$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft File: YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft (raw, json) Hash identifier: mduda/Y6mXipZuOV4uY6qrDJY/IiLN7HU1AuC9/h/zE= Subject key identifier: 37:70:26:CE:5C:57:76:AC:0C:20:0F:7B:6E:AA:33:02:18:05:55:CA Authority key identifier: 60:87:E3:54:FA:19:15:1C:FB:C6:18:48:B2:01:97:E1:7F:1C:7F:2C Certificate issuer: /CN=A91DBD45/serialNumber=6087E354FA19151CFBC61848B20197E17F1C7F2C Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YIfjVPoZFRz7xhhIsgGX4X8cfyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft Manifest number: B0 Signing time: Fri 03 May 2024 06:41:15 +0000 Manifest this update: Fri 03 May 2024 06:41:15 +0000 Manifest next update: Fri 10 May 2024 06:41:15 +0000 Files and hashes: 1: YIfjVPoZFRz7xhhIsgGX4X8cfyw.crl (hash: PqEDP2Bru9K5VMRDaQtx3y+4KvfympJ/qOkTgH9mnHc=) 2: DCFF224CFEA311EDB9013076C4F9AE02.roa (hash: 3eLRaDdQwEbYF6ZCaLhw1Wi+F0nQMsWfJMWlSrJr4LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.crl rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YIfjVPoZFRz7xhhIsgGX4X8cfyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBD45/serialNumber=6087E354FA19151CFBC61848B20197E17F1C7F2C Validity Not Before: May 3 06:41:15 2024 GMT Not After : May 10 06:41:15 2024 GMT Subject: CN=6634870b-aa2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:1e:59:e0:1c:46:09:b3:41:8f:79:3a:cf: 07:11:50:1a:fc:0e:83:13:5c:a5:7a:a5:0b:bd:a5: 7f:d0:26:59:2e:e0:ba:e4:5b:cf:51:a4:0b:b0:98: ee:00:a7:ae:b3:5f:98:e0:65:1c:0e:db:bc:92:18: a8:ad:7c:75:4d:ce:57:50:d7:a3:0b:2f:a1:da:a0: 61:9c:28:98:a3:4f:71:c4:e8:33:f5:7c:63:bd:26: 4c:16:d4:2f:ee:d6:d1:37:29:37:94:e1:01:36:87: 4c:e8:e3:30:43:fb:39:0c:a4:83:aa:16:9c:73:c4: 6b:96:40:cd:21:bc:d4:e3:77:ae:75:e1:96:47:60: 43:80:0f:f8:ec:2b:10:ac:0b:be:64:ef:11:e2:8b: e1:c6:51:23:e3:b1:b2:cd:54:20:14:f8:10:22:b2: 19:9e:5a:09:05:53:8b:2f:c0:4e:81:97:83:05:cf: 0c:d1:9e:3c:bf:ff:85:1c:34:39:86:da:8a:2d:78: 3c:16:97:7a:b4:3c:c9:e5:99:11:89:cc:35:9e:fd: 17:8d:02:ea:a9:7c:14:de:01:40:99:f3:e0:62:f2: ad:19:27:e0:63:f7:8c:9a:d0:97:6e:dc:e4:c7:1c: 9c:be:20:ae:07:4e:9a:e3:bf:24:87:ac:56:3a:95: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:26:CE:5C:57:76:AC:0C:20:0F:7B:6E:AA:33:02:18:05:55:CA X509v3 Authority Key Identifier: keyid:60:87:E3:54:FA:19:15:1C:FB:C6:18:48:B2:01:97:E1:7F:1C:7F:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YIfjVPoZFRz7xhhIsgGX4X8cfyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBD45/70211A1CFE9F11ED83F46F75C4F9AE02/YIfjVPoZFRz7xhhIsgGX4X8cfyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b8:af:51:32:7e:dd:d6:49:a4:da:03:f3:d9:85:22:ff:70: