqRMaTIk6uKIYpklu8FB4gkCPJ9djd8tTbaIawlkdgMWZF Y5GxuUSWgS9qxNar+4QZPhfmz+vMJn9B7m9BZhdP1Q6GQ36Rrb+ALGDUc5SP1cQK O+eSZARLE1qUo85fTuytrkV/QwKmFLrsswYTn/RAyOT3mC9F73pQ87R3AW4B9gda 9/4tsdBgn6W6Eq5IdLtRHteKGbfB/VXhf4KUS5l5g2Y0hCDeEIPmANWTx3YN+Pu8 KaAJ6+NOGvxkZY/05O6sLW1b7Sk4phQfjtrj4p+vQfk1tJ5B8eK9zU9MZP39gEVa ab1nO5bJ65T3JKC6BVxbx6TaiJQ1iNx8 -----END CERTIFICATE-----Generated at Thu May 2 20:50:22 2024 by rpki-client on console-fra.rpki-client.org