$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: rbIFrGDRK38D0srXAt4XziwX3ipnRX5bK9jLEL/ju7E= Subject key identifier: E1:DC:29:FF:D2:28:CD:18:16:3B:9D:95:7B:39:3E:4A:5A:19:D2:AA Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 0690 Signing time: Thu 02 May 2024 23:28:44 +0000 Manifest this update: Thu 02 May 2024 23:28:43 +0000 Manifest next update: Thu 09 May 2024 23:28:43 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: NxW340LwBIGKcLEMyTcOQyx13Znoamqz0mwNb6b3IlM=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: N+FtAiUxsHhBvHtKNspxZwKivHBlBWR9LK3rO/Xb0dg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: May 2 23:28:43 2024 GMT Not After : May 9 23:28:43 2024 GMT Subject: CN=663421ac-e82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c7:32:77:fb:13:65:d8:22:6f:ce:9a:c0:7d: 53:06:1c:18:fd:07:06:2f:d9:f2:0a:0b:ca:b5:ee: c2:13:1f:9d:2b:24:ff:34:e6:1b:8f:22:ae:76:33: b2:bd:5a:b7:ea:16:29:d3:8e:7d:7e:72:10:9e:94: 87:41:18:6c:ed:78:8d:b7:ce:5b:38:ed:19:ef:82: 6d:1c:4d:82:ab:60:9e:3a:a8:c0:95:55:08:c9:42: eb:22:e9:ef:de:dc:6f:82:38:9d:97:18:a1:b4:14: a9:95:0a:db:02:f8:5e:f8:06:a8:93:ff:49:fe:8b: a3:d2:76:81:63:08:01:03:71:fb:49:9e:41:b4:8b: f1:dd:4a:de:6c:8b:ee:35:8f:d4:c5:d9:41:c3:e1: ef:bd:53:aa:9b:e5:a0:47:00:dd:4d:2b:36:7a:c6: 88:78:ae:34:1f:78:2d:79:bf:1d:c8:25:fc:91:75: 1e:b9:6e:39:80:43:45:ef:23:3d:8f:7a:a3:6c:3e: 39:63:09:e5:14:ef:f2:ff:d8:5c:12:e8:77:78:b3: bd:83:bf:ca:73:60:a8:58:fd:50:0d:78:b9:be:66: 81:7b:9e:8b:37:fd:0f:0a:e3:a4:d3:4b:66:72:4c: f0:52:ad:bc:3d:70:7d:fd:0b:43:36:e1:b9:4d:8e: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DC:29:FF:D2:28:CD:18:16:3B:9D:95:7B:39:3E:4A:5A:19:D2:AA X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:23:a8:b3:56:8c:67:6f:1b:dd:86:c6:f4:58:8c:17:54:e5: b6:91:b8:f4:6e:c0:ce:60:22:67:d8:b7:ff:1d:8f:04:3b:6e: 7f:7b:2c:32:52:fd:13:1a:6a:4f:05:3d:ed:13:2b:96:4c:a6: f4:79:da:7e:69:2f:1e:22:d2:3d:57:cd:85:ff:2e:7f:f7:5c: b5:8a:b8:ff:c0:d0:91:ca:c9:4e:9f:dd:98:f6:58:c0:b2:e5: ed:10:de:f2:a6:70:c9:e3:ad:4c:73:74:38:b7:40:2e:04:8a: b4:c9:f1:3b:ab:48:d0:6d:8c:99:47:fc:20:2a:6a:dd:d5:91: 85:32:f4:1f:e8:06:58:67:e3:ad:7a:37:5e:b1:a9:7d:e8:d9: 92:40:f3:0d:06:c3:7f:04:26:20:d3:4c:a9:3d:57:9b:cc:91: 2f:44:d7:a7:03:36:30:ac:b5:7e:15:ba:24:9a:05:69:3d:0a: b5:cf:46:36:2d:09:9e:23:82:11:de:74:ae:3f:de:d6:66:20: ac:ca:5c:b0:8d:73:c1:89:29:f5:33:44:67:5d:46:7a:f7:7e: e5:4f:97:2f:01:1c:d8:d0:c8:d1:bf:b9:d0:9f:b2:b2:6a:59: 9a:47:d8:2b:86:d0:b6:3a:b0:a9:bc:5d:9b:2e:5e:d8:a5:c1: 40:25:ed:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjQwNTAyMjMyODQzWhcNMjQwNTA5MjMyODQzWjAYMRYwFAYD VQQDEw02NjM0MjFhYy1lODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+8cyd/sTZdgib86awH1TBhwY/QcGL9nyCgvKte7CEx+dKyT/NOYbjyKudjOy vVq36hYp0459fnIQnpSHQRhs7XiNt85bOO0Z74JtHE2Cq2CeOqjAlVUIyULrIunv 3txvgjidlxihtBSplQrbAvhe+Aaok/9J/ouj0naBYwgBA3H7SZ5BtIvx3UrebIvu NY/UxdlBw+HvvVOqm+WgRwDdTSs2esaIeK40H3gteb8dyCX8kXUeuW45gENF7yM9 j3qjbD45YwnlFO/y/9hcEuh3eLO9g7/Kc2CoWP1QDXi5vmaBe56LN/0PCuOk00tm ckzwUq28PXB9/QtDNuG5TY7OgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHcKf/S KM0YFjudlXs5PkpaGdKqMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXI6izVoxnbxvdhsb0WIwXVOW2kbj0bsDOYCJn2Lf/HY8EO25/eywy Uv0TGmpPBT3tEyuWTKb0edp+aS8eItI9V82F/y5/91y1irj/wNCRyslOn92Y9ljA suXtEN7ypnDJ461Mc3Q4t0AuBIq0yfE7q0jQbYyZR/wgKmrd1ZGFMvQf6AZYZ+Ot ejdesal96NmSQPMNBsN/BCYg00ypPVebzJEvRNenAzYwrLV+FbokmgVpPQq1z0Y2 LQmeI4IR3nSuP97WZiCsylywjXPBiSn1M0RnXUZ6937lT5cvARzY0MjRv7nQn7Ky almaR9grhtC2OrCpvF2bLl7YpcFAJe2Y -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org