$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: hV7S8l5ETZTKYtZAuB0BUJ9x0nHXlryJWmfEEZ7TTyQ= Subject key identifier: 1D:4F:A3:57:97:92:FF:05:9B:74:C3:32:E4:1E:17:62:54:22:F4:EB Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 309B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 308B Signing time: Sun 28 Apr 2024 15:40:36 +0000 Manifest this update: Sun 28 Apr 2024 15:40:35 +0000 Manifest next update: Sun 05 May 2024 15:40:35 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: ekU4dUdZIVXC/tPXx0hXjH6q9TfQA+FsqLmaCuWsXDE=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: D1N2PqltUFeb2EXCCJMaqaYfg0iGljFbGHuYdjr+FsQ=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: Q+f6CDvuXieanMUN2OEVHBNkRx3E+2cd6GUP+sW2+hE=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: DXatxoET1+Gd2NPAgN9lssfdJ/wZs+mLGS3RWjHmUKs=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: iDusxbeufXmGs67trrG8IfPzLwRxkKDY8iVJW3Aq6Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12443 (0x309b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Apr 28 15:40:35 2024 GMT Not After : May 5 15:40:35 2024 GMT Subject: CN=662e6df4-de25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:c6:55:1f:f9:73:7d:fa:54:a9:a2:fb:35: 6e:b4:5f:fa:a6:84:85:57:81:5e:28:8b:b6:75:36: 0b:ba:71:fc:24:4c:aa:84:03:18:f6:e0:be:17:80: 29:4c:58:9a:83:37:ed:6d:a5:57:ec:a2:6f:41:e5: eb:c5:f2:4c:27:a5:f6:8d:ae:4e:a1:5d:7a:64:76: d5:89:22:fb:fc:e9:a5:df:66:5f:8f:64:00:76:19: 2a:50:92:97:c6:4d:0a:c8:6d:d7:7a:a8:43:4d:73: f7:a2:05:cc:24:1d:62:90:ab:af:05:83:90:04:06: 7d:ec:01:e5:54:b8:79:69:d9:28:68:02:b1:4f:95: 81:a4:81:23:15:fc:63:af:de:9a:58:39:4e:ae:cf: 6a:ee:fa:8b:12:97:13:d9:f4:0a:bb:c7:4e:eb:20: 60:c7:08:2e:d2:88:68:90:16:b2:30:c5:1c:07:79: a7:1c:eb:cc:dc:7f:47:fe:af:d0:61:78:e9:8c:70: 44:35:48:c2:2b:d4:eb:7c:45:9b:8f:02:e6:cf:7e: d8:2f:07:af:de:4c:90:ea:cd:49:0f:0a:a4:6b:e0: c7:c2:68:54:e7:75:e3:80:43:5a:3e:a3:5d:54:56: 18:0b:34:bf:5c:f5:b9:9a:5d:cc:8b:e5:0c:98:00: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4F:A3:57:97:92:FF:05:9B:74:C3:32:E4:1E:17:62:54:22:F4:EB X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9e:92:ca:b0:02:19:ec:73:54:05:8d:f6:e6:44:d9:a8:0f: a8:c9:2a:3f:6e:27:3f:bd:a7:f5:fe:a5:fe:59:78:da:d8:b0: ea:f5:d9:ae:ec:8a:f5:ae:83:61:b0:75:80:9d:18:c7:6b:ba: e3:dd:41:18:0b:43:71:20:c7:1e:63:4d:51:9c:c3:b8:c5:46: 23:76:53:11:bc:2f:6d:32:cb:b1:8b:1d:22:21:ec:94:58:47: 16:59:4a:5a:c6:0d:29:a1:44:c4:a5:40:81:0a:5c:cb:a9:30: 52:db:23:e8:8c:15:81:3d:09:72:f2:d7:45:9d:56:46:1b:31: 65:be:21:41:78:fa:29:da:76:73:d6:69:a1:93:17:af:dc:b7: 21:db:71:5c:bf:a2:6e:5f:a5:a8:81:a9:c0:1c:a0:37:e7:32: 09:ac:7d:fd:3d:0b:46:95:2f:d5:dd:eb:ff:93:cb:aa:81:c6: 2c:67:a6:85:5f:0c:be:7b:32:aa:14:95:de:21:02:26:6c:8f: f3:21:24:62:6c:34:ca:67:2d:52:69:12:e0:84:d9:fa:91:b3: d5:ec:2f:78:ab:8e:16:28:0b:39:ff:44:a8:25:53:7b:fc:81: 4d:af:28:47:7d:4c:17:5f:2a:34:e0:7e:d8:aa:3e:0e:e5:a6: 90:9b:9d:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjQwNDI4MTU0MDM1WhcNMjQwNTA1MTU0MDM1WjAYMRYwFAYD VQQDEw02NjJlNmRmNC1kZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlbGVR/5c336VKmi+zVutF/6poSFV4FeKIu2dTYLunH8JEyqhAMY9uC+F4Ap TFiagzftbaVX7KJvQeXrxfJMJ6X2ja5OoV16ZHbViSL7/Oml32Zfj2QAdhkqUJKX xk0KyG3XeqhDTXP3ogXMJB1ikKuvBYOQBAZ97AHlVLh5adkoaAKxT5WBpIEjFfxj r96aWDlOrs9q7vqLEpcT2fQKu8dO6yBgxwgu0ohokBayMMUcB3mnHOvM3H9H/q/Q YXjpjHBENUjCK9TrfEWbjwLmz37YLwev3kyQ6s1JDwqka+DHwmhU53XjgENaPqNd VFYYCzS/XPW5ml3Mi+UMmACgZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1Po1eX kv8Fm3TDMuQeF2JUIvTrMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+npLKsAIZ7HNUBY325kTZqA+oySo/bic/vaf1/qX+WXja2LDq9dmu 7Ir1roNhsHWAnRjHa7rj3UEYC0NxIMceY01RnMO4xUYjdlMRvC9tMsuxix0iIeyU WEcWWUpaxg0poUTEpUCBClzLqTBS2yPojBWBPQly8tdFnVZGGzFlviFBePop2nZz 1mmhkxev3Lch23Fcv6JuX6WoganAHKA35zIJrH39PQtGlS/V3ev/k8uqgcYsZ6aF Xwy+ezKqFJXeIQImbI/zISRibDTKZy1SaRLghNn6kbPV7C94q44WKAs5/0SoJVN7 /IFNryhHfUwXXyo04H7Yqj4O5aaQm51X -----END CERTIFICATE-----Generated at Sun Apr 28 19:01:37 2024 by rpki-client on console-fra.rpki-client.org