$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json) Hash identifier: YWI1A9q0bDLJ8/vYp97WnQn5ZkuI2liluOBGsNV1j/Y= Subject key identifier: 8C:FB:CD:59:F5:39:D3:C3:6C:94:77:49:27:C8:13:31:67:D7:48:5B Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294 Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft Manifest number: 030F Signing time: Fri 03 May 2024 03:18:08 +0000 Manifest this update: Fri 03 May 2024 03:18:07 +0000 Manifest next update: Fri 10 May 2024 03:18:07 +0000 Files and hashes: 1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: bOZd2HpvjVcEVlKxcWRNcYZCOpLRJqXdMT9EUFPf52I=) 2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: pgkkSoYYGd0zeJkYrvYHKtpu3oTLlMHx7HhC5AG3Q+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294 Validity Not Before: May 3 03:18:07 2024 GMT Not After : May 10 03:18:07 2024 GMT Subject: CN=66345770-a6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:79:c9:06:f5:8a:c1:ad:af:24:86:78:ca: d3:59:5d:17:16:78:69:78:1e:ea:ae:74:90:ed:88: 17:9a:ad:58:88:b3:0b:27:fc:a2:14:9d:ca:f3:db: a4:91:e3:28:16:6d:ce:c5:83:1e:21:9b:4c:a7:1b: 85:8b:e2:49:8c:e5:f1:bb:c2:67:6c:1f:ed:27:db: 60:ed:6d:55:11:2d:76:49:1f:58:2b:2c:68:7c:c7: 45:1b:c4:0b:ea:b0:f0:22:5b:b1:35:ce:44:3d:1a: 8e:2e:20:95:12:41:f6:e4:6d:35:c7:22:0e:40:d3: 26:13:8b:c6:21:27:89:cc:d2:02:bb:44:5d:a7:ba: be:bf:1e:1c:b5:cc:ff:d3:6e:b4:af:37:c2:6b:01: 31:a4:35:38:53:da:c0:62:60:44:19:d4:b9:ca:cd: 70:31:9e:da:25:cf:3b:2e:e8:f8:dd:0a:52:35:51: 39:7a:f3:d9:97:46:a5:0d:25:da:86:e6:a2:b8:37: 12:e9:fe:49:46:e8:b5:a3:c9:0e:a2:2f:c7:7b:54: 67:7e:3a:8b:82:b2:2c:12:d9:83:a3:4f:95:95:54: 75:55:a2:cf:9d:38:88:17:e7:22:f4:ec:11:5f:04: c0:c1:3e:7b:b2:17:57:e5:31:30:cb:b4:8b:10:c8: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FB:CD:59:F5:39:D3:C3:6C:94:77:49:27:C8:13:31:67:D7:48:5B X509v3 Authority Key Identifier: keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:05:aa:a1:e6:85:e6:9c:d6:b7:e4:02:a7:2f:ca:5c:49:8b: 8f:6c:3a:86:64:57:03:93:16:ac:e4:87:28:0d:38:51:a9:d4: c7:d2:53:f5:ca:d6:a3:ba:12:52:16:ee:f6:ce:d5:fa:98:db: d8:c9:13:09:64:d6:60:3b:20:be:02:7b:47:f6:1e:41:b7:77: d0:c6:54:4e:bd:66:d5:ae:90:8c:69:e0:50:48:13:6e:1e:0e: 4d:12:cb:3c:ff:ee:75:5a:b0:cc:d7:9f:c7:d7:0f:02:44:63: 03:6d:7a:1d:90:83:c7:5c:6c:21:c6:62:55:8a:e3:a1:8d:89: 34:c7:8b:98:29:ee:10:02:ee:59:9f:33:01:ac:26:4c:43:28: fd:84:10:18:8a:a8:24:64:bd:94:6f:70:c7:56:a2:f8:ca:64: 1a:6b:18:61:9b:d7:d7:83:fb:41:88:94:44:3d:d7:a8:41:55: 68:b6:a1:33:cd:d0:2e:e4:fe:35:fe:97:a0:63:a8:0d:15:81: bb:16:1a:96:7a:81:23:fd:f0:70:ca:90:de:9b:c3:d3:f7:13: a4:c9:77:36:60:8e:8c:a7:66:85:0c:1f:a2:62:25:48:fd:2f: f1:a0:6e:99:34:bf:e7:c2:e3:0e:31:51:c6:64:75:a8:5d:a4: 1c:a4:cc:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMDgxMTAvBgNVBAUTKDYxNENDRDI0Rjc4NUU5Mjk5MjE1OTE2NDA4Mjk0MDQy RjE0NjMyOTQwHhcNMjQwNTAzMDMxODA3WhcNMjQwNTEwMDMxODA3WjAYMRYwFAYD VQQDEw02NjM0NTc3MC1hNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Qh5yQb1isGtrySGeMrTWV0XFnhpeB7qrnSQ7YgXmq1YiLMLJ/yiFJ3K89uk keMoFm3OxYMeIZtMpxuFi+JJjOXxu8JnbB/tJ9tg7W1VES12SR9YKyxofMdFG8QL 6rDwIluxNc5EPRqOLiCVEkH25G01xyIOQNMmE4vGISeJzNICu0Rdp7q+vx4ctcz/ 0260rzfCawExpDU4U9rAYmBEGdS5ys1wMZ7aJc87Luj43QpSNVE5evPZl0alDSXa huaiuDcS6f5JRui1o8kOoi/He1RnfjqLgrIsEtmDo0+VlVR1VaLPnTiIF+ci9OwR XwTAwT57shdX5TEwy7SLEMjWnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz7zVn1 OdPDbJR3SSfIEzFn10hbMB8GA1UdIwQYMBaAFGFMzST3hekpkhWRZAgpQELxRjKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIwOC8zNzU1M0E1Njg5 OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZTbVNGWkZrQ0NsQVF2RkdN cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZT bVNGWkZrQ0NsQVF2RkdNcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTBaqh5oXmnNa35AKnL8pcSYuPbDqGZFcDkxas5IcoDThRqdTH0lP1 ytajuhJSFu72ztX6mNvYyRMJZNZgOyC+AntH9h5Bt3fQxlROvWbVrpCMaeBQSBNu Hg5NEss8/+51WrDM15/H1w8CRGMDbXodkIPHXGwhxmJViuOhjYk0x4uYKe4QAu5Z nzMBrCZMQyj9hBAYiqgkZL2Ub3DHVqL4ymQaaxhhm9fXg/tBiJREPdeoQVVotqEz zdAu5P41/pegY6gNFYG7FhqWeoEj/fBwypDem8PT9xOkyXc2YI6Mp2aFDB+iYiVI /S/xoG6ZNL/nwuMOMVHGZHWoXaQcpMwm -----END CERTIFICATE-----Generated at Fri May 3 04:45:27 2024 by rpki-client on console-fra.rpki-client.org