$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/ypYLZSt4Zwr6PgknwoSZifn5VM4.mft File: ypYLZSt4Zwr6PgknwoSZifn5VM4.mft (raw, json) Hash identifier: QDP5oM9zI0B6Nw4r1lV+3rnactWGwGRkpk/oabdMox4= Subject key identifier: 14:C1:EC:C6:DA:4E:75:43:4E:E1:55:88:4B:63:69:3D:6C:AA:DB:56 Authority key identifier: CA:96:0B:65:2B:78:67:0A:FA:3E:09:27:C2:84:99:89:F9:F9:54:CE Certificate issuer: /CN=A91C4D7C/serialNumber=CA960B652B78670AFA3E0927C2849989F9F954CE Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypYLZSt4Zwr6PgknwoSZifn5VM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/ypYLZSt4Zwr6PgknwoSZifn5VM4.mft Manifest number: 022F Signing time: Sun 05 May 2024 04:10:44 +0000 Manifest this update: Sun 05 May 2024 04:10:43 +0000 Manifest next update: Sun 12 May 2024 04:10:43 +0000 Files and hashes: 1: ypYLZSt4Zwr6PgknwoSZifn5VM4.crl (hash: XcIFPsmwHeEWNJGo2eku7aSAgrTg1NJomJxgZxFW+78=) 2: 38D281C4EE3B11EC8EE6DA63C4F9AE02.roa (hash: /u0Kxf9z2tsor7smJOehenO1ry6Xed7uZ3J+GBC/RjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/ypYLZSt4Zwr6PgknwoSZifn5VM4.crl rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/ypYLZSt4Zwr6PgknwoSZifn5VM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypYLZSt4Zwr6PgknwoSZifn5VM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D7C/serialNumber=CA960B652B78670AFA3E0927C2849989F9F954CE Validity Not Before: May 5 04:10:43 2024 GMT Not After : May 12 04:10:43 2024 GMT Subject: CN=663706c4-6a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:46:51:c8:8e:21:5c:a1:9c:f8:7e:c1:a1: ce:54:74:43:4f:1d:6c:89:13:7e:3e:86:62:ca:74: 8d:8b:c9:97:ec:35:ec:51:87:20:4b:5e:fa:0a:6a: 0f:90:4e:6e:d6:d0:39:a6:7f:cc:ff:c0:9f:13:1a: c3:7e:33:09:be:4e:7c:05:9c:c5:1e:23:bb:49:f5: 37:73:2a:90:f1:d5:8e:2b:52:09:0a:25:34:7d:96: f2:a0:50:3b:2a:45:c7:07:b2:58:e2:13:39:7a:5c: 26:95:12:c8:39:97:09:ed:52:cf:29:46:54:ac:4f: 12:9c:6f:a0:e2:65:23:98:62:3d:7a:8b:c9:aa:14: f9:09:b3:f8:c1:10:5a:ff:3e:35:8c:a4:7e:b4:84: 3c:65:b7:c2:51:f4:9e:68:2f:d8:5a:32:b4:63:6b: 22:df:a5:d7:46:cb:e1:05:4e:3d:9e:2b:e4:97:fe: df:03:a4:83:95:84:e7:6a:43:0e:d8:d3:7c:65:23: 27:23:60:55:cb:78:ec:46:eb:c2:c5:95:d5:a5:d6: 4c:86:f6:66:a0:61:90:fc:8e:81:fc:2a:af:91:79: a0:3e:af:f2:01:29:92:fa:1a:d8:9e:b6:11:e7:b4: 48:da:83:2e:5f:5c:4e:6a:16:83:b8:9b:74:c1:50: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C1:EC:C6:DA:4E:75:43:4E:E1:55:88:4B:63:69:3D:6C:AA:DB:56 X509v3 Authority Key Identifier: