$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft File: ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json) Hash identifier: wIt0PgPInpFMfzi6V+xrxRqPqxpJg+7/+Xn7fSyPffY= Subject key identifier: 7B:E3:4D:97:2A:09:3A:3C:34:80:64:52:07:A5:D1:02:20:05:CC:31 Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft Manifest number: 082D Signing time: Thu 02 May 2024 21:52:59 +0000 Manifest this update: Thu 02 May 2024 21:52:58 +0000 Manifest next update: Thu 09 May 2024 21:52:58 +0000 Files and hashes: 1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: 6AKMo8X6qn8lKerbHaOhj4uidwXMx0dBcfrOhunvqI8=) 2: CD77D766287911ED93621A30C4F9AE02.roa (hash: gN2FZeNXqiYFjRqzzNhrx6X/x84wIeQDu/SZTNGaq+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Validity Not Before: May 2 21:52:58 2024 GMT Not After : May 9 21:52:58 2024 GMT Subject: CN=66340b3a-e9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:db:cb:f1:27:ab:c2:6d:4a:00:7a:a6:f6: 9c:c5:5b:d6:00:6e:96:ee:5a:39:3e:0e:dc:5a:11: f6:2d:1f:7f:a8:1a:aa:f8:94:13:57:98:2d:53:6e: 15:c4:17:cd:b5:c9:34:47:0a:c0:98:59:7a:0d:f6: bc:60:b3:2c:70:e8:47:e0:b3:b5:14:08:a0:c6:62: 92:75:a5:d0:ec:9b:be:a3:0b:ab:11:2b:bf:62:8f: 53:b3:9f:24:85:6e:5d:4f:8c:12:d0:1f:91:5b:4f: 59:bd:6a:99:5c:32:10:3c:4f:51:f8:8c:bf:04:0f: a7:53:f6:4f:94:2a:3d:18:50:9e:58:f1:07:35:77: 15:83:7f:13:07:66:b4:1f:dc:4b:b8:8e:31:95:25: 8a:76:7c:1d:38:21:42:ff:b1:49:fc:91:b5:f2:75: b7:4c:f6:5f:74:72:b3:0e:59:09:1d:fc:e3:a3:15: f6:bb:1b:a2:50:b3:98:ec:00:ab:b0:64:fd:4b:9b: 9e:a6:ef:51:f1:41:56:d8:06:30:71:62:92:d6:4a: a4:85:6a:9c:f9:8f:55:8c:80:98:c0:f1:26:39:7d: cd:55:40:b4:15:7b:e6:0a:8a:60:3c:0b:40:34:e1: 9e:0f:20:da:72:e7:f3:1f:01:d5:b8:d1:2f:ff:c8: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E3:4D:97:2A:09:3A:3C:34:80:64:52:07:A5:D1:02:20:05:CC:31 X509v3 Authority Key Identifier: keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b2:6c:c9:98:c2:d7:52:3e:30:56:b3:8d:fc:3e:44:01:f9: c8:3a:ff:8a:d8:a1:3f:66:24:d9:e0:64:dd:71:c1:09:41:a0: 93:6f:d1:16:74:5a:9a:f6:c7:f6:6a:1a:92:56:60:cb:db:08: 54:34:88:a2:0a:e1:57:36:b1:4b:20:7a:2b:3c:f6:10:56:57: 52:35:cb:f8:80:d2:f0:03:c7:29:5d:b4:a4:12:d7:7f:22:32: d2:39:ba:0e:cd:1f:8a:2a:35:2a:63:2d:f0:6b:f3:5a:5f:e1: fa:2f:cd:9a:a0:a1:21:f3:03:97:4a:e5:a9:32:22:41:ff:97: c5:07:e0:d3:69:48:bd:1a:ec:38:b4:fc:dd:93:d3:02:02:38: fb:f9:2c:5c:0f:be:3f:e5:6c:99:3a:56:80:88:cf:55:e7:b2: 78:ff:87:d6:83:a2:d2:22:5a:12:03:5a:7d:57:e4:0c:c6:a5: 15:d7:90:da:e7:a8:c9:c5:55:6a:48:88:5b:f0:8e:9e:06:f4: 10:ab:98:9f:fa:47:29:83:c4:da:0e:ca:20:86:04:91:b8:71: 86:e6:9a:1d:79:34:c2:54:5b:4d:6f:f6:ae:b6:70:7b:08:13: 81:de:e5:be:29:c3:35:a6:f3:33:a9:eb:fc:5a:1d:44:0b:6d: 47:0a:57:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD REZEMTZGRTEwHhcNMjQwNTAyMjE1MjU4WhcNMjQwNTA5MjE1MjU4WjAYMRYwFAYD VQQDEw02NjM0MGIzYS1lOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWzby/Enq8JtSgB6pvacxVvWAG6W7lo5Pg7cWhH2LR9/qBqq+JQTV5gtU24V xBfNtck0RwrAmFl6Dfa8YLMscOhH4LO1FAigxmKSdaXQ7Ju+owurESu/Yo9Ts58k hW5dT4wS0B+RW09ZvWqZXDIQPE9R+Iy/BA+nU/ZPlCo9GFCeWPEHNXcVg38TB2a0 H9xLuI4xlSWKdnwdOCFC/7FJ/JG18nW3TPZfdHKzDlkJHfzjoxX2uxuiULOY7ACr sGT9S5uepu9R8UFW2AYwcWKS1kqkhWqc+Y9VjICYwPEmOX3NVUC0FXvmCopgPAtA NOGeDyDacufzHwHVuNEv/8iqYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvjTZcq CTo8NIBkUgel0QIgBcwxMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5 QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcyMS9BM0MwNkFENkE5QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JO QkxPYnNlb3JScExOX1JiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSsmzJmMLXUj4wVrON/D5EAfnIOv+K2KE/ZiTZ4GTdccEJQaCTb9EW dFqa9sf2ahqSVmDL2whUNIiiCuFXNrFLIHorPPYQVldSNcv4gNLwA8cpXbSkEtd/ IjLSOboOzR+KKjUqYy3wa/NaX+H6L82aoKEh8wOXSuWpMiJB/5fFB+DTaUi9Guw4 tPzdk9MCAjj7+SxcD74/5WyZOlaAiM9V57J4/4fWg6LSIloSA1p9V+QMxqUV15Da 56jJxVVqSIhb8I6eBvQQq5if+kcpg8TaDsoghgSRuHGG5podeTTCVFtNb/autnB7 CBOB3uW+KcM1pvMzqev8Wh1EC21HCldo -----END CERTIFICATE-----Generated at Thu May 2 23:03:14 2024 by rpki-client on console-fra.rpki-client.org