$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json) Hash identifier: Aeh+h5BSNhO13XYFf+RG8MKJc8vCg0i1HszDYfqWDtY= Subject key identifier: 16:C1:40:78:E1:07:39:38:88:E9:09:50:6A:53:4E:6E:E8:DF:8E:99 Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 104C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft Manifest number: 1044 Signing time: Fri 26 Apr 2024 17:59:13 +0000 Manifest this update: Fri 26 Apr 2024 17:59:12 +0000 Manifest next update: Fri 03 May 2024 17:59:12 +0000 Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: 7SnBkuS1uKjybo69oHYZ7hw2Bt98rVH5mFoXPX5RdRA=) 2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: 7a0PKUrsjiXICmXcKLCJ7/JMlQiHDgfv1DZP+kP6w2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 17:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: Apr 26 17:59:12 2024 GMT Not After : May 3 17:59:12 2024 GMT Subject: CN=662beb70-2d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:49:06:91:bf:ac:e9:f7:37:f0:5b:6d:b1: 1d:bb:55:cd:1e:0f:16:54:b6:62:b5:30:b2:80:43: e6:50:4e:7c:0b:90:de:cc:9d:a8:ab:73:20:05:b2: 8c:5c:88:b1:2c:9f:e7:03:75:01:99:3d:8e:2b:4e: 2c:36:69:4f:0a:a7:d9:89:1c:18:30:3b:ec:fd:85: df:41:23:d6:c1:9f:0c:c2:1f:1c:9d:e3:70:8b:d1: f8:1e:c2:36:c2:40:36:05:a6:09:9a:a5:d8:2c:21: 33:0f:ef:71:f2:40:ed:cb:07:ee:5e:1e:38:d7:21: eb:84:3b:cb:f5:5b:03:6a:f0:be:30:12:46:12:d9: a8:c2:75:45:44:b5:a5:1f:29:d9:85:9e:d7:30:ea: 40:3a:28:e1:56:e6:6d:c1:95:1f:20:2b:3c:0f:d5: e9:38:45:cd:a5:91:db:1d:e2:2c:a5:a1:a5:38:2f: 1c:55:63:fe:31:4b:ed:62:e9:7b:38:ad:b5:ab:d8: ce:6a:a4:80:43:05:64:2c:de:c8:d9:fa:3e:ae:eb: ba:e9:de:1d:ec:b1:8b:b6:2e:bf:db:47:c1:72:98: 93:47:87:4d:85:dc:db:24:09:a4:ab:06:9d:ba:f0: 7d:4e:62:2c:e6:4e:eb:35:3a:11:41:4d:ca:20:18: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C1:40:78:E1:07:39:38:88:E9:09:50:6A:53:4E:6E:E8:DF:8E:99 X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:25:f4:82:27:0e:c3:f8:54:cd:48:f9:bb:62:dd:23:d2:c1: 9b:55:d6:37:16:9d:36:2b:5b:f3:1b:46:a5:51:6f:c0:d7:64: 46:c3:bb:41:16:1b:0b:79:57:2a:b6:ae:d3:5d:26:4f:74:09: 4f:d9:b8:32:42:6c:25:0c:c2:8b:9b:1f:a3:7e:17:35:34:0b: 76:3a:c9:94:b9:3b:b0:1f:04:39:b4:90:64:4f:97:3f:bd:98: 9a:f9:55:e3:71:07:36:21:a2:c1:e0:fc:6d:1f:e7:01:b2:e0: a4:cf:24:f6:9e:59:12:f2:f1:4a:93:f7:e4:2b:19:50:0f:f2: ad:92:22:aa:fb:c6:7b:fa:0a:05:a5:6f:c2:08:1e:cb:24:a3: 7a:0d:26:d1:83:39:97:30:a8:91:bb:68:c5:d0:18:9b:ca:d4: ea:5a:d7:e0:13:03:58:3b:da:df:8a:13:b4:bb:8d:a0:6d:80: d0:a4:96:4e:e6:9c:0f:bc:36:9f:aa:80:22:a0:5a:d6:9d:0c: 80:a2:32:28:9e:da:4c:2b:c7:c0:83:ed:cf:8f:f2:46:ff:3c: aa:21:bb:d0:1e:2f:f4:84:a3:7c:60:aa:ae:b6:90:50:d4:ee: 3c:1b:66:24:2f:00:e2:06:61:d6:32:76:f9:b0:a9:40:a7:3b: e1:f4:de:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjQwNDI2MTc1OTEyWhcNMjQwNTAzMTc1OTEyWjAYMRYwFAYD VQQDEw02NjJiZWI3MC0yZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuslJBpG/rOn3N/BbbbEdu1XNHg8WVLZitTCygEPmUE58C5DezJ2oq3MgBbKM XIixLJ/nA3UBmT2OK04sNmlPCqfZiRwYMDvs/YXfQSPWwZ8Mwh8cneNwi9H4HsI2 wkA2BaYJmqXYLCEzD+9x8kDtywfuXh441yHrhDvL9VsDavC+MBJGEtmownVFRLWl HynZhZ7XMOpAOijhVuZtwZUfICs8D9XpOEXNpZHbHeIspaGlOC8cVWP+MUvtYul7 OK21q9jOaqSAQwVkLN7I2fo+ruu66d4d7LGLti6/20fBcpiTR4dNhdzbJAmkqwad uvB9TmIs5k7rNToRQU3KIBjxrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbBQHjh Bzk4iOkJUGpTTm7o346ZMB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzA3OC82NkM4MzAyQzEzQkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRz OXI5VWpOTlZsdDZwWF9XRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSJfSCJw7D+FTNSPm7Yt0j0sGbVdY3Fp02K1vzG0alUW/A12RGw7tB FhsLeVcqtq7TXSZPdAlP2bgyQmwlDMKLmx+jfhc1NAt2OsmUuTuwHwQ5tJBkT5c/ vZia+VXjcQc2IaLB4PxtH+cBsuCkzyT2nlkS8vFKk/fkKxlQD/KtkiKq+8Z7+goF pW/CCB7LJKN6DSbRgzmXMKiRu2jF0BibytTqWtfgEwNYO9rfihO0u42gbYDQpJZO 5pwPvDafqoAioFrWnQyAojIontpMK8fAg+3Pj/JG/zyqIbvQHi/0hKN8YKqutpBQ 1O48G2YkLwDiBmHWMnb5sKlApzvh9N7m -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:33 2024 by rpki-client on console-ams.rpki-client.org