keyid:CA:96:0B:65:2B:78:67:0A:FA:3E:09:27:C2:84:99:89:F9:F9:54:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/ypYLZSt4Zwr6PgknwoSZifn5VM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypYLZSt4Zwr6PgknwoSZifn5VM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/ypYLZSt4Zwr6PgknwoSZifn5VM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:54:58:e1:0e:72:4f:c5:84:42:c2:8d:81:78:5d:77:c6:63: 37:ab:7d:59:cc:43:22:77:b1:4b:58:e9:36:61:74:09:21:ad: ca:22:a6:9b:ff:5c:d0:f3:db:51:6a:cd:a8:a2:89:cb:56:fb: 45:c7:1c:e5:35:de:16:6b:66:a2:ea:67:84:12:fd:d1:92:c3: 71:14:98:9e:07:10:3a:bb:b1:b5:4c:d7:3c:09:e3:fc:35:3c: a2:6d:ad:c7:76:23:9d:24:5e:6b:85:cf:48:f3:1f:91:85:78: 23:f9:68:6a:04:aa:4a:87:1d:26:b6:7e:f0:ff:59:fb:22:e1: df:02:bd:07:e4:60:2b:e1:9f:07:5b:cb:9e:c0:bd:2f:f5:b4: 04:04:cd:a1:e7:28:45:5e:da:9e:07:b9:a4:71:ce:40:c9:85: 2d:b8:67:5e:4b:05:2d:f6:a2:41:4f:fc:a3:cf:c5:14:86:5e: 3b:3f:50:5e:38:04:12:c5:91:e3:27:3f:e6:03:f9:d9:ea:2a: 52:ab:92:0c:75:58:e9:7a:ea:06:6e:3a:ce:4f:08:6c:ca:b4: 2d:89:f4:d1:bd:14:78:f0:87:ad:0a:26:e7:2f:d9:de:cf:17: 4f:b4:02:e3:9f:a4:47:34:37:91:1c:17:fd:aa:fd:86:bc:29: 94:a0:17:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREN0MxMTAvBgNVBAUTKENBOTYwQjY1MkI3ODY3MEFGQTNFMDkyN0MyODQ5OTg5 RjlGOTU0Q0UwHhcNMjQwNTA1MDQxMDQzWhcNMjQwNTEyMDQxMDQzWjAYMRYwFAYD VQQDEw02NjM3MDZjNC02YTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvidGUciOIVyhnPh+waHOVHRDTx1siRN+PoZiynSNi8mX7DXsUYcgS176CmoP kE5u1tA5pn/M/8CfExrDfjMJvk58BZzFHiO7SfU3cyqQ8dWOK1IJCiU0fZbyoFA7 KkXHB7JY4hM5elwmlRLIOZcJ7VLPKUZUrE8SnG+g4mUjmGI9eovJqhT5CbP4wRBa /z41jKR+tIQ8ZbfCUfSeaC/YWjK0Y2si36XXRsvhBU49nivkl/7fA6SDlYTnakMO 2NN8ZSMnI2BVy3jsRuvCxZXVpdZMhvZmoGGQ/I6B/CqvkXmgPq/yASmS+hrYnrYR 57RI2oMuX1xOahaDuJt0wVDk4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTB7Mba TnVDTuFViEtjaT1sqttWMB8GA1UdIwQYMBaAFMqWC2UreGcK+j4JJ8KEmYn5+VTO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ3Qy80Q0Y2NUE4NkRF M0MxMUVDOTU0RUNBNTlDNEY5QUUwMi95cFlMWlN0NFp3cjZQZ2tud29TWmlmbjVW TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwWUxaU3Q0WndyNlBna253b1NaaWZuNVZNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ3Qy80Q0Y2NUE4NkRFM0MxMUVDOTU0RUNBNTlDNEY5QUUwMi95cFlMWlN0NFp3 cjZQZ2tud29TWmlmbjVWTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQVFjhDnJPxYRCwo2BeF13xmM3q31ZzEMid7FLWOk2YXQJIa3KIqab /1zQ89tRas2ooonLVvtFxxzlNd4Wa2ai6meEEv3RksNxFJieBxA6u7G1TNc8CeP8 NTyiba3HdiOdJF5rhc9I8x+RhXgj+WhqBKpKhx0mtn7w/1n7IuHfAr0H5GAr4Z8H W8uewL0v9bQEBM2h5yhFXtqeB7mkcc5AyYUtuGdeSwUt9qJBT/yjz8UUhl47P1Be OAQSxZHjJz/mA/nZ6ipSq5IMdVjpeuoGbjrOTwhsyrQtifTRvRR48IetCibnL9ne zxdPtALjn6RHNDeRHBf9qv2GvCmUoBfn -----END CERTIFICATE-----Generated at Sun May 5 05:21:59 2024 by rpki-client on console-fra.rpki-client.org