$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: OYHGZYNNZUVkTyvatyi1NQxzNJsOeFwx4HohNYQ84vU= Subject key identifier: 27:C1:45:35:EB:78:B4:69:9F:B8:D1:CC:CC:24:A9:D5:58:7D:75:B8 Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: 28 Signing time: Wed 15 May 2024 08:39:46 +0000 Manifest this update: Wed 15 May 2024 08:39:45 +0000 Manifest next update: Wed 22 May 2024 08:39:45 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: SZHq4q3OQiADXzbRu56Z8NWoedMwXhP8I/ZxHlXOrsk=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: Qq5UU0tcDxAU8exKz+6U8pmnC5amKrv1RDGkSY0cphM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: May 15 08:39:45 2024 GMT Not After : May 22 08:39:45 2024 GMT Subject: CN=664474d2-b9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:85:36:f4:9a:ba:f9:99:fc:ff:21:84:ea: 0d:05:a8:79:6f:9e:e3:11:6e:36:1c:2b:d3:45:e1: 96:80:1a:49:55:88:b5:09:8d:6c:fd:d2:59:00:79: 99:94:d8:fc:1e:ac:3a:19:7f:a9:cf:07:82:f8:b2: b4:4b:90:db:5a:dd:27:84:f6:68:82:d3:08:27:11: f2:03:6e:c5:af:3f:fc:dd:e4:ad:88:dc:0e:82:1d: 00:e6:d4:97:89:6f:98:51:e3:b6:d9:e1:ad:e9:10: ff:5b:13:89:e7:d8:2c:4b:7e:30:2d:2c:5b:a0:db: 0a:af:0f:22:3c:13:65:d7:cd:fa:16:e0:eb:8c:95: 13:fc:5b:30:e0:b1:f7:04:b5:72:da:86:20:f4:c7: 39:7d:9e:f8:b6:3a:9d:04:89:06:b6:18:53:fc:d1: fa:45:44:04:06:44:65:22:2d:64:18:a9:51:a8:f8: b4:e8:d8:29:68:4f:e7:58:84:97:ed:44:13:ce:51: a7:2b:5e:f8:57:3d:fa:32:09:28:d3:3f:09:01:1a: c5:3a:86:2b:8c:4c:ed:05:27:2b:fc:e5:4e:c8:be: 37:d2:ef:07:71:73:7d:eb:45:74:7a:e4:b7:c9:4d: 0c:9b:15:61:83:7c:53:f7:9b:b5:4c:38:e4:9d:9c: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C1:45:35:EB:78:B4:69:9F:B8:D1:CC:CC:24:A9:D5:58:7D:75:B8 X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4c:0e:23:c1:46:fb:c5:27:03:a1:96:23:d4:28:aa:6a:52: ef:99:a7:51:6e:80:a6:2f:07:9a:5a:cf:b4:3d:69:61:8d:aa: 43:d2:21:d2:3f:85:df:2e:22:03:ff:1a:7f:1a:49:c1:c2:34: 71:40:e2:69:63:5f:3e:99:cd:1a:d4:17:71:29:4c:99:e2:06: 9c:09:b9:7f:11:fb:29:8b:d6:d7:b0:da:89:06:ce:37:1a:2c: 22:10:a0:6a:ba:40:36:18:fa:43:54:79:bd:a1:a7:23:67:34: 14:b3:66:59:d9:87:42:19:03:9c:f0:b1:17:4a:d7:d3:15:41: bf:92:9a:af:82:43:5a:e7:fa:a2:e3:6a:3c:8e:07:70:53:3e: 2b:f0:e5:27:e6:62:b0:2a:cc:50:2b:90:37:36:d8:d8:cc:8e: 05:72:25:f1:46:62:3b:5f:9e:f4:59:e4:ec:34:eb:2a:16:e1: 18:da:03:0d:1f:ff:f1:89:80:0c:95:88:13:13:2e:1c:b8:90: 9b:19:38:15:ad:05:ed:18:e8:5e:5d:45:0e:a3:8c:a3:3c:77: ee:63:f9:4e:e2:9d:48:a7:14:09:68:a4:31:00:da:c9:7a:1d: f0:be:c5:f1:b3:3a:1e:a3:a3:9f:d0:68:27:9a:7c:4b:ef:a0: b2:3a:01:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzhDQzExMC8GA1UEBRMoQ0JDMEFEMTk2NTg1MTY0MUY2NjExMUU4RTI5MDI2OThB OUI5RUQ4MDAeFw0yNDA1MTUwODM5NDVaFw0yNDA1MjIwODM5NDVaMBgxFjAUBgNV BAMTDTY2NDQ3NGQyLWI5YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu/4U29Jq6+Zn8/yGE6g0FqHlvnuMRbjYcK9NF4ZaAGklViLUJjWz90lkAeZmU 2PwerDoZf6nPB4L4srRLkNta3SeE9miC0wgnEfIDbsWvP/zd5K2I3A6CHQDm1JeJ b5hR47bZ4a3pEP9bE4nn2CxLfjAtLFug2wqvDyI8E2XXzfoW4OuMlRP8WzDgsfcE tXLahiD0xzl9nvi2Op0EiQa2GFP80fpFRAQGRGUiLWQYqVGo+LTo2CloT+dYhJft RBPOUacrXvhXPfoyCSjTPwkBGsU6hiuMTO0FJyv85U7IvjfS7wdxc33rRXR65LfJ TQybFWGDfFP3m7VMOOSdnLyZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ8FFNet4 tGmfuNHMzCSp1Vh9dbgwHwYDVR0jBBgwFoAUy8CtGWWFFkH2YRHo4pAmmKm57YAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzOENDLzNBQzU3QzhDRDVF NTExRUVCNzc5MjIzRUM0RjlBRTAyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveThDdEdXV0ZGa0gyWVJIbzRwQW1tS201N1lBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz OENDLzNBQzU3QzhDRDVFNTExRUVCNzc5MjIzRUM0RjlBRTAyL3k4Q3RHV1dGRmtI MllSSG80cEFtbUttNTdZQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5MDiPBRvvFJwOhliPUKKpqUu+Zp1FugKYvB5paz7Q9aWGNqkPSIdI/ hd8uIgP/Gn8aScHCNHFA4mljXz6ZzRrUF3EpTJniBpwJuX8R+ymL1tew2okGzjca LCIQoGq6QDYY+kNUeb2hpyNnNBSzZlnZh0IZA5zwsRdK19MVQb+Smq+CQ1rn+qLj ajyOB3BTPivw5SfmYrAqzFArkDc22NjMjgVyJfFGYjtfnvRZ5Ow06yoW4RjaAw0f //GJgAyViBMTLhy4kJsZOBWtBe0Y6F5dRQ6jjKM8d+5j+U7inUinFAlopDEA2sl6 HfC+xfGzOh6jo5/QaCeafEvvoLI6AYE= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org