$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json) Hash identifier: cPH5ajfOuKyKIOPI8pf2RFKOkuPz41Z4eNYwdVr7mOA= Subject key identifier: A4:CE:C4:35:0F:98:6B:C9:83:89:D6:61:4F:03:D3:33:00:08:3C:78 Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft Manifest number: 0582 Signing time: Wed 01 May 2024 00:51:47 +0000 Manifest this update: Wed 01 May 2024 00:51:46 +0000 Manifest next update: Wed 08 May 2024 00:51:46 +0000 Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: YMfh5iY4mxWkOP38EYVHJVobwPK20ZlIJjotXOgFdHo=) 2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: SpmHHByflJabB6mdPnxEp0JfBy+lpq83eP4W9sBlxuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Validity Not Before: May 1 00:51:46 2024 GMT Not After : May 8 00:51:46 2024 GMT Subject: CN=66319222-d0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:88:35:9c:cf:c6:bd:a2:c2:1c:92:14:b8:34: 30:55:57:c7:5d:5f:d1:f4:e4:16:e4:6f:7f:b1:b9: 23:3d:67:40:27:df:b8:09:7c:d5:42:90:62:23:bf: 02:9d:7c:2e:a1:a2:a6:3f:19:30:5a:0d:82:97:e1: 46:94:d8:da:08:ee:63:14:f8:47:c4:78:5e:e3:32: e8:46:b8:7a:d8:c4:97:f2:d5:48:53:9c:5a:e8:79: f1:4c:9a:40:5b:cf:c8:a3:db:3c:99:74:85:61:56: 17:35:a1:e8:2e:c4:64:c4:73:9a:68:5d:59:78:bc: 79:ff:5b:17:cf:64:66:9b:b0:67:3b:78:99:57:d1: 6c:3f:48:dc:f3:bf:4d:e9:16:ca:dd:b4:cc:e7:85: c0:eb:2e:5a:c8:6c:2a:86:55:e5:02:f3:29:55:21: 0b:e7:8b:3a:f2:88:39:71:73:04:09:e9:af:4a:93: 5c:c5:91:52:f0:da:e6:66:07:e1:a7:67:28:c8:18: 25:63:4c:74:a0:4a:ac:71:22:ab:b8:fe:b1:8e:f0: 53:07:5e:a7:7a:d8:82:f5:c4:81:cc:98:5b:7c:98: 08:8d:2e:64:74:b9:a9:78:fe:75:6a:f7:1f:b3:bf: a6:5e:24:c7:36:67:72:8d:f6:9b:ee:ed:86:37:64: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CE:C4:35:0F:98:6B:C9:83:89:D6:61:4F:03:D3:33:00:08:3C:78 X509v3 Authority Key Identifier: keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:11:8e:2c:38:48:d1:f9:f7:a6:96:b2:bd:3d:f5:3b:4b:ea: a0:1a:53:51:78:bf:ee:45:13:27:1e:93:fb:22:d9:dd:dd:26: b9:23:aa:1a:38:9a:92:74:75:48:08:85:bf:ea:27:c5:fc:ee: d4:43:da:d9:85:0c:d9:eb:6b:49:e8:0a:b3:5b:1b:07:57:98: f7:24:f3:66:b1:f1:bf:8a:fa:16:44:ae:85:35:d5:ee:98:05: 41:fd:4f:55:91:f7:0d:9b:a1:bd:8a:eb:7d:18:63:b1:66:26: 9d:49:62:ad:76:b7:11:4f:0c:3b:e6:a7:b5:47:f5:51:57:5f: 55:ac:5a:29:d5:9b:da:27:56:d6:1e:8b:7a:a3:4e:e8:39:f1: db:ea:a7:c0:4a:59:5a:77:e8:28:81:35:94:f8:93:6f:28:5f: 7c:8d:4c:3b:8a:4a:8f:60:a0:85:20:38:dd:a4:4e:06:b0:2a: cd:f5:ac:0b:6e:bf:cf:98:ce:6c:ec:1e:1a:0e:92:ee:3b:f4: 6d:f5:8d:63:f1:57:58:e4:43:5c:3f:03:77:e6:90:22:5f:ef: b6:87:ca:3a:da:91:2f:21:b2:84:12:1c:ee:46:83:bd:3e:4b: a2:4e:70:8a:cd:cb:ad:52:e0:7c:20:ab:c8:d7:0a:fc:23:0f: 09:ea:fc:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1 QzZFRkMzN0IwHhcNMjQwNTAxMDA1MTQ2WhcNMjQwNTA4MDA1MTQ2WjAYMRYwFAYD VQQDEw02NjMxOTIyMi1kMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Yg1nM/GvaLCHJIUuDQwVVfHXV/R9OQW5G9/sbkjPWdAJ9+4CXzVQpBiI78C nXwuoaKmPxkwWg2Cl+FGlNjaCO5jFPhHxHhe4zLoRrh62MSX8tVIU5xa6HnxTJpA W8/Io9s8mXSFYVYXNaHoLsRkxHOaaF1ZeLx5/1sXz2Rmm7BnO3iZV9FsP0jc879N 6RbK3bTM54XA6y5ayGwqhlXlAvMpVSEL54s68og5cXMECemvSpNcxZFS8NrmZgfh p2coyBglY0x0oEqscSKruP6xjvBTB16netiC9cSBzJhbfJgIjS5kdLmpeP51avcf s7+mXiTHNmdyjfab7u2GN2QUDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTOxDUP mGvJg4nWYU8D0zMACDx4MB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGEY4sOEjR+femlrK9PfU7S+qgGlNReL/uRRMnHpP7Itnd3Sa5I6oa OJqSdHVICIW/6ifF/O7UQ9rZhQzZ62tJ6AqzWxsHV5j3JPNmsfG/ivoWRK6FNdXu mAVB/U9VkfcNm6G9iut9GGOxZiadSWKtdrcRTww75qe1R/VRV19VrFop1ZvaJ1bW Hot6o07oOfHb6qfASllad+gogTWU+JNvKF98jUw7ikqPYKCFIDjdpE4GsCrN9awL br/PmM5s7B4aDpLuO/Rt9Y1j8VdY5ENcPwN35pAiX++2h8o62pEvIbKEEhzuRoO9 PkuiTnCKzcutUuB8IKvI1wr8Iw8J6vwj -----END CERTIFICATE-----Generated at Wed May 1 02:08:05 2024 by rpki-client on console-fra.rpki-client.org