a7:68:a1:8c:4f:a9:83:e1:61:ef:76:cd:bf:52:c9:c7:96:a0: 76:70:86:2a:93:86:08:84:83:43:a9:e6:e3:01:09:89:70:7c: 5e:06:bb:0b:35:c6:1b:ec:64:b0:a9:37:ec:3e:f9:b0:55:fe: 18:51:78:1d:9d:a5:2a:dc:83:55:df:22:87:da:dc:66:db:4b: 44:2d:2d:8b:85:36:35:53:23:1a:ae:69:fc:7b:4e:a0:12:b3: ea:4d:17:4a:9f:17:46:9c:81:b8:86:a7:ee:35:53:20:10:c3: e8:3e:6a:3a:ac:f9:11:55:d8:65:36:c3:0a:c3:2d:9c:36:53: 9c:33:3f:4d:95:ac:9e:7f:ab:0f:f5:42:64:4a:56:13:c7:3f: eb:a7:65:5c:db:05:b0:08:29:ad:23:18:9d:5d:9b:05:69:6a: 98:d8:31:81:18:c1:fb:79:e0:40:86:56:b7:99:6e:ab:c2:34: 72:ba:c2:79:54:43:e2:72:a9:0c:6e:66:40:21:60:8d:ee:8f: e9:7b:2e:f9:6c:09:83:a9:00:d6:1b:c2:02:f8:ee:a1:fd:41: 7b:4e:20:1c:f4:d1:e6:9f:d3:f8:68:f0:f3:26:3a:af:09:57: 63:15:8b:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJENDUxMTAvBgNVBAUTKDYwODdFMzU0RkExOTE1MUNGQkM2MTg0OEIyMDE5N0Ux N0YxQzdGMkMwHhcNMjQwNTAzMDY0MTE1WhcNMjQwNTEwMDY0MTE1WjAYMRYwFAYD VQQDEw02NjM0ODcwYi1hYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJQeWeAcRgmzQY95Os8HEVAa/A6DE1yleqULvaV/0CZZLuC65FvPUaQLsJju AKeus1+Y4GUcDtu8khiorXx1Tc5XUNejCy+h2qBhnCiYo09xxOgz9XxjvSZMFtQv 7tbRNyk3lOEBNodM6OMwQ/s5DKSDqhacc8RrlkDNIbzU43eudeGWR2BDgA/47CsQ rAu+ZO8R4ovhxlEj47GyzVQgFPgQIrIZnloJBVOLL8BOgZeDBc8M0Z48v/+FHDQ5 htqKLXg8Fpd6tDzJ5ZkRicw1nv0XjQLqqXwU3gFAmfPgYvKtGSfgY/eMmtCXbtzk xxycviCuB06a478kh6xWOpXdpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdwJs5c V3asDCAPe26qMwIYBVXKMB8GA1UdIwQYMBaAFGCH41T6GRUc+8YYSLIBl+F/HH8s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkQ0NS83MDIxMUExQ0ZF OUYxMUVEODNGNDZGNzVDNEY5QUUwMi9ZSWZqVlBvWkZSejd4aGhJc2dHWDRYOGNm eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lJZmpWUG9aRlJ6N3hoaElzZ0dYNFg4Y2Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkQ0NS83MDIxMUExQ0ZFOUYxMUVEODNGNDZGNzVDNEY5QUUwMi9ZSWZqVlBvWkZS ejd4aGhJc2dHWDRYOGNmeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHuK9RMn7d1kmk2gPz2YUi/3CnaKGMT6mD4WHvds2/UsnHlqB2cIYq k4YIhINDqebjAQmJcHxeBrsLNcYb7GSwqTfsPvmwVf4YUXgdnaUq3INV3yKH2txm 20tELS2LhTY1UyMarmn8e06gErPqTRdKnxdGnIG4hqfuNVMgEMPoPmo6rPkRVdhl NsMKwy2cNlOcMz9Nlayef6sP9UJkSlYTxz/rp2Vc2wWwCCmtIxidXZsFaWqY2DGB GMH7eeBAhla3mW6rwjRyusJ5VEPicqkMbmZAIWCN7o/pey75bAmDqQDWG8IC+O6h /UF7TiAc9NHmn9P4aPDzJjqvCVdjFYs2 -----END CERTIFICATE-----Generated at Fri May 3 09:09:34 2024 by rpki-client on console-fra.rpki-client.org