$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: G/g61tpzdTFF2OoE53ogdJ2R6ta49uSZ5HngOPCX+3c= Subject key identifier: 65:B2:B9:10:9A:86:A1:CF:48:11:BB:3F:C9:20:82:FF:6B:73:8B:3D Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1A26 Signing time: Tue 30 Apr 2024 16:51:52 +0000 Manifest this update: Tue 30 Apr 2024 16:51:51 +0000 Manifest next update: Tue 07 May 2024 16:51:51 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: Kk1voHBXGLpVSFYOkC+NiBmDnBUhjSk90esVT/LpTK4=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: SHKOiZvRqjIWYHVBj0oxqj9M0CGAoo/R2Q0qC7ApZIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6703 (0x1a2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: Apr 30 16:51:51 2024 GMT Not After : May 7 16:51:51 2024 GMT Subject: CN=663121a7-0c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4d:23:71:37:b6:67:6b:96:01:4f:9a:f7:5d: 4b:46:91:9b:1c:df:19:1f:3d:81:12:35:2e:ca:0e: 25:59:e2:00:d1:1e:43:2a:de:52:3f:9a:a0:fb:ee: b7:1b:63:5b:ad:58:37:0e:55:09:fd:fc:ed:79:e2: ee:ba:5c:02:6b:af:21:d9:11:43:ba:d9:99:2a:30: de:8e:e2:c5:dc:74:47:e7:a1:e0:57:6a:94:e8:57: 4e:75:08:04:6b:8e:33:1b:3d:38:d1:51:a5:26:3c: ec:d6:f9:55:9a:13:14:28:49:02:13:25:bd:a8:e3: 88:02:97:9a:16:7e:4c:a3:aa:47:26:c5:5d:97:89: 27:9e:57:2e:81:c5:f6:09:e4:25:ec:56:51:79:3c: 23:53:15:6d:f9:fa:34:56:c3:ed:1d:1b:12:41:32: 30:48:26:80:dd:c4:d8:a2:85:51:ff:2d:6c:1a:de: 56:a2:10:e8:ba:a5:04:b0:fd:10:0f:8f:1d:28:4f: 78:69:26:fa:df:2b:90:83:65:4b:a4:6f:8b:8d:10: dc:65:ef:03:1c:53:16:99:86:24:93:7a:14:74:6f: 09:04:55:28:b7:6e:3a:73:cf:06:ad:8b:62:66:a2: 24:b3:ed:95:99:e6:54:38:3c:7a:05:fd:f8:e2:02: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B2:B9:10:9A:86:A1:CF:48:11:BB:3F:C9:20:82:FF:6B:73:8B:3D X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:72:fd:9d:1a:3a:65:11:30:0a:43:e0:fd:93:63:b7:23:97: 3f:0f:9c:08:3d:ab:d4:2b:c6:e4:be:7f:b1:b9:c7:02:aa:d6: 45:76:b2:0d:0b:fe:b3:80:0d:2b:28:e7:61:9e:0f:bb:3e:14: 90:ec:88:20:ef:4f:1c:d7:6e:65:12:87:bd:12:5c:bf:a5:76: 7c:13:a6:e5:c1:f8:92:41:aa:c5:b7:10:c5:2f:09:90:51:7c: 0d:43:24:32:15:2d:68:42:df:2f:a7:90:69:dd:c1:e7:47:0b: a1:e2:f3:25:f8:ce:4b:8c:86:1b:7a:f6:1f:e6:7f:06:81:15: ab:eb:6a:cb:3d:b4:44:62:42:57:a3:3b:30:f7:bd:ef:f7:94: 9f:5e:6d:c8:b5:64:b5:e6:06:39:61:50:7f:28:f1:3b:30:cd: 1e:aa:ea:c1:84:75:bc:b0:35:db:5a:42:fd:2e:eb:98:e1:f3: 1f:b4:38:23:64:78:b3:b5:a0:01:b0:1d:c4:e9:d4:0c:f4:ef: ad:c3:91:ee:d6:07:e8:5b:4e:b3:d5:89:e3:73:cf:90:81:1e: 45:ba:18:b2:e1:37:63:19:2a:0a:3d:5d:0d:5a:f9:20:eb:06: 75:9c:62:da:03:26:7e:7f:59:33:5c:fa:b3:87:a9:1d:c2:68: 75:a6:9c:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjQwNDMwMTY1MTUxWhcNMjQwNTA3MTY1MTUxWjAYMRYwFAYD VQQDEw02NjMxMjFhNy0wYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0E0jcTe2Z2uWAU+a911LRpGbHN8ZHz2BEjUuyg4lWeIA0R5DKt5SP5qg++63 G2NbrVg3DlUJ/fzteeLuulwCa68h2RFDutmZKjDejuLF3HRH56HgV2qU6FdOdQgE a44zGz040VGlJjzs1vlVmhMUKEkCEyW9qOOIApeaFn5Mo6pHJsVdl4knnlcugcX2 CeQl7FZReTwjUxVt+fo0VsPtHRsSQTIwSCaA3cTYooVR/y1sGt5WohDouqUEsP0Q D48dKE94aSb63yuQg2VLpG+LjRDcZe8DHFMWmYYkk3oUdG8JBFUot246c88GrYti ZqIks+2VmeZUODx6Bf344gJHlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWyuRCa hqHPSBG7P8kggv9rc4s9MB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdcv2dGjplETAKQ+D9k2O3I5c/D5wIPavUK8bkvn+xuccCqtZFdrIN C/6zgA0rKOdhng+7PhSQ7Igg708c125lEoe9Ely/pXZ8E6blwfiSQarFtxDFLwmQ UXwNQyQyFS1oQt8vp5Bp3cHnRwuh4vMl+M5LjIYbevYf5n8GgRWr62rLPbREYkJX ozsw973v95SfXm3ItWS15gY5YVB/KPE7MM0equrBhHW8sDXbWkL9LuuY4fMftDgj ZHiztaABsB3E6dQM9O+tw5Hu1gfoW06z1Ynjc8+QgR5Fuhiy4TdjGSoKPV0NWvkg 6wZ1nGLaAyZ+f1kzXPqzh6kdwmh1ppwJ -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:01 2024 by rpki-client on console-fra.rpki-client.org