$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft File: yC1GI7edxaBABywRKhur60QWBBw.mft (raw, json) Hash identifier: 1NpYv32Xkl6EGT7e3g43vJ2+14wSbiXFpPUWTbawLIc= Subject key identifier: 02:D3:7B:84:02:3A:4D:3F:46:2F:54:71:F4:19:37:64:42:C7:16:DA Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C Certificate issuer: /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft Manifest number: 04BC Signing time: Wed 01 May 2024 01:43:58 +0000 Manifest this update: Wed 01 May 2024 01:43:58 +0000 Manifest next update: Wed 08 May 2024 01:43:58 +0000 Files and hashes: 1: yC1GI7edxaBABywRKhur60QWBBw.crl (hash: nxHll9BWiAJmO/8SVrW70x+7ZJxGqDohtkOs/gSoRwY=) 2: 469C2676D76111EB97EB721DC4F9AE02.roa (hash: 7d5HceNo+BwC7Q7PU6+bWZvk1yROvAMjbz2juLPUG4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C Validity Not Before: May 1 01:43:58 2024 GMT Not After : May 8 01:43:58 2024 GMT Subject: CN=66319e5e-8337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:06:88:2a:66:d7:32:a1:87:00:38:f8:3e: a3:44:32:e0:1f:9c:28:e0:47:45:46:86:a6:6e:4c: e3:01:48:1b:45:43:9b:93:fd:ca:6d:be:ce:2e:f0: 0e:1f:71:2d:24:c5:39:e1:66:58:f9:95:de:18:7e: d1:7b:1d:3d:4c:18:5c:46:99:63:d7:9b:c9:96:6a: 7a:15:ca:0c:0b:a5:f9:ab:8f:32:d6:ec:b3:0b:f1: 97:e7:26:a6:fc:eb:46:d0:85:9a:e1:13:5b:c7:85: f7:ab:7a:36:f6:1f:c6:10:b6:04:58:26:8a:c4:41: 43:70:08:2e:2c:e3:2f:38:ea:6f:2c:24:de:7b:4e: b2:db:41:cf:d0:1f:64:3f:f6:d7:43:a9:83:b5:2b: f0:e8:4e:f8:27:4d:ea:6a:e7:8a:e9:80:bf:40:f0: 4e:02:91:12:84:67:da:8c:c1:76:90:e2:68:4f:dc: 90:45:8a:3c:5b:63:0c:db:f5:91:e0:2d:fc:b9:78: ce:9c:9e:b6:4b:69:f9:08:cc:12:31:c6:37:c5:79: d4:c7:9f:71:f3:a0:96:00:b2:ba:4f:ee:74:3d:4a: f4:d8:19:0f:42:1d:91:de:60:98:06:aa:ba:41:52: 85:59:2a:46:90:e5:45:e5:d8:8e:c7:dc:68:1d:03: 89:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D3:7B:84:02:3A:4D:3F:46:2F:54:71:F4:19:37:64:42:C7:16:DA X509v3 Authority Key Identifier: keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:37:e7:e2:83:2a:26:f9:80:f0:96:1a:83:07:82:c2:44:7d: 08:5b:12:b4:27:73:2d:22:2c:94:40:fb:c5:e5:2a:18:bf:4e: 66:03:ef:8b:42:0d:18:f8:5d:4b:38:3e:76:5e:3b:69:a7:c7: 1a:79:fb:0f:e2:89:07:d2:25:8b:2a:92:eb:7a:05:eb:2f:8c: 9a:da:60:1c:e8:b5:b6:a3:09:1b:19:43:3f:26:a5:6d:2a:7e: a2:c7:5b:46:c1:67:90:86:f5:75:35:b5:ba:43:55:a1:9a:d0: 1e:56:3f:f7:d7:fd:ef:d2:35:58:19:33:1c:be:c0:d2:fc:d5: bd:71:b5:06:70:e4:ce:a9:8b:6f:c6:2f:ae:73:e5:1d:28:bd: 1f:f3:17:48:cf:11:44:30:9b:46:16:a6:e1:9c:cc:e1:78:ed: 71:3e:59:c5:49:21:b8:b9:36:53:77:50:f7:6d:1c:2c:2f:28: 8b:35:1a:09:a5:84:47:96:d8:82:08:30:61:3e:6d:5f:f8:d0: db:17:28:74:d7:b7:8d:91:84:0b:f3:3d:ca:68:ca:dc:5e:fc: 46:a4:c2:cc:9a:3d:1a:f4:4e:eb:39:4c:8d:c2:ee:c6:c4:f1: 5f:28:d8:fd:42:b7:e9:d9:03:78:c9:12:5c:f7:a4:60:28:08: 87:cd:39:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwOEIxMTAvBgNVBAUTKEM4MkQ0NjIzQjc5REM1QTA0MDA3MkMxMTJBMUJBQkVC NDQxNjA0MUMwHhcNMjQwNTAxMDE0MzU4WhcNMjQwNTA4MDE0MzU4WjAYMRYwFAYD VQQDEw02NjMxOWU1ZS04MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ogGiCpm1zKhhwA4+D6jRDLgH5wo4EdFRoambkzjAUgbRUObk/3Kbb7OLvAO H3EtJMU54WZY+ZXeGH7Rex09TBhcRplj15vJlmp6FcoMC6X5q48y1uyzC/GX5yam /OtG0IWa4RNbx4X3q3o29h/GELYEWCaKxEFDcAguLOMvOOpvLCTee06y20HP0B9k P/bXQ6mDtSvw6E74J03qaueK6YC/QPBOApEShGfajMF2kOJoT9yQRYo8W2MM2/WR 4C38uXjOnJ62S2n5CMwSMcY3xXnUx59x86CWALK6T+50PUr02BkPQh2R3mCYBqq6 QVKFWSpGkOVF5diOx9xoHQOJ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALTe4QC Ok0/Ri9UcfQZN2RCxxbaMB8GA1UdIwQYMBaAFMgtRiO3ncWgQAcsESobq+tEFgQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA4Qi80OUU2MjcxNkQ3 NUYxMUVCOUJEMjRCMURDNEY5QUUwMi95QzFHSTdlZHhhQkFCeXdSS2h1cjYwUVdC QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDMUdJN2VkeGFCQUJ5d1JLaHVyNjBRV0JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA4Qi80OUU2MjcxNkQ3NUYxMUVCOUJEMjRCMURDNEY5QUUwMi95QzFHSTdlZHhh QkFCeXdSS2h1cjYwUVdCQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGN+figyom+YDwlhqDB4LCRH0IWxK0J3MtIiyUQPvF5SoYv05mA++L Qg0Y+F1LOD52Xjtpp8caefsP4okH0iWLKpLregXrL4ya2mAc6LW2owkbGUM/JqVt Kn6ix1tGwWeQhvV1NbW6Q1WhmtAeVj/31/3v0jVYGTMcvsDS/NW9cbUGcOTOqYtv xi+uc+UdKL0f8xdIzxFEMJtGFqbhnMzheO1xPlnFSSG4uTZTd1D3bRwsLyiLNRoJ pYRHltiCCDBhPm1f+NDbFyh017eNkYQL8z3KaMrcXvxGpMLMmj0a9E7rOUyNwu7G xPFfKNj9Qrfp2QN4yRJc96RgKAiHzTlL -----END CERTIFICATE-----Generated at Wed May 1 03:20:36 2024 by rpki-client on console-fra.rpki-client.org