$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json) Hash identifier: LPdvQe9JQVYSeXB4/tI7QVp8xZiU2bTu1iB7foetk1c= Subject key identifier: 56:DD:AA:B5:44:95:AD:3B:43:D1:1C:12:71:AA:3D:0D:24:FF:A6:6D Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft Manifest number: 58 Signing time: Sun 19 May 2024 07:50:28 +0000 Manifest this update: Sun 19 May 2024 07:50:28 +0000 Manifest next update: Sun 26 May 2024 07:50:28 +0000 Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: j0m213TQsFusdRa3HvCFix+BN7aPpMRs9JPCkCAIrG4=) 2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: iiBaXq57eZp8X6c5iWgE7TvYtMfnJe4YRExnQe6QN9g=) 3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: BfjQ13T33HJnXI6yOwnTUFJNl0yEXiv84R4LxwoIzH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Validity Not Before: May 19 07:50:28 2024 GMT Not After : May 26 07:50:28 2024 GMT Subject: CN=6649af44-072b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8d:a2:91:71:48:7c:03:37:bb:98:a3:bc:c0: 5a:10:78:01:74:7d:36:9e:80:99:38:3c:5b:38:30: 0f:73:31:a1:85:c0:70:33:54:7f:8d:6c:97:dd:49: 5e:7c:78:c0:a8:14:59:a7:12:75:18:d3:d3:19:05: 3f:08:3c:b2:10:d0:6e:dd:69:83:e9:be:b8:ad:e9: 81:77:2d:71:3c:4b:6f:d8:51:4a:48:25:0b:1a:34: 04:a9:43:ca:0e:4e:ae:c5:e8:c9:ac:0c:56:55:78: b8:01:21:67:b8:cf:0c:e1:58:be:73:3e:0a:ad:4f: 27:35:56:42:85:de:56:d9:71:ea:02:b6:50:81:00: 4b:b9:25:92:b8:7c:f0:e7:fe:45:67:20:c9:a9:d5: e8:0c:a5:1b:5c:a3:a9:d2:d5:20:e5:be:59:48:b3: 8e:16:29:dc:86:77:f1:21:c7:11:64:09:03:95:ec: 8d:36:38:34:1e:0a:81:17:ea:23:6e:78:cf:0f:df: e3:23:ca:87:88:92:b4:f6:41:09:74:39:29:46:a3: a4:63:29:a2:d6:82:dd:fd:47:46:a1:bc:45:c2:1c: d7:f0:4c:b8:f0:67:2b:3d:75:97:23:c9:3d:51:9a: 6f:92:27:94:b2:97:25:53:aa:df:a4:87:d4:d1:5a: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DD:AA:B5:44:95:AD:3B:43:D1:1C:12:71:AA:3D:0D:24:FF:A6:6D X509v3 Authority Key Identifier: keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3c:53:8f:f2:10:80:ae:39:2e:46:fe:c7:d4:d3:f9:b0:ef: 66:67:c7:09:1b:fb:9a:e7:c4:d5:47:5a:ad:ab:2e:1e:ba:b3: d5:00:f4:dc:2c:e1:2f:39:91:41:56:6f:c0:bb:4d:a5:90:6b: 88:a6:bf:4a:85:64:89:c2:a2:e7:40:c3:e3:48:ac:e4:85:f1: 52:0d:65:a6:c8:cf:db:1f:7b:d6:fd:bf:c0:ba:9e:9a:79:19: 8e:7c:d0:31:fc:af:ec:b5:cb:30:1d:78:5c:9e:28:50:98:2a: d1:ca:92:9f:1a:50:26:40:8d:4d:32:ef:99:0e:70:6e:59:45: ad:f8:53:29:10:a5:cd:44:32:f0:9a:02:92:f3:5d:b4:05:3c: 26:ec:e6:79:b9:f8:8f:e8:b2:96:6c:59:39:9d:89:bd:1a:cb: f9:25:7d:84:6e:2d:48:3f:dd:ac:48:44:e6:f1:11:f8:54:1c: a0:96:9c:2b:63:7e:24:79:7e:2e:7a:27:b7:b7:24:3d:ea:2f: a1:c9:7c:32:c6:9f:e2:c4:e4:9f:1b:0f:64:2c:50:35:75:85: 9d:39:ad:4f:06:f5:38:45:be:82:b2:a1:b6:35:6f:0e:21:f8: 8e:8d:8c:38:2d:a7:83:0f:dc:37:37:62:1c:8c:0d:de:40:ea: 70:b9:6d:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDI2MTExMC8GA1UEBRMoQ0Q4OUE4MjY4RUIxMUUzMzBGQkQ0NEMwNDg3MjBEMTMy NUM1QTYwQjAeFw0yNDA1MTkwNzUwMjhaFw0yNDA1MjYwNzUwMjhaMBgxFjAUBgNV BAMTDTY2NDlhZjQ0LTA3MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZjaKRcUh8Aze7mKO8wFoQeAF0fTaegJk4PFs4MA9zMaGFwHAzVH+NbJfdSV58 eMCoFFmnEnUY09MZBT8IPLIQ0G7daYPpvrit6YF3LXE8S2/YUUpIJQsaNASpQ8oO Tq7F6MmsDFZVeLgBIWe4zwzhWL5zPgqtTyc1VkKF3lbZceoCtlCBAEu5JZK4fPDn /kVnIMmp1egMpRtco6nS1SDlvllIs44WKdyGd/EhxxFkCQOV7I02ODQeCoEX6iNu eM8P3+MjyoeIkrT2QQl0OSlGo6RjKaLWgt39R0ahvEXCHNfwTLjwZys9dZcjyT1R mm+SJ5SylyVTqt+kh9TRWuBxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVt2qtUSV rTtD0RwScao9DST/pm0wHwYDVR0jBBgwFoAUzYmoJo6xHjMPvUTASHINEyXFpgsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MjYxL0QwNjVCQzRDOTM0 MjExRUVBOEMxNTQ3OEM0RjlBRTAyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBn cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelltb0pvNnhIak1QdlVUQVNISU5FeVhGcGdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MjYxL0QwNjVCQzRDOTM0MjExRUVBOEMxNTQ3OEM0RjlBRTAyL3pZbW9KbzZ4SGpN UHZVVEFTSElORXlYRnBncy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADs8U4/yEICuOS5G/sfU0/mw72Znxwkb+5rnxNVHWq2rLh66s9UA9Nws 4S85kUFWb8C7TaWQa4imv0qFZInCoudAw+NIrOSF8VINZabIz9sfe9b9v8C6npp5 GY580DH8r+y1yzAdeFyeKFCYKtHKkp8aUCZAjU0y75kOcG5ZRa34UykQpc1EMvCa ApLzXbQFPCbs5nm5+I/ospZsWTmdib0ay/klfYRuLUg/3axIRObxEfhUHKCWnCtj fiR5fi56J7e3JD3qL6HJfDLGn+LE5J8bD2QsUDV1hZ05rU8G9ThFvoKyobY1bw4h +I6NjDgtp4MP3Dc3YhyMDd5A6nC5bQ0= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org