$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft File: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json) Hash identifier: RzrLAbYjT2Fu0ojOlyBC2DyebCveRbuOQ/nqOrBCrxk= Subject key identifier: 60:85:37:22:C1:B7:25:83:E5:A8:95:62:7A:20:EB:86:D8:47:2B:C2 Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft Manifest number: 0212 Signing time: Fri 03 May 2024 04:12:59 +0000 Manifest this update: Fri 03 May 2024 04:12:58 +0000 Manifest next update: Fri 10 May 2024 04:12:58 +0000 Files and hashes: 1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: tBZ4AE3naCEkwyBHFdhmcbCMpkcSjY4IDLrIcqwdtl0=) 2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: lvng27DiFzCyVc2i5zmfqJi0iNnFNWM7WkBlCvqiKg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: May 3 04:12:58 2024 GMT Not After : May 10 04:12:58 2024 GMT Subject: CN=6634644b-9da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:f7:c5:ef:5c:b4:b7:02:82:16:14:c8:29: ce:68:70:aa:fa:77:72:f4:23:1f:3e:49:da:be:b0: 3d:eb:eb:96:a7:db:62:8c:59:29:42:71:0e:d9:cd: 3f:ee:da:18:40:58:a9:46:5d:7b:09:4b:6e:f2:ae: d6:c4:49:de:2f:3d:4a:19:e5:be:a6:4e:25:e3:21: 39:86:cd:40:c6:9a:87:98:cf:4d:14:4e:52:f4:21: f5:36:89:be:19:03:0c:82:c4:5d:5d:f9:2e:08:f3: e8:e8:22:e2:9c:a8:f6:d2:22:bb:83:14:6c:3f:c1: 91:1a:4d:d6:8c:7c:b6:41:9e:8d:9c:4d:00:5e:e9: ec:d2:5b:e9:2f:6d:29:20:50:22:29:04:74:c7:cf: 4b:84:7a:bb:6e:c0:e8:2f:01:4f:61:34:c4:23:66: 10:52:d3:ff:ce:18:b4:3e:a4:31:09:13:03:30:74: 7b:f8:ac:83:0c:bc:4b:ca:db:7f:1c:d4:ed:5f:21: 12:cd:af:85:ad:77:8a:8e:20:28:c1:60:db:2a:91: 72:cd:b1:9f:78:dd:6b:67:78:fd:95:9a:c4:76:6f: 63:a0:b0:3d:bd:e3:98:79:ec:cf:93:31:21:1a:42: e0:05:01:30:e6:7c:54:c2:9e:0d:3a:00:e9:5b:6e: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:85:37:22:C1:B7:25:83:E5:A8:95:62:7A:20:EB:86:D8:47:2B:C2 X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e9:84:50:a0:5f:7d:04:d4:04:82:09:3a:f3:5d:bb:e7:d7: 8e:0a:e4:5a:2d:8a:ed:1c:6a:e6:43:2c:cf:f6:70:38:48:6c: 36:6c:6d:43:90:32:22:29:e1:5a:e2:b6:95:97:bb:de:af:3c: f4:6f:07:34:9e:6e:9a:4f:b4:f2:89:ab:e1:73:da:c4:eb:b9: e8:e0:00:d2:e2:42:6d:d5:7a:2e:48:8a:59:01:05:40:14:0f: 47:32:f1:b6:c9:b6:17:ad:b5:43:90:02:e9:93:ce:42:50:af: 79:59:65:f7:d0:6b:e1:2a:4e:e3:db:9f:4b:5a:c9:c7:92:d1: 4a:00:6b:c0:be:ab:e7:f9:78:74:c5:a6:34:12:52:62:16:11: ef:fc:c0:87:c1:1c:23:ff:bd:70:ee:c7:c3:47:ae:86:69:30: 2c:c2:d6:4c:18:65:22:de:fa:ce:ce:79:7e:75:99:9b:c0:88: 65:00:3d:c7:31:df:b1:c0:f4:e7:50:8d:51:bb:d8:d7:13:8d: b1:ac:88:1b:03:6a:e5:a5:a0:71:00:49:e3:ec:58:af:58:cc: 1b:36:f0:42:89:ff:41:05:03:92:67:04:e6:52:84:0e:09:61: 27:cb:7c:06:47:7d:d3:73:f8:29:ad:13:01:95:c9:dd:31:3e: 57:bd:5f:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjQwNTAzMDQxMjU4WhcNMjQwNTEwMDQxMjU4WjAYMRYwFAYD VQQDEw02NjM0NjQ0Yi05ZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytD3xe9ctLcCghYUyCnOaHCq+ndy9CMfPknavrA96+uWp9tijFkpQnEO2c0/ 7toYQFipRl17CUtu8q7WxEneLz1KGeW+pk4l4yE5hs1AxpqHmM9NFE5S9CH1Nom+ GQMMgsRdXfkuCPPo6CLinKj20iK7gxRsP8GRGk3WjHy2QZ6NnE0AXuns0lvpL20p IFAiKQR0x89LhHq7bsDoLwFPYTTEI2YQUtP/zhi0PqQxCRMDMHR7+KyDDLxLytt/ HNTtXyESza+FrXeKjiAowWDbKpFyzbGfeN1rZ3j9lZrEdm9joLA9veOYeezPkzEh GkLgBQEw5nxUwp4NOgDpW24EXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCFNyLB tyWD5aiVYnog64bYRyvCMB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2Ri8xMkYzMDIxMkU3MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUow RTRaYWtzdUpMZjBueXFuM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb6YRQoF99BNQEggk6812759eOCuRaLYrtHGrmQyzP9nA4SGw2bG1D kDIiKeFa4raVl7verzz0bwc0nm6aT7Tyiavhc9rE67no4ADS4kJt1XouSIpZAQVA FA9HMvG2ybYXrbVDkALpk85CUK95WWX30GvhKk7j259LWsnHktFKAGvAvqvn+Xh0 xaY0ElJiFhHv/MCHwRwj/71w7sfDR66GaTAswtZMGGUi3vrOznl+dZmbwIhlAD3H Md+xwPTnUI1Ru9jXE42xrIgbA2rlpaBxAEnj7FivWMwbNvBCif9BBQOSZwTmUoQO CWEny3wGR33Tc/gprRMBlcndMT5XvV8Y -----END CERTIFICATE-----Generated at Fri May 3 06:29:23 2024 by rpki-client on console-fra.rpki-client.org