$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: dH8k1b8FXCTEQz3NutDPZhoggnEUVnHjJre0bn5+x60= Subject key identifier: E6:FF:CE:DE:0B:62:00:AC:70:DB:8E:43:3A:45:3A:06:7C:49:8B:CF Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: A9 Signing time: Wed 15 May 2024 06:44:34 +0000 Manifest this update: Wed 15 May 2024 06:44:33 +0000 Manifest next update: Wed 22 May 2024 06:44:33 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: VRoN2wVKbNto4/1OAFiZYdpOEuas4Gch+EM+PUPgQkk=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: AbcAhXpEUwqrte3TdSnAkobY7buex53zSvuax181UZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: May 15 06:44:33 2024 GMT Not After : May 22 06:44:33 2024 GMT Subject: CN=664459d2-c523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:ca:f2:e7:33:2e:1c:05:f3:f2:fe:ca:f3: 47:83:45:3e:28:76:da:9b:99:be:e8:96:5c:6b:51: 8a:6c:73:84:da:53:dc:75:65:17:38:97:ed:f2:ee: 8e:9c:b2:76:25:66:35:b1:d5:3c:6b:e2:95:be:f6: 13:00:a5:c6:86:0d:42:47:20:ce:e5:f7:66:54:cf: 49:e2:3a:0e:35:db:b1:f8:cc:55:07:f2:29:9a:39: 09:4e:ad:38:4d:98:48:b7:52:62:2b:7b:2b:ca:bd: 20:fa:8e:88:93:f3:77:60:57:f2:a3:10:b5:d4:9a: 93:e8:05:ac:68:8e:13:8d:4e:37:44:1a:0f:14:bd: 9e:31:d6:8b:92:fe:ad:9a:a7:2e:44:af:39:98:73: 5c:75:14:98:d4:01:43:9c:bd:80:b0:d7:48:61:3e: f1:ff:12:65:75:8e:95:e5:27:dc:74:26:a4:99:aa: 5e:9f:1e:68:1f:e6:9e:63:8d:28:18:55:a3:f4:af: 04:87:09:9b:2e:23:23:51:e5:79:7e:4a:b6:45:2c: bb:66:c8:5a:26:6d:5a:f0:d8:f4:67:38:8f:d7:c2: 0a:e2:ce:d6:eb:7d:97:16:89:97:40:b5:a6:df:de: 09:ff:0a:fa:f8:77:a3:cc:4f:e7:37:b1:dc:70:74: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:CE:DE:0B:62:00:AC:70:DB:8E:43:3A:45:3A:06:7C:49:8B:CF X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:31:9c:a1:71:a1:73:a0:8b:2c:03:36:70:c7:53:e7:2d:36: 4c:50:50:c2:7b:c8:1e:da:7f:57:d7:28:f1:c2:a5:59:c9:48: c7:96:4f:87:2e:e8:05:fb:1a:af:9a:b1:27:50:59:f5:69:be: 8d:72:e6:57:13:de:0f:59:a2:01:0b:d8:7a:d0:1e:b5:b7:65: d5:43:f8:6f:c9:eb:d6:91:8b:13:be:58:89:61:5b:4a:6b:8b: 62:98:5f:e2:1b:ea:76:b2:14:f8:55:a6:f1:06:d8:fb:f2:84: 7f:ad:d5:31:69:9d:d4:1a:91:94:09:ae:fb:93:19:30:90:bc: 31:ff:da:d8:1a:f8:8a:27:79:56:9f:95:80:c8:38:b8:29:ed: 41:9b:91:51:18:6f:97:90:e1:f7:48:e0:6c:80:b0:c2:e7:62: fd:6a:97:75:9e:c8:d4:43:af:6c:87:49:3c:f7:29:50:07:68: 98:42:52:f4:04:f2:9f:7c:03:e2:62:d6:c5:21:ee:6e:95:e9: 2b:84:2a:22:59:b9:ad:09:0c:97:97:0b:50:5e:91:cc:79:76: dd:2e:34:95:ac:4f:77:02:dd:3e:23:47:c6:35:a1:55:f6:a0: b3:ef:16:bf:4f:a6:6f:aa:81:6c:c7:c5:d0:39:e0:ef:40:74: 33:c3:89:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjQwNTE1MDY0NDMzWhcNMjQwNTIyMDY0NDMzWjAYMRYwFAYD VQQDEw02NjQ0NTlkMi1jNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpTK8uczLhwF8/L+yvNHg0U+KHbam5m+6JZca1GKbHOE2lPcdWUXOJft8u6O nLJ2JWY1sdU8a+KVvvYTAKXGhg1CRyDO5fdmVM9J4joONdux+MxVB/IpmjkJTq04 TZhIt1JiK3sryr0g+o6Ik/N3YFfyoxC11JqT6AWsaI4TjU43RBoPFL2eMdaLkv6t mqcuRK85mHNcdRSY1AFDnL2AsNdIYT7x/xJldY6V5SfcdCakmapenx5oH+aeY40o GFWj9K8EhwmbLiMjUeV5fkq2RSy7ZshaJm1a8Nj0ZziP18IK4s7W632XFomXQLWm 394J/wr6+HejzE/nN7HccHT+pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOb/zt4L YgCscNuOQzpFOgZ8SYvPMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOMZyhcaFzoIssAzZwx1PnLTZMUFDCe8ge2n9X1yjxwqVZyUjHlk+H LugF+xqvmrEnUFn1ab6NcuZXE94PWaIBC9h60B61t2XVQ/hvyevWkYsTvliJYVtK a4timF/iG+p2shT4VabxBtj78oR/rdUxaZ3UGpGUCa77kxkwkLwx/9rYGviKJ3lW n5WAyDi4Ke1Bm5FRGG+XkOH3SOBsgLDC52L9apd1nsjUQ69sh0k89ylQB2iYQlL0 BPKffAPiYtbFIe5ulekrhCoiWbmtCQyXlwtQXpHMeXbdLjSVrE93At0+I0fGNaFV 9qCz7xa/T6ZvqoFsx8XQOeDvQHQzw4lI -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org