$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: jkiWnmFjOJeWOOD1onz3aMTpTa1s1tIAxsxhpRbzzl4= Subject key identifier: 99:C5:FD:69:AA:E6:B1:42:56:73:4E:7F:34:37:26:19:A5:CB:3E:72 Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 06BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 06BF Signing time: Thu 02 May 2024 23:10:41 +0000 Manifest this update: Thu 02 May 2024 23:10:40 +0000 Manifest next update: Thu 09 May 2024 23:10:40 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: WHU8IJ9Hxa0rl4QSZCxSO3Sy9SyYSog90Yv5avmDkzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: May 2 23:10:40 2024 GMT Not After : May 9 23:10:40 2024 GMT Subject: CN=66341d70-aca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:7f:08:a6:5a:3d:9d:16:e4:78:a8:4b:56: a4:33:f1:25:f4:cc:e0:84:1c:98:a9:70:f0:bc:3b: de:69:4c:8b:46:c5:01:6b:91:8c:df:dc:a6:80:3e: d9:85:49:ba:d3:f9:66:b7:77:f1:46:f0:7a:b7:28: d8:d6:77:33:78:a7:55:f8:3a:03:ea:a2:ae:d5:52: 52:59:a9:ed:5a:cb:3b:94:26:63:d7:8d:f6:e3:45: 66:55:7a:ec:54:96:e4:db:9b:de:57:0b:9f:fa:73: 3b:84:93:09:fe:50:f0:73:24:a3:72:48:bd:09:ed: 28:2a:4c:f5:57:a9:30:37:f7:2b:76:f7:c9:b1:90: 71:5d:5f:cd:de:93:31:31:a0:5a:98:7d:5c:b0:7f: b0:5a:24:39:eb:d4:fa:d4:38:b3:e9:1a:b4:3f:db: 92:08:4d:77:12:58:3e:69:e8:ef:76:77:4f:e3:c1: df:f1:2b:14:37:db:53:c1:f4:14:66:24:1e:79:de: e4:e0:6b:fc:5a:77:aa:59:a5:e4:b5:51:1b:43:51: b6:6c:cb:53:87:84:a9:e6:6b:f3:1b:50:0e:1d:b3: 7e:e2:ba:46:d1:d9:44:e4:76:4d:df:64:3d:88:48: ec:21:df:da:c0:6d:70:d6:a7:11:6b:4a:89:ae:54: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C5:FD:69:AA:E6:B1:42:56:73:4E:7F:34:37:26:19:A5:CB:3E:72 X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:70:5b:09:80:9b:33:9c:3d:63:c1:13:36:d9:7c:ea:f5:15: f4:78:6d:0b:a9:a4:30:20:09:b0:28:31:79:f0:3f:40:5a:72: 91:ab:0b:1a:d5:5e:d6:0d:9a:de:c4:bb:00:01:85:36:8f:d2: 67:3d:13:1c:85:2d:33:99:b5:c7:81:95:20:87:cf:3d:55:51: 02:17:38:e9:4b:8a:fb:5a:fa:48:a9:71:a9:33:55:4d:34:78: 48:bf:6d:8d:d5:f9:82:d2:21:94:df:aa:2a:4a:2b:7c:57:34: 37:3d:cc:10:04:6c:8b:38:23:48:a3:59:c7:fc:4c:f6:6d:84: 89:72:ab:46:63:dd:91:80:5c:1c:b3:6e:fd:32:fe:be:43:2d: 95:46:f2:36:a0:e5:7d:04:7f:5d:1a:c1:f1:ca:8d:7f:7f:60: a6:b8:1f:ac:61:23:0b:ca:09:ae:54:dd:1b:46:bd:56:4d:65: d9:8c:a5:38:a6:b2:a4:cb:89:c8:dd:c2:de:56:e6:e2:28:d8: 4b:ff:03:63:9d:5e:3f:7d:8c:05:e9:7f:04:6a:64:3a:d4:71: dd:1a:86:b5:3c:56:a3:14:7e:fe:58:73:91:e2:c4:63:6f:5e: 34:aa:2d:49:f8:f3:8f:63:a4:0f:99:d0:02:19:b8:18:98:cf: c0:67:ef:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjQwNTAyMjMxMDQwWhcNMjQwNTA5MjMxMDQwWjAYMRYwFAYD VQQDEw02NjM0MWQ3MC1hY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWR/CKZaPZ0W5HioS1akM/El9MzghByYqXDwvDveaUyLRsUBa5GM39ymgD7Z hUm60/lmt3fxRvB6tyjY1nczeKdV+DoD6qKu1VJSWantWss7lCZj143240VmVXrs VJbk25veVwuf+nM7hJMJ/lDwcySjcki9Ce0oKkz1V6kwN/crdvfJsZBxXV/N3pMx MaBamH1csH+wWiQ569T61Diz6Rq0P9uSCE13Elg+aejvdndP48Hf8SsUN9tTwfQU ZiQeed7k4Gv8WneqWaXktVEbQ1G2bMtTh4Sp5mvzG1AOHbN+4rpG0dlE5HZN32Q9 iEjsId/awG1w1qcRa0qJrlSzcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnF/Wmq 5rFCVnNOfzQ3Jhmlyz5yMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcFsJgJsznD1jwRM22Xzq9RX0eG0LqaQwIAmwKDF58D9AWnKRqwsa 1V7WDZrexLsAAYU2j9JnPRMchS0zmbXHgZUgh889VVECFzjpS4r7WvpIqXGpM1VN NHhIv22N1fmC0iGU36oqSit8VzQ3PcwQBGyLOCNIo1nH/Ez2bYSJcqtGY92RgFwc s279Mv6+Qy2VRvI2oOV9BH9dGsHxyo1/f2CmuB+sYSMLygmuVN0bRr1WTWXZjKU4 prKky4nI3cLeVubiKNhL/wNjnV4/fYwF6X8EamQ61HHdGoa1PFajFH7+WHOR4sRj b140qi1J+POPY6QPmdACGbgYmM/AZ++O -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org