$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft File: y0yV-DniHR3g9FhVPZpM4o5BTYg.mft (raw, json) Hash identifier: 4AswHJriZ0Oq/6pUbaLvt3iA7afcBT8bNY8nKxwQFjs= Subject key identifier: FE:74:57:74:F2:F7:67:06:C3:E9:62:C9:48:95:79:7B:9B:3A:4B:A9 Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft Manifest number: 0804 Signing time: Fri 26 Apr 2024 21:54:51 +0000 Manifest this update: Fri 26 Apr 2024 21:54:50 +0000 Manifest next update: Fri 03 May 2024 21:54:50 +0000 Files and hashes: 1: y0yV-DniHR3g9FhVPZpM4o5BTYg.crl (hash: uC8NSIl9a4G0m0t6HyT1CYCzPnABkiiFjJxFBVzAMNQ=) 2: 9768CAB2550211EDA744F948C4F9AE02.roa (hash: +c7JrobNieG+ZMgvcidemgeezLPPKCFpg7+084o7JoA=) 3: 8CE5EE808E1A11EC96B4970AC4F9AE02.roa (hash: EZBagVr/hD3KJ6ELkAAEEOXAeLi6XW6fcfcVyYg3wjQ=) 4: 8C3B232E8E1A11EC96B4970AC4F9AE02.roa (hash: 8QLJCSW7Dx5LXrLw450pRNDRNzSQEQRY9thpGou2vRw=) 5: F407F0D49B8C11EC98C88432C4F9AE02.roa (hash: S/k+u3wzST4BAkpqg+O7+3Um9PXES4RfHWYozst9ucQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Validity Not Before: Apr 26 21:54:50 2024 GMT Not After : May 3 21:54:50 2024 GMT Subject: CN=662c22aa-5e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:87:7f:a0:10:0d:77:20:82:92:17:22:57:6f: 48:39:b2:8a:41:d9:40:96:58:b2:79:de:61:d5:a9: f3:78:ec:78:bf:b5:62:1b:34:bf:a0:d8:c1:cd:27: 55:71:b2:e8:91:8c:f4:00:e5:b6:0e:f0:09:07:a0: 87:09:d9:71:07:4a:a4:ad:52:c8:39:ab:e7:13:aa: 34:67:9a:be:fc:91:f3:10:f6:0f:c8:0f:20:ae:8b: 9b:6a:45:11:99:29:12:49:5b:9a:67:5d:45:c5:68: 38:19:0b:50:ca:9d:5a:89:e3:f1:0b:07:32:84:68: 6f:b8:c9:2c:48:4c:9c:9f:13:03:71:4b:19:47:50: 88:33:41:43:8b:0b:cb:c1:a6:32:cb:73:3e:75:3c: 6e:aa:85:73:4e:d5:2e:29:23:54:c2:fe:84:5b:1d: 65:d9:33:23:7d:22:fe:ec:47:cd:f8:c7:65:67:16: 70:84:ae:85:79:8e:37:96:be:fb:07:80:f4:5f:5c: b7:28:cf:6e:bb:67:6e:28:fa:55:85:75:35:99:d1: 7d:c1:2d:be:2b:48:7c:9b:a4:ed:8e:45:b4:30:ec: 8e:49:bc:45:4b:9f:15:4e:37:86:8b:7f:96:93:de: cf:17:2f:8f:a9:21:e2:88:fd:ea:35:6d:8c:57:4c: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:57:74:F2:F7:67:06:C3:E9:62:C9:48:95:79:7B:9B:3A:4B:A9 X509v3 Authority Key Identifier: keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:13:7a:1e:74:c3:36:ec:10:c7:a8:7a:e3:aa:0c:10:6e:d8: 3f:0b:97:52:94:a4:12:d1:2f:f3:de:bf:8e:62:cf:a2:41:1f: b2:87:f3:58:2c:24:17:c6:a3:5c:6d:cc:eb:56:59:21:47:7f: 30:64:bf:2d:91:e0:e4:27:1d:df:01:5c:a8:9e:be:50:65:84: 2b:7b:d4:b1:49:69:75:6b:d6:1e:ce:6e:45:6d:7a:c2:7a:be: f7:1f:70:ba:8a:92:a7:a5:0a:4a:42:6c:78:52:d4:9a:eb:7f: 69:0e:c1:5d:f9:3f:4a:f3:92:5b:0e:2a:dc:27:da:84:50:f4: a0:9a:20:64:5e:0e:a3:d6:c7:de:1b:4f:5c:ff:ce:11:3e:76: f5:ff:31:f4:df:fb:c1:63:7d:b9:f1:8e:0e:af:80:95:a8:c6: 05:e2:27:e7:d9:de:10:04:5d:cb:1e:9e:53:8b:b9:9c:7e:6f: 72:11:2d:cf:a2:3e:a9:bf:92:93:68:02:fe:94:9d:34:9e:15: a5:e4:24:26:5e:73:dc:59:60:88:49:3f:f3:75:54:d0:64:5a: 20:50:d0:82:c5:39:01:90:7e:d8:fb:59:e5:c5:14:48:79:c7: a2:fd:1d:5e:b1:41:d6:2a:c2:68:f0:96:5f:4d:ff:66:03:dd: 94:03:78:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy OEU0MTREODgwHhcNMjQwNDI2MjE1NDUwWhcNMjQwNTAzMjE1NDUwWjAYMRYwFAYD VQQDEw02NjJjMjJhYS01ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA84d/oBANdyCCkhciV29IObKKQdlAlliyed5h1anzeOx4v7ViGzS/oNjBzSdV cbLokYz0AOW2DvAJB6CHCdlxB0qkrVLIOavnE6o0Z5q+/JHzEPYPyA8groubakUR mSkSSVuaZ11FxWg4GQtQyp1aiePxCwcyhGhvuMksSEycnxMDcUsZR1CIM0FDiwvL waYyy3M+dTxuqoVzTtUuKSNUwv6EWx1l2TMjfSL+7EfN+MdlZxZwhK6FeY43lr77 B4D0X1y3KM9uu2duKPpVhXU1mdF9wS2+K0h8m6TtjkW0MOyOSbxFS58VTjeGi3+W k97PFy+PqSHiiP3qNW2MV0xMvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP50V3Ty 92cGw+liyUiVeXubOkupMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1 MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDUwMi80MEUyREZDQ0I1MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhS M2c5RmhWUFpwTTRvNUJUWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKE3oedMM27BDHqHrjqgwQbtg/C5dSlKQS0S/z3r+OYs+iQR+yh/NY LCQXxqNcbczrVlkhR38wZL8tkeDkJx3fAVyonr5QZYQre9SxSWl1a9Yezm5FbXrC er73H3C6ipKnpQpKQmx4UtSa639pDsFd+T9K85JbDircJ9qEUPSgmiBkXg6j1sfe G09c/84RPnb1/zH03/vBY3258Y4Or4CVqMYF4ifn2d4QBF3LHp5Ti7mcfm9yES3P oj6pv5KTaAL+lJ00nhWl5CQmXnPcWWCIST/zdVTQZFogUNCCxTkBkH7Y+1nlxRRI ecei/R1esUHWKsJo8JZfTf9mA92UA3hn -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:26 2024 by rpki-client on console-ams.rpki-client.org