$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft File: y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json) Hash identifier: gwpo9hPOfiQcMbC0+BXJlPQMst4Y+/IMnFcUxstP0/A= Subject key identifier: 3B:BE:A2:BB:70:AC:B8:E3:DE:6E:6F:92:D9:9F:5A:7B:AA:B4:E1:2A Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft Manifest number: 4F Signing time: Wed 15 May 2024 08:04:41 +0000 Manifest this update: Wed 15 May 2024 08:04:41 +0000 Manifest next update: Wed 22 May 2024 08:04:40 +0000 Files and hashes: 1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: HfwYBec6eDeqRosmeI8Rzg3nidfP4XAd3bM4mnNeASU=) 2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: OuC4t3nITzYryfz/hqccR37lOLmIcnx4T7dnBiaFxSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Validity Not Before: May 15 08:04:41 2024 GMT Not After : May 22 08:04:40 2024 GMT Subject: CN=66446c99-d494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:21:a5:e0:1d:1e:e2:f3:72:78:02:3b:66:c8: 68:09:50:ed:30:e1:e2:fc:53:95:c0:33:54:c6:0e: 48:7e:8a:de:f7:c7:ee:32:11:1d:e5:88:10:b5:5b: e3:59:45:22:23:9f:c4:46:f8:f6:57:21:10:0c:f8: cc:12:48:cb:80:e9:a9:56:e0:f3:a6:87:d4:4d:e0: da:40:53:2f:1a:45:e6:75:b2:b4:69:fb:0a:40:60: 28:9e:30:26:1a:15:d8:74:87:3d:7f:1c:38:ed:e1: ab:9e:30:a9:2a:da:8f:70:6d:90:69:db:6e:e7:b0: ee:69:ed:36:28:71:a3:87:4a:21:4a:02:bd:92:95: 15:21:27:1e:33:4c:1d:3d:81:e0:6f:9c:61:d2:4c: 6d:ec:d4:5e:3d:7d:f6:a4:0f:47:f6:32:80:db:99: 87:1d:21:fd:a7:6e:a0:fe:6f:74:e7:9f:e4:ff:d0: a9:c9:50:a3:4c:cb:0a:db:75:0c:dd:0d:88:10:9b: b8:f5:4d:20:f2:a3:7b:56:d2:ee:a7:27:ae:67:61: 32:7a:26:ce:b1:06:46:82:d8:1d:c1:fe:2c:4f:54: 0e:e5:2f:92:b6:65:8e:44:37:c8:3a:58:dd:8b:c4: 3a:54:87:21:95:26:9f:a2:48:df:07:20:b3:79:96: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BE:A2:BB:70:AC:B8:E3:DE:6E:6F:92:D9:9F:5A:7B:AA:B4:E1:2A X509v3 Authority Key Identifier: keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d3:48:40:97:cf:05:11:e1:97:f8:58:78:0b:79:37:5b:81: c9:d9:da:b3:a6:f2:2f:3b:53:3f:b1:99:60:4b:e5:94:10:d8: 29:a9:02:96:a2:b8:b4:f8:b7:48:2a:cf:0f:e2:0c:86:c8:06: 86:d7:1a:1e:02:85:e9:72:80:78:97:13:b3:49:7a:e9:f7:36: 25:fe:9d:6b:53:b8:1e:ad:94:af:92:fb:11:ff:31:9d:d8:78: 74:83:a9:36:c8:bf:9b:5f:24:21:80:94:ef:85:74:ee:ef:8d: ea:22:6a:4c:0d:c8:f4:0a:18:c4:20:81:93:a3:5c:d6:14:4c: 91:14:6f:f8:26:3f:02:df:cc:2e:97:99:64:5d:16:2a:9a:68: 68:07:51:e0:d0:09:01:6d:a8:06:6a:ad:f5:9e:83:73:f7:ac: a4:19:e0:ee:56:f9:76:d8:d2:1c:6f:82:27:da:a8:93:02:3e: ba:35:f4:9c:f2:ac:f8:5b:70:f6:7e:c8:f5:bb:ba:6d:28:b0: 6b:34:50:4a:df:d9:06:d7:c0:6e:aa:f5:ae:3a:88:d2:44:95: 7e:73:f5:c9:21:c8:37:9c:14:ea:06:29:22:fe:9b:05:61:1a: e1:a4:19:5c:f6:e9:b1:10:2e:25:c1:c9:58:51:22:bf:26:a4: 1b:a3:ce:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkUwMTExMC8GA1UEBRMoQ0I3RThFNTRDODdFMDFDRTg2NzlDRkU1NTBGMUZFOUIy MzYxMDgzRTAeFw0yNDA1MTUwODA0NDFaFw0yNDA1MjIwODA0NDBaMBgxFjAUBgNV BAMTDTY2NDQ2Yzk5LWQ0OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwIaXgHR7i83J4AjtmyGgJUO0w4eL8U5XAM1TGDkh+it73x+4yER3liBC1W+NZ RSIjn8RG+PZXIRAM+MwSSMuA6alW4POmh9RN4NpAUy8aReZ1srRp+wpAYCieMCYa Fdh0hz1/HDjt4aueMKkq2o9wbZBp227nsO5p7TYocaOHSiFKAr2SlRUhJx4zTB09 geBvnGHSTG3s1F49ffakD0f2MoDbmYcdIf2nbqD+b3Tnn+T/0KnJUKNMywrbdQzd DYgQm7j1TSDyo3tW0u6nJ65nYTJ6Js6xBkaC2B3B/ixPVA7lL5K2ZY5EN8g6WN2L xDpUhyGVJp+iSN8HILN5llw1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO76iu3Cs uOPebm+S2Z9ae6q04SowHwYDVR0jBBgwFoAUy36OVMh+Ac6Gec/lUPH+myNhCD4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRTAxL0E0RjlDRDY2OUY1 QzExRUU4QTIzMDQ3RUM0RjlBRTAyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENE NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTM2T1ZNaC1BYzZHZWNfbFVQSC1teU5oQ0Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG RTAxL0E0RjlDRDY2OUY1QzExRUU4QTIzMDQ3RUM0RjlBRTAyL3kzNk9WTWgtQWM2 R2VjX2xVUEgtbXlOaENENC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7TSECXzwUR4Zf4WHgLeTdbgcnZ2rOm8i87Uz+xmWBL5ZQQ2CmpApai uLT4t0gqzw/iDIbIBobXGh4ChelygHiXE7NJeun3NiX+nWtTuB6tlK+S+xH/MZ3Y eHSDqTbIv5tfJCGAlO+FdO7vjeoiakwNyPQKGMQggZOjXNYUTJEUb/gmPwLfzC6X mWRdFiqaaGgHUeDQCQFtqAZqrfWeg3P3rKQZ4O5W+XbY0hxvgifaqJMCPro19Jzy rPhbcPZ+yPW7um0osGs0UErf2QbXwG6q9a46iNJElX5z9ckhyDecFOoGKSL+mwVh GuGkGVz26bEQLiXByVhRIr8mpBujzts= -----END CERTIFICATE-----Generated at Wed May 15 09:04:42 2024 by rpki-client on console-ams.rpki-client.org