$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: yxUETyzaXfjghJW13WXYxs2MzDIYBYITnbhHWaC43pg= Subject key identifier: 60:22:38:84:56:FD:6D:58:FC:80:BD:55:DB:C8:F8:05:36:20:31:0A Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 32 Signing time: Fri 17 May 2024 08:35:01 +0000 Manifest this update: Fri 17 May 2024 08:35:00 +0000 Manifest next update: Fri 24 May 2024 08:35:00 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: zSwXYgIVgMTCxky+pyrxEEyA3N8VS4FJnSsQqYvatvE=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: XKcOzakVnPRp9ouJIJxeStnG3KeM6fFZu4MKPyMThqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: May 17 08:35:00 2024 GMT Not After : May 24 08:35:00 2024 GMT Subject: CN=664716b5-a45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:dd:77:f6:3d:23:e9:d4:f2:bf:90:59:9d: 3e:af:ff:c6:8f:36:1a:83:14:95:fd:94:e5:48:00: 24:9b:16:7b:01:85:ca:9e:a4:b2:9b:ed:7b:04:cc: 6a:f5:92:97:d3:4b:ae:68:a7:90:7a:33:2b:88:41: 67:6d:ab:0b:fc:28:5d:dd:c2:70:7c:9b:d8:a3:6e: 8f:eb:d2:55:b2:c8:12:93:6a:47:79:54:13:2d:6a: 81:b8:af:51:48:35:a7:cd:cf:7a:a0:83:d4:e8:12: 12:a9:a1:7c:95:bd:61:50:a5:26:09:5f:29:14:85: 81:25:7d:df:06:b7:a6:ca:55:1a:59:a0:3d:44:50: 7b:7c:2b:37:f8:e6:33:98:77:f2:d3:9a:61:9c:ef: 0e:f3:b0:a7:e0:de:f8:77:93:56:f6:b4:36:49:eb: b8:fc:3a:c7:d2:99:d0:40:06:4e:9d:83:7a:cb:38: 54:2f:0b:76:e4:fe:4a:b9:49:41:f1:47:f2:04:8f: 01:08:06:be:9e:b7:2e:a2:09:c0:68:23:24:ca:82: 2a:61:ea:a2:5a:c8:70:e8:da:06:6d:cf:02:aa:e8: a2:18:67:dc:24:bf:ef:6b:73:91:83:be:ee:cb:86: 69:bb:87:90:56:9e:61:55:a6:0f:72:9c:c2:48:8a: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:22:38:84:56:FD:6D:58:FC:80:BD:55:DB:C8:F8:05:36:20:31:0A X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:1d:24:b9:b7:7e:08:b6:d9:7e:4f:46:c6:6e:c9:44:54:c0: 43:f2:e7:a5:ff:04:66:fc:4c:09:d5:bc:37:11:db:35:30:47: 91:f0:82:de:4c:44:ce:68:d7:31:a0:58:f1:a6:e1:f2:77:e9: 51:0c:6f:b2:5c:80:e4:bc:2e:5f:d5:31:db:e5:d6:ac:18:dd: 8a:1c:d3:4e:b6:a3:ef:ab:df:c8:63:f3:8d:16:84:ce:1b:aa: 83:71:af:2f:e8:c0:19:88:37:cb:5e:2f:31:83:03:a8:8d:04: e2:db:a7:e9:79:5c:df:be:b9:67:ae:d0:8e:5f:11:63:d7:eb: 42:42:b9:34:47:90:01:b4:53:57:fd:09:10:da:29:e0:18:ac: ca:bd:44:ac:d6:a6:77:64:43:7a:e4:e9:57:50:5a:62:53:85: f7:dc:b6:9b:24:23:38:4c:a5:a0:3a:5d:07:a8:44:0a:24:7d: 5b:d8:a2:39:6e:52:3f:ed:69:2b:b4:43:06:b3:d2:48:14:e9: c7:8a:c7:80:94:85:c5:a0:cb:85:02:81:dc:97:75:ec:02:47: 24:1b:e0:65:88:02:08:1b:e9:60:f4:83:5c:7c:c5:14:cc:85: 97:6d:bf:db:9d:4c:a3:b3:ba:6d:58:e9:eb:6a:9f:20:aa:a5: 37:ce:47:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEVGOTExMC8GA1UEBRMoODcyQzkzNjg2NTZDNzc4MzU3QzJBNUE5OUJFQ0ZGRjY3 NzU1MEFDODAeFw0yNDA1MTcwODM1MDBaFw0yNDA1MjQwODM1MDBaMBgxFjAUBgNV BAMTDTY2NDcxNmI1LWE0NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX+d139j0j6dTyv5BZnT6v/8aPNhqDFJX9lOVIACSbFnsBhcqepLKb7XsEzGr1 kpfTS65op5B6MyuIQWdtqwv8KF3dwnB8m9ijbo/r0lWyyBKTakd5VBMtaoG4r1FI NafNz3qgg9ToEhKpoXyVvWFQpSYJXykUhYElfd8Gt6bKVRpZoD1EUHt8Kzf45jOY d/LTmmGc7w7zsKfg3vh3k1b2tDZJ67j8OsfSmdBABk6dg3rLOFQvC3bk/kq5SUHx R/IEjwEIBr6ety6iCcBoIyTKgiph6qJayHDo2gZtzwKq6KIYZ9wkv+9rc5GDvu7L hmm7h5BWnmFVpg9ynMJIilOxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYCI4hFb9 bVj8gL1V28j4BTYgMQowHwYDVR0jBBgwFoAUhyyTaGVsd4NXwqWpm+z/9ndVCsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0RUY5Lzc1QTBDRDE0RDEz NzExRUVBQTlGMTk4MEM0RjlBRTAyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaHl5VGFHVnNkNE5Yd3FXcG0tel85bmRWQ3NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 RUY5Lzc1QTBDRDE0RDEzNzExRUVBQTlGMTk4MEM0RjlBRTAyL2h5eVRhR1ZzZDRO WHdxV3BtLXpfOW5kVkNzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACUdJLm3fgi22X5PRsZuyURUwEPy56X/BGb8TAnVvDcR2zUwR5Hwgt5M RM5o1zGgWPGm4fJ36VEMb7JcgOS8Ll/VMdvl1qwY3Yoc0062o++r38hj840WhM4b qoNxry/owBmIN8teLzGDA6iNBOLbp+l5XN++uWeu0I5fEWPX60JCuTRHkAG0U1f9 CRDaKeAYrMq9RKzWpndkQ3rk6VdQWmJThffctpskIzhMpaA6XQeoRAokfVvYojlu Uj/taSu0Qwaz0kgU6ceKx4CUhcWgy4UCgdyXdewCRyQb4GWIAggb6WD0g1x8xRTM hZdtv9udTKOzum1Y6etqnyCqpTfORzw= -----END CERTIFICATE-----Generated at Fri May 17 10:10:51 2024 by rpki-client on console-fra.rpki-client.org