$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: R2ADBmRunX0I6vTDj5yWnTprwsWZe3Fno6sz5OWWs6w= Subject key identifier: F7:13:3B:37:61:58:65:5C:EA:67:0D:55:AE:D4:34:F4:E4:A2:4E:C2 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 01B0 Signing time: Sun 05 May 2024 04:48:26 +0000 Manifest this update: Sun 05 May 2024 04:48:25 +0000 Manifest next update: Sun 12 May 2024 04:48:25 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: ey2Ef5siUtYTGfpRWddANizmbnRezmaCAUzDYeOJ4YI=) 2: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: rFO46GYscxwwtDgi0BfU6cPl0G3bTppvMjDr7alnCuA=) 3: D1CEC6A2088E11EF9EF9890BC4F9AE02.roa (hash: q5mQKqFlyG5VNCAfAFTiKZdzfHxg2vttRTN+D3g5P2Y=) 4: 7D104712085211EFA7992934C4F9AE02.roa (hash: Aqe/U++88po7rga2niTM+HUamaL9EmJ7o/ewgDRaQ0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: May 5 04:48:25 2024 GMT Not After : May 12 04:48:25 2024 GMT Subject: CN=66370f99-8ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:04:09:e9:8c:f8:19:ca:1e:32:51:41:51: 47:6b:50:07:1f:bd:2b:e0:1c:3d:cb:33:e2:3e:a7: c6:a3:0f:b9:f6:fd:53:30:16:84:c7:ab:03:68:55: dc:90:cf:22:52:b4:68:18:b7:de:73:06:c9:6a:b0: 63:0f:88:e9:68:6a:b4:43:5b:b9:00:19:81:67:92: f3:3e:5f:16:ba:c4:44:54:ef:ac:6f:2d:d1:31:4c: b0:63:00:23:4e:f5:bf:ef:a9:e0:7a:0c:c4:ed:6a: 0d:4c:05:b2:c2:71:0e:db:a5:b3:69:05:57:22:83: c6:a5:04:cd:cd:c5:ff:3e:e7:03:8f:c8:28:2c:19: c6:67:c3:ec:1f:2d:db:e8:d8:4c:c3:e8:ac:13:6e: ef:96:e5:1f:1f:ba:cd:81:0d:9e:71:ac:0a:93:65: 80:1b:8a:98:d7:60:90:af:2e:f6:d1:61:eb:bb:60: 7c:2f:81:be:40:d6:82:09:9f:2e:d0:99:3b:6e:37: 09:fc:4f:c0:bf:c0:b1:0b:0f:2f:e5:3e:07:52:94: b7:36:f6:24:a7:f4:ed:3e:61:f1:d5:d8:11:b6:54: 2a:d9:d9:12:e4:53:18:71:53:6f:b9:dd:8e:50:04: b1:5c:51:f4:4e:ab:d4:a8:e4:5e:37:c7:f8:47:84: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:3B:37:61:58:65:5C:EA:67:0D:55:AE:D4:34:F4:E4:A2:4E:C2 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d4:d4:70:45:4e:36:1f:20:6d:de:bf:80:20:ef:0d:bb:f0: 9e:23:53:6c:7d:e9:94:a4:9c:a6:03:85:b8:1b:f0:fc:29:3c: bf:16:ea:9a:bb:0b:27:09:c2:1f:cb:69:43:ad:44:58:7e:8f: 20:0f:62:94:db:34:39:08:9a:11:cc:43:58:f9:42:9a:db:92: c8:f7:47:4d:9b:97:11:8d:ac:60:8f:cf:f6:64:50:1b:6a:59: 31:c3:50:d3:3e:ed:26:1c:d6:8d:02:74:5b:57:21:bb:0d:67: 2d:70:18:a7:c7:04:28:95:ab:80:bd:d1:47:7f:06:97:ef:70: b5:e1:ae:39:a7:a9:38:85:73:2c:2d:fa:3c:d6:20:7a:e4:2b: cf:90:63:6b:21:ac:08:76:69:95:84:f9:b2:3b:ef:b0:37:32: d5:76:13:22:2d:9f:e3:6d:89:1c:c2:b6:e4:20:1b:17:0f:2e: 75:ce:b7:6b:1d:f3:22:3a:37:e0:8e:17:ca:ce:35:8e:36:41: e1:d7:f3:40:3a:9c:eb:4b:96:43:f7:d4:15:d4:d3:f1:82:74: 06:a9:2d:a6:9b:63:ca:bd:7e:36:4f:ea:fe:72:90:23:98:65: f0:78:65:ec:6a:6f:00:6f:47:64:f4:c3:79:ef:e7:37:e8:ae: 0b:c8:d7:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjQwNTA1MDQ0ODI1WhcNMjQwNTEyMDQ0ODI1WjAYMRYwFAYD VQQDEw02NjM3MGY5OS04ZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFEECemM+BnKHjJRQVFHa1AHH70r4Bw9yzPiPqfGow+59v1TMBaEx6sDaFXc kM8iUrRoGLfecwbJarBjD4jpaGq0Q1u5ABmBZ5LzPl8WusREVO+sby3RMUywYwAj TvW/76ngegzE7WoNTAWywnEO26WzaQVXIoPGpQTNzcX/PucDj8goLBnGZ8PsHy3b 6NhMw+isE27vluUfH7rNgQ2ecawKk2WAG4qY12CQry720WHru2B8L4G+QNaCCZ8u 0Jk7bjcJ/E/Av8CxCw8v5T4HUpS3NvYkp/TtPmHx1dgRtlQq2dkS5FMYcVNvud2O UASxXFH0TqvUqOReN8f4R4R9RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcTOzdh WGVc6mcNVa7UNPTkok7CMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs1NRwRU42HyBt3r+AIO8Nu/CeI1NsfemUpJymA4W4G/D8KTy/Fuqa uwsnCcIfy2lDrURYfo8gD2KU2zQ5CJoRzENY+UKa25LI90dNm5cRjaxgj8/2ZFAb alkxw1DTPu0mHNaNAnRbVyG7DWctcBinxwQolauAvdFHfwaX73C14a45p6k4hXMs Lfo81iB65CvPkGNrIawIdmmVhPmyO++wNzLVdhMiLZ/jbYkcwrbkIBsXDy51zrdr HfMiOjfgjhfKzjWONkHh1/NAOpzrS5ZD99QV1NPxgnQGqS2mm2PKvX42T+r+cpAj mGXweGXsam8Ab0dk9MN57+c36K4LyNcd -----END CERTIFICATE-----Generated at Sun May 5 05:21:56 2024 by rpki-client on console-fra.rpki-client.org