$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: WSFTvagUQ/WprQuMIcH8RWU/DviOTmE3/++rYzKfAqs= Subject key identifier: 44:C9:D3:C4:BD:69:54:3D:1E:70:2E:BC:26:AD:9B:BA:63:A9:05:75 Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 10B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 1097 Signing time: Sun 02 Jun 2024 18:10:01 +0000 Manifest this update: Sun 02 Jun 2024 18:10:01 +0000 Manifest next update: Sun 09 Jun 2024 18:10:01 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: LgGfzAMR6uPdPnBYH/yutsaZPOWEYZwmAQyLy/03Qpk=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: rTWaJgfUR2psrR21EoeQJLvTRHKPQ1rPuxcUE6JcH+w=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: pWdQ4IizlHGhv4v0y1WN27GZONYdZqMGn3TElsSXsH0=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: 1my6sk8i/eIg+uc24KGSX0gIG59c3eLvlY9ysVKnZDo=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: bi7pcquqE9i+ZucJjCTDHDy2TZt+JYWlYj8B4ZHd21Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4279 (0x10b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Jun 2 18:10:01 2024 GMT Not After : Jun 9 18:10:01 2024 GMT Subject: CN=665cb579-3fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:38:2e:b2:3b:bb:06:5f:2a:74:8e:c9:a0: 6d:b2:96:1d:2f:2b:15:88:c1:33:73:15:23:bd:b9: 39:2b:f9:20:4b:99:f6:37:fe:1c:b8:b4:4d:a0:b2: 39:a7:03:f1:df:98:13:f0:0c:73:96:d3:6b:23:16: 4f:8a:57:03:f3:58:df:96:da:0b:d1:a6:52:99:99: e7:0a:c0:9e:c2:55:87:49:42:ce:8b:01:a1:41:a7: 2c:92:51:d1:7d:fc:fc:41:1c:2d:2f:f9:ca:88:be: 2f:40:b5:14:5a:8e:2f:18:a0:d1:d5:cf:3d:e0:d8: a5:42:13:99:73:44:81:ec:e0:d9:8b:c4:b4:dd:63: ed:6b:b1:55:b4:69:aa:e8:53:38:e0:33:7b:46:15: 41:bd:bb:ed:d8:52:22:fc:5d:c4:9d:f8:e9:ad:3f: d8:c6:21:ba:5f:5c:51:cd:a8:bf:2a:16:10:c9:c8: 97:a4:23:00:a4:bb:b4:d9:33:c7:a3:1e:5a:60:23: 1d:30:1c:39:39:3f:ad:6f:3e:cc:14:19:ba:91:64: 0b:32:30:cc:a3:40:b6:f7:90:2e:8b:b2:0d:51:4a: a3:3e:58:f9:fc:5e:81:19:1a:3b:f8:50:77:5a:80: 79:ab:76:77:6b:45:80:1e:bd:81:bf:ab:16:23:8f: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C9:D3:C4:BD:69:54:3D:1E:70:2E:BC:26:AD:9B:BA:63:A9:05:75 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f3:7a:15:54:9f:c0:e6:39:5e:65:92:8f:d1:cf:18:2c:be: 73:f2:a6:5b:98:28:ba:d9:32:78:7a:5f:8b:9e:b0:b5:e5:9f: 33:e4:8c:ad:b6:eb:fc:c4:25:08:1e:9d:04:53:05:0c:be:c4: 69:0b:e5:9d:1c:c4:1a:9b:dd:0e:ca:7f:0e:ed:06:2b:4d:ff: a8:e7:07:26:ac:d3:1e:89:c9:6d:4a:c6:15:a2:8c:91:0a:de: 1f:a7:e7:17:fe:b4:54:97:43:d2:7c:97:a7:38:b8:fc:c2:54: c8:5b:b7:f9:f1:cf:29:59:12:e7:60:16:21:b1:dc:06:61:58: 00:84:34:86:b6:51:7d:72:c7:80:22:3e:63:3e:97:76:e1:40: 82:a2:fb:91:15:05:cd:92:0b:62:8e:81:ea:5a:9c:36:d8:b1: 1a:dd:f1:1c:78:ae:5d:5d:ca:0c:1d:3a:ac:a0:cc:47:d9:09: 69:fe:7c:8f:a0:a5:9d:dd:aa:03:44:66:7f:58:b1:b6:e9:7d: e1:97:c1:68:cd:76:84:3a:d6:ef:42:27:60:9c:fe:08:4e:2b: b9:a0:bb:33:bc:b8:c6:5c:eb:a5:5f:07:17:db:f0:a3:37:1b: 25:cb:0d:7d:e9:02:6a:13:31:32:29:c3:1e:5a:00:2f:d3:1f: 7a:39:61:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjQwNjAyMTgxMDAxWhcNMjQwNjA5MTgxMDAxWjAYMRYwFAYD VQQDEw02NjVjYjU3OS0zZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujE4LrI7uwZfKnSOyaBtspYdLysViMEzcxUjvbk5K/kgS5n2N/4cuLRNoLI5 pwPx35gT8AxzltNrIxZPilcD81jfltoL0aZSmZnnCsCewlWHSULOiwGhQacsklHR ffz8QRwtL/nKiL4vQLUUWo4vGKDR1c894NilQhOZc0SB7ODZi8S03WPta7FVtGmq 6FM44DN7RhVBvbvt2FIi/F3EnfjprT/YxiG6X1xRzai/KhYQyciXpCMApLu02TPH ox5aYCMdMBw5OT+tbz7MFBm6kWQLMjDMo0C295Aui7INUUqjPlj5/F6BGRo7+FB3 WoB5q3Z3a0WAHr2Bv6sWI48eNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETJ08S9 aVQ9HnAuvCatm7pjqQV1MB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB383oVVJ/A5jleZZKP0c8YLL5z8qZbmCi62TJ4el+LnrC15Z8z5Iyt tuv8xCUIHp0EUwUMvsRpC+WdHMQam90Oyn8O7QYrTf+o5wcmrNMeicltSsYVooyR Ct4fp+cX/rRUl0PSfJenOLj8wlTIW7f58c8pWRLnYBYhsdwGYVgAhDSGtlF9cseA Ij5jPpd24UCCovuRFQXNkgtijoHqWpw22LEa3fEceK5dXcoMHTqsoMxH2Qlp/nyP oKWd3aoDRGZ/WLG26X3hl8FozXaEOtbvQidgnP4ITiu5oLszvLjGXOulXwcX2/Cj Nxslyw196QJqEzEyKcMeWgAv0x96OWHW -----END CERTIFICATE-----Generated at Sun Jun 2 18:40:08 2024 by rpki-client on console-fra.rpki-client.org