$ rpki-client -vvf rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.mft File: 2lyPJyhAj-74JW4gOI3rlgHltRA.mft (raw, json) Hash identifier: LYPkYFSUsN/28SIjKKjxdcI95KoU607ibMrdE+fUNa0= Subject key identifier: 33:25:0C:F0:F3:55:3A:5C:30:7F:17:81:C8:A8:5A:01:87:3E:13:64 Authority key identifier: DA:5C:8F:27:28:40:8F:EE:F8:25:6E:20:38:8D:EB:96:01:E5:B5:10 Certificate issuer: /CN=A91546FB/serialNumber=DA5C8F2728408FEEF8256E20388DEB9601E5B510 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.mft Manifest number: 01D3 Signing time: Fri 17 May 2024 04:27:50 +0000 Manifest this update: Fri 17 May 2024 04:27:49 +0000 Manifest next update: Fri 24 May 2024 04:27:49 +0000 Files and hashes: 1: 2lyPJyhAj-74JW4gOI3rlgHltRA.crl (hash: dB5PU5kam9ebiITLwlDGSeBCapUBu86+L5qe8yQ/Zxk=) 2: 3B63078201E711EDB2C82D0FC4F9AE02.roa (hash: y8EP44IV/D41qne8yMUw/86AS6rUnWXM3ggUmLWSPKQ=) 3: 3A84FA5A01E711EDB2C82D0FC4F9AE02.roa (hash: x4ZEI1/oN7zeGVnSfu0nnPCt20waWeVh+pcZZP/qEoY=) 4: 398C7DEE01E711EDB2C82D0FC4F9AE02.roa (hash: JkpAwyv1JWftgTjDfw5ndQKqelICGQqXBkAqr19Xf7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.crl rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91546FB/serialNumber=DA5C8F2728408FEEF8256E20388DEB9601E5B510 Validity Not Before: May 17 04:27:49 2024 GMT Not After : May 24 04:27:49 2024 GMT Subject: CN=6646dcc5-fb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:db:ca:2d:d6:15:79:17:b7:15:98:0e:99: 4e:42:52:fe:09:4c:d9:e8:05:bf:4a:86:23:0f:57: f8:b9:5e:01:4e:73:fd:f2:25:b3:2e:3d:4f:15:ca: 7a:68:e5:2b:99:d5:f3:15:b1:4e:3b:83:1b:5b:bd: 4d:11:80:f8:27:d1:b3:eb:ab:94:cb:6b:ef:7b:69: 56:17:77:8e:c4:60:ba:12:50:40:e6:92:06:bf:83: ac:84:0c:24:1b:97:fb:ad:b4:c3:c4:ae:5a:f7:53: 19:1d:57:71:7a:01:a6:08:88:4e:35:48:73:a6:76: 85:a3:eb:55:fa:91:82:b3:18:d5:c1:b3:c0:2d:53: 91:b0:37:18:a7:a9:ed:6f:4f:69:30:a9:7b:c3:31: 88:df:ea:1e:9e:d9:dc:48:62:fe:58:c3:13:e1:09: f5:72:3e:b5:ba:9d:1b:0a:2d:04:18:41:3a:8a:b7: 4f:1e:4e:c3:b9:1e:88:12:a4:0a:2b:b4:10:88:cc: aa:4f:e2:eb:d8:e1:17:a4:6f:91:7f:13:83:43:bc: 31:5b:42:c0:16:78:f1:81:ab:9a:96:e7:21:53:a7: 79:c2:10:83:7a:e0:72:fc:97:53:98:2a:7c:b2:5b: 2f:8f:b4:0f:34:9f:e7:b4:56:cc:43:58:e6:fa:87: 57:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:25:0C:F0:F3:55:3A:5C:30:7F:17:81:C8:A8:5A:01:87:3E:13:64 X509v3 Authority Key Identifier: keyid:DA:5C:8F:27:28:40:8F:EE:F8:25:6E:20:38:8D:EB:96:01:E5:B5:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:85:d1:5c:d3:33:7b:35:a7:e3:54:94:88:20:e8:f1:cb:56: