$ rpki-client -vvf rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft File: X2BRhzuBUG4leKxYsyaPAd_ybsw.mft (raw, json) Hash identifier: 9t6qTI4sW4VglWuJ5vMJSz5TLxXgnzhVeqtUsO0Xsx4= Subject key identifier: 74:22:01:D8:EA:BF:1E:73:67:42:18:E5:E7:7F:38:43:C7:50:C0:E6 Authority key identifier: 5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC Certificate issuer: /CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft Manifest number: 060E Signing time: Thu 02 May 2024 23:59:16 +0000 Manifest this update: Thu 02 May 2024 23:59:15 +0000 Manifest next update: Thu 09 May 2024 23:59:15 +0000 Files and hashes: 1: X2BRhzuBUG4leKxYsyaPAd_ybsw.crl (hash: cUT/hjQpLAijiTC/AI2pG305+XjgdO7PbIV4mk3MXiI=) 2: 0F28A28037CA11EDB8E79257C4F9AE02.roa (hash: KlCucW2FiDPV58tEeR0AcW5El3RO9eFYo5EmLciz/tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.crl rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC Validity Not Before: May 2 23:59:15 2024 GMT Not After : May 9 23:59:15 2024 GMT Subject: CN=663428d3-9db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:0c:b0:7b:3a:fb:2a:20:e7:8a:8d:3d:e0: a5:86:ae:24:af:41:47:06:ea:78:46:35:31:28:5e: c7:3d:1a:e5:35:71:ee:be:22:0a:98:67:01:f2:80: 4b:8d:c1:9c:c5:20:ab:94:f6:31:2c:b8:55:6a:9d: 7e:7b:b0:ec:c8:a3:16:0f:4f:20:e7:9f:f0:c0:a5: a1:1c:36:25:10:4a:4a:7d:6e:78:3a:bf:f8:fb:15: 99:c2:cb:df:3a:c5:65:2d:fe:30:16:06:64:b7:61: 88:06:41:c0:56:01:c7:45:f8:d3:56:8b:ee:3e:3c: 4e:34:c4:c0:0a:e8:5b:34:35:b8:71:42:48:ac:40: 67:51:89:d3:a3:01:6a:02:79:88:f0:c9:25:f6:c1: 3c:ea:a4:7b:33:0d:76:f5:0b:6a:d3:f2:e9:5f:94: f2:c4:e5:8d:8d:84:0a:86:16:2a:7e:42:bd:a3:09: ad:c0:d6:fc:76:9f:24:06:16:d2:78:9b:4f:9c:fa: 83:b6:1d:b7:3d:b6:fc:cf:b7:56:b0:ba:2a:ef:b7: c0:64:c3:e2:7c:81:81:50:13:4a:76:92:e8:a6:34: 55:27:d2:bf:f9:b9:f6:04:a7:a2:62:91:f4:85:8b: 3b:95:4a:26:d8:37:e8:a2:0c:72:b4:4e:56:dd:76: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:22:01:D8:EA:BF:1E:73:67:42:18:E5:E7:7F:38:43:C7:50:C0:E6 X509v3 Authority Key Identifier: keyid:5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:cf:90:7e:82:9b:6b:72:d7:02:2a:93:38:44:be:b6:05:e8: 69:66:93:7d:b6:69:e0:e1:56:14:be:aa:88:f1:4e:bd:b7:ac: d7:02:5e:df:0c:ab:5a:f0:f0:64:49:cc:69:a5:99:3f:53:9b: b5:f5:dd:5e:1a:3a:48:f3:10:22:39:9b:3e:b3:88:fa:e0:b7: 45:75:ac:3d:76:47:11:77:4a:d6:be:83:ed:dc:91:cb:20:4c: 98:ca:26:ec:0d:4b:8e:dd:6f:94:04:be:86:2c:2a:58:11:c2: 60:7c:6b:82:fa:5d:8c:66:de:0d:d3:77:94:5e:15:dd:3b:6b: f6:7f:f5:6b:03:f7:27:4a:7f:c9:89:b4:e3:ba:db:2d:ac:be: b9:2e:83:52:1e:3f:a4:b2:9a:47:3a:50:8a:05:22:9e:77:50: 5b:ca:fd:8c:80:55:fe:26:ad:19:b7:a9:88:8c:e9:d3:46:5e: 41:05:09:6b:11:ff:72:1a:bb:7a:c0:a2:67:f2:ef:e0:1d:13: 8b:e8:7e:22:b7:55:78:e1:b5:bf:08:14:02:be:0d:45:5b:e0: dc:60:5e:24:49:16:8b:97:d9:28:04:9c:bc:8d:1a:d6:dc:0a: 66:35:ac:d6:5b:78:7a:ee:97:5c:87:79:78:c9:fd:3f:aa:a0: 2a:e2:4c:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzRDcxMTAvBgNVBAUTKDVGNjA1MTg3M0I4MTUwNkUyNTc4QUM1OEIzMjY4RjAx REZGMjZFQ0MwHhcNMjQwNTAyMjM1OTE1WhcNMjQwNTA5MjM1OTE1WjAYMRYwFAYD VQQDEw02NjM0MjhkMy05ZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6AMsHs6+yog54qNPeClhq4kr0FHBup4RjUxKF7HPRrlNXHuviIKmGcB8oBL jcGcxSCrlPYxLLhVap1+e7DsyKMWD08g55/wwKWhHDYlEEpKfW54Or/4+xWZwsvf OsVlLf4wFgZkt2GIBkHAVgHHRfjTVovuPjxONMTACuhbNDW4cUJIrEBnUYnTowFq AnmI8Mkl9sE86qR7Mw129Qtq0/LpX5TyxOWNjYQKhhYqfkK9owmtwNb8dp8kBhbS eJtPnPqDth23Pbb8z7dWsLoq77fAZMPifIGBUBNKdpLopjRVJ9K/+bn2BKeiYpH0 hYs7lUom2DfoogxytE5W3XZLgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQiAdjq vx5zZ0IY5ed/OEPHUMDmMB8GA1UdIwQYMBaAFF9gUYc7gVBuJXisWLMmjwHf8m7M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTNENy8xODc4RUUwQzU1 M0MxMUVCOUJDQURDNzBDNEY5QUUwMi9YMkJSaHp1QlVHNGxlS3hZc3lhUEFkX3li c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyQlJoenVCVUc0bGVLeFlzeWFQQWRfeWJzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTNENy8xODc4RUUwQzU1M0MxMUVCOUJDQURDNzBDNEY5QUUwMi9YMkJSaHp1QlVH NGxlS3hZc3lhUEFkX3lic3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2z5B+gptrctcCKpM4RL62BehpZpN9tmng4VYUvqqI8U69t6zXAl7f DKta8PBkScxppZk/U5u19d1eGjpI8xAiOZs+s4j64LdFdaw9dkcRd0rWvoPt3JHL IEyYyibsDUuO3W+UBL6GLCpYEcJgfGuC+l2MZt4N03eUXhXdO2v2f/VrA/cnSn/J ibTjutstrL65LoNSHj+ksppHOlCKBSKed1Bbyv2MgFX+Jq0Zt6mIjOnTRl5BBQlr Ef9yGrt6wKJn8u/gHROL6H4it1V44bW/CBQCvg1FW+DcYF4kSRaLl9koBJy8jRrW 3ApmNazWW3h67pdch3l4yf0/qqAq4kyw -----END CERTIFICATE-----Generated at Fri May 3 00:48:28 2024 by rpki-client on console-ams.rpki-client.org