$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: Fj04wGa38Whwnb1NMt8jA6TxLGtBRcy4nu4PwNRvSWs= Subject key identifier: 60:48:62:AF:14:EB:EB:BF:9B:F0:A5:41:DF:F1:4B:C0:8E:3D:BE:D3 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 6C Signing time: Wed 15 May 2024 07:35:46 +0000 Manifest this update: Wed 15 May 2024 07:35:46 +0000 Manifest next update: Wed 22 May 2024 07:35:45 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: MFbryQjQBSfB04CFfH68f0p9J3Ums5dRKsTLFwCBQA0=) 2: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (hash: PLXaIBOcZ24YSeDJPCzr1c3N1N83r0ddKj6UPv7Uijk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: May 15 07:35:46 2024 GMT Not After : May 22 07:35:45 2024 GMT Subject: CN=664465d2-346d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:a9:21:6c:5e:a8:9e:52:72:3f:6c:85:94: b0:c1:ca:5a:33:f0:7a:c0:b5:dd:29:c5:4b:6f:a1: a7:47:dd:b7:da:d8:d0:73:63:88:09:45:0c:ea:4a: b6:0a:a0:e3:38:a7:08:54:a0:b2:91:79:a5:71:2b: 08:20:21:0e:6d:c8:a5:15:da:3a:93:b2:11:f2:70: 38:29:ee:12:61:f0:05:3f:bc:45:d3:79:92:3f:39: eb:42:8e:af:f2:cc:db:29:de:4a:1a:bf:6f:4d:2d: 9f:d3:12:d4:a2:df:e9:4c:f2:d6:74:55:11:23:07: 7b:22:ba:c1:49:9e:4d:be:ba:0e:12:f1:48:22:62: 28:d1:69:38:a0:e4:df:b0:24:45:b7:15:0b:93:54: 90:4f:cc:01:31:61:f8:b9:ef:46:7f:3e:7c:b1:47: 4e:6d:35:40:6a:ab:ff:09:ba:d3:bc:9a:65:79:68: e1:d4:95:e9:c8:ec:68:a9:81:09:23:85:f0:94:2b: 2b:f6:4a:60:62:c1:01:ca:44:76:7c:73:9c:94:e0: f7:7a:f1:44:65:7d:b8:16:7c:63:b2:64:35:ac:70: 6e:6f:09:59:a9:8a:58:40:6b:fe:29:d0:77:d7:e0: 28:9b:20:c8:b2:3f:45:64:ce:04:c7:de:1a:1d:e4: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:48:62:AF:14:EB:EB:BF:9B:F0:A5:41:DF:F1:4B:C0:8E:3D:BE:D3 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:5b:53:ba:29:9c:64:07:bd:d7:60:26:8f:7c:a0:8d:25:38: ea:a2:5d:ae:d5:33:ec:c2:82:be:3e:2a:04:82:be:bd:7a:74: 3e:17:42:22:a6:d1:47:61:42:12:83:14:a5:22:7a:b8:f8:7e: 21:46:ae:60:5d:d5:ad:67:4a:77:3b:92:be:cc:18:bc:fc:00: ea:6f:a3:88:c3:37:a9:96:ed:c0:a3:be:28:fe:67:ba:b9:b9: aa:4c:7e:ab:c1:fd:8c:e0:1f:1e:22:56:36:96:eb:43:63:8e: 1e:26:f4:08:fe:ed:d9:2d:96:89:78:8a:5c:8b:cb:43:42:15: bf:13:83:67:0b:7f:dd:ea:ad:bb:13:7c:fb:c3:c2:cb:17:24: cf:65:e1:64:36:8f:ff:0e:48:44:2d:51:8c:4f:35:c5:cb:99: 93:41:e1:16:1f:2e:06:48:bd:d4:2d:8d:db:aa:45:d8:ac:5d: 10:fc:2b:f1:da:c1:1f:06:31:93:16:1f:ea:d3:0b:51:bd:6f: 59:61:02:5c:f7:fa:3d:12:d9:df:55:16:fe:cd:e6:93:b3:fa: 53:59:9a:35:0e:b2:03:c9:ac:b2:3d:ac:db:42:1a:4a:3f:60: 52:43:ea:26:bc:d1:10:45:53:b1:83:11:c1:3d:0c:7f:55:65: 16:57:5b:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OUZBRjExMC8GA1UEBRMoQ0JFQzZGMTgzOTA1NDg3NTIxQzc5NDdCNEY3QkZENkNC NzhEQTQ3OTAeFw0yNDA1MTUwNzM1NDZaFw0yNDA1MjIwNzM1NDVaMBgxFjAUBgNV BAMTDTY2NDQ2NWQyLTM0NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTJ6khbF6onlJyP2yFlLDByloz8HrAtd0pxUtvoadH3bfa2NBzY4gJRQzqSrYK oOM4pwhUoLKReaVxKwggIQ5tyKUV2jqTshHycDgp7hJh8AU/vEXTeZI/OetCjq/y zNsp3koav29NLZ/TEtSi3+lM8tZ0VREjB3siusFJnk2+ug4S8UgiYijRaTig5N+w JEW3FQuTVJBPzAExYfi570Z/PnyxR05tNUBqq/8JutO8mmV5aOHUlenI7GipgQkj hfCUKyv2SmBiwQHKRHZ8c5yU4Pd68URlfbgWfGOyZDWscG5vCVmpilhAa/4p0HfX 4CibIMiyP0VkzgTH3hod5DmnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYEhirxTr 67+b8KVB3/FLwI49vtMwHwYDVR0jBBgwFoAUy+xvGDkFSHUhx5R7T3v9bLeNpHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5RkFGLzEyOTU3NUM0NkU0 MjExRUVBQjRDOUM2Q0M0RjlBRTAyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveS14dkdEa0ZTSFVoeDVSN1QzdjliTGVOcEhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 RkFGLzEyOTU3NUM0NkU0MjExRUVBQjRDOUM2Q0M0RjlBRTAyL3kteHZHRGtGU0hV aHg1UjdUM3Y5YkxlTnBIay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK5bU7opnGQHvddgJo98oI0lOOqiXa7VM+zCgr4+KgSCvr16dD4XQiKm 0UdhQhKDFKUierj4fiFGrmBd1a1nSnc7kr7MGLz8AOpvo4jDN6mW7cCjvij+Z7q5 uapMfqvB/YzgHx4iVjaW60Njjh4m9Aj+7dktlol4ilyLy0NCFb8Tg2cLf93qrbsT fPvDwssXJM9l4WQ2j/8OSEQtUYxPNcXLmZNB4RYfLgZIvdQtjduqRdisXRD8K/Ha wR8GMZMWH+rTC1G9b1lhAlz3+j0S2d9VFv7N5pOz+lNZmjUOsgPJrLI9rNtCGko/ YFJD6ia80RBFU7GDEcE9DH9VZRZXW6A= -----END CERTIFICATE-----Generated at Wed May 15 09:27:32 2024 by rpki-client on console-fra.rpki-client.org