$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json) Hash identifier: W+Xu+QIZD4Aay9fLX7BMUaHi4PuAGzwsuOh8ewgoDGo= Subject key identifier: 28:0D:C1:35:9C:BD:54:AB:CE:55:7F:D1:60:C5:15:09:5E:40:48:BC Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0B81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft Manifest number: 0B79 Signing time: Fri 26 Apr 2024 19:21:11 +0000 Manifest this update: Fri 26 Apr 2024 19:21:10 +0000 Manifest next update: Fri 03 May 2024 19:21:10 +0000 Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: NDHkxIEIXwrfkGrTj/52zmAsboeqiPTsIootUkN4+oA=) 2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: Xx/j33V2abaEtkV0aKfmFr3cMW7aDKDlom4xDnkcRPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: Apr 26 19:21:10 2024 GMT Not After : May 3 19:21:10 2024 GMT Subject: CN=662bfea6-f4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:35:f8:38:6d:46:a7:b8:97:fb:1f:d7:85:04: f2:0e:ae:9f:35:bb:be:f0:85:60:10:86:7e:86:17: 0f:d6:10:8e:2d:57:7c:2b:21:f1:2b:d1:3e:a3:ca: b9:3d:7b:d4:59:7e:08:fb:43:d1:9e:86:18:ec:c9: f5:27:5b:54:d1:f1:f7:08:71:77:b4:06:ba:c4:62: a3:52:ac:63:05:02:9b:f0:85:9f:f5:b0:d2:83:19: b8:7c:c6:19:87:93:20:42:c5:c0:7f:34:1d:fe:cc: a0:1e:85:2a:02:c6:ef:d0:5e:d3:67:e6:61:47:9c: e6:7e:ad:36:0d:c6:49:09:c0:08:7b:15:f5:b7:e3: d8:42:bc:a6:1e:4b:cd:ae:b5:16:93:25:de:02:04: 15:ee:d4:44:a5:95:95:b8:92:07:dd:cb:b5:18:1f: d2:1a:ef:b2:cd:8e:8c:93:88:5b:02:03:44:ef:ca: 75:6f:85:c9:a7:e1:df:ed:9c:27:34:8a:6e:c8:b9: b1:2f:c1:e1:4a:8b:4f:8b:70:dd:bf:e2:5e:84:6f: 64:34:42:3d:74:77:c2:55:68:ff:94:46:c3:71:60: 65:7d:b4:21:28:3e:df:d2:33:de:16:2d:4c:27:43: c2:01:fb:82:ff:65:cc:40:85:88:2a:70:67:10:a5: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0D:C1:35:9C:BD:54:AB:CE:55:7F:D1:60:C5:15:09:5E:40:48:BC X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:7d:e1:d1:ca:1a:0e:98:4b:83:8a:46:c3:70:79:13:53: 7f:e6:23:00:7a:fd:c5:c1:23:a9:ff:2a:41:ea:68:bd:d6:4d: 26:0c:99:89:c1:24:86:d2:69:5e:0c:5f:b7:74:27:20:c1:20: 4f:4e:c8:30:fb:e4:db:6a:f1:94:fb:a0:30:74:e6:38:70:d9: 63:86:ad:dd:b4:ea:fa:ba:d6:cc:1e:8d:59:04:04:50:e0:0f: 08:7b:6a:5f:b6:92:db:09:46:89:7c:26:0d:24:28:33:23:10: 37:d6:ec:53:7b:f0:3a:fb:a2:a5:9c:fa:4e:e1:2a:3e:9f:d3: 0c:7f:0d:54:bc:3d:93:75:4e:7b:a6:29:97:df:19:68:d4:d2: eb:05:fa:c5:96:5c:3d:d8:9b:23:60:f6:92:ac:05:9d:16:fa: 74:41:a2:f9:28:a1:cf:1d:50:77:da:bf:84:b0:2c:54:9a:67: ea:41:0d:fe:6d:61:a8:05:ec:65:3b:ab:d9:44:7a:aa:63:f2: 87:4a:db:4c:8b:e7:cf:1c:70:25:02:99:9e:54:f8:c9:97:cd: aa:7c:07:79:c2:c7:6d:28:31:a0:ee:9f:56:a4:5a:64:e7:fc: da:ae:14:75:89:25:01:18:76:1d:bb:ab:53:d0:ac:fd:46:3a: 0e:3c:3f:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjQwNDI2MTkyMTEwWhcNMjQwNTAzMTkyMTEwWjAYMRYwFAYD VQQDEw02NjJiZmVhNi1mNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jX4OG1Gp7iX+x/XhQTyDq6fNbu+8IVgEIZ+hhcP1hCOLVd8KyHxK9E+o8q5 PXvUWX4I+0PRnoYY7Mn1J1tU0fH3CHF3tAa6xGKjUqxjBQKb8IWf9bDSgxm4fMYZ h5MgQsXAfzQd/sygHoUqAsbv0F7TZ+ZhR5zmfq02DcZJCcAIexX1t+PYQrymHkvN rrUWkyXeAgQV7tREpZWVuJIH3cu1GB/SGu+yzY6Mk4hbAgNE78p1b4XJp+Hf7Zwn NIpuyLmxL8HhSotPi3Ddv+JehG9kNEI9dHfCVWj/lEbDcWBlfbQhKD7f0jPeFi1M J0PCAfuC/2XMQIWIKnBnEKWPCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgNwTWc vVSrzlV/0WDFFQleQEi8MB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82ODEyREY5MjA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMx OHB0anJCWjFUSGpSc1B5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcaH3h0coaDphLg4pGw3B5E1N/5iMAev3FwSOp/ypB6mi91k0mDJmJ wSSG0mleDF+3dCcgwSBPTsgw++TbavGU+6AwdOY4cNljhq3dtOr6utbMHo1ZBARQ 4A8Ie2pftpLbCUaJfCYNJCgzIxA31uxTe/A6+6KlnPpO4So+n9MMfw1UvD2TdU57 pimX3xlo1NLrBfrFllw92JsjYPaSrAWdFvp0QaL5KKHPHVB32r+EsCxUmmfqQQ3+ bWGoBexlO6vZRHqqY/KHSttMi+fPHHAlApmeVPjJl82qfAd5wsdtKDGg7p9WpFpk 5/zarhR1iSUBGHYdu6tT0Kz9RjoOPD/5 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:56 2024 by rpki-client on console-ams.rpki-client.org