$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: PkHgWX/lQlwEYs5hTWaps3VCHHJInhctJdj5Lqlr7Mg= Subject key identifier: 90:AD:8A:CC:BE:EA:F7:44:EE:CB:24:55:E8:BD:8C:60:6F:91:B4:58 Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0D3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0D3E Signing time: Sat 04 May 2024 18:48:39 +0000 Manifest this update: Sat 04 May 2024 18:48:38 +0000 Manifest next update: Sat 11 May 2024 18:48:38 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: 1TwvrWRcKmo3RJvH/Sw7x4a/T6fgz7HzyDLYD/qLZR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: May 4 18:48:38 2024 GMT Not After : May 11 18:48:38 2024 GMT Subject: CN=66368307-508a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:74:8f:dc:a9:ac:fe:89:8f:6e:d3:64:9b:71: 51:f3:47:33:84:65:1d:01:21:76:0b:65:81:9f:61: 18:c0:df:59:21:97:5c:3f:06:73:bd:0f:21:cf:87: 5c:30:c1:e1:de:88:f9:48:e4:30:70:31:eb:c9:7a: b6:28:46:67:5c:fe:22:b5:d1:ba:52:e2:58:79:08: ec:2c:a0:64:d2:c0:95:c6:99:93:8c:a1:d6:62:0e: 43:7d:28:db:9a:5b:15:e0:9f:b1:dc:75:c4:3b:58: 78:c0:51:68:d8:cd:05:be:f2:d9:9c:cc:5e:5a:46: bc:d6:cf:00:4c:6e:2b:60:1f:7f:eb:e2:45:48:33: ac:f0:29:41:3d:ba:c7:c5:7a:96:2c:72:d5:ad:a4: d5:37:6f:2b:14:da:74:8a:3e:6e:b4:14:b1:66:18: 60:d8:29:84:c4:cc:52:ab:8d:5d:8f:ad:8c:1c:e5: 92:86:9a:b4:75:0d:95:f6:e7:fb:4a:0f:a6:7c:2e: 44:df:03:95:df:b8:c7:1a:7b:29:c0:46:e7:c5:81: 65:40:c1:41:0e:0c:ed:5e:2b:13:cb:04:46:c7:ad: c6:18:c9:8e:ae:1c:d1:c3:74:d1:9b:4d:b4:a1:42: 89:8b:fe:6e:99:14:15:27:8c:07:b1:0c:5e:7c:eb: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AD:8A:CC:BE:EA:F7:44:EE:CB:24:55:E8:BD:8C:60:6F:91:B4:58 X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f8:cb:92:13:9d:fa:a7:4a:93:8c:45:e3:95:56:9b:24:d5: c8:8d:f1:88:ae:2a:2c:44:11:83:c7:18:fa:8f:0a:e3:f3:c4: 3f:44:80:75:70:ce:8e:fc:5a:fb:02:fb:95:fe:88:44:45:81: 54:c0:1c:fc:ba:fe:f9:5e:a3:2b:9d:da:ec:0e:65:51:cd:40: d7:7f:f3:ff:f7:d5:2f:e5:3a:5a:c3:bd:2f:75:fd:94:d8:b8: 14:b9:97:43:c9:09:7b:bd:3e:fa:a7:61:26:62:dd:57:ff:cd: 4a:69:74:e6:46:4a:3f:44:33:9c:24:62:3b:79:a9:78:0e:02: 00:09:80:4f:72:97:a8:20:60:40:41:c9:27:1a:6e:93:ab:1a: 09:26:5f:96:4d:67:da:68:c1:ce:2a:1b:53:b6:a3:ba:43:e6: 79:78:69:9b:5b:ae:1f:ad:14:32:81:2f:87:9b:4c:33:8b:a4: 02:e4:ab:f0:b9:2e:f6:15:a9:11:e0:51:44:dd:1c:de:e9:09: ec:29:89:79:7d:9f:d4:ae:54:79:b6:26:d5:81:72:c4:61:d9: 43:9a:73:21:70:78:bf:b0:c2:27:9a:cb:00:bf:5c:21:1f:59: c1:52:4f:e1:a5:3b:f2:21:57:08:5e:2f:0b:cc:7b:1b:cd:df: 37:e1:1d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjQwNTA0MTg0ODM4WhcNMjQwNTExMTg0ODM4WjAYMRYwFAYD VQQDEw02NjM2ODMwNy01MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53SP3Kms/omPbtNkm3FR80czhGUdASF2C2WBn2EYwN9ZIZdcPwZzvQ8hz4dc MMHh3oj5SOQwcDHryXq2KEZnXP4itdG6UuJYeQjsLKBk0sCVxpmTjKHWYg5DfSjb mlsV4J+x3HXEO1h4wFFo2M0FvvLZnMxeWka81s8ATG4rYB9/6+JFSDOs8ClBPbrH xXqWLHLVraTVN28rFNp0ij5utBSxZhhg2CmExMxSq41dj62MHOWShpq0dQ2V9uf7 Sg+mfC5E3wOV37jHGnspwEbnxYFlQMFBDgztXisTywRGx63GGMmOrhzRw3TRm020 oUKJi/5umRQVJ4wHsQxefOvUiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCtisy+ 6vdE7sskVei9jGBvkbRYMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA+MuSE536p0qTjEXjlVabJNXIjfGIriosRBGDxxj6jwrj88Q/RIB1 cM6O/Fr7AvuV/ohERYFUwBz8uv75XqMrndrsDmVRzUDXf/P/99Uv5Tpaw70vdf2U 2LgUuZdDyQl7vT76p2EmYt1X/81KaXTmRko/RDOcJGI7eal4DgIACYBPcpeoIGBA QcknGm6TqxoJJl+WTWfaaMHOKhtTtqO6Q+Z5eGmbW64frRQygS+Hm0wzi6QC5Kvw uS72FakR4FFE3Rze6QnsKYl5fZ/UrlR5tibVgXLEYdlDmnMhcHi/sMInmssAv1wh H1nBUk/hpTvyIVcIXi8LzHsbzd834R0H -----END CERTIFICATE-----Generated at Sat May 4 20:37:10 2024 by rpki-client on console-fra.rpki-client.org