c3:cf:84:be:8e:92:e1:eb:55:3d:f7:63:ba:4e:86:3e:e5:aa: 2e:71:dc:9b:16:3a:0c:21:d2:1c:06:8d:c9:31:57:46:ff:f7: 8d:2a:c8:d1:56:aa:2e:53:7e:75:e2:8e:68:73:90:6e:72:b2: b5:4b:be:fc:6f:e9:86:a9:38:48:41:e1:d1:a7:02:a0:ca:c8: 9f:4e:a9:d7:ae:67:e9:02:25:fc:a9:6a:eb:1c:44:52:c2:5d: 23:1e:22:12:9f:c1:5c:d8:87:63:e5:4c:1d:c4:8f:0e:d6:65: 78:bb:c3:44:f9:8a:71:33:71:2e:e7:7b:cb:75:2f:83:43:92: c9:e0:15:2c:83:4c:86:90:3b:52:f9:c1:7c:34:0c:bc:65:60: f9:98:30:a0:87:b8:13:bc:09:04:cc:41:ca:53:22:69:91:84: ae:b5:f2:ee:d2:24:57:15:d0:7a:2c:5a:aa:ec:c6:1f:36:63: ea:c0:79:67:49:9f:91:cc:d8:a5:20:af:3b:b8:4b:f2:d9:5b: 46:d1:af:41:fc:82:a4:e1:97:67:58:95:67:97:83:f0:a2:aa: 26:b9:4c:35:56:8f:2b:e7:5b:37:c2:8c:ef:ca:13:bb:5b:e7: c6:e3:62:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2RkIxMTAvBgNVBAUTKERBNUM4RjI3Mjg0MDhGRUVGODI1NkUyMDM4OERFQjk2 MDFFNUI1MTAwHhcNMjQwNTE3MDQyNzQ5WhcNMjQwNTI0MDQyNzQ5WjAYMRYwFAYD VQQDEw02NjQ2ZGNjNS1mYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb3byi3WFXkXtxWYDplOQlL+CUzZ6AW/SoYjD1f4uV4BTnP98iWzLj1PFcp6 aOUrmdXzFbFOO4MbW71NEYD4J9Gz66uUy2vve2lWF3eOxGC6ElBA5pIGv4OshAwk G5f7rbTDxK5a91MZHVdxegGmCIhONUhzpnaFo+tV+pGCsxjVwbPALVORsDcYp6nt b09pMKl7wzGI3+oentncSGL+WMMT4Qn1cj61up0bCi0EGEE6irdPHk7DuR6IEqQK K7QQiMyqT+Lr2OEXpG+RfxODQ7wxW0LAFnjxgaualuchU6d5whCDeuBy/JdTmCp8 slsvj7QPNJ/ntFbMQ1jm+odXWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMlDPDz VTpcMH8XgcioWgGHPhNkMB8GA1UdIwQYMBaAFNpcjycoQI/u+CVuIDiN65YB5bUQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDZGQi8xRTVDOTM4QTAx RTUxMUVEQkE3QkE5MEVDNEY5QUUwMi8ybHlQSnloQWotNzRKVzRnT0kzcmxnSGx0 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJseVBKeWhBai03NEpXNGdPSTNybGdIbHRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDZGQi8xRTVDOTM4QTAxRTUxMUVEQkE3QkE5MEVDNEY5QUUwMi8ybHlQSnloQWot NzRKVzRnT0kzcmxnSGx0UkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAhdFc0zN7NafjVJSIIOjxy1bDz4S+jpLh61U992O6ToY+5aoucdyb FjoMIdIcBo3JMVdG//eNKsjRVqouU3514o5oc5BucrK1S778b+mGqThIQeHRpwKg ysifTqnXrmfpAiX8qWrrHERSwl0jHiISn8Fc2Idj5UwdxI8O1mV4u8NE+YpxM3Eu 53vLdS+DQ5LJ4BUsg0yGkDtS+cF8NAy8ZWD5mDCgh7gTvAkEzEHKUyJpkYSutfLu 0iRXFdB6LFqq7MYfNmPqwHlnSZ+RzNilIK87uEvy2VtG0a9B/IKk4ZdnWJVnl4Pw oqomuUw1Vo8r51s3wozvyhO7W+fG42LA -----END CERTIFICATE-----Generated at Fri May 17 06:18:05 2024 by rpki-client on console-fra.rpki-client.org