$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft File: yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft (raw, json) Hash identifier: 1jTCW+VzuI6So/avr8P9QF3rKSZ0B8sdoAQwdTqeDuI= Subject key identifier: D5:DD:4A:A8:CC:DA:A5:C8:B3:D5:66:4D:60:B4:5A:D6:A0:04:C0:C6 Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft Manifest number: 04DC Signing time: Tue 07 May 2024 03:05:18 +0000 Manifest this update: Tue 07 May 2024 03:05:18 +0000 Manifest next update: Tue 14 May 2024 03:05:18 +0000 Files and hashes: 1: yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl (hash: KLJ2C5CzFgOU+hszttoEbWa3prehdp9SgOAP+u4+rw4=) 2: 99667AD4F83211ED97101D26C4F9AE02.roa (hash: MCVKksxhrGPeFaXG6jI+y2FpN/ON3PY9O0Ypa8BfH80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Validity Not Before: May 7 03:05:18 2024 GMT Not After : May 14 03:05:18 2024 GMT Subject: CN=66399a6e-5ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:42:8c:af:28:72:82:97:9b:e4:22:46:3b: a4:aa:0e:3c:0c:6d:c5:b9:dc:a2:36:bf:93:61:12: c4:7c:f0:42:38:a6:49:0d:28:a8:8a:d2:a6:4a:b2: b7:b6:1e:f3:37:a2:3d:ec:17:d8:2c:a3:42:89:0a: 5d:57:0f:9b:6b:94:3c:7e:a3:52:06:75:8e:8e:90: 9e:5b:f4:f8:21:23:e6:9a:eb:f6:e2:da:58:c6:ca: ef:ed:bb:53:2a:36:95:df:dc:9f:3a:64:5b:4b:cf: 24:c5:c9:30:c3:d1:42:3c:8a:ff:c7:19:22:a3:17: 54:c5:e4:27:e1:80:08:3d:62:56:90:6f:28:ff:8b: 4d:cd:9a:48:2b:b6:98:f3:7a:47:28:cf:a4:1e:ab: 3f:86:6e:d9:e3:ae:62:9d:b7:4c:33:4d:ca:70:d2: 60:36:07:23:c0:fe:41:5c:53:62:c4:3c:ed:c4:45: 95:e0:be:9b:3b:99:ca:49:c8:f5:91:3b:68:60:ca: 32:bc:ca:84:77:bf:cc:ef:e2:06:1e:ba:a2:d8:0d: 97:bc:05:a7:bb:55:b5:06:bd:88:67:a7:05:8b:7f: f2:99:03:83:04:43:d2:1f:75:75:30:f9:ce:5a:3f: f5:3a:ec:53:4e:a6:53:dc:5c:9f:75:dc:2e:c2:93: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DD:4A:A8:CC:DA:A5:C8:B3:D5:66:4D:60:B4:5A:D6:A0:04:C0:C6 X509v3 Authority Key Identifier: keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:47:9c:c2:a8:d0:6c:f6:8c:be:ef:46:7e:cb:8b:f5:c7:a4: 65:be:9d:67:89:43:69:df:1e:3b:9f:7a:2f:41:f3:7b:d3:ec: f9:c6:cf:46:22:d0:65:44:6b:90:df:71:fe:e4:aa:5c:72:87: 1f:cd:78:97:eb:56:2a:57:3a:ff:9c:ca:e1:0b:4f:0b:2f:e6: 37:c4:70:a6:b3:b6:e4:61:ca:38:c9:04:58:ca:2d:91:d9:64: 5f:8d:89:f6:f0:c4:f9:ce:6b:d2:df:09:61:b2:eb:d6:49:ac: fc:13:eb:3c:88:51:51:eb:0e:73:fd:d8:36:56:40:68:fd:d7: 76:27:17:e6:9d:29:8a:c2:9e:93:6b:41:aa:25:b2:4b:62:69: 4c:cc:c6:20:30:fd:c7:ec:80:55:c8:9f:b3:7e:22:61:30:42: b0:d1:b3:08:e5:75:a6:24:23:ae:4f:8b:5d:26:c2:99:1a:8f: fb:45:16:5e:65:99:ba:30:d8:eb:8c:14:5b:a1:bf:cd:f3:3b: 79:e0:5e:52:59:86:42:a5:67:7e:ff:0e:27:5a:29:fe:65:05: b5:5f:57:be:7e:98:a0:7e:02:cf:9e:a4:08:63:88:bb:c1:b6: fa:9e:f1:5f:78:27:7b:dd:5c:69:f2:e8:f4:7e:ae:a6:0a:9a: d1:e4:ba:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEM5Mzc1M0E5QUFBMkE4NkU1NkNBNEVBMEMzRkY4NTdD MzBFMzQyMjgwHhcNMjQwNTA3MDMwNTE4WhcNMjQwNTE0MDMwNTE4WjAYMRYwFAYD VQQDEw02NjM5OWE2ZS01YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPRCjK8ocoKXm+QiRjukqg48DG3FudyiNr+TYRLEfPBCOKZJDSioitKmSrK3 th7zN6I97BfYLKNCiQpdVw+ba5Q8fqNSBnWOjpCeW/T4ISPmmuv24tpYxsrv7btT KjaV39yfOmRbS88kxckww9FCPIr/xxkioxdUxeQn4YAIPWJWkG8o/4tNzZpIK7aY 83pHKM+kHqs/hm7Z465inbdMM03KcNJgNgcjwP5BXFNixDztxEWV4L6bO5nKScj1 kTtoYMoyvMqEd7/M7+IGHrqi2A2XvAWnu1W1Br2IZ6cFi3/ymQODBEPSH3V1MPnO Wj/1OuxTTqZT3FyfddwuwpNfyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXdSqjM 2qXIs9VmTWC0WtagBMDGMB8GA1UdIwQYMBaAFMk3U6mqoqhuVspOoMP/hXww40Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi95VGRUcWFxaXFHNVd5azZnd18tRmZERGpR aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUZFRxYXFpcUc1V3lrNmd3Xy1GZkREalFpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi95VGRUcWFxaXFH NVd5azZnd18tRmZERGpRaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1R5zCqNBs9oy+70Z+y4v1x6Rlvp1niUNp3x47n3ovQfN70+z5xs9G ItBlRGuQ33H+5KpccocfzXiX61YqVzr/nMrhC08LL+Y3xHCms7bkYco4yQRYyi2R 2WRfjYn28MT5zmvS3wlhsuvWSaz8E+s8iFFR6w5z/dg2VkBo/dd2JxfmnSmKwp6T a0GqJbJLYmlMzMYgMP3H7IBVyJ+zfiJhMEKw0bMI5XWmJCOuT4tdJsKZGo/7RRZe ZZm6MNjrjBRbob/N8zt54F5SWYZCpWd+/w4nWin+ZQW1X1e+fpigfgLPnqQIY4i7 wbb6nvFfeCd73Vxp8uj0fq6mCprR5LrL -----END CERTIFICATE-----Generated at Tue May 7 03:53:39 2024 by rpki-client on console-fra.rpki-client.org