$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: aVGHYDUHaA+rp5UCKmmdPJTDBUIPCeQKRlURzmJCGqY= Subject key identifier: CF:D5:D6:23:C0:57:FF:FD:82:58:45:D9:6D:9D:A1:A4:29:79:6F:57 Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0B04 Signing time: Thu 02 May 2024 20:02:30 +0000 Manifest this update: Thu 02 May 2024 20:02:30 +0000 Manifest next update: Thu 09 May 2024 20:02:30 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: qnLZUgZXzwy0vYTLRnONGrJFaU9HjG5WeOlmjMwF6NE=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: uydGEfUeJ9GoCJahUH8Dg4uVB/Z/ZVqnT2h9hBM2XBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: May 2 20:02:30 2024 GMT Not After : May 9 20:02:30 2024 GMT Subject: CN=6633f156-ca5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:23:b4:4e:65:02:d7:40:6a:76:16:eb:ac: f1:5c:a2:6a:40:36:3a:f6:66:fc:4a:57:42:31:ea: 99:3a:f8:2d:24:85:0e:de:26:2c:fa:38:c1:44:96: 4f:94:5e:9a:f7:81:09:f1:9f:89:89:40:4f:7f:8d: d2:03:20:1b:28:cd:63:ea:12:90:95:90:d5:62:ef: 7d:49:ea:95:c9:e1:89:5c:56:25:90:21:a5:31:a2: 16:c6:18:26:80:a4:3c:ed:e8:83:8d:44:99:aa:37: bd:db:af:f3:af:20:6d:ac:0a:0d:b8:b4:e4:cb:03: f0:03:a9:7a:98:8e:25:95:03:42:0f:96:12:86:d2: 60:61:f8:3f:09:56:b8:0e:a3:35:21:58:1f:5f:45: 99:6a:7a:87:34:f4:5f:cb:26:fb:14:22:95:03:91: 96:c6:47:89:fa:e6:bc:df:ec:17:eb:9c:b5:9d:6d: 5d:ae:90:2e:68:c9:85:29:7e:5d:1a:06:46:5c:65: 0a:17:20:22:da:ec:ff:9f:5e:78:f1:b0:95:5a:e8: ee:b7:8a:06:3e:28:5a:06:70:a7:4e:67:1f:a1:a6: d4:04:32:6a:d9:ba:0d:58:de:57:a1:30:be:6a:c6: 6f:08:b1:de:38:79:60:0d:05:50:23:1b:fc:09:ee: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D5:D6:23:C0:57:FF:FD:82:58:45:D9:6D:9D:A1:A4:29:79:6F:57 X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d2:4c:d4:8d:5f:4e:59:3a:98:5a:e6:a8:e8:00:5f:e6:e4: f5:7e:85:2b:c6:ad:03:27:b9:4e:03:a9:f7:7e:f6:45:9a:5f: 70:16:be:67:1a:80:60:54:f4:f7:00:d0:61:8c:86:ef:8d:be: ea:87:3e:dc:c3:33:fc:82:db:bf:6c:f9:aa:6c:ce:42:1f:ff: ad:8b:8b:de:a1:38:6d:ab:22:8e:84:39:17:d3:51:d8:95:58: 65:65:c8:70:d6:49:d7:4c:24:fa:aa:ae:02:c3:ba:0a:5a:bc: 05:86:3d:de:4b:9c:c4:38:60:4e:ff:77:16:9f:9d:16:d6:fb: 4e:e3:1b:12:69:ed:b0:8c:c1:30:0f:6c:bb:f0:46:34:d1:34: ec:eb:a6:fa:d9:e2:c4:d0:a6:bb:59:05:72:44:2a:19:ac:6c: e9:38:6e:82:1c:d8:7c:3c:77:34:4b:53:e4:93:ea:3a:c6:af: 61:dd:a3:34:db:a2:60:e6:af:9f:c9:04:cf:46:d1:70:fb:b2: d3:0d:88:83:62:b6:18:a8:1c:a2:b4:b9:bc:cd:23:bc:31:c7: 84:40:8b:07:47:b9:1e:66:21:8c:58:bb:b7:3a:66:74:a4:51: ee:ed:c2:56:bd:72:9f:b4:51:e1:0d:c9:d6:e7:b3:b5:03:7f: c8:1b:b8:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjQwNTAyMjAwMjMwWhcNMjQwNTA5MjAwMjMwWjAYMRYwFAYD VQQDEw02NjMzZjE1Ni1jYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyEjtE5lAtdAanYW66zxXKJqQDY69mb8SldCMeqZOvgtJIUO3iYs+jjBRJZP lF6a94EJ8Z+JiUBPf43SAyAbKM1j6hKQlZDVYu99SeqVyeGJXFYlkCGlMaIWxhgm gKQ87eiDjUSZqje926/zryBtrAoNuLTkywPwA6l6mI4llQNCD5YShtJgYfg/CVa4 DqM1IVgfX0WZanqHNPRfyyb7FCKVA5GWxkeJ+ua83+wX65y1nW1drpAuaMmFKX5d GgZGXGUKFyAi2uz/n1548bCVWujut4oGPihaBnCnTmcfoabUBDJq2boNWN5XoTC+ asZvCLHeOHlgDQVQIxv8Ce5CMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/V1iPA V//9glhF2W2doaQpeW9XMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl0kzUjV9OWTqYWuao6ABf5uT1foUrxq0DJ7lOA6n3fvZFml9wFr5n GoBgVPT3ANBhjIbvjb7qhz7cwzP8gtu/bPmqbM5CH/+ti4veoThtqyKOhDkX01HY lVhlZchw1knXTCT6qq4Cw7oKWrwFhj3eS5zEOGBO/3cWn50W1vtO4xsSae2wjMEw D2y78EY00TTs66b62eLE0Ka7WQVyRCoZrGzpOG6CHNh8PHc0S1Pkk+o6xq9h3aM0 26Jg5q+fyQTPRtFw+7LTDYiDYrYYqByitLm8zSO8MceEQIsHR7keZiGMWLu3OmZ0 pFHu7cJWvXKftFHhDcnW57O1A3/IG7g4 -----END CERTIFICATE-----Generated at Thu May 2 20:50:33 2024 by rpki-client on console-fra.rpki-client.org