$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: Hp3fvwNo/85Ova6JepDz38ui76qoIRcHotXRWKJC7mQ= Subject key identifier: 6F:90:4A:38:3D:7F:4F:E1:E0:CE:E5:8C:E2:35:38:DC:01:3E:00:A7 Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 01DE Signing time: Tue 07 May 2024 04:18:52 +0000 Manifest this update: Tue 07 May 2024 04:18:52 +0000 Manifest next update: Tue 14 May 2024 04:18:52 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: /yOnx/oN1Sft4ZG14KnQSw40hbV8zY/Z5mqTBbUV0vg=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: mdwjdnEcrUfM7aLdZ7REcC0a8w2sZkQI5vBKiVrVe5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: May 7 04:18:52 2024 GMT Not After : May 14 04:18:52 2024 GMT Subject: CN=6639abac-702f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:09:c6:f6:69:57:a6:37:ff:2f:e4:fe:5d: b6:f0:c9:93:95:a3:62:dd:ef:0d:f2:c1:e3:cb:7e: cf:30:74:df:93:71:f2:00:af:38:fb:74:39:1c:77: 9f:6b:90:3d:73:39:dd:08:cd:50:0f:6b:63:66:f0: 59:23:17:d0:1a:63:c0:c1:d2:89:22:1f:8a:49:5d: db:fa:a0:63:bb:86:b4:50:2f:a7:28:65:79:d2:dc: a1:46:f6:6f:59:92:dd:84:36:c1:60:8f:cc:e4:6c: 4a:a1:65:91:54:a6:e4:bb:ac:62:b4:89:4d:f6:0b: da:09:29:a2:f7:8d:0f:d2:6c:28:ee:fd:fa:17:33: 33:47:12:11:f4:1f:07:63:55:d0:04:92:89:15:80: e1:82:72:6b:9c:e4:22:cc:ea:cb:0b:19:d2:74:7c: 0e:72:e4:50:e9:1d:69:8b:59:46:9c:17:ee:93:0a: 05:7a:9d:53:2b:fa:93:65:da:a5:a0:62:a0:5e:a5: 26:ca:b8:89:cf:e9:8b:8f:d0:cc:b9:3b:4d:14:2e: cf:9b:5e:d0:11:4c:15:ed:d5:14:55:ef:86:28:1d: 1d:23:a8:13:be:62:20:6d:75:55:6f:79:db:ce:13: 46:6a:ee:7a:2b:bf:4e:5b:22:64:14:0c:0e:da:d8: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:90:4A:38:3D:7F:4F:E1:E0:CE:E5:8C:E2:35:38:DC:01:3E:00:A7 X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:25:8b:68:37:4d:75:7d:5d:29:f8:7a:f5:38:6a:32:b9:e5: 93:15:a6:00:33:f7:d2:ec:4f:f3:ab:24:df:e0:2b:79:45:cb: 36:79:56:1a:db:87:85:a6:2e:90:a0:0a:0b:86:85:47:9e:cd: 57:42:34:63:28:56:14:b4:45:79:45:d4:87:6c:b9:c4:ad:3d: 85:8d:5e:72:ef:87:b9:81:d8:70:31:eb:0e:a9:2a:82:04:8c: 2c:90:e9:bf:01:42:c9:1b:e8:9b:33:73:6d:7f:10:d0:20:7c: c6:cb:30:ca:1b:76:15:88:35:82:76:a6:10:62:dc:6d:f6:a9: 1e:b5:ba:04:a3:45:d2:58:90:b9:07:1f:0a:bf:25:c4:5d:8b: c7:4c:5e:0e:f6:b4:c5:a3:f4:a8:97:28:e7:79:73:45:6e:7b: 23:15:88:b3:ea:ed:36:aa:01:6c:7f:62:e7:5b:62:f4:7b:32: 6f:28:73:29:76:ec:56:b7:b5:08:1e:12:be:ab:cf:f6:c3:a4: c3:1f:ab:15:dd:66:2c:59:22:1a:50:ea:e1:c3:be:72:5d:de: cf:72:46:b9:8b:67:46:23:74:a7:67:d4:b4:46:00:ab:28:f6: e4:f6:fe:f2:d8:b5:1e:3a:21:ff:9f:ff:0a:c0:d6:c0:e9:6a: 0a:35:f0:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjQwNTA3MDQxODUyWhcNMjQwNTE0MDQxODUyWjAYMRYwFAYD VQQDEw02NjM5YWJhYy03MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyYJxvZpV6Y3/y/k/l228MmTlaNi3e8N8sHjy37PMHTfk3HyAK84+3Q5HHef a5A9czndCM1QD2tjZvBZIxfQGmPAwdKJIh+KSV3b+qBju4a0UC+nKGV50tyhRvZv WZLdhDbBYI/M5GxKoWWRVKbku6xitIlN9gvaCSmi940P0mwo7v36FzMzRxIR9B8H Y1XQBJKJFYDhgnJrnOQizOrLCxnSdHwOcuRQ6R1pi1lGnBfukwoFep1TK/qTZdql oGKgXqUmyriJz+mLj9DMuTtNFC7Pm17QEUwV7dUUVe+GKB0dI6gTvmIgbXVVb3nb zhNGau56K79OWyJkFAwO2tj0HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+QSjg9 f0/h4M7ljOI1ONwBPgCnMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWJYtoN011fV0p+Hr1OGoyueWTFaYAM/fS7E/zqyTf4Ct5Rcs2eVYa 24eFpi6QoAoLhoVHns1XQjRjKFYUtEV5RdSHbLnErT2FjV5y74e5gdhwMesOqSqC BIwskOm/AULJG+ibM3NtfxDQIHzGyzDKG3YViDWCdqYQYtxt9qketboEo0XSWJC5 Bx8KvyXEXYvHTF4O9rTFo/SolyjneXNFbnsjFYiz6u02qgFsf2LnW2L0ezJvKHMp duxWt7UIHhK+q8/2w6TDH6sV3WYsWSIaUOrhw75yXd7Pcka5i2dGI3SnZ9S0RgCr KPbk9v7y2LUeOiH/n/8KwNbA6WoKNfCw -----END CERTIFICATE-----Generated at Tue May 7 05:34:57 2024 by rpki-client on console-ams.rpki-client.org