$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: eC1hlc3Cdqz5/dGgQ6QJ+BFk0Ctq4dDQFwGaTEGVlqs= Subject key identifier: 60:79:CA:73:E1:9F:00:E4:EF:ED:80:90:04:75:0A:40:E8:25:61:9C Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 0251 Signing time: Sun 05 May 2024 04:03:37 +0000 Manifest this update: Sun 05 May 2024 04:03:36 +0000 Manifest next update: Sun 12 May 2024 04:03:36 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: t8qtbOHHfoWLCsdX8ec8J6IjBBGuUmjBgYSTC0f35EY=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: xmSC1I95NNr3jrbRQDh+kkda5BLaYr0RdDSNgUkCrGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: May 5 04:03:36 2024 GMT Not After : May 12 04:03:36 2024 GMT Subject: CN=66370519-c86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:6d:6e:2d:a4:38:93:51:b3:5b:04:90:ba: a5:ae:6b:33:43:92:d0:10:b2:d3:8c:99:7e:65:55: 3c:3d:3e:e9:30:55:f2:3e:10:65:71:45:3e:da:34: a6:26:97:34:78:8b:0b:38:6f:8f:6d:f3:6d:7f:8f: f3:d9:2a:72:57:5c:5b:68:78:3c:a6:74:02:af:0e: 30:5b:f7:ea:a7:99:cf:99:fd:a7:b9:a7:64:62:6e: 89:2c:ac:5f:e2:fd:ab:63:8d:cd:7d:37:d1:79:5f: ea:01:f9:cc:eb:b1:cb:95:c5:30:d5:e2:42:76:65: 1a:f7:83:35:97:64:30:50:31:da:46:10:70:12:a4: d9:f1:8f:e2:e6:9e:4c:55:c8:81:79:64:f2:19:3e: a1:41:ca:32:9a:d0:31:1e:91:db:05:d1:d1:1e:04: 5c:6f:e4:91:8d:7e:80:01:c0:13:59:63:14:5c:2b: 4e:39:6f:a2:85:7a:60:02:df:4a:e7:ba:70:6c:32: bd:40:f5:79:2b:67:8d:5d:47:a9:cd:2d:8a:c8:17: 86:7c:c0:c6:a9:50:7f:3c:1a:80:0f:7d:01:0c:62: 9f:b6:82:f8:1f:6f:ae:0a:42:3f:f5:00:f0:8b:7e: 7a:ac:ff:4b:0f:f8:7f:a2:17:27:d8:86:9b:51:c9: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:79:CA:73:E1:9F:00:E4:EF:ED:80:90:04:75:0A:40:E8:25:61:9C X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:76:bc:f4:9b:3b:f3:a2:56:99:a8:e5:93:07:27:9c:43:7a: 4a:d7:1f:33:49:2a:91:8d:b3:54:a2:cb:35:f9:f2:d0:bf:6f: 59:be:82:ef:e2:54:84:88:91:9c:da:9d:0a:b0:56:a0:75:26: 3c:6f:59:3c:d7:7d:32:8c:98:32:8d:21:9f:d9:25:fc:3b:f3: 99:c6:2a:73:19:0f:a9:c6:a5:e3:93:73:49:e2:76:ed:da:62: 2b:c7:85:2c:f6:11:93:6c:7e:91:28:42:dc:24:e5:00:86:8c: 94:15:bf:66:34:f1:95:16:64:77:6b:42:7b:1e:3f:3d:f4:80: 8f:6b:07:11:5a:38:53:cf:5a:7f:7c:7a:78:12:e1:40:da:8f: 07:f1:44:e7:95:6e:bc:ff:7e:b2:c3:b7:a5:30:2a:a0:34:93: aa:71:05:b0:40:a2:64:0f:c0:3b:ad:25:4f:1a:92:14:90:6e: c9:7d:a2:3d:06:bf:8a:be:4b:a3:1e:82:8e:00:ce:96:17:2a: d2:1a:52:0c:e6:51:80:13:6c:05:2f:59:d5:ef:87:f2:a5:7e: 35:85:d2:33:eb:94:de:40:2e:d3:47:af:10:b3:fd:7b:b6:35: 8d:ac:f9:8c:42:41:fd:f4:b9:f9:eb:e5:b0:d3:fb:69:db:07: dd:53:89:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjQwNTA1MDQwMzM2WhcNMjQwNTEyMDQwMzM2WjAYMRYwFAYD VQQDEw02NjM3MDUxOS1jODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwxtbi2kOJNRs1sEkLqlrmszQ5LQELLTjJl+ZVU8PT7pMFXyPhBlcUU+2jSm Jpc0eIsLOG+PbfNtf4/z2SpyV1xbaHg8pnQCrw4wW/fqp5nPmf2nuadkYm6JLKxf 4v2rY43NfTfReV/qAfnM67HLlcUw1eJCdmUa94M1l2QwUDHaRhBwEqTZ8Y/i5p5M VciBeWTyGT6hQcoymtAxHpHbBdHRHgRcb+SRjX6AAcATWWMUXCtOOW+ihXpgAt9K 57pwbDK9QPV5K2eNXUepzS2KyBeGfMDGqVB/PBqAD30BDGKftoL4H2+uCkI/9QDw i356rP9LD/h/ohcn2IabUcnxFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGB5ynPh nwDk7+2AkAR1CkDoJWGcMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOdrz0mzvzolaZqOWTByecQ3pK1x8zSSqRjbNUoss1+fLQv29ZvoLv 4lSEiJGc2p0KsFagdSY8b1k8130yjJgyjSGf2SX8O/OZxipzGQ+pxqXjk3NJ4nbt 2mIrx4Us9hGTbH6RKELcJOUAhoyUFb9mNPGVFmR3a0J7Hj899ICPawcRWjhTz1p/ fHp4EuFA2o8H8UTnlW68/36yw7elMCqgNJOqcQWwQKJkD8A7rSVPGpIUkG7JfaI9 Br+KvkujHoKOAM6WFyrSGlIM5lGAE2wFL1nV74fypX41hdIz65TeQC7TR68Qs/17 tjWNrPmMQkH99Ln56+Ww0/tp2wfdU4lg -----END CERTIFICATE-----Generated at Sun May 5 04:34:56 2024 by rpki-client on console-fra.rpki-client.org